Fix STUN test when server address is an IP literal - #4350

Open

swedenborg33 wants to merge 247 commits into

SagerNet:testingfrom

swedenborg33:fix-stun-ip-literal

Commits on Jul 9, 2026

Add MAC and hostname rule items
nekohasekai
committed
801505e
Add Android support for MAC and hostname rule items
nekohasekai
committed
07b1e55
Add macOS support for MAC and hostname rule items
nekohasekai
committed
8d7015f
documentation: Update descriptions for neighbor rules
nekohasekai
committed
eaf1f5e
Refactor ACME support to certificate provider
nekohasekai
committed
bbb8051
Add BBR profile and hop interval randomization for Hysteria2
nekohasekai
committed
73d9ffc
platform: Add OOM Report & Crash Report
nekohasekai
committed
3cf2b6e
Also enable certificate store by default on Apple platforms
nekohasekai
committed
a3b98fc
Add evaluate DNS rule action and related rule items
nekohasekai
committed
daff162
platform: Fix set local
nekohasekai
committed
f9e376e
Fix deprecated warning double-formatting on localized clients
nekohasekai
committed
1a7c996
oom-killer: Free memory on pressure notification and use gradual interval backoff
nekohasekai
committed
6173a90
tools: Network Quality & STUN
nekohasekai
committed
da89c5b
platform: Fix darwin signal handler
nekohasekai
committed
73091e1
tools: Tailscale status
nekohasekai
committed
a5bf7be
Revert "Also enable certificate store by default on Apple platforms"
nekohasekai
committed
323ed11
Fix rules lock
nekohasekai
committed
7b85559
Fix darwin local DNS transport
nekohasekai
committed
f4c053e
tools: Tailscale status
nekohasekai
committed
ee1ed8f
Un-deprecate `ip_accept_any` DNS rule item
nekohasekai
committed
c61e582
documentation: Fixes
nekohasekai
committed
79ba7e5
Add `package_name_regex` route, DNS and headless rule item
nekohasekai
committed
ef95477
platform: Wrap command RPC error returns with E.Cause
nekohasekai
committed
bc6f108
Fix lint errors
nekohasekai
committed
2e932be
Add cloudflared inbound
nekohasekai
committed
b212049
documentation: Fix missing update for `ip_version` and `query_type`
nekohasekai
committed
84cbca8
Fix stun test
nekohasekai
committed
c08c6d5
Fix darwin cgo DNS again
nekohasekai
committed
a5bdaf5
Fix tailscale error
nekohasekai
committed
1e88d08
Add optimistic DNS cache
nekohasekai
committed
c8101bf
oom-killer: Record report before reset network
nekohasekai
committed
d725846
Refactor: HTTP clients, unified HTTP2/QUIC options, Apple engines
nekohasekai
committed
c1da99e
Standardize hosts path
nekohasekai
committed
ed294d8
Add TLS spoof support
nekohasekai
committed
a2872c3
Fix legacy rule-set download_detour blocked by empty direct check
nekohasekai
committed
894f6ea
Reject pure-IP rule-set references without match_response
nekohasekai
committed
9b97a0d
Fix use-after-free of pooled value buffers in bbolt Batch writes
nekohasekai
committed
af5ca87
Reject IP literal server name with TLS spoof
nekohasekai
committed
b58afd9
Fix macOS tlsspoof
nekohasekai
committed
c87408c
Scope HTTP/2 fallback and HTTP/3 broken state per authority
nekohasekai
committed
336ed8b
Defer implicit default HTTP client fallback to first use
nekohasekai
committed
8092f78
Strip EDNS padding from upstream DNS responses
nekohasekai
committed
3660737
Fix Apple TLS metadata capture
nekohasekai
committed
00f0cc9
Fix tls-spoof
nekohasekai
committed
d2fd2ab
Add search domain support for Tailscale DNS
nekohasekai
committed
2844090
Log DNS optimistic background refresh outcomes
nekohasekai
committed
6b6de02
Fix Tailscale search domain response name mismatch
nekohasekai
committed
00ec2e2
Fix goroutine leak in networkquality tool
nekohasekai
committed
4f711f8
Add ACME profile support for IP address certificates
nekohasekai
committed
4755ce6
Fix ACME HTTP-01 challenge for IPv6 literal addresses
nekohasekai
committed
ff6ffa2
platform: Improve oom-killer
nekohasekai
committed
564050b
Fix darwin cgo DNS again
nekohasekai
committed
23a132a
Fix stderr deprecated manager
nekohasekai
committed
351a27d
Improve UDP batch support
nekohasekai
committed
cac32a5
Add Windows TLS engine
nekohasekai
committed
5dbc0a5
Preserve comments between formatting
nekohasekai
committed
7a399c4
Improve oom-killer
nekohasekai
committed
b313d0c
ssh: Add cipher, MAC, and key exchange configuration
nekohasekai
committed
93a5334
dns: Add timeout configuration
nekohasekai
committed
dbe3074
Fix tailscale start dependencies
nekohasekai
committed
8e0b96a
dns: Add neighbor-based hostname resolution to local server
nekohasekai
committed
a81ca0f
dns: Add preferred_by rule item
nekohasekai
committed
7c722b3
dns: Add mDNS server
nekohasekai
committed
59ad93e
Allow customizing TUN DNS mode and hijack interface DNS by default
nekohasekai
committed
84eb7a1
Add more spoof method

