ctrld

CalvinBackup/ctrld

Fork 0

mirror of https://github.com/Control-D-Inc/ctrld.git synced 2026-09-04 13:36:35 +02:00

Commit Graph

Select branches

Hide Pull Requests

add-missing-commits

fix-doc-links

fix-missing-build-script

issue-44

main

mobile-optimizations-v1.5.3

mobile-optimizations-v1.5.4

release-branch-v1.2.1

release-branch-v1.3.0

release-branch-v1.3.1

release-branch-v1.3.10

release-branch-v1.3.11

release-branch-v1.3.2

release-branch-v1.3.3

release-branch-v1.3.4

release-branch-v1.3.5

release-branch-v1.3.8

release-branch-v1.3.9

release-branch-v1.4.5

release-branch-v1.4.7

release-branch-v1.4.8

release-branch-v1.4.9

release-branch-v1.5.0

release-branch-v2.0.0

update-readme

v1.0

#1

#10

#103

#11

#113

#13

#135

#137

#138

#14

#144

#145

#155

#157

#157

#16

#169

#17

#171

#179

#182

#194

#2

#20

#201

#204

#204

#209

#218

#225

#225

#230

#231

#231

#233

#239

#250

#254

#257

#26

#264

#266

#266

#268

#276

#28

#281

#281

#285

#295

#3

#301

#306

#31

#314

#316

#317

#318

#323

#327

#329

#329

#330

#332

#37

#38

#39

#4

#41

#42

#5

#51

#57

#6

#68

#73

#77

#78

#83

#93

v1.0.0

v1.0.1

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.1

v1.3.0

v1.3.1

v1.3.10

v1.3.11

v1.3.2

v1.3.3

v1.3.4

v1.3.5

v1.3.6

v1.3.7

v1.3.8

v1.3.9

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.4.8

v1.4.9

v1.5.0

v1.5.1

v1.5.2

v1.5.3

v1.5.4

v1.5.5

v1.5.6

v1.5.7

c48220a404 docs: complete the provisioning failure runbook and canary matrix release-branch-v2.0.0 Anthony Wong 2026-09-03 22:24:18 +00:00
dc39073a55 feat(pkg): classify postinstall failures and test them in ci Anthony Wong 2026-09-03 21:58:45 +00:00
e8e04ae094 feat(cli): add ctrld diag for provisioning support Anthony Wong 2026-09-03 16:21:42 +00:00
0f821a7907 feat(cli): classify every provisioning failure with stable codes Anthony Wong 2026-09-03 16:00:11 +00:00
dd77d865b6 dns proxy: port DNS64 synthesis to master Dev Scribe 2026-09-02 09:51:27 +00:00
d8994cc7d8 Rename ctrld v2.0.0 to ctrld-client Cuong Manh Le 2026-08-27 17:09:04 +07:00
80d1acdfd5 dns intercept: port DNS-less network recovery to master Dev Scribe 2026-09-01 03:57:53 +00:00
3fa03d92d6 Merge pull request #332 from Control-D-Inc/release-branch-v1.5.7 v1.5.7 v1.0 Cuong Manh Le 2026-09-02 06:21:55 +07:00
8013bb72d2 dns intercept: handle DNS-less networks and canceled-recovery state leak Dev Scribe 2026-09-01 03:57:53 +00:00
d2aa155ff3 pkg: port managed DNS mode review fixes Dev Scribe 2026-08-21 14:54:40 -04:00
f96868c266 all: permit ctrld's own endpoints in Firewall Mode Cuong Manh Le 2026-08-24 16:52:03 +07:00
4113064680 all: apply the organization's allowed destination IPs in Firewall Mode Cuong Manh Le 2026-08-17 21:54:54 +07:00
f8f66609da Merge pull request #330 from Control-D-Inc/release-branch-v1.5.6 v1.5.6 Cuong Manh Le 2026-08-24 23:26:42 +07:00
f0b60f3efa pkg: address managed DNS mode review feedback Dev Scribe 2026-08-21 14:54:40 -04:00
