Commit Graph
2414 Commits
Author SHA1 Message Date
世界 9afbd45d4b tailscale: Add runtime exit node API 2026-07-09 11:19:55 +08:00
世界 715e5c4c2b Fix tailscale 2026-07-09 11:19:55 +08:00
世界 f16254f240 gvisor: Fix dialing to self addresses 2026-07-09 11:19:47 +08:00
世界 1b9b0e64e0 tailscale: Fix handle peer DNS query 2026-07-09 11:19:47 +08:00
世界 ca4d79ffa0 tailscale: Revert dialer deprecation and remove control_http_client 2026-07-09 11:19:47 +08:00
世界 b5158e2704 process: Fix panic when package manager is unavailable on Android 2026-07-09 11:19:46 +08:00
世界 92df8ec274 route: Refetch rule-set when cache restore fails 2026-07-09 11:19:46 +08:00
世界 ea0f6a9b2a oom-killer: Remove log "OOM draft discarded" 2026-07-09 11:19:46 +08:00
世界 effeea21f9 Fix shadowtls handshake 2026-07-09 11:19:46 +08:00
世界 0e1b0dae6c Rebase wireguard-go to official 2026-07-09 11:19:45 +08:00
世界 409d506d19 dns: Fix DHCP reset 2026-07-09 11:19:45 +08:00
世界 3d5d0b0ca0 Fix lint errors 2026-07-09 11:19:45 +08:00
世界 94ba93ba6a Fix hysteria2 realm server 2026-07-09 11:19:45 +08:00
世界 73cee034c5 Fix TLS server close 2026-07-09 11:19:39 +08:00
世界 fdab3c1b95 Update hysteria2 realm 2026-07-09 11:19:39 +08:00
世界 1ab58918df Add hysteria2 realm service and support 2026-07-09 11:19:33 +08:00
世界 b0c4f12f09 Fix reset network 2026-07-09 11:19:17 +08:00
macronutand世界 1581a72924 Add more spoof method
Signed-off-by: macronut <[email protected]>
2026-07-09 11:19:16 +08:00
世界 84eb7a103f Allow customizing TUN DNS mode and hijack interface DNS by default 2026-07-09 11:19:16 +08:00
世界 59ad93ef52 dns: Add mDNS server 2026-07-09 11:19:16 +08:00
世界 7c722b3d50 dns: Add preferred_by rule item 2026-07-09 11:19:15 +08:00
世界 a81ca0f5c5 dns: Add neighbor-based hostname resolution to local server 2026-07-09 11:19:15 +08:00
世界 8e0b96a04e Fix tailscale start dependencies 2026-07-09 11:19:15 +08:00
世界 dbe307461c dns: Add timeout configuration 2026-07-09 11:19:14 +08:00
世界 93a5334b18 ssh: Add cipher, MAC, and key exchange configuration 2026-07-09 11:19:14 +08:00
世界 b313d0cd10 Improve oom-killer 2026-07-09 11:19:14 +08:00
世界 7a399c4671 Preserve comments between formatting 2026-07-09 11:19:14 +08:00
nekohasekai 5dbc0a58cb Add Windows TLS engine 2026-07-09 11:19:13 +08:00
世界 cac32a5f1d Improve UDP batch support 2026-07-09 11:19:13 +08:00
世界 351a27d305 Fix stderr deprecated manager 2026-07-09 11:19:13 +08:00
世界 23a132af2c Fix darwin cgo DNS again 2026-07-09 11:19:13 +08:00
世界 564050b595 platform: Improve oom-killer 2026-07-09 11:19:12 +08:00
世界 ff6ffa204c Fix ACME HTTP-01 challenge for IPv6 literal addresses 2026-07-09 11:19:12 +08:00
世界 4755ce63f5 Add ACME profile support for IP address certificates 2026-07-09 11:19:12 +08:00
世界 4f711f82ca Fix goroutine leak in networkquality tool
Serialize probe rounds in startProber to eliminate unbounded fan-out of
fire-and-forget probe goroutines (up to 100/sec per direction), and close
HTTP/3 transports via transport.Close() in addition to CloseIdleConnections.
2026-07-09 11:19:11 +08:00
世界 00ec2e2bd6 Fix Tailscale search domain response name mismatch 2026-07-09 11:19:11 +08:00
世界 6b6de02112 Log DNS optimistic background refresh outcomes 2026-07-09 11:19:11 +08:00
世界 2844090ed0 Add search domain support for Tailscale DNS 2026-07-09 11:19:11 +08:00
世界 d2fd2ab794 Fix tls-spoof 2026-07-09 11:19:10 +08:00
世界 00f0cc9d0f Fix Apple TLS metadata capture 2026-07-09 11:19:10 +08:00
世界 3660737223 Strip EDNS padding from upstream DNS responses 2026-07-09 11:19:10 +08:00
世界 8092f78453 Defer implicit default HTTP client fallback to first use 2026-07-09 11:19:09 +08:00
世界 336ed8bae9 Scope HTTP/2 fallback and HTTP/3 broken state per authority 2026-07-09 11:19:09 +08:00
世界 c87408c455 Fix macOS tlsspoof 2026-07-09 11:19:09 +08:00
世界 b58afd9784 Reject IP literal server name with TLS spoof 2026-07-09 11:19:09 +08:00
世界 af5ca87b49 Fix use-after-free of pooled value buffers in bbolt Batch writes 2026-07-09 11:19:08 +08:00
世界 9b97a0de6f Reject pure-IP rule-set references without match_response
DNS rules referencing rule-sets that contain only ip_cidr predicates
silently stopped matching when legacy DNS mode was disabled, because the
IP-CIDR branch cannot match against an in-flight DNS query. The existing
validation intentionally let every rule_set through on the premise that
mixed sets still work via their non-IP branches, which is only true when
such a branch exists. Track whether a rule-set carries any non-IP-CIDR
predicate and reject pure-IP references the same way bare ip_cidr fields
are already rejected.
2026-07-09 11:19:08 +08:00
世界 894f6eae60 Fix legacy rule-set download_detour blocked by empty direct check 2026-07-09 11:19:08 +08:00
世界 a2872c3f32 Add TLS spoof support 2026-07-09 11:19:08 +08:00
世界 ed294d8c1e Standardize hosts path 2026-07-09 11:19:07 +08:00