macronut
authored and
nekohasekai
committed
1581a72
Fix reset network
nekohasekai
committed
b0c4f12
Add hysteria2 realm service and support
nekohasekai
committed
1ab5891
Update hysteria2 realm
nekohasekai
committed
fdab3c1
Fix TLS server close
nekohasekai
committed
73cee03
Fix hysteria2 realm server
nekohasekai
committed
94ba93b
Fix lint errors
nekohasekai
committed
3d5d0b0
dns: Fix DHCP reset
nekohasekai
committed
409d506
Rebase wireguard-go to official
nekohasekai
committed
0e1b0da
Fix shadowtls handshake
nekohasekai
committed
effeea2
oom-killer: Remove log "OOM draft discarded"
nekohasekai
committed
ea0f6a9
route: Refetch rule-set when cache restore fails
nekohasekai
committed
92df8ec
process: Fix panic when package manager is unavailable on Android
nekohasekai
committed
b5158e2
tailscale: Revert dialer deprecation and remove control_http_client
nekohasekai
committed
ca4d79f
tailscale: Fix handle peer DNS query
nekohasekai
committed
1b9b0e6
gvisor: Fix dialing to self addresses
nekohasekai
committed
f16254f
Fix tailscale
nekohasekai
committed
715e5c4
tailscale: Add runtime exit node API
nekohasekai
committed
9afbd45
tailscale: Expose more peer info fields
nekohasekai
committed
3bc481a
Fix tailscale dns
nekohasekai
committed
a1b55bc
daemon: Add Tailssh
nekohasekai
committed
c3e63b0
hysteria2: Add gecko obfs
nekohasekai
committed
824ccb8
tools: Fix mising cleanup
nekohasekai
committed
01edf1a
tailscale: Add tailssh server
nekohasekai
committed
9ac1e1b
tailssh: fix platform SFTP session teardown
nekohasekai
committed
dbf960d
platform: Add tailscale device name and logout
nekohasekai
committed
f0ca4dc
platform: Add shell support for iOS
nekohasekai
committed
29af200
daemon: Split host operations into ManagedService
nekohasekai
committed
fca959f
Add sing-box API service
nekohasekai
committed
a485967
tailscale: Fix auth URL not refreshed after logout
nekohasekai
committed
c95a016
Update Go to 1.25.11
nekohasekai
committed
266f590
Fix group status updates broken by API service
nekohasekai
committed
22650b3
release: Fix apple release
nekohasekai
committed
a581dad
dns: Remove unused files
nekohasekai
committed
4f1bd8d
Improve remote rule-set update
nekohasekai
committed
37cce6d
Add dashboard support for API service
nekohasekai
committed
828e105
Fix remote control when Clash server is unavailable
nekohasekai
committed
12f160a
Add USB/IP service
nekohasekai
committed
7cffd47
Add USB/IP support for macOS
nekohasekai
committed
a23c66f
documentation: Add USB/IP server and client
nekohasekai
committed
70a767a
Fix Cloudflared edge discovery ignoring configured resolver
nekohasekai
committed
ad15fc2
Add iOS jailbreak release
nekohasekai
committed
1c830c6
certificate: Replace platform bridge with CGO JNI
nekohasekai
committed
8c38d74
platform: Fix missing api version check for usb/ip
nekohasekai
committed
0831697
Fix oom draft flood
nekohasekai
committed
57ca39a
Bump version
nekohasekai
committed
ecbb285
release: Fix upload ios deb
nekohasekai
committed
7140f47
Refactor darwin local DNS to raw mDNSResponder call
nekohasekai
committed
debdd18
Bump version
nekohasekai
committed
54b4be5
Write logs to oom report
nekohasekai
committed
d2215bb
Fix go mod format
nekohasekai
committed
03d03fa
Add age support for report export
nekohasekai
committed
29b9238
Improve DHCP DNS server initialize
nekohasekai
committed
d82164b
Fix linux ping
nekohasekai
committed
eacbf66
release: Fix update apple version script
nekohasekai
committed
97c352f
Fix udpnat2 buffer size
nekohasekai
committed
40816dd
tls: Fix read wait buffer sizing
nekohasekai
committed
1e23763
Fix cloudflared crash
nekohasekai
committed
f95a274
dialer: Dial directly when only one interface is available
nekohasekai
committed
bf280b0
Add snell protocol
nekohasekai
committed
e9b8627
Add L3 forwarding support
nekohasekai
committed
eaec0cf
Fix local DNS transport on darwin
nekohasekai
committed
1541f1b
Imrpove flow tracking & sniff action
nekohasekai
committed
c808a16
daemon: Release memory to OS on service reload
nekohasekai
committed
8274ce4
Add bridge outbound
nekohasekai
committed
e2b25f1
Improve bridge
nekohasekai
committed
9fc7621
Add windows bridge
nekohasekai
committed
c85b64e
Improve darwin bridge
nekohasekai
committed
f8d1638
dialer: Fix auto_detect_interface for UDP connections
nekohasekai
committed
d7c70d1
Fix bridge MTU
nekohasekai
committed
2a678a7
Improve windivert syscall
nekohasekai
committed
24607d3
Fix windows bridge forwarding to connected subnets
nekohasekai
committed
5fee755
Improve flow track
nekohasekai
committed
8f29c39
Fix macOS bridge with includeAllNetworks
nekohasekai
committed
af0809e
Fix macOS bridge kernel panic
nekohasekai
committed
a1bc351
Fix process and neighbor rules not matched in pre-match
nekohasekai
committed
b911fb0
Fix snell write record
nekohasekai
committed
431e997
Add hysteria2 realm ip_version and port_mapping options
nekohasekai
committed
400c6d7
Bump version
nekohasekai
committed
595b45f
Add connections to OOM report
nekohasekai
committed
f3b0c77
Fix missing tun logger
nekohasekai
committed
16a529c
Fix ping leak
nekohasekai
committed
1856411

