世界
2ddfecb47a
Reject IP literal server name with TLS spoof
2026-08-30 17:41:39 +08:00
世界
3e8ea4e590
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-08-30 17:41:39 +08:00
世界
a04daaff75
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界
8e8d1dcca8
Fix legacy rule-set download_detour blocked by empty direct check
2026-08-30 17:41:39 +08:00
世界
40e2b5fd4b
Add TLS spoof support
2026-08-30 17:41:39 +08:00
世界
c82163f287
Standardize hosts path
2026-08-30 17:41:39 +08:00
世界
2515811356
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-08-30 17:41:39 +08:00
世界
3f242a7114
oom-killer: Record report before reset network
2026-08-30 17:41:39 +08:00
世界
c322ad5d33
Add optimistic DNS cache
2026-08-30 17:41:39 +08:00
世界
5cce5454e1
Fix tailscale error
2026-08-30 17:41:39 +08:00
世界
fe88004eaf
Fix darwin cgo DNS again
2026-08-30 17:41:39 +08:00
世界
435d7e0cdf
Fix stun test
2026-08-30 17:41:39 +08:00
世界
42ca206037
documentation: Fix missing update for ip_version and query_type
2026-08-30 17:41:39 +08:00
世界
ac7f1ca3aa
Add cloudflared inbound
2026-08-30 17:41:39 +08:00
世界
2b691a94a4
Fix lint errors
2026-08-30 17:41:39 +08:00
世界
3b4f7c8ab7
platform: Wrap command RPC error returns with E.Cause
2026-08-30 17:41:39 +08:00
世界
bc6f9703e3
Add package_name_regex route, DNS and headless rule item
2026-08-30 17:41:39 +08:00
世界
cdf596da19
documentation: Fixes
2026-08-30 17:41:39 +08:00
世界
d72c1d9be7
Un-deprecate ip_accept_any DNS rule item
2026-08-30 17:41:39 +08:00
世界
ba059b0b2a
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
22e852cf36
Fix darwin local DNS transport
2026-08-30 17:41:39 +08:00
世界
496043dd9c
Fix rules lock
2026-08-30 17:41:39 +08:00
世界
d2b10d3b09
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02fc569beb7b2ffa3f0a10ef23e136748.
2026-08-30 17:41:39 +08:00
世界
bd9a10d349
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
f24691cd60
platform: Fix darwin signal handler
2026-08-30 17:41:39 +08:00
世界
07cdca0a2b
tools: Network Quality & STUN
2026-08-30 17:41:39 +08:00
世界
7f86dffa06
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-08-30 17:41:39 +08:00
世界
1735da6c17
Fix deprecated warning double-formatting on localized clients
2026-08-30 17:41:39 +08:00
世界
37ac4d6b16
platform: Fix set local
2026-08-30 17:41:39 +08:00
nekohasekai
cd77e78f0a
Add evaluate DNS rule action and related rule items
2026-08-30 17:41:39 +08:00
世界
86170406af
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-08-30 17:41:38 +08:00
世界
03412b12d0
platform: Add OOM Report & Crash Report
2026-08-30 17:41:38 +08:00
世界
da18cb70fa
Add BBR profile and hop interval randomization for Hysteria2
2026-08-30 17:41:38 +08:00
nekohasekai
01b3d19d6d
Refactor ACME support to certificate provider
2026-08-30 17:41:38 +08:00
世界
564cb451ac
documentation: Update descriptions for neighbor rules
2026-08-30 17:41:38 +08:00
世界
1cde511d6d
Add macOS support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
39592518b0
Add Android support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
57c62b5330
Add MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
0c7b333743
Use sing-tun v0.8.15 tag
2026-08-30 17:41:22 +08:00
世界
6766b17131
Fix panic on TCP packets of an unconfigured address family in system stack
2026-08-30 17:32:28 +08:00
世界
bd602b6d11
Fix panic on websocket handshake failure
2026-08-30 17:23:03 +08:00
世界
56f91dfeab
Bump version
2026-08-29 18:25:15 +08:00
世界
849ac908c8
Use sing-quic v0.6.5 tag
2026-08-29 17:06:50 +08:00
世界
0b5391447e
Fix websocket early data with smux and yamux multiplex
2026-08-29 15:59:41 +08:00
世界
d34fbe99e8
Fix tailscale build with Go 1.27
2026-08-29 14:43:16 +08:00
世界
0aefee74c6
Fix TCP NAT port reuse across address families in system stack
2026-08-29 11:33:11 +08:00
世界
1c99c4ceac
Use legacy Apple credentials
2026-08-27 18:48:04 +08:00
世界
4f15700db3
direct: Fix TUN loopback protection
2026-08-27 12:45:59 +08:00
世界
1389e2fd8e
documentation: Fix matching logic note for DNS rules
...
The address filter fields ip_cidr, ip_is_private and ip_accept_any share
the destination address group with the domain fields, matching with OR
semantics like in route rules.
2026-08-22 16:14:54 +08:00
世界
4444f297c2
Fix address filter matching for inverted DNS rules
...
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
2026-08-22 16:14:54 +08:00
世界