629 commits

Author	SHA1	Message	Date
世界	aa5fc925b1	Bump version	2026-08-04 21:51:26 +08:00
世界	68f36ccd10	Remove client metadata from AnyTLS requests by default	2026-08-04 21:51:26 +08:00
世界	dcfe59eb25	Add initial_path option to remote rule-sets	2026-08-04 21:51:25 +08:00
世界	fe3316e15f	Add JSON schema support	2026-08-04 21:51:25 +08:00
世界	f25369faa8	dns: Add namespace and parallel support for evaluate	2026-08-04 21:51:25 +08:00
世界	101f2513a1	route: simplify rule_set matching semantics ... Since b0c6762bc, every rule inside a referenced rule-set was evaluated as if merged into the outer rule, which required tracking per-branch group states and let outer rules and rule-set rules satisfy each other's grouped conditions in both directions. Restrict merging to the only designed case: a rule-set containing exactly one non-inverted default rule is merged into the outer rule as before. Any other rule-set now matches as an ordinary condition of the outer rule: it matches when any of its rules matches on its own, and its rules no longer exchange grouped match state with the outer rule in either direction. Multiple referenced rule-sets keep OR semantics. Flat address rule-sets such as generated geosite/geoip sets contain a single default rule, so their behavior is unchanged. The group-state set machinery is replaced by a single required/satisfied mask pair. Also update the route and DNS rule docs.	2026-08-04 21:51:25 +08:00
世界	8285b93230	Fix Fortinet SSO again	2026-08-04 21:51:25 +08:00
世界	ccf9edd804	Add Fortinet hostcheck support	2026-08-04 21:51:25 +08:00
世界	9da9e60044	Improve OpenVPN & OpenConnect interoperability	2026-08-04 21:51:24 +08:00
世界	01efe7d053	openvpn: Fix certificate verification compatibility	2026-08-04 21:51:00 +08:00
世界	f50d3e549b	Add linux desktop build	2026-08-04 21:51:00 +08:00
世界	64471d8756	Refactor OpenVPN and OpenConnect endpoints	2026-08-04 21:51:00 +08:00
世界	03d78b341a	Add openvpn and openconnect	2026-08-04 21:51:00 +08:00
世界	a80aae535b	refactor: New tun udpnat	2026-08-04 21:50:11 +08:00
世界	a7afd725d7	Add multiple tags support to rule-sets	2026-08-04 21:50:11 +08:00
世界	7392f6974b	tailscale: support Windows SSH user sessions	2026-08-04 21:50:11 +08:00
世界	15a7762863	Add windows build	2026-08-04 21:50:11 +08:00
世界	9f90d16846	documentation: Update icon svg	2026-08-04 21:50:11 +08:00
世界	fcfba99cbf	Add netns and unshare support	2026-08-04 21:50:10 +08:00
世界	47502fd849	Add hysteria2 realm ip_version and port_mapping options	2026-08-04 21:50:10 +08:00
世界	f04cffd3ec	Add windows bridge	2026-08-04 21:50:10 +08:00
世界	ac24365b52	Improve bridge	2026-08-04 21:50:10 +08:00
世界	dee09c9942	Add bridge outbound	2026-08-04 21:50:10 +08:00
世界	f8f408feff	Imrpove flow tracking & sniff action	2026-08-04 21:50:10 +08:00
世界	5e3fa06e8f	Add L3 forwarding support	2026-08-04 21:49:50 +08:00
世界	3a72d91cf7	Add snell protocol	2026-08-04 21:49:14 +08:00
世界	48e931c160	Add iOS jailbreak release	2026-08-04 21:49:14 +08:00
世界	7e0a396c48	documentation: Add USB/IP server and client	2026-08-04 21:49:14 +08:00
世界	fc0378b5ff	Fix remote control when Clash server is unavailable	2026-08-04 21:49:14 +08:00
世界	054dfc5061	Add dashboard support for API service	2026-08-04 21:49:14 +08:00
世界	d0696583c4	Add sing-box API service	2026-08-04 21:49:14 +08:00
世界	54e34921d4	platform: Add tailscale device name and logout	2026-08-04 21:49:13 +08:00
世界	689c747af9	tailscale: Add tailssh server	2026-08-04 21:49:13 +08:00
世界	4bb8489364	hysteria2: Add gecko obfs	2026-08-04 21:49:13 +08:00
世界	848a7f20e1	tailscale: Revert dialer deprecation and remove control_http_client	2026-08-04 21:48:41 +08:00
世界	fa6cbfc208	Fix hysteria2 realm server	2026-08-04 21:47:48 +08:00
世界	23fa605c3c	Update hysteria2 realm	2026-08-04 21:47:48 +08:00
世界	5de13ebd2b	Add hysteria2 realm service and support	2026-08-04 21:47:48 +08:00
macronut	74d7479e72	Add more spoof method ... Signed-off-by: macronut <4027187+macronut@users.noreply.github.com>	2026-08-04 21:47:48 +08:00
世界	4862ed9ea2	Allow customizing TUN DNS mode and hijack interface DNS by default	2026-08-04 21:47:48 +08:00
世界	ac5c4009ec	dns: Add mDNS server	2026-08-04 21:47:48 +08:00
世界	1c33d36a8b	dns: Add preferred_by rule item	2026-08-04 21:47:48 +08:00
世界	fc277e144e	dns: Add neighbor-based hostname resolution to local server	2026-08-04 21:47:48 +08:00
世界	db1bb5e62a	dns: Add timeout configuration	2026-08-04 21:47:48 +08:00
世界	9006301fc9	ssh: Add cipher, MAC, and key exchange configuration	2026-08-04 21:47:48 +08:00
nekohasekai	e5c7ff6812	Add Windows TLS engine	2026-08-04 21:47:48 +08:00
世界	6044d7b0d3	Add ACME profile support for IP address certificates	2026-08-04 21:47:48 +08:00
世界	61af493664	Add search domain support for Tailscale DNS	2026-08-04 21:47:48 +08:00
世界	7e22bf07db	Reject pure-IP rule-set references without match_response ... DNS rules referencing rule-sets that contain only ip_cidr predicates silently stopped matching when legacy DNS mode was disabled, because the IP-CIDR branch cannot match against an in-flight DNS query. The existing validation intentionally let every rule_set through on the premise that mixed sets still work via their non-IP branches, which is only true when such a branch exists. Track whether a rule-set carries any non-IP-CIDR predicate and reject pure-IP references the same way bare ip_cidr fields are already rejected.	2026-08-04 21:47:48 +08:00
世界	7c41e135f6	Add TLS spoof support	2026-08-04 21:47:48 +08:00