Commits on Jul 10, 2026

Fix tailscale version
nekohasekai
committed
3394c19
Improve ping performance
nekohasekai
committed
c4d3aaa
Fix snell v5 stream payload pacing
nekohasekai
committed
f186035
Bump version
nekohasekai
committed
3a4a991
Fix snell reuse
nekohasekai
committed
793e6fe

Commits on Jul 11, 2026

Fix tailscale route
nekohasekai
committed
cf587cc
Add netns and unshare support
nekohasekai
committed
792f200
Bump version
nekohasekai
committed
f025e6f
Fix netns manager
nekohasekai
committed
b8bd28f
tun: Fix probe GSO
nekohasekai
committed
1dc8872
windivert: Verify cached driver against embedded asset before load
nekohasekai
committed
74aa66c
platform: Export tester and reporter
nekohasekai
committed
4bccd6f

Commits on Jul 12, 2026

Fix windivert open
nekohasekai
committed
bc946b8
bridge: Raise accept_ra to 2 when enabling IPv6 forwarding
nekohasekai
committed
4ebcada
Fix daemon groups
nekohasekai
committed
9e1eb5a
Fix naive slow open
nekohasekai
committed
2e751ae

Commits on Jul 13, 2026

platform: Add boxdd
nekohasekai
committed
a8a6922
platform: Fix daemon data
nekohasekai
committed
f505a47
platform: Add http proxy support for Windows
nekohasekai
committed
81bfee7

Commits on Jul 14, 2026

documentation: Update icon svg
nekohasekai
committed
fc867cd
Fix nfqueue options
nekohasekai
committed
c25f17f
Fix redirect routes
nekohasekai
committed
a800468
windivert: stabilize Windows driver lifecycle
nekohasekai
committed
04e6000
Fix SetGroupExpand race
nekohasekai
committed
9f3fb83
Fix tun gso check
nekohasekai
committed
85cd945
Fix nftables flush
nekohasekai
committed
1dfdad2
Fix windows bridge
nekohasekai
committed
9acf5a3
Add windows build
nekohasekai
committed
0bcec8c
Bump version
nekohasekai
committed
2fd5775
boxdd: Fix log format
nekohasekai
committed
5aa778c
boxxx: Add update API
nekohasekai
committed
82b796b
tun: Fix redirect routes after rapid network changes
nekohasekai
committed
f017aac

Commits on Jul 15, 2026

boxdd: Add custom working directory support
nekohasekai
committed
dd6db11
tailscale: support Windows SSH user sessions
nekohasekai
committed
9abe81b
Update windows build
nekohasekai
committed
52f372c
boxdd: Add insecure mode
nekohasekai
committed
e34b57c
Fix start lifecycle
nekohasekai
committed
2392b17
Bump version
nekohasekai
committed
5cd932a

