Commit Graph
100 Commits
Author SHA1 Message Date
世界 c86164bd1b Fix file descriptor double close when netlink socket bind fails 2026-08-30 17:41:46 +08:00
世界 bd059fc8aa Add api command 2026-08-30 17:41:45 +08:00
世界 fcee5656b9 daemon: Send complete initial snapshots in status subscriptions 2026-08-30 17:41:45 +08:00
世界 24d1f271bf Add listen_port option to Tailscale endpoint 2026-08-30 17:41:45 +08:00
世界 b3a45e0839 Add query_client_subnet and query_dnssec DNS rule items and remove_client_subnet DNS route action option 2026-08-30 17:41:45 +08:00
世界 4e91d92c5f Refactor local DNS cache partitioning 2026-08-30 17:41:45 +08:00
世界 96fe4f7317 documentation: Rename Root Helper to Helper Service 2026-08-30 17:41:45 +08:00
世界 20b4b8e17d daemon: Throttle group and outbound subscription pushes
- Limit SubscribeGroups and SubscribeOutbounds to one push per 250ms, coalescing bursts of URLTest updates
2026-08-30 17:41:45 +08:00
世界 87c4f84a89 Fix search domain handling in DNS transports 2026-08-30 17:41:45 +08:00
世界 0e75f5f45c Partition local DNS caches by interface signature 2026-08-30 17:41:45 +08:00
世界 28b25598ed Refactor local DNS transport 2026-08-30 17:41:45 +08:00
世界 1e2846a1a5 Resolve and race all WireGuard addresses on handshake 2026-08-30 17:41:45 +08:00
世界 ce25e7791d openconnect: Improve PPP carrier tolerance 2026-08-30 17:41:45 +08:00
世界 0b850d6b56 Fix Android process finder 2026-08-30 17:41:45 +08:00
世界 a8091761d7 Fix missing process info in hijacked DNS queries 2026-08-30 17:41:45 +08:00
世界 097f784e7a daemon: Fix endpoint subscription 2026-08-30 17:41:45 +08:00
世界 06a82b6601 Enable stateless reset for hysteria2 server when obfs disabled 2026-08-30 17:41:45 +08:00
世界 baa8580efd Update Go to 1.26.5 2026-08-30 17:41:45 +08:00
世界 059508ed7a Avoid clearing DNS caches during network resets 2026-08-30 17:41:45 +08:00
世界 5572b3c329 Fix QUIC connection closed by ENOBUFS
Batched darwin packet I/O now also covers connected sockets on iOS.
2026-08-30 17:41:45 +08:00
世界 0dd17d78d8 Fix DNS response buffer headroom 2026-08-30 17:41:45 +08:00
世界 baa99c6f8f Package WinDivert drivers instead of embedding it 2026-08-30 17:41:45 +08:00
世界 9ea88e556a Fix hysteria2 chrome parrot 2026-08-30 17:41:45 +08:00
世界 2f766be0be Improve UDP packet usage for darwin 2026-08-30 17:41:45 +08:00
世界 5c50f7a084 Use connected sockets for QUIC clients 2026-08-30 17:41:45 +08:00
世界 93a4bbacbe Fix security check for executables 2026-08-30 17:41:45 +08:00
世界 ec3e95935f Add hysteria2 chrome parrot support 2026-08-30 17:41:45 +08:00
世界 10d37384f0 Update quic-go to v0.61.0 2026-08-30 17:41:45 +08:00
世界 e797c2d0ba Update tailscale to v1.102.1 2026-08-30 17:41:45 +08:00
世界 9bf39f85f9 Remove client metadata from AnyTLS requests by default 2026-08-30 17:41:45 +08:00
世界 475eb7c845 Fix TLS fragment ACK wait on Windows without TCP estats
Recent Windows 11 builds remove TCP estats, which made writeAndWaitAck
return without waiting for acknowledgment. sing now queries
SIO_TCP_INFO on the socket instead, and falls back to estats on
systems predating it (Windows 10 1703).
