2443 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
世界	2ddfecb47a	Reject IP literal server name with TLS spoof	2026-08-30 17:41:39 +08:00
世界	3e8ea4e590	Fix use-after-free of pooled value buffers in bbolt Batch writes	2026-08-30 17:41:39 +08:00
世界	a04daaff75	Reject pure-IP rule-set references without match_response ... DNS rules referencing rule-sets that contain only ip_cidr predicates silently stopped matching when legacy DNS mode was disabled, because the IP-CIDR branch cannot match against an in-flight DNS query. The existing validation intentionally let every rule_set through on the premise that mixed sets still work via their non-IP branches, which is only true when such a branch exists. Track whether a rule-set carries any non-IP-CIDR predicate and reject pure-IP references the same way bare ip_cidr fields are already rejected.	2026-08-30 17:41:39 +08:00
世界	8e8d1dcca8	Fix legacy rule-set download_detour blocked by empty direct check	2026-08-30 17:41:39 +08:00
世界	40e2b5fd4b	Add TLS spoof support	2026-08-30 17:41:39 +08:00
世界	c82163f287	Standardize hosts path	2026-08-30 17:41:39 +08:00
世界	2515811356	Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines	2026-08-30 17:41:39 +08:00
世界	3f242a7114	oom-killer: Record report before reset network	2026-08-30 17:41:39 +08:00
世界	c322ad5d33	Add optimistic DNS cache	2026-08-30 17:41:39 +08:00
世界	5cce5454e1	Fix tailscale error	2026-08-30 17:41:39 +08:00
世界	fe88004eaf	Fix darwin cgo DNS again	2026-08-30 17:41:39 +08:00
世界	435d7e0cdf	Fix stun test	2026-08-30 17:41:39 +08:00
世界	42ca206037	documentation: Fix missing update for ip_version and query_type	2026-08-30 17:41:39 +08:00
世界	ac7f1ca3aa	Add cloudflared inbound	2026-08-30 17:41:39 +08:00
世界	2b691a94a4	Fix lint errors	2026-08-30 17:41:39 +08:00
世界	3b4f7c8ab7	platform: Wrap command RPC error returns with E.Cause	2026-08-30 17:41:39 +08:00
世界	bc6f9703e3	Add package_name_regex route, DNS and headless rule item	2026-08-30 17:41:39 +08:00
世界	cdf596da19	documentation: Fixes	2026-08-30 17:41:39 +08:00
世界	d72c1d9be7	Un-deprecate ip_accept_any DNS rule item	2026-08-30 17:41:39 +08:00
世界	ba059b0b2a	tools: Tailscale status	2026-08-30 17:41:39 +08:00
世界	22e852cf36	Fix darwin local DNS transport	2026-08-30 17:41:39 +08:00
世界	496043dd9c	Fix rules lock	2026-08-30 17:41:39 +08:00
世界	d2b10d3b09	Revert "Also enable certificate store by default on Apple platforms" ... This reverts commit 62cb06c02f.	2026-08-30 17:41:39 +08:00
世界	bd9a10d349	tools: Tailscale status	2026-08-30 17:41:39 +08:00
世界	f24691cd60	platform: Fix darwin signal handler	2026-08-30 17:41:39 +08:00
世界	07cdca0a2b	tools: Network Quality & STUN	2026-08-30 17:41:39 +08:00
世界	7f86dffa06	oom-killer: Free memory on pressure notification and use gradual interval backoff	2026-08-30 17:41:39 +08:00
世界	1735da6c17	Fix deprecated warning double-formatting on localized clients	2026-08-30 17:41:39 +08:00
世界	37ac4d6b16	platform: Fix set local	2026-08-30 17:41:39 +08:00
nekohasekai	cd77e78f0a	Add evaluate DNS rule action and related rule items	2026-08-30 17:41:39 +08:00
世界	86170406af	Also enable certificate store by default on Apple platforms ... `SecTrustEvaluateWithError` is serial	2026-08-30 17:41:38 +08:00
世界	03412b12d0	platform: Add OOM Report & Crash Report	2026-08-30 17:41:38 +08:00
世界	da18cb70fa	Add BBR profile and hop interval randomization for Hysteria2	2026-08-30 17:41:38 +08:00
nekohasekai	01b3d19d6d	Refactor ACME support to certificate provider	2026-08-30 17:41:38 +08:00
世界	564cb451ac	documentation: Update descriptions for neighbor rules	2026-08-30 17:41:38 +08:00
世界	1cde511d6d	Add macOS support for MAC and hostname rule items	2026-08-30 17:41:38 +08:00
世界	39592518b0	Add Android support for MAC and hostname rule items	2026-08-30 17:41:38 +08:00
世界	57c62b5330	Add MAC and hostname rule items	2026-08-30 17:41:38 +08:00
世界	0c7b333743	Use sing-tun v0.8.15 tag	2026-08-30 17:41:22 +08:00
世界	6766b17131	Fix panic on TCP packets of an unconfigured address family in system stack	2026-08-30 17:32:28 +08:00
世界	bd602b6d11	Fix panic on websocket handshake failure	2026-08-30 17:23:03 +08:00
世界	56f91dfeab	Bump version	2026-08-29 18:25:15 +08:00
世界	849ac908c8	Use sing-quic v0.6.5 tag	2026-08-29 17:06:50 +08:00
世界	0b5391447e	Fix websocket early data with smux and yamux multiplex	2026-08-29 15:59:41 +08:00
世界	d34fbe99e8	Fix tailscale build with Go 1.27	2026-08-29 14:43:16 +08:00
世界	0aefee74c6	Fix TCP NAT port reuse across address families in system stack	2026-08-29 11:33:11 +08:00
世界	1c99c4ceac	Use legacy Apple credentials	2026-08-27 18:48:04 +08:00
世界	4f15700db3	direct: Fix TUN loopback protection	2026-08-27 12:45:59 +08:00
世界	1389e2fd8e	documentation: Fix matching logic note for DNS rules ... The address filter fields ip_cidr, ip_is_private and ip_accept_any share the destination address group with the domain fields, matching with OR semantics like in route rules.	2026-08-22 16:14:54 +08:00
世界	4444f297c2	Fix address filter matching for inverted DNS rules ... Inverted rules whose address filter conditions come from rule sets or logical rules were rejected during pre-lookup matching, so the lookup was never sent and the rules never matched; for plain ip rule sets this was a regression from the rule-set invert fix in 1.12.22. Pre-lookup matching now tracks whether the result depends on deferred address filter conditions and defers such rules to the response phase, while results already determined by evaluated conditions are still decided during pre-lookup.	2026-08-22 16:14:54 +08:00