世界
0e7f176a16
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-08-30 17:41:40 +08:00
世界
2496c846f4
Fix Tailscale search domain response name mismatch
2026-08-30 17:41:40 +08:00
世界
b4e670c36f
Log DNS optimistic background refresh outcomes
2026-08-30 17:41:40 +08:00
世界
63373385f5
Add search domain support for Tailscale DNS
2026-08-30 17:41:40 +08:00
世界
a33858523f
Fix tls-spoof
2026-08-30 17:41:40 +08:00
世界
9bcc0f1d37
Fix Apple TLS metadata capture
2026-08-30 17:41:40 +08:00
世界
836fa8ce58
Strip EDNS padding from upstream DNS responses
2026-08-30 17:41:40 +08:00
世界
7de1c4b4cf
Defer implicit default HTTP client fallback to first use
2026-08-30 17:41:39 +08:00
世界
6877fba346
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-08-30 17:41:39 +08:00
世界
c56d0f2462
Fix macOS tlsspoof
2026-08-30 17:41:39 +08:00
世界
2ddfecb47a
Reject IP literal server name with TLS spoof
2026-08-30 17:41:39 +08:00
世界
3e8ea4e590
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-08-30 17:41:39 +08:00
世界
a04daaff75
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界
8e8d1dcca8
Fix legacy rule-set download_detour blocked by empty direct check
2026-08-30 17:41:39 +08:00
世界
40e2b5fd4b
Add TLS spoof support
2026-08-30 17:41:39 +08:00
世界
c82163f287
Standardize hosts path
2026-08-30 17:41:39 +08:00
世界
2515811356
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-08-30 17:41:39 +08:00
世界
3f242a7114
oom-killer: Record report before reset network
2026-08-30 17:41:39 +08:00
世界
c322ad5d33
Add optimistic DNS cache
2026-08-30 17:41:39 +08:00
世界
5cce5454e1
Fix tailscale error
2026-08-30 17:41:39 +08:00
世界
fe88004eaf
Fix darwin cgo DNS again
2026-08-30 17:41:39 +08:00
世界
435d7e0cdf
Fix stun test
2026-08-30 17:41:39 +08:00
世界
42ca206037
documentation: Fix missing update for ip_version and query_type
2026-08-30 17:41:39 +08:00
世界
ac7f1ca3aa
Add cloudflared inbound
2026-08-30 17:41:39 +08:00
世界
2b691a94a4
Fix lint errors
2026-08-30 17:41:39 +08:00
世界
3b4f7c8ab7
platform: Wrap command RPC error returns with E.Cause
2026-08-30 17:41:39 +08:00
世界
bc6f9703e3
Add package_name_regex route, DNS and headless rule item
2026-08-30 17:41:39 +08:00
世界
cdf596da19
documentation: Fixes
2026-08-30 17:41:39 +08:00
世界
d72c1d9be7
Un-deprecate ip_accept_any DNS rule item
2026-08-30 17:41:39 +08:00
世界
ba059b0b2a
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
22e852cf36
Fix darwin local DNS transport
2026-08-30 17:41:39 +08:00
世界
496043dd9c
Fix rules lock
2026-08-30 17:41:39 +08:00
世界
d2b10d3b09
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02fc569beb7b2ffa3f0a10ef23e136748.
2026-08-30 17:41:39 +08:00
世界
bd9a10d349
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
f24691cd60
platform: Fix darwin signal handler
2026-08-30 17:41:39 +08:00
世界
07cdca0a2b
tools: Network Quality & STUN
2026-08-30 17:41:39 +08:00
世界
7f86dffa06
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-08-30 17:41:39 +08:00
世界
1735da6c17
Fix deprecated warning double-formatting on localized clients
2026-08-30 17:41:39 +08:00
世界
37ac4d6b16
platform: Fix set local
2026-08-30 17:41:39 +08:00
nekohasekai
cd77e78f0a
Add evaluate DNS rule action and related rule items
2026-08-30 17:41:39 +08:00
世界
86170406af
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-08-30 17:41:38 +08:00
世界
03412b12d0
platform: Add OOM Report & Crash Report
2026-08-30 17:41:38 +08:00
世界
da18cb70fa
Add BBR profile and hop interval randomization for Hysteria2
2026-08-30 17:41:38 +08:00
nekohasekai
01b3d19d6d
Refactor ACME support to certificate provider
2026-08-30 17:41:38 +08:00
世界
564cb451ac
documentation: Update descriptions for neighbor rules
2026-08-30 17:41:38 +08:00
世界
1cde511d6d
Add macOS support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
39592518b0
Add Android support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
57c62b5330
Add MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
0c7b333743
Use sing-tun v0.8.15 tag
2026-08-30 17:41:22 +08:00
世界
6766b17131
Fix panic on TCP packets of an unconfigured address family in system stack
2026-08-30 17:32:28 +08:00
世界