Commit Graph
202 Commits
Author SHA1 Message Date
世界 b2f1f630d9 Fix security check message 2026-08-30 17:41:44 +08:00
世界 5d424ea2ac refactor: Async DNS 2026-08-30 17:41:43 +08:00
世界 90d75b9673 Refactor UDP DNS hijack 2026-08-30 17:41:43 +08:00
世界 013dab8737 Fix SSO support for anyconnect 2026-08-30 17:41:43 +08:00
世界 2df7a9bac7 Add openvpn and openconnect 2026-08-30 17:41:43 +08:00
世界 0a4e4c8061 boxdd: Add insecure mode 2026-08-30 17:41:43 +08:00
世界 4f330d73ec platform: Add http proxy support for Windows 2026-08-30 17:41:42 +08:00
世界 9531a6a9cd Add netns and unshare support 2026-08-30 17:41:42 +08:00
世界 97bbf2a9a4 Improve bridge 2026-08-30 17:41:42 +08:00
世界 1e2f1d04da Add bridge outbound 2026-08-30 17:41:42 +08:00
世界 fa479edc12 Imrpove flow tracking & sniff action 2026-08-30 17:41:42 +08:00
世界 5f2054bf90 Add L3 forwarding support 2026-08-30 17:41:42 +08:00
世界 70c8549f02 certificate: Replace platform bridge with CGO JNI 2026-08-30 17:41:41 +08:00
世界 16f2a39298 Add USB/IP support for macOS 2026-08-30 17:41:41 +08:00
世界 38b447c6b4 Add USB/IP service 2026-08-30 17:41:41 +08:00
世界 d8cd38d31b Improve remote rule-set update 2026-08-30 17:41:41 +08:00
世界 a89cac300d Fix group status updates broken by API service
The URL test history update hook and the Clash mode update hook were
single-slot: the API service's attached service overwrote the hook set
by the daemon, so clients stopped receiving group updates. Replace both
with multicast hook lists.

Also share a single URL test history storage via context: Clash API
looked it up under a key nobody registered and fell back to its own
empty storage, so dashboards showed no delay once an API service was
configured. Selector changes now notify through the shared storage,
covering selections made from any API surface.
2026-08-30 17:41:41 +08:00
世界 c12367a013 Add sing-box API service 2026-08-30 17:41:41 +08:00
世界 3d237fed39 platform: Add tailscale device name and logout 2026-08-30 17:41:41 +08:00
世界 b151c9e88d tailscale: Add tailssh server 2026-08-30 17:41:41 +08:00
世界 fe34a79277 tailscale: Expose more peer info fields 2026-08-30 17:41:40 +08:00
世界 87dc0f797d tailscale: Add runtime exit node API 2026-08-30 17:41:40 +08:00
世界 97b7c5f91f Update hysteria2 realm 2026-08-30 17:41:40 +08:00
macronutand世界 d9290bc940 Add more spoof method
Signed-off-by: macronut <4027187+macronut@users.noreply.github.com>
2026-08-30 17:41:40 +08:00
世界 14b8f1bd4d dns: Add preferred_by rule item 2026-08-30 17:41:40 +08:00
世界 f8a623e0c6 dns: Add neighbor-based hostname resolution to local server 2026-08-30 17:41:40 +08:00
世界 87c2b89120 dns: Add timeout configuration 2026-08-30 17:41:40 +08:00
nekohasekai 9471dde765 Add Windows TLS engine 2026-08-30 17:41:40 +08:00
世界 2bbff23640 Improve UDP batch support 2026-08-30 17:41:40 +08:00
世界 a04daaff75 Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界 2515811356 Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines 2026-08-30 17:41:39 +08:00
世界 c322ad5d33 Add optimistic DNS cache 2026-08-30 17:41:39 +08:00
世界 ba059b0b2a tools: Tailscale status 2026-08-30 17:41:39 +08:00
世界 bd9a10d349 tools: Tailscale status 2026-08-30 17:41:39 +08:00
nekohasekai cd77e78f0a Add evaluate DNS rule action and related rule items 2026-08-30 17:41:39 +08:00
nekohasekai 01b3d19d6d Refactor ACME support to certificate provider 2026-08-30 17:41:38 +08:00
世界 39592518b0 Add Android support for MAC and hostname rule items 2026-08-30 17:41:38 +08:00
世界 57c62b5330 Add MAC and hostname rule items 2026-08-30 17:41:38 +08:00
世界 4444f297c2 Fix address filter matching for inverted DNS rules
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
2026-08-22 16:14:54 +08:00
世界 e4a4e8c790 Fix URLTest group hang on unresponsive outbound 2026-08-21 18:21:51 +08:00
世界 f260e771ea Fix unbounded allocations when reading untrusted binary data 2026-08-10 13:26:42 +08:00
世界 cb0051d64d Fix inconsistent URLTest results 2026-07-27 15:51:12 +08:00
世界 f102ef1d94 Fix process search skipped for Android again 2026-04-23 05:52:22 +08:00
世界 3312b8da50 Clean up DNS transports 2026-04-23 02:30:32 +08:00
世界 83d3a6d4e1 Hide lifecycle logs for fast operations 2026-04-21 17:15:16 +08:00
世界 60dd7ea5c9 Simplify lifecycle logs 2026-04-20 09:49:39 +08:00
世界 3124cdd661 Fix windows bssid matching 2026-04-20 09:49:39 +08:00
世界 0045103d14 Fix package_name shared uid matching 2026-03-23 18:57:35 +08:00
世界 795d1c2892 Fix nested rule-set match cache isolation 2026-03-23 12:26:19 +08:00
世界 8ae93a98e5 Remove overdue deprecated features 2026-03-01 12:30:43 +08:00