世界
2bd6a233dc
daemon: Split host operations into ManagedService
2026-08-30 17:41:41 +08:00
世界
5d7a0d92c6
platform: Add shell support for iOS
2026-08-30 17:41:41 +08:00
世界
3d237fed39
platform: Add tailscale device name and logout
2026-08-30 17:41:41 +08:00
世界
4b853215c6
tailssh: fix platform SFTP session teardown
2026-08-30 17:41:41 +08:00
世界
b151c9e88d
tailscale: Add tailssh server
2026-08-30 17:41:41 +08:00
世界
07e83f5981
tools: Fix mising cleanup
2026-08-30 17:41:40 +08:00
世界
3b9f5a0193
hysteria2: Add gecko obfs
2026-08-30 17:41:40 +08:00
世界
c03353ad0e
daemon: Add Tailssh
2026-08-30 17:41:40 +08:00
世界
0d2fb35733
Fix tailscale dns
2026-08-30 17:41:40 +08:00
世界
fe34a79277
tailscale: Expose more peer info fields
2026-08-30 17:41:40 +08:00
世界
87dc0f797d
tailscale: Add runtime exit node API
2026-08-30 17:41:40 +08:00
世界
27fe18d715
tailscale: Fix handle peer DNS query
2026-08-30 17:41:40 +08:00
世界
18fd5d7a7a
tailscale: Revert dialer deprecation and remove control_http_client
2026-08-30 17:41:40 +08:00
世界
39a0167cbb
oom-killer: Remove log "OOM draft discarded"
2026-08-30 17:41:40 +08:00
世界
704853b3be
Fix lint errors
2026-08-30 17:41:40 +08:00
世界
f720383adc
Fix hysteria2 realm server
2026-08-30 17:41:40 +08:00
世界
9895d60484
Fix TLS server close
2026-08-30 17:41:40 +08:00
世界
97b7c5f91f
Update hysteria2 realm
2026-08-30 17:41:40 +08:00
世界
6da670ac45
Add hysteria2 realm service and support
2026-08-30 17:41:40 +08:00
世界
ae0c62aae8
Fix reset network
2026-08-30 17:41:40 +08:00
世界
3c016c978b
Allow customizing TUN DNS mode and hijack interface DNS by default
2026-08-30 17:41:40 +08:00
世界
caf940c805
dns: Add mDNS server
2026-08-30 17:41:40 +08:00
世界
14b8f1bd4d
dns: Add preferred_by rule item
2026-08-30 17:41:40 +08:00
世界
f8a623e0c6
dns: Add neighbor-based hostname resolution to local server
2026-08-30 17:41:40 +08:00
世界
35540b4ff3
Fix tailscale start dependencies
2026-08-30 17:41:40 +08:00
世界
87c2b89120
dns: Add timeout configuration
2026-08-30 17:41:40 +08:00
世界
a0fcede368
ssh: Add cipher, MAC, and key exchange configuration
2026-08-30 17:41:40 +08:00
世界
c17407ec94
Improve oom-killer
2026-08-30 17:41:40 +08:00
世界
c9fb076dd7
Preserve comments between formatting
2026-08-30 17:41:40 +08:00
nekohasekai
9471dde765
Add Windows TLS engine
2026-08-30 17:41:40 +08:00
世界
2bbff23640
Improve UDP batch support
2026-08-30 17:41:40 +08:00
世界
9ab4c0f5cb
Fix darwin cgo DNS again
2026-08-30 17:41:40 +08:00
世界
1322c0671b
platform: Improve oom-killer
2026-08-30 17:41:40 +08:00
世界
7963713314
Add ACME profile support for IP address certificates
2026-08-30 17:41:40 +08:00
世界
0e7f176a16
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-08-30 17:41:40 +08:00
世界
2496c846f4
Fix Tailscale search domain response name mismatch
2026-08-30 17:41:40 +08:00
世界
b4e670c36f
Log DNS optimistic background refresh outcomes
2026-08-30 17:41:40 +08:00
世界
63373385f5
Add search domain support for Tailscale DNS
2026-08-30 17:41:40 +08:00
世界
a33858523f
Fix tls-spoof
2026-08-30 17:41:40 +08:00
世界
9bcc0f1d37
Fix Apple TLS metadata capture
2026-08-30 17:41:40 +08:00
世界
836fa8ce58
Strip EDNS padding from upstream DNS responses
2026-08-30 17:41:40 +08:00
世界
7de1c4b4cf
Defer implicit default HTTP client fallback to first use
2026-08-30 17:41:39 +08:00
世界
6877fba346
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-08-30 17:41:39 +08:00
世界
c56d0f2462
Fix macOS tlsspoof
2026-08-30 17:41:39 +08:00
世界
2ddfecb47a
Reject IP literal server name with TLS spoof
2026-08-30 17:41:39 +08:00
世界
3e8ea4e590
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-08-30 17:41:39 +08:00
世界
a04daaff75
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界
8e8d1dcca8
Fix legacy rule-set download_detour blocked by empty direct check
2026-08-30 17:41:39 +08:00
世界
40e2b5fd4b
Add TLS spoof support
2026-08-30 17:41:39 +08:00
世界
c82163f287
Standardize hosts path
2026-08-30 17:41:39 +08:00
世界
2515811356
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-08-30 17:41:39 +08:00
世界
3f242a7114
oom-killer: Record report before reset network
2026-08-30 17:41:39 +08:00
世界
c322ad5d33
Add optimistic DNS cache
