Commit graph

2315 commits

Author SHA1 Message Date
世界
a7b02f9cb2
Revert "Also enable certificate store by default on Apple platforms"
This reverts commit 62cb06c02f.
2026-04-28 08:04:31 +08:00
世界
ce6d6838a8
tools: Tailscale status 2026-04-28 08:04:31 +08:00
世界
ccc2742d2b
platform: Fix darwin signal handler 2026-04-28 08:04:31 +08:00
世界
0b8f380817
tools: Network Quality & STUN 2026-04-28 08:04:31 +08:00
世界
5ee373c549
oom-killer: Free memory on pressure notification and use gradual interval backoff 2026-04-28 08:04:30 +08:00
世界
0f6d110dad
Fix deprecated warning double-formatting on localized clients 2026-04-28 08:04:30 +08:00
世界
9e8f13c0ac
platform: Fix set local 2026-04-28 08:04:30 +08:00
nekohasekai
e1a7ab3df3
Add evaluate DNS rule action and related rule items 2026-04-28 08:04:30 +08:00
世界
ff94634b52
Also enable certificate store by default on Apple platforms
`SecTrustEvaluateWithError` is serial
2026-04-28 08:04:29 +08:00
世界
26ddb928d9
platform: Add OOM Report & Crash Report 2026-04-28 08:04:29 +08:00
世界
0155352ff1
Add BBR profile and hop interval randomization for Hysteria2 2026-04-28 08:04:29 +08:00
nekohasekai
83fa58f60a
Refactor ACME support to certificate provider 2026-04-28 08:04:29 +08:00
世界
4f6d0ffafc
documentation: Update descriptions for neighbor rules 2026-04-28 08:04:29 +08:00
世界
1c02d7e8b0
Add macOS support for MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
c57e86427c
Add Android support for MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
d3575cc8c2
Add MAC and hostname rule items 2026-04-28 08:04:28 +08:00
世界
ddb757a25c
Reduce built-in certificate store memory 2026-04-28 07:44:20 +08:00
世界
553cfa1f9f
Bump version 2026-04-23 07:30:34 +08:00
世界
f102ef1d94
Fix process search skipped for Android again 2026-04-23 05:52:22 +08:00
世界
3312b8da50
Clean up DNS transports 2026-04-23 02:30:32 +08:00
世界
a3fc14f35f
Bump version 2026-04-22 13:40:36 +08:00
世界
8947cb243e
sing: Fix UoT write race 2026-04-21 18:54:52 +08:00
世界
83d3a6d4e1
Hide lifecycle logs for fast operations 2026-04-21 17:15:16 +08:00
世界
71f6a2ab4e
Fix process search skipped for TUN 2026-04-21 15:45:05 +08:00
世界
d942ecc904
Bump version 1.13.9 2026-04-20 09:49:39 +08:00
世界
c3de6a25fb
documentation: Remove warp ads 2026-04-20 09:49:39 +08:00
世界
b3523abad5
tun: Fix multi include/exclude interfaces 2026-04-20 09:49:39 +08:00
世界
60dd7ea5c9
Simplify lifecycle logs 2026-04-20 09:49:39 +08:00
世界
e4bc459975
Skip process search for non-local source addresses 2026-04-20 09:49:39 +08:00
世界
3124cdd661
Fix windows bssid matching 2026-04-20 09:49:39 +08:00
世界
b3606e33a6
release: fix apk package file ownership 2026-04-20 09:49:39 +08:00
世界
9b72b352d5
sing: Fix UoT connect race 2026-04-20 00:10:46 +08:00
世界
fb61987d93
tun: memmod: be more resilient toward weird PE files 2026-04-19 21:54:20 +08:00
世界
a80ef94f09
Fix tailscale endpoint early-start close panic 2026-04-19 21:15:54 +08:00
世界
3a236d9c3c
fswatch: Fix close 2026-04-19 20:41:33 +08:00
世界
ca76c56377
daemon: Fix registry leak 2026-04-19 20:39:38 +08:00
世界
0bd109d7bc
sing: Fix interface finder 2026-04-19 20:38:52 +08:00
世界
9b155ba467
Fix rdrc cache 2026-04-16 16:45:50 +08:00
世界
7ed5ef6da4
sing: Fix udpnat2 timeout 2026-04-16 16:45:38 +08:00
世界
bb3ad9c694
documentation: Fix typo 2026-04-14 16:00:47 +08:00
世界
d5adb54bc6
Bump version 2026-04-14 14:33:19 +08:00
世界
1cfcea769f
Update Go to 1.25.9 2026-04-14 14:26:59 +08:00
世界
f43fc797d4
Update naiveproxy to v147.0.7727.49-1 2026-04-14 14:24:21 +08:00
世界
8e3176b789
Fix FakeIP returning error for unconfigured address family
Return SUCCESS with empty answers instead of an error when the
queried address family has no range configured. Reject configurations
where neither inet4_range nor inet6_range is set.
2026-04-14 14:15:20 +08:00
世界
025b947a24
Bump version 2026-04-10 16:23:45 +08:00
世界
76fa3c2e5e
tun: Fixes 2026-04-10 14:13:06 +08:00
世界
53db1f178c
Fix tailscale crash 2026-04-10 14:09:03 +08:00
世界
55ec8abf17
Fix local DNS server for Android 2026-04-10 14:08:57 +08:00
Berkay Özdemirci
5a957fd750
Fix EDNS OPT record corruption in DNS cache
The TTL computation and assignment loops treat OPT record's Hdr.Ttl
as a regular TTL, but per RFC 6891 it encodes EDNS0 metadata
(ExtRCode|Version|Flags). This corrupts cached responses causing
systemd-resolved to reject them with EDNS version 255.

Also fix pointer aliasing: storeCache() stored raw *dns.Msg pointer
so subsequent mutations by Exchange() corrupted cached data.

- Skip OPT records in all TTL loops (Exchange + loadResponse)
- Use message.Copy() in storeCache() to isolate cache from mutations
2026-04-10 14:08:24 +08:00
TargetLocked
7c3d8cf8db
Fix disable tcp keep alive 2026-04-10 13:29:15 +08:00