Commit graph

134 commits

Author SHA1 Message Date
世界
5ea644be35
dns: Fix completed race rule blocked by earlier armed rule 2026-08-04 21:51:25 +08:00
世界
fe3316e15f
Add JSON schema support 2026-08-04 21:51:25 +08:00
世界
f25369faa8
dns: Add namespace and parallel support for evaluate 2026-08-04 21:51:25 +08:00
世界
962bb4d192
dns: Probe connection reuse support for TCP transports 2026-08-04 21:51:25 +08:00
世界
59f4dd0830
dns: Cache responses with client subnet 2026-08-04 21:51:25 +08:00
世界
9ce523512e
Fix TCP DNS retry 2026-08-04 21:51:24 +08:00
世界
d4f5b44624
Improve network reset 2026-08-04 21:51:00 +08:00
世界
a743632882
refactor: Async DNS 2026-08-04 21:51:00 +08:00
世界
a80aae535b
refactor: New tun udpnat 2026-08-04 21:50:11 +08:00
世界
f31fe29f88
boxdd: Add insecure mode 2026-08-04 21:50:11 +08:00
世界
9b5dee7dcf
Fix local DNS transport on darwin 2026-08-04 21:49:50 +08:00
世界
5e3fa06e8f
Add L3 forwarding support 2026-08-04 21:49:50 +08:00
世界
d78af5cecf
Improve DHCP DNS server initialize
Avoid querying DHCP DNS servers on cellular networks
2026-08-04 21:49:14 +08:00
世界
b83a520256
Refactor darwin local DNS to raw mDNSResponder call 2026-08-04 21:49:14 +08:00
世界
c9c9262752
dns: Remove unused files 2026-08-04 21:49:14 +08:00
世界
9f41aef726
Fix lint errors 2026-08-04 21:47:48 +08:00
世界
ac5c4009ec
dns: Add mDNS server 2026-08-04 21:47:48 +08:00
世界
1c33d36a8b
dns: Add preferred_by rule item 2026-08-04 21:47:48 +08:00
世界
fc277e144e
dns: Add neighbor-based hostname resolution to local server 2026-08-04 21:47:48 +08:00
世界
db1bb5e62a
dns: Add timeout configuration 2026-08-04 21:47:48 +08:00
世界
dfab2fd708
Improve oom-killer 2026-08-04 21:47:48 +08:00
世界
7835447f50
Fix darwin cgo DNS again 2026-08-04 21:47:48 +08:00
世界
277cd3931a
Log DNS optimistic background refresh outcomes 2026-08-04 21:47:48 +08:00
世界
33322fa298
Strip EDNS padding from upstream DNS responses 2026-08-04 21:47:48 +08:00
世界
7e22bf07db
Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-04 21:47:48 +08:00
世界
16916cee3a
Standardize hosts path 2026-08-04 21:47:47 +08:00
世界
b276b955ed
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-08-04 21:47:47 +08:00
世界
8a3bf95170
Add optimistic DNS cache 2026-08-04 21:31:55 +08:00
世界
4a7bf8b5ca
Fix darwin cgo DNS again 2026-08-04 21:31:55 +08:00
世界
0667f0db78
Un-deprecate ip_accept_any DNS rule item 2026-08-04 21:31:55 +08:00
世界
b868010af7
Fix darwin local DNS transport 2026-08-04 21:31:55 +08:00
世界
31062cf144
Fix rules lock 2026-08-04 21:31:55 +08:00
nekohasekai
2294e72a08
Add evaluate DNS rule action and related rule items 2026-08-04 21:31:54 +08:00
世界
51531186d0
Strip EDNS padding from upstream DNS responses 2026-07-27 15:51:12 +08:00
世界
397fb4d20a
dns: Fix search domain expansion
DHCP option 119/15 and resolved link domains are not rooted, so appending
them to the query name produced a non-FQDN name, failing to pack with
"domain must be fully qualified".
2026-07-27 15:51:12 +08:00
世界
4056231e5c
Fix tailscale dns 2026-07-27 15:51:12 +08:00
世界
dcfdd8a184
dns: Fix DHCP reset 2026-07-27 15:51:12 +08:00
世界
7067276170
Fix quic-go write leak
Some checks failed
Build / Build binary-21 (push) Has been cancelled
Build / Build binary-22 (push) Has been cancelled
