Commit graph

2343 commits

Author SHA1 Message Date
世界
6ecd3deef5
Fix tls-spoof 2026-04-28 08:04:53 +08:00
世界
a8b8f15a76
Fix Apple TLS metadata capture 2026-04-28 08:04:53 +08:00
世界
3c9c4aee07
Strip EDNS padding from upstream DNS responses 2026-04-28 08:04:53 +08:00
世界
32f56cce07
Defer implicit default HTTP client fallback to first use 2026-04-28 08:04:53 +08:00
世界
4b15fccb78
Scope HTTP/2 fallback and HTTP/3 broken state per authority 2026-04-28 08:04:52 +08:00
世界
9bffb64bbd
Fix macOS tlsspoof 2026-04-28 08:04:52 +08:00
世界
4a68bc9274
Reject IP literal server name with TLS spoof 2026-04-28 08:04:52 +08:00
世界
fee6afdbf5
Fix use-after-free of pooled value buffers in bbolt Batch writes 2026-04-28 08:04:52 +08:00
世界
90a642ef96
Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-04-28 08:04:52 +08:00
世界
9bee53225c
Fix legacy rule-set download_detour blocked by empty direct check 2026-04-28 08:04:52 +08:00
世界
08ce083b9b
Add TLS spoof support 2026-04-28 08:04:51 +08:00
世界
6ef38042f3
Standardize hosts path 2026-04-28 08:04:51 +08:00
世界
5a618c6b68
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-04-28 08:04:39 +08:00
世界
0d7230e42c
oom-killer: Record report before reset network 2026-04-28 08:04:34 +08:00
世界
0319b22c76
Add optimistic DNS cache 2026-04-28 08:04:34 +08:00
世界
e6f5c2438b
Fix tailscale error 2026-04-28 08:04:34 +08:00
世界
8fb019164e
Fix darwin cgo DNS again 2026-04-28 08:04:33 +08:00
世界
104c7ae24d
Fix stun test 2026-04-28 08:04:33 +08:00
世界
3828b4f30e
documentation: Fix missing update for ip_version and query_type 2026-04-28 08:04:33 +08:00
世界
08260fa770
Add cloudflared inbound 2026-04-28 08:04:33 +08:00
世界
5779b46ca6
Fix lint errors 2026-04-28 08:04:33 +08:00
世界
012db0ef0e
platform: Wrap command RPC error returns with E.Cause 2026-04-28 08:04:32 +08:00
世界
684ba79113
Add package_name_regex route, DNS and headless rule item 2026-04-28 08:04:32 +08:00
世界
e714efa792
documentation: Fixes 2026-04-28 08:04:32 +08:00
世界
e75e1c98a9
Un-deprecate ip_accept_any DNS rule item 2026-04-28 08:04:32 +08:00
世界
524578a635
tools: Tailscale status 2026-04-28 08:04:32 +08:00
世界
eade67726a
Fix darwin local DNS transport 2026-04-28 08:04:31 +08:00
世界
ec75e5ec0a
Fix rules lock 2026-04-28 08:04:31 +08:00
世界
a7b02f9cb2
Revert "Also enable certificate store by default on Apple platforms"
This reverts commit 62cb06c02f.
2026-04-28 08:04:31 +08:00
世界
ce6d6838a8
tools: Tailscale status 2026-04-28 08:04:31 +08:00
世界
ccc2742d2b
platform: Fix darwin signal handler 2026-04-28 08:04:31 +08:00
世界
0b8f380817
tools: Network Quality & STUN 2026-04-28 08:04:31 +08:00
世界
5ee373c549
oom-killer: Free memory on pressure notification and use gradual interval backoff 2026-04-28 08:04:30 +08:00
世界
0f6d110dad
Fix deprecated warning double-formatting on localized clients 2026-04-28 08:04:30 +08:00
世界
9e8f13c0ac
platform: Fix set local 2026-04-28 08:04:30 +08:00
nekohasekai
e1a7ab3df3
Add evaluate DNS rule action and related rule items 2026-04-28 08:04:30 +08:00
世界
ff94634b52
Also enable certificate store by default on Apple platforms
`SecTrustEvaluateWithError` is serial
2026-04-28 08:04:29 +08:00
世界
26ddb928d9
platform: Add OOM Report & Crash Report 2026-04-28 08:04:29 +08:00
世界
0155352ff1
Add BBR profile and hop interval randomization for Hysteria2 2026-04-28 08:04:29 +08:00
nekohasekai
83fa58f60a
Refactor ACME support to certificate provider 2026-04-28 08:04:29 +08:00
世界
4f6d0ffafc
documentation: Update descriptions for neighbor rules 2026-04-28 08:04:29 +08:00
世界
1c02d7e8b0
Add macOS support for MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
c57e86427c
Add Android support for MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
d3575cc8c2
Add MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
ddb757a25c
Reduce built-in certificate store memory 2026-04-28 07:44:20 +08:00
世界
553cfa1f9f
Bump version 2026-04-23 07:30:34 +08:00
世界
f102ef1d94
Fix process search skipped for Android again 2026-04-23 05:52:22 +08:00
世界
3312b8da50
Clean up DNS transports 2026-04-23 02:30:32 +08:00
世界
a3fc14f35f
Bump version 2026-04-22 13:40:36 +08:00
世界
8947cb243e
sing: Fix UoT write race 2026-04-21 18:54:52 +08:00