2026-08-30 17:41:39 +08:00
世界
5cce5454e1
Fix tailscale error
2026-08-30 17:41:39 +08:00
世界
fe88004eaf
Fix darwin cgo DNS again
2026-08-30 17:41:39 +08:00
世界
435d7e0cdf
Fix stun test
2026-08-30 17:41:39 +08:00
世界
42ca206037
documentation: Fix missing update for ip_version and query_type
2026-08-30 17:41:39 +08:00
世界
ac7f1ca3aa
Add cloudflared inbound
2026-08-30 17:41:39 +08:00
世界
2b691a94a4
Fix lint errors
2026-08-30 17:41:39 +08:00
世界
3b4f7c8ab7
platform: Wrap command RPC error returns with E.Cause
2026-08-30 17:41:39 +08:00
世界
bc6f9703e3
Add package_name_regex route, DNS and headless rule item
2026-08-30 17:41:39 +08:00
世界
cdf596da19
documentation: Fixes
2026-08-30 17:41:39 +08:00
世界
d72c1d9be7
Un-deprecate ip_accept_any DNS rule item
2026-08-30 17:41:39 +08:00
世界
ba059b0b2a
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
22e852cf36
Fix darwin local DNS transport
2026-08-30 17:41:39 +08:00
世界
496043dd9c
Fix rules lock
2026-08-30 17:41:39 +08:00
世界
d2b10d3b09
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02fc569beb7b2ffa3f0a10ef23e136748.
2026-08-30 17:41:39 +08:00
世界
bd9a10d349
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
f24691cd60
platform: Fix darwin signal handler
2026-08-30 17:41:39 +08:00
世界
07cdca0a2b
tools: Network Quality & STUN
2026-08-30 17:41:39 +08:00
世界
7f86dffa06
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-08-30 17:41:39 +08:00
世界
1735da6c17
Fix deprecated warning double-formatting on localized clients
2026-08-30 17:41:39 +08:00
世界
37ac4d6b16
platform: Fix set local
2026-08-30 17:41:39 +08:00
nekohasekai
cd77e78f0a
Add evaluate DNS rule action and related rule items
2026-08-30 17:41:39 +08:00
世界
86170406af
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-08-30 17:41:38 +08:00
世界
03412b12d0
platform: Add OOM Report & Crash Report
2026-08-30 17:41:38 +08:00
世界
da18cb70fa
Add BBR profile and hop interval randomization for Hysteria2
2026-08-30 17:41:38 +08:00
nekohasekai
01b3d19d6d
Refactor ACME support to certificate provider
2026-08-30 17:41:38 +08:00
世界
564cb451ac
documentation: Update descriptions for neighbor rules
2026-08-30 17:41:38 +08:00
世界
1cde511d6d
Add macOS support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
39592518b0
Add Android support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
57c62b5330
Add MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
0c7b333743
Use sing-tun v0.8.15 tag
2026-08-30 17:41:22 +08:00
世界
6766b17131
Fix panic on TCP packets of an unconfigured address family in system stack
2026-08-30 17:32:28 +08:00
世界
bd602b6d11
Fix panic on websocket handshake failure
2026-08-30 17:23:03 +08:00
世界
56f91dfeab
Bump version
2026-08-29 18:25:15 +08:00
世界
849ac908c8
Use sing-quic v0.6.5 tag
2026-08-29 17:06:50 +08:00
世界
0b5391447e
Fix websocket early data with smux and yamux multiplex
2026-08-29 15:59:41 +08:00
世界
d34fbe99e8
Fix tailscale build with Go 1.27
2026-08-29 14:43:16 +08:00
世界
0aefee74c6
Fix TCP NAT port reuse across address families in system stack
2026-08-29 11:33:11 +08:00
世界
1c99c4ceac
Use legacy Apple credentials
2026-08-27 18:48:04 +08:00
世界
4f15700db3
direct: Fix TUN loopback protection
2026-08-27 12:45:59 +08:00
世界
1389e2fd8e
documentation: Fix matching logic note for DNS rules
...
The address filter fields ip_cidr, ip_is_private and ip_accept_any share
the destination address group with the domain fields, matching with OR
semantics like in route rules.
2026-08-22 16:14:54 +08:00
世界
4444f297c2
Fix address filter matching for inverted DNS rules
...
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
2026-08-22 16:14:54 +08:00
世界
c375fb0b7f
Fix su lookup for auto_redirect on Android
2026-08-21 23:09:45 +08:00
世界
f7634d5846
Fix excessive TCP keepalive traffic in gVisor stack
2026-08-21 19:53:51 +08:00
世界
e4a4e8c790
Fix URLTest group hang on unresponsive outbound
2026-08-21 18:21:51 +08:00
世界
9d8d4b8796
Fix log output before service started
2026-08-21 17:42:42 +08:00
世界
b5ebaa1fc0
Bump version
2026-08-17 17:07:24 +08:00
世界
bf41bb4ced
Install Apple provisioning profiles from a variable number of secrets
2026-08-17 17:07:23 +08:00
世界