Commit Graph
100 Commits
Author SHA1 Message Date
世界 0b8995879f Bump version 2026-08-31 11:28:31 +08:00
世界 65a50758e1 Update naiveproxy to v150.0.7871.63-2 2026-08-31 11:28:31 +08:00
世界 138ba19b25 Add desktop client dev branch support 2026-08-31 11:28:31 +08:00
世界 336cde087e Run tests on oldstable branch 2026-08-31 08:46:29 +08:00
世界 a48b4cbd89 release: Fetch client main branch explicitly in update_clients.sh 2026-08-31 08:46:29 +08:00
世界 05b6802cfa Fix QUIC congestion control application limited reporting
Report application limited to injected congestion controllers when the packer stays empty for longer than the pacer burst window, instead of suppressing the report within one RTT of a pacing or congestion limit. The suppression let low bandwidth samples from small bursts after idle periods enter the BBR bandwidth filter, so long-lived TUIC and naive QUIC connections lost throughput after light traffic.
2026-08-30 17:46:30 +08:00
世界 a9713335fd boxdd: Fix log output 2026-08-30 17:41:47 +08:00
世界 66beaf541e Test nested groups recursively in URLTest 2026-08-30 17:41:47 +08:00
世界 dd9cdbc712 tailscale: Fix endpoint start failure when no route is available 2026-08-30 17:41:47 +08:00
世界 384344ead3 Bump version 2026-08-30 17:41:47 +08:00
世界 6aecbe2750 snell: Fuse client handshake with the first payload 2026-08-30 17:41:47 +08:00
世界 2a38f30125 Add Tailscale certificate API commands 2026-08-30 17:41:47 +08:00
世界 4658dfc6c6 Make badlinkname without bad linkname 2026-08-30 17:41:47 +08:00
世界 fb0063221d Remove tlsunsafeekm GODEBUG default 2026-08-30 17:41:47 +08:00
世界 f50ca2244b Fix HTTP/2 transport reset with Go 1.27 2026-08-30 17:41:47 +08:00
世界 de7460ec7c Update Go to 1.26.7 2026-08-30 17:41:47 +08:00
世界 c53c2375c4 Improve power report 2026-08-30 17:41:47 +08:00
世界 3f986d584e Discard OOM drafts written by previous app versions 2026-08-30 17:41:47 +08:00
世界 103e266ebc Fix QUIC congestion control
- Remove `bbr_standard`, `bbr2` and `bbr2_variant` from the naive inbound
- Report injected congestion controllers with connection-wide packet numbers in quic-go
2026-08-30 17:41:47 +08:00
世界 55b18b2271 Migrate Apple developer account 2026-08-30 17:41:47 +08:00
世界 3439be1bbb Do not hide groups containing only a single item 2026-08-30 17:41:47 +08:00
世界 a349a0d769 Fix naive quic congestion control 2026-08-30 17:41:47 +08:00
世界 310206a889 Fix naive performance 2026-08-30 17:41:47 +08:00
世界 be54f9afef endpoint: Drop packets to non-IP destinations 2026-08-30 17:41:47 +08:00
世界 673485755c Fix fakeip UDP reply address mapping 2026-08-30 17:41:47 +08:00
世界 33e63afb0f snell: Fix UDP requests to domain destinations 2026-08-30 17:41:46 +08:00
世界 37da1712e0 naive: Fix receive window options not published 2026-08-30 17:41:46 +08:00
世界 080f1c56aa Fix bbolt recover 2026-08-30 17:41:46 +08:00
世界 82098a8760 Add power report service 2026-08-30 17:41:46 +08:00
世界 6d431a2c43 Improve traffic totals 2026-08-30 17:41:46 +08:00
世界 08986ad405 Fix address filter matching for inverted legacy DNS rules
