世界
f8a623e0c6
dns: Add neighbor-based hostname resolution to local server
2026-08-30 17:41:40 +08:00
世界
35540b4ff3
Fix tailscale start dependencies
2026-08-30 17:41:40 +08:00
世界
87c2b89120
dns: Add timeout configuration
2026-08-30 17:41:40 +08:00
世界
a0fcede368
ssh: Add cipher, MAC, and key exchange configuration
2026-08-30 17:41:40 +08:00
世界
c17407ec94
Improve oom-killer
2026-08-30 17:41:40 +08:00
世界
c9fb076dd7
Preserve comments between formatting
2026-08-30 17:41:40 +08:00
nekohasekai
9471dde765
Add Windows TLS engine
2026-08-30 17:41:40 +08:00
世界
2bbff23640
Improve UDP batch support
2026-08-30 17:41:40 +08:00
世界
9ab4c0f5cb
Fix darwin cgo DNS again
2026-08-30 17:41:40 +08:00
世界
1322c0671b
platform: Improve oom-killer
2026-08-30 17:41:40 +08:00
世界
7963713314
Add ACME profile support for IP address certificates
2026-08-30 17:41:40 +08:00
世界
0e7f176a16
Fix goroutine leak in networkquality tool
...
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-08-30 17:41:40 +08:00
世界
2496c846f4
Fix Tailscale search domain response name mismatch
2026-08-30 17:41:40 +08:00
世界
b4e670c36f
Log DNS optimistic background refresh outcomes
2026-08-30 17:41:40 +08:00
世界
63373385f5
Add search domain support for Tailscale DNS
2026-08-30 17:41:40 +08:00
世界
a33858523f
Fix tls-spoof
2026-08-30 17:41:40 +08:00
世界
9bcc0f1d37
Fix Apple TLS metadata capture
2026-08-30 17:41:40 +08:00
世界
836fa8ce58
Strip EDNS padding from upstream DNS responses
2026-08-30 17:41:40 +08:00
世界
7de1c4b4cf
Defer implicit default HTTP client fallback to first use
2026-08-30 17:41:39 +08:00
世界
6877fba346
Scope HTTP/2 fallback and HTTP/3 broken state per authority
2026-08-30 17:41:39 +08:00
世界
c56d0f2462
Fix macOS tlsspoof
2026-08-30 17:41:39 +08:00
世界
2ddfecb47a
Reject IP literal server name with TLS spoof
2026-08-30 17:41:39 +08:00
世界
3e8ea4e590
Fix use-after-free of pooled value buffers in bbolt Batch writes
2026-08-30 17:41:39 +08:00
世界
a04daaff75
Reject pure-IP rule-set references without match_response
...
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-08-30 17:41:39 +08:00
世界
8e8d1dcca8
Fix legacy rule-set download_detour blocked by empty direct check
2026-08-30 17:41:39 +08:00
世界
40e2b5fd4b
Add TLS spoof support
2026-08-30 17:41:39 +08:00
世界
c82163f287
Standardize hosts path
2026-08-30 17:41:39 +08:00
世界
2515811356
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
2026-08-30 17:41:39 +08:00
世界
3f242a7114
oom-killer: Record report before reset network
2026-08-30 17:41:39 +08:00
世界
c322ad5d33
Add optimistic DNS cache
2026-08-30 17:41:39 +08:00
世界
5cce5454e1
Fix tailscale error
2026-08-30 17:41:39 +08:00
世界
fe88004eaf
Fix darwin cgo DNS again
2026-08-30 17:41:39 +08:00
世界
435d7e0cdf
Fix stun test
2026-08-30 17:41:39 +08:00
世界
42ca206037
documentation: Fix missing update for ip_version and query_type
2026-08-30 17:41:39 +08:00
世界
ac7f1ca3aa
Add cloudflared inbound
2026-08-30 17:41:39 +08:00
世界
2b691a94a4
Fix lint errors
2026-08-30 17:41:39 +08:00
世界
3b4f7c8ab7
platform: Wrap command RPC error returns with E.Cause
2026-08-30 17:41:39 +08:00
世界
bc6f9703e3
Add package_name_regex route, DNS and headless rule item
2026-08-30 17:41:39 +08:00
世界
cdf596da19
documentation: Fixes
2026-08-30 17:41:39 +08:00
世界
d72c1d9be7
Un-deprecate ip_accept_any DNS rule item
2026-08-30 17:41:39 +08:00
世界
ba059b0b2a
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
22e852cf36
Fix darwin local DNS transport
2026-08-30 17:41:39 +08:00
世界
496043dd9c
Fix rules lock
2026-08-30 17:41:39 +08:00
世界
d2b10d3b09
Revert "Also enable certificate store by default on Apple platforms"
...