47dd64b901 fix(cli): treat explicit intercept-mode off as final in listener setup Anthony Wong 2026-08-21 09:56:45 -04:00
5eb2db549b pkg: apply managed DNS mode in the macOS package Dev Scribe 2026-08-21 08:07:19 +00:00
a40eb70ce8 feat(cli): add stable provisioning failure codes Anthony Wong 2026-08-20 15:51:32 +00:00
0dde645a8f Bump bump insomniacslk/dhcp to c76316d Cuong Manh Le 2026-08-17 15:54:04 +07:00
fffa621797 security: default metrics server to loopback Codescribe 2026-03-28 20:35:23 -04:00
0f310594b0 Redact provision token in logs Codescribe 2026-03-28 20:37:09 -04:00
d78e9bcf5b fix(cli): treat explicit intercept-mode off as final in listener setup Anthony Wong 2026-08-21 09:56:45 -04:00
30acb846ca Bump staticcheck-action to v1.4.1 Cuong Manh Le 2026-08-21 15:17:43 +07:00
6615e431dc Apply managed DNS mode in the macOS package Dev Scribe 2026-08-21 08:07:19 +00:00
1f001a559a feat(cli): add stable provisioning failure codes for manual and MDM installs Anthony Wong 2026-08-20 15:51:17 +00:00
753d245029 Bump bump insomniacslk/dhcp to c76316d Cuong Manh Le 2026-08-17 15:51:25 +07:00
8ce3b7ca6c cmd/cli: log the config error that rejected a custom config Cuong Manh Le 2026-08-14 15:23:11 +07:00
084c785ed5 cmd/cli: report whether ctrld finished starting up, not just what SCM thinks Cuong Manh Le 2026-08-14 15:22:50 +07:00
5c9d3dec4e cmd/cli: stop the replacement before rolling its binary back Cuong Manh Le 2026-08-14 15:21:23 +07:00
2400f27962 all: keep the first-attempt error when the direct-ip fallback also fails Cuong Manh Le 2026-08-14 15:18:37 +07:00
4f730167d4 cmd/cli: bound API preflight by service lifetime Cuong Manh Le 2026-08-14 15:17:23 +07:00
b74937fcf3 security: default metrics server to loopback Codescribe 2026-03-28 20:35:23 -04:00
dfaad4a20d Redact provision token in logs Codescribe 2026-03-28 20:37:09 -04:00
d7c30b18ed fix(darwin): probe interception when stabilization finishes Cuong Manh Le 2026-08-10 17:53:38 +07:00
a828c8853a fix: retry macOS OS resolver with route-selected source Dev Scribe 2026-08-10 07:54:39 +00:00
4d026d836c windows: adopt GP-managed NRPT catch-all Dev Scribe 2026-08-10 07:48:17 +00:00
779fe015f0 fix: validate pf state before stabilization Dev Scribe 2026-08-06 11:51:55 +00:00
0db5ee44be cmd/cli: log the config error that rejected a custom config Cuong Manh Le 2026-08-12 15:43:40 +07:00
062dcbfb12 cmd/cli: report whether ctrld finished starting up, not just what SCM thinks Cuong Manh Le 2026-07-30 16:48:04 +07:00
88e076abe7 cmd/cli: stop the replacement before rolling its binary back Cuong Manh Le 2026-07-30 16:23:44 +07:00
052b057756 all: keep the first-attempt error when the direct-ip fallback also fails Cuong Manh Le 2026-07-30 16:15:34 +07:00
891d5d9821 cmd/cli: drop stale intercept enforcement at startup, before API bootstrap Cuong Manh Le 2026-07-30 15:49:09 +07:00
7de6298fa4 cmd/cli: scope ctrld's WFP objects to a dynamic session on Windows Cuong Manh Le 2026-07-30 15:28:41 +07:00