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
2026-08-30 17:41:46 +08:00
世界 aea28ca6dc Cache tproxy UDP write-back connection when netns is configured 2026-08-30 17:41:46 +08:00
世界 e6b7c6ca75 Invalidate remote rule-set cache when URL changes 2026-08-30 17:41:46 +08:00
世界 7d84f7d3e0 Fix lint errors 2026-08-30 17:41:46 +08:00
世界 ba4146ea31 Reformat code 2026-08-30 17:41:46 +08:00
世界 e4ec3b0345 Fix bbolt flock 2026-08-30 17:41:46 +08:00
世界 6720a27109 Handle network update callbacks in background 2026-08-30 17:41:46 +08:00
世界 cfddedb3da daemon: Fix start or reload race 2026-08-30 17:41:46 +08:00
世界 2e238abe01 Fix network environment log 2026-08-30 17:41:46 +08:00
世界 ec497c7dda Fix tailssh pixels 2026-08-30 17:41:46 +08:00
世界 0a5078a848 Package usbip drivers with the daemon 2026-08-30 17:41:46 +08:00
世界 f7e6a85166 Fix duplicate interface binding for UDP connections 2026-08-30 17:41:46 +08:00
世界 680f37182f Install Apple provisioning profiles from a variable number of secrets 2026-08-30 17:41:46 +08:00
世界 495446cf4f Update Go to 1.26.6 2026-08-30 17:41:46 +08:00
世界 4b30a03adf Add Taildrop support 2026-08-30 17:41:46 +08:00
世界 c86164bd1b Fix file descriptor double close when netlink socket bind fails 2026-08-30 17:41:46 +08:00
世界 bd059fc8aa Add api command 2026-08-30 17:41:45 +08:00
世界 fcee5656b9 daemon: Send complete initial snapshots in status subscriptions 2026-08-30 17:41:45 +08:00
世界 24d1f271bf Add listen_port option to Tailscale endpoint 2026-08-30 17:41:45 +08:00
世界 b3a45e0839 Add query_client_subnet and query_dnssec DNS rule items and remove_client_subnet DNS route action option 2026-08-30 17:41:45 +08:00
世界 4e91d92c5f Refactor local DNS cache partitioning 2026-08-30 17:41:45 +08:00
世界 96fe4f7317 documentation: Rename Root Helper to Helper Service 2026-08-30 17:41:45 +08:00
世界 20b4b8e17d daemon: Throttle group and outbound subscription pushes
- Limit SubscribeGroups and SubscribeOutbounds to one push per 250ms, coalescing bursts of URLTest updates
2026-08-30 17:41:45 +08:00
世界 87c4f84a89 Fix search domain handling in DNS transports 2026-08-30 17:41:45 +08:00
世界 0e75f5f45c Partition local DNS caches by interface signature 2026-08-30 17:41:45 +08:00
世界 28b25598ed Refactor local DNS transport 2026-08-30 17:41:45 +08:00
世界 1e2846a1a5 Resolve and race all WireGuard addresses on handshake 2026-08-30 17:41:45 +08:00
世界 ce25e7791d openconnect: Improve PPP carrier tolerance 2026-08-30 17:41:45 +08:00
世界 0b850d6b56 Fix Android process finder 2026-08-30 17:41:45 +08:00
世界 a8091761d7 Fix missing process info in hijacked DNS queries 2026-08-30 17:41:45 +08:00
世界 097f784e7a daemon: Fix endpoint subscription 2026-08-30 17:41:45 +08:00
世界 06a82b6601 Enable stateless reset for hysteria2 server when obfs disabled 2026-08-30 17:41:45 +08:00
世界 baa8580efd Update Go to 1.26.5 2026-08-30 17:41:45 +08:00
世界 059508ed7a Avoid clearing DNS caches during network resets 2026-08-30 17:41:45 +08:00
世界 5572b3c329 Fix QUIC connection closed by ENOBUFS
Batched darwin packet I/O now also covers connected sockets on iOS.