This reverts commit 62cb06c02fc569beb7b2ffa3f0a10ef23e136748.
2026-08-30 17:41:39 +08:00
世界
bd9a10d349
tools: Tailscale status
2026-08-30 17:41:39 +08:00
世界
f24691cd60
platform: Fix darwin signal handler
2026-08-30 17:41:39 +08:00
世界
07cdca0a2b
tools: Network Quality & STUN
2026-08-30 17:41:39 +08:00
世界
7f86dffa06
oom-killer: Free memory on pressure notification and use gradual interval backoff
2026-08-30 17:41:39 +08:00
世界
1735da6c17
Fix deprecated warning double-formatting on localized clients
2026-08-30 17:41:39 +08:00
世界
37ac4d6b16
platform: Fix set local
2026-08-30 17:41:39 +08:00
nekohasekai
cd77e78f0a
Add evaluate DNS rule action and related rule items
2026-08-30 17:41:39 +08:00
世界
86170406af
Also enable certificate store by default on Apple platforms
...
`SecTrustEvaluateWithError` is serial
2026-08-30 17:41:38 +08:00
世界
03412b12d0
platform: Add OOM Report & Crash Report
2026-08-30 17:41:38 +08:00
世界
da18cb70fa
Add BBR profile and hop interval randomization for Hysteria2
2026-08-30 17:41:38 +08:00
nekohasekai
01b3d19d6d
Refactor ACME support to certificate provider
2026-08-30 17:41:38 +08:00
世界
564cb451ac
documentation: Update descriptions for neighbor rules
2026-08-30 17:41:38 +08:00
世界
1cde511d6d
Add macOS support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
39592518b0
Add Android support for MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
57c62b5330
Add MAC and hostname rule items
2026-08-30 17:41:38 +08:00
世界
0c7b333743
Use sing-tun v0.8.15 tag
2026-08-30 17:41:22 +08:00
世界
6766b17131
Fix panic on TCP packets of an unconfigured address family in system stack
2026-08-30 17:32:28 +08:00
世界
bd602b6d11
Fix panic on websocket handshake failure
2026-08-30 17:23:03 +08:00
世界
56f91dfeab
Bump version
2026-08-29 18:25:15 +08:00
世界
849ac908c8
Use sing-quic v0.6.5 tag
2026-08-29 17:06:50 +08:00
世界
0b5391447e
Fix websocket early data with smux and yamux multiplex
2026-08-29 15:59:41 +08:00
世界
d34fbe99e8
Fix tailscale build with Go 1.27
2026-08-29 14:43:16 +08:00
世界
0aefee74c6
Fix TCP NAT port reuse across address families in system stack
2026-08-29 11:33:11 +08:00
世界
1c99c4ceac
Use legacy Apple credentials
2026-08-27 18:48:04 +08:00
世界
4f15700db3
direct: Fix TUN loopback protection
2026-08-27 12:45:59 +08:00
世界
1389e2fd8e
documentation: Fix matching logic note for DNS rules
...
The address filter fields ip_cidr, ip_is_private and ip_accept_any share
the destination address group with the domain fields, matching with OR
semantics like in route rules.
2026-08-22 16:14:54 +08:00
世界
4444f297c2
Fix address filter matching for inverted DNS rules
...