52b7aaab87 cmd/cli, internal/controld: bound API preflight by service lifetime Cuong Manh Le 2026-07-30 14:52:00 +07:00
e5f2506199 cmd/cli: fix linter Cuong Manh Le 2026-08-12 14:42:34 +07:00
0c8281c879 fix: ensure log and cache flags are processed during reload Cuong Manh Le 2025-11-04 20:03:04 +07:00
24fc9085fa fix: retry macOS OS resolver with route-selected source Dev Scribe 2026-08-10 07:54:39 +00:00
e4e1c0abb9 windows: adopt GP-managed NRPT catch-all Dev Scribe 2026-08-10 07:48:17 +00:00
58a5ea56af fix: validate pf state before stabilization Dev Scribe 2026-08-06 11:51:55 +00:00
246c1b9691 Merge pull request #327 from Control-D-Inc/release-branch-v1.5.5 v1.5.5 Cuong Manh Le 2026-08-05 01:37:29 +07:00
959f49dae3 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
171dd0a7e6 fix(firewall): support VM/container egress under macOS Firewall Mode Cuong Manh Le 2026-07-30 14:32:11 +07:00
8ebe911b1a Bump golang.org/x/text to v0.40.0 Cuong Manh Le 2026-07-28 16:15:14 +07:00
d38538f593 fix: partition DNS cache by EDNS Client Subnet Cuong Manh Le 2026-07-21 15:54:02 +07:00
737fc79b58 fix: harden DoH oversized-body tests against server write timing Cuong Manh Le 2026-07-16 21:53:23 +07:00
fa074f1f5e fix: count DoQ/UDP test server call before writing reply Cuong Manh Le 2026-07-15 22:48:39 +07:00
c596ef586b fix: skip internal logging in silent mode Cuong Manh Le 2026-07-15 00:58:58 +07:00
a4cfd4e479 cmd/cli: discard upstream answers whose question mismatches the request Cuong Manh Le 2026-07-14 03:45:19 +07:00
b79098658a fix: restore DNS during invalid-device uninstall Dev Scribe 2026-07-04 15:56:26 -04:00
d29e7d131e fix: wrong DoQ resolver rewriting upstream responses with SetReply Cuong Manh Le 2026-07-13 20:52:57 +07:00
836c9ccf12 fix: treat 464XLAT CLAT source as local, not WAN Cuong Manh Le 2026-07-09 16:59:54 +07:00
53d3d3d44a cmd/cli: preserve fallback listener port across reload in DNS intercept Cuong Manh Le 2026-07-08 15:00:23 +07:00
cbef8b911c fix: partition DNS cache by EDNS Client Subnet Cuong Manh Le 2026-07-21 15:54:02 +07:00
06238e5b12 Bump golang.org/x/text to v0.40.0 Cuong Manh Le 2026-07-22 21:54:21 +07:00
8ffe8d4aaf fix: harden DoH oversized-body tests against server write timing Cuong Manh Le 2026-07-16 21:54:50 +07:00
19b222f6a8 fix: count DoQ/UDP test server call before writing reply Cuong Manh Le 2026-07-15 22:52:18 +07:00
c43739e42d fix: restore v1 intercept parity on master Dev Scribe 2026-07-15 12:28:08 -04:00
7f3d332b64 cmd/cli: discard upstream answers whose question mismatches the request Cuong Manh Le 2026-07-14 03:45:19 +07:00
9cf8bc3b5b fix: wrong DoQ resolver rewriting upstream responses with SetReply Cuong Manh Le 2026-07-13 20:52:57 +07:00
265573c744 fix: restore DNS during invalid-device uninstall Dev Scribe 2026-07-04 15:56:26 -04:00
69340d151e added missing func. mobile-optimizations-v1.5.4 Ginder Singh 2026-07-02 15:21:08 -04:00
1688ff61e9 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
