Commit Graph
2457 Commits
Author SHA1 Message Date
世界 2bbff23640 Improve UDP batch support 2026-08-30 17:41:40 +08:00
世界 9ab4c0f5cb Fix darwin cgo DNS again 2026-08-30 17:41:40 +08:00
世界 1322c0671b platform: Improve oom-killer 2026-08-30 17:41:40 +08:00
世界 7963713314 Add ACME profile support for IP address certificates 2026-08-30 17:41:40 +08:00
世界 0e7f176a16 Fix goroutine leak in networkquality tool
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-08-30 17:41:40 +08:00
世界 2496c846f4 Fix Tailscale search domain response name mismatch 2026-08-30 17:41:40 +08:00
世界 b4e670c36f Log DNS optimistic background refresh outcomes 2026-08-30 17:41:40 +08:00
世界 63373385f5 Add search domain support for Tailscale DNS 2026-08-30 17:41:40 +08:00
世界 a33858523f Fix tls-spoof 2026-08-30 17:41:40 +08:00
世界 9bcc0f1d37 Fix Apple TLS metadata capture 2026-08-30 17:41:40 +08:00
世界 836fa8ce58 Strip EDNS padding from upstream DNS responses 2026-08-30 17:41:40 +08:00
世界 7de1c4b4cf Defer implicit default HTTP client fallback to first use 2026-08-30 17:41:39 +08:00
世界 6877fba346 Scope HTTP/2 fallback and HTTP/3 broken state per authority 2026-08-30 17:41:39 +08:00
世界 c56d0f2462 Fix macOS tlsspoof 2026-08-30 17:41:39 +08:00
世界 2ddfecb47a Reject IP literal server name with TLS spoof 2026-08-30 17:41:39 +08:00
世界 3e8ea4e590 Fix use-after-free of pooled value buffers in bbolt Batch writes 2026-08-30 17:41:39 +08:00
世界 a04daaff75 Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界 8e8d1dcca8 Fix legacy rule-set download_detour blocked by empty direct check 2026-08-30 17:41:39 +08:00
世界 40e2b5fd4b Add TLS spoof support 2026-08-30 17:41:39 +08:00
世界 c82163f287 Standardize hosts path 2026-08-30 17:41:39 +08:00
世界 2515811356 Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-08-30 17:41:39 +08:00
世界 3f242a7114 oom-killer: Record report before reset network 2026-08-30 17:41:39 +08:00
世界 c322ad5d33 Add optimistic DNS cache 2026-08-30 17:41:39 +08:00
世界 5cce5454e1 Fix tailscale error 2026-08-30 17:41:39 +08:00
世界 fe88004eaf Fix darwin cgo DNS again 2026-08-30 17:41:39 +08:00
世界 435d7e0cdf Fix stun test 2026-08-30 17:41:39 +08:00
世界 42ca206037 documentation: Fix missing update for ip_version and query_type 2026-08-30 17:41:39 +08:00
世界 ac7f1ca3aa Add cloudflared inbound 2026-08-30 17:41:39 +08:00
世界 2b691a94a4 Fix lint errors 2026-08-30 17:41:39 +08:00
世界 3b4f7c8ab7 platform: Wrap command RPC error returns with E.Cause 2026-08-30 17:41:39 +08:00
世界 bc6f9703e3 Add package_name_regex route, DNS and headless rule item 2026-08-30 17:41:39 +08:00
世界 cdf596da19 documentation: Fixes 2026-08-30 17:41:39 +08:00
世界 d72c1d9be7 Un-deprecate ip_accept_any DNS rule item 2026-08-30 17:41:39 +08:00
世界 ba059b0b2a tools: Tailscale status 2026-08-30 17:41:39 +08:00
世界 22e852cf36 Fix darwin local DNS transport 2026-08-30 17:41:39 +08:00
世界 496043dd9c Fix rules lock 2026-08-30 17:41:39 +08:00
世界 d2b10d3b09 Revert "Also enable certificate store by default on Apple platforms"
This reverts commit 62cb06c02fc569beb7b2ffa3f0a10ef23e136748.
2026-08-30 17:41:39 +08:00
世界 bd9a10d349 tools: Tailscale status 2026-08-30 17:41:39 +08:00
世界 f24691cd60 platform: Fix darwin signal handler 2026-08-30 17:41:39 +08:00
世界 07cdca0a2b tools: Network Quality & STUN 2026-08-30 17:41:39 +08:00
世界 7f86dffa06 oom-killer: Free memory on pressure notification and use gradual interval backoff 2026-08-30 17:41:39 +08:00
世界 1735da6c17 Fix deprecated warning double-formatting on localized clients 2026-08-30 17:41:39 +08:00
世界 37ac4d6b16 platform: Fix set local 2026-08-30 17:41:39 +08:00
nekohasekai cd77e78f0a Add evaluate DNS rule action and related rule items 2026-08-30 17:41:39 +08:00
世界 86170406af Also enable certificate store by default on Apple platforms
`SecTrustEvaluateWithError` is serial
2026-08-30 17:41:38 +08:00
世界 03412b12d0 platform: Add OOM Report & Crash Report 2026-08-30 17:41:38 +08:00
世界 da18cb70fa Add BBR profile and hop interval randomization for Hysteria2 2026-08-30 17:41:38 +08:00
nekohasekai 01b3d19d6d Refactor ACME support to certificate provider 2026-08-30 17:41:38 +08:00
世界 564cb451ac documentation: Update descriptions for neighbor rules 2026-08-30 17:41:38 +08:00
世界 1cde511d6d Add macOS support for MAC and hostname rule items 2026-08-30 17:41:38 +08:00