2026-08-30 17:41:45 +08:00
世界 b3a6dcda5f wireguard: Fix system device configures DNS for interface 2026-08-30 17:41:44 +08:00
世界 cdbfceafd1 dns: Fix completed race rule blocked by earlier armed rule 2026-08-30 17:41:44 +08:00
世界 34397d5dc8 release: Fix rpm package format for desktop client 2026-08-30 17:41:44 +08:00
世界 9220eb136c Fix openvpn 2026-08-30 17:41:44 +08:00
世界 525e98b05b Fix string type 2026-08-30 17:41:44 +08:00
世界 251a508fae Fix inconsistent URLTest results 2026-08-30 17:41:44 +08:00
世界 c90f3564e8 daemon: Improve URLTest 2026-08-30 17:41:44 +08:00
世界 1698e6cf66 Add initial_path option to remote rule-sets 2026-08-30 17:41:44 +08:00
世界 ec884dd508 release: Fix linux sign 2026-08-30 17:41:44 +08:00
世界 6e09f2892a Add JSON schema support 2026-08-30 17:41:44 +08:00
世界 e09e3b49f9 dns: Add namespace and parallel support for evaluate 2026-08-30 17:41:44 +08:00
世界 510586c4f8 route: simplify rule_set matching semantics
Since b0c6762bc, every rule inside a referenced rule-set was evaluated
as if merged into the outer rule, which required tracking per-branch
group states and let outer rules and rule-set rules satisfy each
other's grouped conditions in both directions.

Restrict merging to the only designed case: a rule-set containing
exactly one non-inverted default rule is merged into the outer rule as
before. Any other rule-set now matches as an ordinary condition of the
outer rule: it matches when any of its rules matches on its own, and
its rules no longer exchange grouped match state with the outer rule
in either direction. Multiple referenced rule-sets keep OR semantics.

Flat address rule-sets such as generated geosite/geoip sets contain a
single default rule, so their behavior is unchanged. The group-state
set machinery is replaced by a single required/satisfied mask pair.

Also update the route and DNS rule docs.
2026-08-30 17:41:44 +08:00
世界 442177de59 platform: Fix WIFI state on reload 2026-08-30 17:41:44 +08:00
世界 7a20afb289 Fix Fortinet SSO again 2026-08-30 17:41:44 +08:00
世界 88ab140cf9 dns: Probe connection reuse support for TCP transports 2026-08-30 17:41:44 +08:00
世界 df0946c2a4 dns: Cache responses with client subnet 2026-08-30 17:41:44 +08:00
世界 b84fb4952e Fix Tailscale 4via6 subnet routing 2026-08-30 17:41:44 +08:00
世界 80044d655f release: Improve release workflow 2026-08-30 17:41:44 +08:00
世界 b491cac8f7 Add Fortinet hostcheck support 2026-08-30 17:41:44 +08:00
世界 866f93fa2d Update issue template for new clients 2026-08-30 17:41:44 +08:00
世界 33e42bf423 Fix TCP DNS retry 2026-08-30 17:41:44 +08:00
世界 71aedcac87 boxdd: Fix windows update 2026-08-30 17:41:44 +08:00
世界 30d40d09de build: Refactor workflow 2026-08-30 17:41:44 +08:00
世界 b9c7d52582 Improve OpenVPN & OpenConnect interoperability 2026-08-30 17:41:44 +08:00
世界 b2f1f630d9 Fix security check message 2026-08-30 17:41:44 +08:00
世界 086e0b87cf openvpn: Fix certificate verification compatibility 2026-08-30 17:41:44 +08:00