d7f43ea4bf Merge pull request #323 from Control-D-Inc/release-branch-v1.5.4 v1.5.4 Cuong Manh Le 2026-07-14 21:06:20 +07:00
41ca69849a Add Windows NRPT recovery circuit breaker Dev Scribe 2026-07-09 05:54:32 -04:00
0d8df38dc1 fix: back off unroutable IPv6 DoH upstream health-check spam Cuong Manh Le 2026-06-30 14:47:33 +07:00
3ef17bc5b9 fix: back off macOS pf watchdog exec storms Dev Scribe 2026-06-30 04:22:50 -04:00
5ef0a59081 cmd/cli: preserve fallback listener port across reload in DNS intercept Cuong Manh Le 2026-07-08 15:00:23 +07:00
3226c2d0e2 Port NRPT recovery limits to master Dev Scribe 2026-07-10 03:05:17 -04:00
eb8756bbe5 fix: treat 464XLAT CLAT source as local, not WAN Cuong Manh Le 2026-07-09 16:59:54 +07:00
ff14fc8ac9 fix: back off unroutable IPv6 DoH upstream health-check spam Cuong Manh Le 2026-06-30 14:47:33 +07:00
8948fa402b fix: back off macOS pf watchdog exec storms Dev Scribe 2026-06-30 04:22:50 -04:00
8330049b66 feat: add firewall mode DNS-resolved IP allowlist Codescribe 2026-06-24 03:38:19 -04:00
2e3e5a67e1 added missing func. mobile-optimizations-v1.5.3 Ginder Singh 2026-07-02 15:21:08 -04:00
8704db2476 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
9eb7067fbe Upgrade quic-go to v0.59.1 Cuong Manh Le 2026-06-22 17:04:19 +07:00
c1d3686f9a fix: stop self-upgrade tests from fork-bombing the windows test runner Cuong Manh Le 2026-06-15 15:50:12 +07:00
9399f4590b fix: refresh macOS VPN DNS after pf stabilization Dev Scribe 2026-06-12 07:50:20 -04:00
a4bc23d17e fix: allow intercept fallback for default listener Codescribe 2026-06-04 19:35:52 -04:00
7a8450cc40 fix: flush pf states after forced DNS intercept reload Codescribe 2026-06-04 15:49:22 -04:00
5ccbf63e58 test: isolate VPN DNS settling tests from host adapters Cuong Manh Le 2026-06-08 15:31:12 +07:00
5bf26da585 Merge pull request #318 from Control-D-Inc/release-branch-v1.5.3 v1.5.3 Cuong Manh Le 2026-06-22 14:40:36 +07:00
a5d536ab79 Upgrade quic-go to v0.59.1 Cuong Manh Le 2026-06-16 15:17:11 +07:00
735590d244 fix: allow intercept fallback for default listener Codescribe 2026-06-04 19:35:52 -04:00
18f01baa01 fix: flush pf states after forced DNS intercept reload Codescribe 2026-06-04 15:49:22 -04:00
723c7827ba fix: stop self-upgrade tests from fork-bombing the windows test runner Cuong Manh Le 2026-06-15 15:50:12 +07:00
1e1c998c89 Refresh macOS VPN DNS after pf stabilization Dev Scribe 2026-06-11 16:52:44 +00:00
da454db8ef docker: update Dockerfile to use bookworm Cuong Manh Le 2026-05-26 15:43:39 +07:00
3fe9b27fb4 fix(doh,doq): reject oversized upstream DNS responses Cuong Manh Le 2026-05-25 18:12:09 +07:00
35455eb0b9 fix(doq): share QUIC transport, close send side before read (RFC 9250) Cuong Manh Le 2026-05-14 21:01:29 +07:00
f1309121ae doq: validate DNS-over-QUIC response framing Cuong Manh Le 2026-05-11 18:08:12 +07:00
06668a2b6c cmd/cli: rate-limit PIN brute-force on control socket Cuong Manh Le 2026-05-08 16:12:49 +07:00

1 2 3 4 5 ...