Commits on Jul 16, 2026

platform: Fix version compare
nekohasekai
committed
7be594d
Fix oomkiller
nekohasekai
committed
4ae5d4a
Fix iOS brdige
nekohasekai
committed
653b81c
Add multiple tags support to rule-sets
nekohasekai
committed
c215021
boxx: Fix unsafe installation
nekohasekai
committed
64f833d
refactor: New tun udpnat
nekohasekai
committed
c8ee349

Commits on Jul 17, 2026

Refactor endpoint listen
nekohasekai
committed
704b57c
Update Go to 1.25.12
nekohasekai
committed
87d0fdf
Bump version
nekohasekai
committed
cd3ee75
Add openvpn and openconnect
nekohasekai
committed
46f00de
Fix bind control for auto redirect
nekohasekai
committed
412300e
Fix tailscale detour
nekohasekai
committed
414fec5

Commits on Jul 18, 2026

Refactor endpoint in started interface
nekohasekai
committed
60f3012
Refactor OpenVPN and OpenConnect endpoints
nekohasekai
committed
a4367df
Bump version
nekohasekai
committed
37b4386
Fix SSO support for anyconnect
nekohasekai
committed
fea6299

Commits on Jul 19, 2026

Refactor UDP DNS hijack
nekohasekai
committed
7163aa0
refactor: Async DNS
nekohasekai
committed
3d2461f
Fix DNS route suffix matching
nekohasekai
committed
77d9c07
boxdd: Fix linux permission
nekohasekai
committed
552994b
Improve network reset
nekohasekai
committed
d2e030b
boxdd: Implement linux http proxy
nekohasekai
committed
e017747
desktop: Pin dependencies
nekohasekai
committed
5c29b1c
Add linux desktop build
nekohasekai
committed
f9d2986
Bump version
nekohasekai
committed
fa36eb7

Commits on Jul 20, 2026

openconnect: Fix Fortinet SSO
nekohasekai
committed
a6703e7
Fix wg detour
nekohasekai
committed
f39ab0e
quic: Fix UDP message ownership
nekohasekai
committed
f5aa5b1
boxdd: Fix unsafe permission check
nekohasekai
committed
182f060
openvpn: Fix certificate verification compatibility
nekohasekai
committed
15be1ee
Fix security check message
nekohasekai
committed
5cad5ad

Commits on Jul 21, 2026

Improve OpenVPN & OpenConnect interoperability
nekohasekai
committed
2ff294c
build: Refactor workflow
nekohasekai
committed
380feb0
Fix naive HTTP/2 connections

H-TTTTT
authored and
nekohasekai
committed
888db04
boxdd: Fix windows update
nekohasekai
committed
e17da33
Fix http client timeout
nekohasekai
committed
801af1e
tun: Fix flow close race
nekohasekai
committed
b352013
Fix TCP DNS retry
nekohasekai
committed
a9d89ab
Update uTLS to v1.8.7

flyzstu
authored and
nekohasekai
committed
08d8128
Update issue template for new clients
nekohasekai
committed
897a664
Add Fortinet hostcheck support
nekohasekai
committed
de47602

Commits on Jul 22, 2026

release: Improve release workflow
nekohasekai
committed
183f65e
Bump version
nekohasekai
committed
3fcfadd
tun: Fix nftables interval end when range hits max address
nekohasekai
committed
e8bc3f6
Fix Tailscale 4via6 subnet routing
nekohasekai
committed
908e12c
dns: Cache responses with client subnet
nekohasekai
committed
4abdb65
dns: Probe connection reuse support for TCP transports
nekohasekai
committed
e013b42

Commits on Jul 23, 2026

Fix Fortinet SSO again
nekohasekai
committed
ceb7154
platform: Fix WIFI state on reload
nekohasekai
committed
153b42b
route: simplify rule_set matching semantics
nekohasekai
committed
52e7273
dns: Add namespace and parallel support for evaluate
nekohasekai
committed
5d744ad
Bump version
nekohasekai
committed
8bc6787

Commits on Jul 24, 2026

Fix derp stun options
nekohasekai
committed
a1214f6
tun: Reject connections to redirect listener
nekohasekai
committed
0b54f57

Commits on Jul 25, 2026

Add JSON schema support
nekohasekai
committed
58affa1
release: Fix linux sign
nekohasekai
committed
4c885ee
Add initial_path option to remote rule-sets
nekohasekai
committed
07dba74
daemon: Improve URLTest
nekohasekai
committed
5380788
dns: Fix search domain expansion
nekohasekai
committed
fe1f022
Fix inconsistent URLTest results
nekohasekai
committed
fa7b0d9
Bump version
nekohasekai
committed
ea6965b
Fix string type
nekohasekai
committed
f60f372

Commits on Jul 26, 2026

Fix STUN test when server address is an IP literal
swedenborg33
committed
0527c68