世界 18398cd3f2 boxdd: Fix unsafe permission check 2026-08-30 17:41:44 +08:00
世界 61f950bf61 Fix wg detour 2026-08-30 17:41:44 +08:00
世界 fc57a1b8ac openconnect: Fix Fortinet SSO 2026-08-30 17:41:44 +08:00
世界 abf7fe1b5b Add linux desktop build 2026-08-30 17:41:44 +08:00
世界 71c2388bed desktop: Pin dependencies 2026-08-30 17:41:44 +08:00
世界 f61d14b3ae boxdd: Implement linux http proxy 2026-08-30 17:41:43 +08:00
世界 e4c8b49eaf Improve network reset 2026-08-30 17:41:43 +08:00
世界 3afd290278 boxdd: Fix linux permission 2026-08-30 17:41:43 +08:00
世界 ee0ff1c4a2 Fix DNS route suffix matching 2026-08-30 17:41:43 +08:00
世界 5d424ea2ac refactor: Async DNS 2026-08-30 17:41:43 +08:00
世界 90d75b9673 Refactor UDP DNS hijack 2026-08-30 17:41:43 +08:00
世界 013dab8737 Fix SSO support for anyconnect 2026-08-30 17:41:43 +08:00
世界 6269e1c2b3 Refactor OpenVPN and OpenConnect endpoints 2026-08-30 17:41:43 +08:00
世界 b02ec478c5 Refactor endpoint in started interface 2026-08-30 17:41:43 +08:00
世界 719676519d Fix bind control for auto redirect 2026-08-30 17:41:43 +08:00
世界 2df7a9bac7 Add openvpn and openconnect 2026-08-30 17:41:43 +08:00
世界 23ca3b415f Update Go to 1.25.12 2026-08-30 17:41:43 +08:00
世界 668ced35f8 Refactor endpoint listen 2026-08-30 17:41:43 +08:00
世界 1f7d571017 refactor: New tun udpnat 2026-08-30 17:41:43 +08:00
世界 a072f21978 boxx: Fix unsafe installation 2026-08-30 17:41:43 +08:00
世界 9dfe842794 Add multiple tags support to rule-sets 2026-08-30 17:41:43 +08:00
世界 f65065fdf3 Fix iOS brdige 2026-08-30 17:41:43 +08:00
世界 3af1325a93 Fix oomkiller 2026-08-30 17:41:43 +08:00
世界 5ee69759e1 platform: Fix version compare 2026-08-30 17:41:43 +08:00
世界 b9572e5812 Fix start lifecycle 2026-08-30 17:41:43 +08:00
世界 0a4e4c8061 boxdd: Add insecure mode 2026-08-30 17:41:43 +08:00
世界 b4600dd4f7 Update windows build 2026-08-30 17:41:43 +08:00
世界 24d2626b52 tailscale: support Windows SSH user sessions 2026-08-30 17:41:43 +08:00
世界 5ba8abd0fd boxdd: Add custom working directory support 2026-08-30 17:41:43 +08:00
世界 c66dd4c8ad boxxx: Add update API 2026-08-30 17:41:43 +08:00
世界 ae2c5c84ef boxdd: Fix log format 2026-08-30 17:41:43 +08:00
世界 58d2ed88aa Add windows build 2026-08-30 17:41:43 +08:00
世界 680f37e9a6 Fix windows bridge 2026-08-30 17:41:43 +08:00
世界 c7c9feef95 Fix tun gso check 2026-08-30 17:41:43 +08:00
世界 9a96e63643 Fix SetGroupExpand race 2026-08-30 17:41:43 +08:00
世界 7f1a2bd2be windivert: stabilize Windows driver lifecycle 2026-08-30 17:41:43 +08:00
世界 2c65ed1ea1 Fix nfqueue options 2026-08-30 17:41:43 +08:00
世界 73e9ff81de documentation: Update icon svg 2026-08-30 17:41:42 +08:00
世界 4f330d73ec platform: Add http proxy support for Windows 2026-08-30 17:41:42 +08:00
世界 9eb60234fc platform: Fix daemon data 2026-08-30 17:41:42 +08:00
世界 9a543cfe42 platform: Add boxdd 2026-08-30 17:41:42 +08:00
世界 2e0466da94 Fix daemon groups 2026-08-30 17:41:42 +08:00
世界 13ca2511b1 bridge: Raise accept_ra to 2 when enabling IPv6 forwarding 2026-08-30 17:41:42 +08:00