Build / Build binary-23 (push) Has been cancelled
Build / Build binary-24 (push) Has been cancelled
Build / Build binary-25 (push) Has been cancelled
Build / Build binary-26 (push) Has been cancelled
Build / Build binary-27 (push) Has been cancelled
Build / Build binary-28 (push) Has been cancelled
Build / Build binary-29 (push) Has been cancelled
Build / Build binary-30 (push) Has been cancelled
Build / Build binary-31 (push) Has been cancelled
Build / Build binary-32 (push) Has been cancelled
Build / Build binary-33 (push) Has been cancelled
Build / Build binary-34 (push) Has been cancelled
Build / Build binary-35 (push) Has been cancelled
Build / Build binary-36 (push) Has been cancelled
Build / Build binary-37 (push) Has been cancelled
Build / Build Darwin binaries (push) Has been cancelled
Build / Build Darwin binaries-1 (push) Has been cancelled
Build / Build Darwin binaries-2 (push) Has been cancelled
Build / Build Windows binaries (push) Has been cancelled
Build / Build Windows binaries-1 (push) Has been cancelled
Build / Build Windows binaries-2 (push) Has been cancelled
Build / Build Android (push) Has been cancelled
Build / Publish Android (push) Has been cancelled
Build / Build Apple clients (push) Has been cancelled
Build / Build Apple clients-1 (push) Has been cancelled
Build / Build Apple clients-2 (push) Has been cancelled
Build / Build Apple clients-3 (push) Has been cancelled
Build / Upload builds (push) Has been cancelled
2026-07-09 11:07:27 +08:00
世界
72a8723e13
Fix DNS query loopback deadlock from shared dedup lock 2026-06-20 20:36:19 +08:00
世界
761b7f4e12
Handle TUN loopback in direct outbound 2026-06-03 12:56:36 +08:00
世界
5e7fd7ad78
Fix lint errors 2026-05-13 23:39:27 +08:00
世界
383a1824c1
dns: Refactor reordered pool 2026-05-13 16:28:49 +08:00
世界
d166f0da8b
dns: Fix conn pool leak 2026-05-13 16:28:49 +08:00
世界
6548c17110
dns: Fix deadline 2026-05-13 16:28:49 +08:00
世界
3312b8da50
Clean up DNS transports 2026-04-23 02:30:32 +08:00
世界
8e3176b789
Fix FakeIP returning error for unconfigured address family
Return SUCCESS with empty answers instead of an error when the
queried address family has no range configured. Reject configurations
where neither inet4_range nor inet6_range is set.
2026-04-14 14:15:20 +08:00
Berkay Özdemirci
5a957fd750
Fix EDNS OPT record corruption in DNS cache
The TTL computation and assignment loops treat OPT record's Hdr.Ttl
as a regular TTL, but per RFC 6891 it encodes EDNS0 metadata
(ExtRCode|Version|Flags). This corrupts cached responses causing
systemd-resolved to reject them with EDNS version 255.

Also fix pointer aliasing: storeCache() stored raw *dns.Msg pointer
so subsequent mutations by Exchange() corrupted cached data.

- Skip OPT records in all TTL loops (Exchange + loadResponse)
- Use message.Copy() in storeCache() to isolate cache from mutations
2026-04-10 14:08:24 +08:00
世界
72bc4c1f87
Fix DNS transport returning error for empty AAAA response
Closes #3925
2026-03-23 19:21:55 +08:00
世界
0889ddd001
Fix connector canceled dial cleanup 2026-03-15 17:56:37 +08:00
世界
4d6fb1d38d
Fix legacy DNS client_subnet options not working 2026-03-09 20:18:47 +08:00