668 commits

Author	SHA1	Message	Date
世界	e4b7e692f4	Bump version	2026-10-11 14:24:29 +08:00
世界	389646626e	Remove shared field defaults from MASQUE docs	2026-10-11 10:58:51 +08:00
世界	a2df2cdc1f	Add dns_server_address and dns_search_domain rule items	2026-10-11 10:58:51 +08:00
世界	2f10bfc8ea	Fix bridge forwarding with auto-redirect	2026-10-11 10:58:50 +08:00
世界	0199239c59	Add full certificate SHA-256 pinning for TLS	2026-10-11 10:58:50 +08:00
世界	b83089ecf6	Add MASQUE support	2026-10-11 10:58:50 +08:00
世界	ab5be37361	Rewrite HTTP proxy protocol	2026-10-11 10:58:50 +08:00
世界	2c28efdcad	Validate IP addresses and prefixes in JSON schema	2026-10-11 10:58:50 +08:00
世界	89f9b561f5	Add tailcat support	2026-10-11 10:58:50 +08:00
世界	8f4ab21a21	Remove dependency on gVisor	2026-10-11 10:58:50 +08:00
世界	9b2e3e7907	Add go TUN stack	2026-10-11 10:58:50 +08:00
世界	7ad8567e67	Improve idle connection management	2026-10-11 10:58:50 +08:00
世界	a74b38ec0d	Buffer cache file writes ... Changes to the cache file are collected in a write buffer and written in one transaction when the buffer reaches buffer_size, when the OOM killer releases memory, or when sing-box is closed. An optional flush_interval writes the buffer periodically. Previously each DNS response, RDRC entry and FakeIP mapping was committed in its own transaction. Also open the database with NoFreelistSync, and mark store_rdrc and rdrc_timeout as deprecated in the options.	2026-10-11 10:58:50 +08:00
世界	b7b172374b	Implement fully functional auto redirect for Android	2026-10-11 10:58:49 +08:00
世界	a8bd33a8ad	Format plural list options as arrays	2026-10-11 10:58:49 +08:00
世界	7054cac512	Bump version	2026-10-09 12:36:50 +08:00
世界	194ebd18b6	tun: Fix inconsistent DNS mode behavior without auto_route	2026-10-09 12:36:03 +08:00
世界	67fb235ee8	Add roothide package to iOS jailbreak release	2026-10-09 12:36:03 +08:00
世界	79fc394d67	documentation: Update Apple App Store link	2026-10-09 12:36:03 +08:00
世界	021e0877a3	Cleanup documentations	2026-10-02 18:00:09 +08:00
世界	af6e64c3b6	Bump version	2026-09-24 18:52:34 +08:00
世界	5ae597bfba	documentation: Fix default TLS min_version	2026-09-20 22:24:38 +08:00
世界	c0b8fe8b57	Fix API dashboard using implicit default HTTP client	2026-09-20 22:24:38 +08:00
世界	1ac1a339cb	Bump version	2026-09-15 01:21:37 +08:00
Bruce Wayne	378f151c75	documentation: Fix endpoint_independent_nat	2026-09-10 16:47:09 +08:00
世界	f0a2c348f6	documentation: Fix macOS standalone client data migration	2026-08-31 15:35:35 +08:00
世界	df34f5068b	documentation: Fix NaiveProxy version in changelog	2026-08-31 12:13:08 +08:00
世界	0b8995879f	Bump version	2026-08-31 11:28:31 +08:00
世界	384344ead3	Bump version	2026-08-30 17:41:47 +08:00
世界	103e266ebc	Fix QUIC congestion control ... - Remove `bbr_standard`, `bbr2` and `bbr2_variant` from the naive inbound - Report injected congestion controllers with connection-wide packet numbers in quic-go	2026-08-30 17:41:47 +08:00
世界	37da1712e0	naive: Fix receive window options not published	2026-08-30 17:41:46 +08:00
世界	4b30a03adf	Add Taildrop support	2026-08-30 17:41:46 +08:00
世界	24d1f271bf	Add listen_port option to Tailscale endpoint	2026-08-30 17:41:45 +08:00
世界	b3a45e0839	Add query_client_subnet and query_dnssec DNS rule items and remove_client_subnet DNS route action option	2026-08-30 17:41:45 +08:00
世界	96fe4f7317	documentation: Rename Root Helper to Helper Service	2026-08-30 17:41:45 +08:00
世界	ec3e95935f	Add hysteria2 chrome parrot support	2026-08-30 17:41:45 +08:00
世界	9bf39f85f9	Remove client metadata from AnyTLS requests by default	2026-08-30 17:41:45 +08:00
世界	1698e6cf66	Add initial_path option to remote rule-sets	2026-08-30 17:41:44 +08:00
世界	6e09f2892a	Add JSON schema support	2026-08-30 17:41:44 +08:00
世界	e09e3b49f9	dns: Add namespace and parallel support for evaluate	2026-08-30 17:41:44 +08:00
世界	510586c4f8	route: simplify rule_set matching semantics ... Since b0c6762bc, every rule inside a referenced rule-set was evaluated as if merged into the outer rule, which required tracking per-branch group states and let outer rules and rule-set rules satisfy each other's grouped conditions in both directions. Restrict merging to the only designed case: a rule-set containing exactly one non-inverted default rule is merged into the outer rule as before. Any other rule-set now matches as an ordinary condition of the outer rule: it matches when any of its rules matches on its own, and its rules no longer exchange grouped match state with the outer rule in either direction. Multiple referenced rule-sets keep OR semantics. Flat address rule-sets such as generated geosite/geoip sets contain a single default rule, so their behavior is unchanged. The group-state set machinery is replaced by a single required/satisfied mask pair. Also update the route and DNS rule docs.	2026-08-30 17:41:44 +08:00
世界	7a20afb289	Fix Fortinet SSO again	2026-08-30 17:41:44 +08:00
世界	b491cac8f7	Add Fortinet hostcheck support	2026-08-30 17:41:44 +08:00
世界	b9c7d52582	Improve OpenVPN & OpenConnect interoperability	2026-08-30 17:41:44 +08:00
世界	086e0b87cf	openvpn: Fix certificate verification compatibility	2026-08-30 17:41:44 +08:00
世界	abf7fe1b5b	Add linux desktop build	2026-08-30 17:41:44 +08:00
世界	6269e1c2b3	Refactor OpenVPN and OpenConnect endpoints	2026-08-30 17:41:43 +08:00
世界	2df7a9bac7	Add openvpn and openconnect	2026-08-30 17:41:43 +08:00
世界	1f7d571017	refactor: New tun udpnat	2026-08-30 17:41:43 +08:00
世界	9dfe842794	Add multiple tags support to rule-sets	2026-08-30 17:41:43 +08:00