世界
f3109a0bc1
gvisor: Fix dialing to self addresses
2026-06-08 08:51:50 +08:00
世界
21291afa33
tailscale: Fix handle peer DNS query
2026-06-08 08:51:50 +08:00
世界
701f165e30
tailscale: Revert dialer deprecation and remove control_http_client
2026-06-08 08:51:50 +08:00
世界
07c36152c2
process: Fix panic when package manager is unavailable on Android
2026-06-08 08:51:49 +08:00
世界
8196cc7644
route: Refetch rule-set when cache restore fails
2026-06-08 08:51:49 +08:00
世界
b8ef5b2ad1
oom-killer: Remove log "OOM draft discarded"
2026-06-08 08:51:49 +08:00
世界
ebce8cfaa7
cronet: Fix vendor package
2026-06-08 08:51:49 +08:00
世界
9e6999d755
Fix shadowtls handshake
2026-06-08 08:51:49 +08:00
世界
783dde9986
Rebase wireguard-go to official
2026-06-08 08:51:49 +08:00
世界
77282d2efe
dns: Fix DHCP reset
2026-06-08 08:51:49 +08:00
世界
b19d4a92e2
Fix lint errors
2026-06-08 08:51:48 +08:00
世界
098fd90b5e
Fix hysteria2 realm server
2026-06-08 08:51:48 +08:00
世界
7a5cc8b928
realm: Add stun retry and lazy server start
2026-06-08 08:51:48 +08:00
世界
3eac9fb21a
Fix TLS server close
2026-06-08 08:51:48 +08:00
世界
aa290a6772
Update hysteria2 realm
2026-06-08 08:51:47 +08:00
世界
0662aa41ad
Add hysteria2 realm service and support
2026-06-08 08:51:47 +08:00
世界
fd31d8b2a8
Fix reset network
2026-06-08 08:51:47 +08:00
macronut
a130000741
Add more spoof method
...
Signed-off-by: macronut <4027187+macronut@users.noreply.github.com>
2026-06-08 08:51:47 +08:00
世界
61c4d2dd12
Allow customizing TUN DNS mode and hijack interface DNS by default
2026-06-08 08:51:47 +08:00
世界
b9c596f9e3
dns: Add mDNS server
2026-06-08 08:51:46 +08:00
世界
db08f3f699
dns: Add preferred_by rule item
2026-06-08 08:51:46 +08:00
世界
f842580f33
dns: Add neighbor-based hostname resolution to local server
2026-06-08 08:51:46 +08:00
世界
f67f75a723
Fix tailscale start dependencies
2026-06-08 08:51:46 +08:00
世界
c8792e7fe6
dns: Add timeout configuration
2026-06-08 08:51:46 +08:00
世界
664db8929a
ssh: Add cipher, MAC, and key exchange configuration
2026-06-08 08:51:45 +08:00
世界
4c9978fc30
Improve oom-killer
2026-06-08 08:51:45 +08:00
世界
cc238d20a2
Preserve comments between formatting
2026-06-08 08:51:45 +08:00
nekohasekai
0807b71b14
Add Windows TLS engine
2026-06-08 08:51:45 +08:00
世界
b40e8c5f19
Improve UDP batch support
2026-06-08 08:51:45 +08:00
世界
6a54220900
Fix stderr deprecated manager
2026-06-08 08:51:44 +08:00
世界
4163bd7c49
Fix darwin cgo DNS again
2026-06-08 08:51:44 +08:00
世界
d8420eb305
platform: Improve oom-killer
2026-06-08 08:51:44 +08:00
世界
62052b650e
Fix ACME HTTP-01 challenge for IPv6 literal addresses
2026-06-08 08:51:44 +08:00
世界
12a462142a
Add ACME profile support for IP address certificates
2026-06-08 08:51:44 +08:00
世界
2aa9c54fc9
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-06-08 08:51:43 +08:00
世界
24003c6238
Fix Tailscale search domain response name mismatch
2026-06-08 08:51:43 +08:00
世界
d218a1586a
Log DNS optimistic background refresh outcomes
2026-06-08 08:51:43 +08:00
世界
8597592976
Add search domain support for Tailscale DNS
2026-06-08 08:51:43 +08:00
世界
4ab34c837d
Fix tls-spoof
2026-06-08 08:51:43 +08:00
世界
76fd6a50df
Fix Apple TLS metadata capture
2026-06-08 08:51:42 +08:00
世界
661075f693
Strip EDNS padding from upstream DNS responses
2026-06-08 08:51:42 +08:00
世界
79bd8962a5
Defer implicit default HTTP client fallback to first use
2026-06-08 08:51:42 +08:00
世界
7f690c3909
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-06-08 08:51:42 +08:00
世界
45f122b7bb
Fix macOS tlsspoof
2026-06-08 08:51:41 +08:00
世界
9dc8d445f2
Reject IP literal server name with TLS spoof
2026-06-08 08:51:41 +08:00
世界
4a93b47a0a
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-06-08 08:51:41 +08:00
世界
aabaa42634
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-06-08 08:51:41 +08:00
世界
2581c6c99c
Fix legacy rule-set download_detour blocked by empty direct check
2026-06-08 08:51:41 +08:00
世界
44ee81ccb4
Add TLS spoof support
2026-06-08 08:51:41 +08:00
世界
ac745ed9d8
Standardize hosts path
2026-06-08 08:51:40 +08:00