Inverted rules whose address filter conditions come from rule sets or
logical rules were rejected during pre-lookup matching, so the lookup was
never sent and the rules never matched; for plain ip rule sets this was a
regression from the rule-set invert fix in 1.12.22. Pre-lookup matching
now tracks whether the result depends on deferred address filter
conditions and defers such rules to the response phase, while results
already determined by evaluated conditions are still decided during
pre-lookup.
2026-08-22 16:14:54 +08:00
世界
c375fb0b7f
Fix su lookup for auto_redirect on Android
2026-08-21 23:09:45 +08:00
世界
f7634d5846
Fix excessive TCP keepalive traffic in gVisor stack
2026-08-21 19:53:51 +08:00
世界
e4a4e8c790
Fix URLTest group hang on unresponsive outbound
2026-08-21 18:21:51 +08:00
世界
9d8d4b8796
Fix log output before service started
2026-08-21 17:42:42 +08:00
世界
b5ebaa1fc0
Bump version
2026-08-17 17:07:24 +08:00
世界
bf41bb4ced
Install Apple provisioning profiles from a variable number of secrets
2026-08-17 17:07:23 +08:00
世界
cdb88a33ac
Fix version quoting in Apple project update script
2026-08-17 16:03:58 +08:00
世界
077a4a0b54
Fix DHCP DNS server search domain handling
2026-08-12 13:29:01 +08:00
世界
b0491faeee
Fix default interface monitor stuck on system boot
2026-08-10 23:25:56 +08:00
世界
9fa673d105
Fix oomkiller service stub build
2026-08-10 23:16:04 +08:00
世界
f260e771ea
Fix unbounded allocations when reading untrusted binary data
2026-08-10 13:26:42 +08:00
世界
45ca32dcb9
Bump version
2026-08-09 14:57:01 +08:00
世界
93df3ef612
Fix slow open connection declaring lazy headroom
2026-08-09 13:13:24 +08:00
世界
7afc0aa2ba
Update naiveproxy to v150.0.7871.63-1
2026-08-08 11:27:55 +08:00
世界
af40956e58
Update sing
2026-08-04 22:50:40 +08:00
世界
3b22615aec
tailscale: Match bare hostnames in preferred_by when search domains exist
...
MagicDNS resolves single-label names via tailnet search domains, so
route preferred_by should treat them as tailscale domains, matching
official client behavior.
2026-08-04 22:29:14 +08:00
世界
cc1c891400
tailscale: Fix preferred_by matching all addresses with exit node
...
Exit node peers carry default routes (0.0.0.0/0, ::/0) in their allowed
IPs, so including them in routePrefixes made PreferredAddress report
every address as preferred.
2026-08-04 22:17:04 +08:00
世界
3d85cbd7f0
tailscale: Fix handle peer DNS query
2026-08-04 21:08:00 +08:00
世界
17ec3c71af
Bump version
2026-08-03 19:19:51 +08:00
世界
6849e26ee7
tailscale: Fix system interface network category on Windows
2026-08-03 18:59:23 +08:00
世界
fd7cd31d21
Fix tailscale DNS transport missing DNS-only netmap updates
2026-08-03 18:59:23 +08:00
世界
d763884442
Fix tailscale panic with IP control URL
2026-08-03 18:59:23 +08:00
世界
256d42ad18
Update sing-quic
2026-08-03 12:33:48 +08:00
世界
cb88d94d6d
Remove client metadata from AnyTLS requests by default
2026-08-03 12:33:41 +08:00
世界
7da573f187
direct: Fix routing loop to exact TUN address on darwin
2026-07-31 11:04:35 +08:00
世界
9d103249e2
release: Fix rpm package format with rpm 6
2026-07-29 21:43:54 +08:00
世界
3708fa1876
Bump version
2026-07-29 19:17:31 +08:00
世界
dba80e614e
Fix local DNS transport blocking on canceled queries
2026-07-29 19:17:00 +08:00
世界
c8f76760be
Update sing-tun
2026-07-27 23:13:10 +08:00
世界