2026-08-30 17:41:45 +08:00
世界 0dd17d78d8 Fix DNS response buffer headroom 2026-08-30 17:41:45 +08:00
世界 baa99c6f8f Package WinDivert drivers instead of embedding it 2026-08-30 17:41:45 +08:00
世界 9ea88e556a Fix hysteria2 chrome parrot 2026-08-30 17:41:45 +08:00
世界 2f766be0be Improve UDP packet usage for darwin 2026-08-30 17:41:45 +08:00
世界 5c50f7a084 Use connected sockets for QUIC clients 2026-08-30 17:41:45 +08:00
世界 93a4bbacbe Fix security check for executables 2026-08-30 17:41:45 +08:00
世界 ec3e95935f Add hysteria2 chrome parrot support 2026-08-30 17:41:45 +08:00
世界 10d37384f0 Update quic-go to v0.61.0 2026-08-30 17:41:45 +08:00
世界 e797c2d0ba Update tailscale to v1.102.1 2026-08-30 17:41:45 +08:00
世界 9bf39f85f9 Remove client metadata from AnyTLS requests by default 2026-08-30 17:41:45 +08:00
世界 475eb7c845 Fix TLS fragment ACK wait on Windows without TCP estats
Recent Windows 11 builds remove TCP estats, which made writeAndWaitAck
return without waiting for acknowledgment. sing now queries
SIO_TCP_INFO on the socket instead, and falls back to estats on
systems predating it (Windows 10 1703).
2026-08-30 17:41:45 +08:00
世界 b3a6dcda5f wireguard: Fix system device configures DNS for interface 2026-08-30 17:41:44 +08:00
世界 cdbfceafd1 dns: Fix completed race rule blocked by earlier armed rule 2026-08-30 17:41:44 +08:00
世界 34397d5dc8 release: Fix rpm package format for desktop client 2026-08-30 17:41:44 +08:00
世界 9220eb136c Fix openvpn 2026-08-30 17:41:44 +08:00
世界 525e98b05b Fix string type 2026-08-30 17:41:44 +08:00
世界 251a508fae Fix inconsistent URLTest results 2026-08-30 17:41:44 +08:00
世界 c90f3564e8 daemon: Improve URLTest 2026-08-30 17:41:44 +08:00
世界 1698e6cf66 Add initial_path option to remote rule-sets 2026-08-30 17:41:44 +08:00
世界 ec884dd508 release: Fix linux sign 2026-08-30 17:41:44 +08:00
世界 6e09f2892a Add JSON schema support 2026-08-30 17:41:44 +08:00
世界 e09e3b49f9 dns: Add namespace and parallel support for evaluate 2026-08-30 17:41:44 +08:00
世界 510586c4f8 route: simplify rule_set matching semantics
Since b0c6762bc, every rule inside a referenced rule-set was evaluated
as if merged into the outer rule, which required tracking per-branch
group states and let outer rules and rule-set rules satisfy each
other's grouped conditions in both directions.

Restrict merging to the only designed case: a rule-set containing
exactly one non-inverted default rule is merged into the outer rule as
before. Any other rule-set now matches as an ordinary condition of the
outer rule: it matches when any of its rules matches on its own, and
its rules no longer exchange grouped match state with the outer rule
in either direction. Multiple referenced rule-sets keep OR semantics.

Flat address rule-sets such as generated geosite/geoip sets contain a
single default rule, so their behavior is unchanged. The group-state
set machinery is replaced by a single required/satisfied mask pair.

Also update the route and DNS rule docs.
2026-08-30 17:41:44 +08:00
世界 442177de59 platform: Fix WIFI state on reload 2026-08-30 17:41:44 +08:00
世界 7a20afb289 Fix Fortinet SSO again 2026-08-30 17:41:44 +08:00
世界 88ab140cf9 dns: Probe connection reuse support for TCP transports 2026-08-30 17:41:44 +08:00
世界 df0946c2a4 dns: Cache responses with client subnet 2026-08-30 17:41:44 +08:00
世界 b84fb4952e Fix Tailscale 4via6 subnet routing 2026-08-30 17:41:44 +08:00
世界 80044d655f release: Improve release workflow 2026-08-30 17:41:44 +08:00
世界 b491cac8f7 Add Fortinet hostcheck support 2026-08-30 17:41:44 +08:00
世界 866f93fa2d Update issue template for new clients 2026-08-30 17:41:44 +08:00
世界 33e42bf423 Fix TCP DNS retry 2026-08-30 17:41:44 +08:00
世界 71aedcac87 boxdd: Fix windows update 2026-08-30 17:41:44 +08:00
世界 30d40d09de build: Refactor workflow 2026-08-30 17:41:44 +08:00
世界 b9c7d52582 Improve OpenVPN & OpenConnect interoperability 2026-08-30 17:41:44 +08:00