ctrld

CalvinBackup/ctrld

0 Fork 0

mirror of https://github.com/Control-D-Inc/ctrld.git synced 2026-10-12 01:58:46 +02:00

Commit Graph

Select branches

Hide Pull Requests

add-missing-commits

fix-doc-links

fix-missing-build-script

issue-44

main

mobile-optimizations-v1.5.3

mobile-optimizations-v1.5.4

release-branch-v1.2.1

release-branch-v1.3.0

release-branch-v1.3.1

release-branch-v1.3.10

release-branch-v1.3.11

release-branch-v1.3.2

release-branch-v1.3.3

release-branch-v1.3.4

release-branch-v1.3.5

release-branch-v1.3.8

release-branch-v1.3.9

release-branch-v1.4.5

release-branch-v1.4.7

release-branch-v1.4.8

release-branch-v1.4.9

release-branch-v1.5.0

release-branch-v2.0.0

update-readme

v1.0

#1

#10

#103

#11

#113

#13

#135

#137

#138

#14

#144

#145

#155

#157

#157/merge

#16

#169

#17

#171

#179

#182

#194

#2

#20

#201

#204

#204/merge

#209

#218

#225

#225/merge

#230

#231

#231/merge

#233

#239

#250

#254

#257

#26

#264

#266

#266/merge

#268

#276

#28

#281

#281/merge

#285

#295

#3

#301

#306

#31

#314

#316

#317

#318

#323

#327

#329

#330

#332

#335

#341

#343

#343/merge

#344

#347

#347/merge

#37

#38

#39

#4

#41

#42

#5

#51

#57

#6

#68

#73

#77

#78

#83

#93

v1.0.0

v1.0.1

v1.1.0

v1.1.1

v1.1.2

v1.1.3

v1.1.4

v1.2.0

v1.2.1

v1.3.0

v1.3.1

v1.3.10

v1.3.11

v1.3.2

v1.3.3

v1.3.4

v1.3.5

v1.3.6

v1.3.7

v1.3.8

v1.3.9

v1.4.0

v1.4.1

v1.4.2

v1.4.3

v1.4.4

v1.4.5

v1.4.6

v1.4.7

v1.4.8

v1.4.9

v1.5.0

v1.5.1

v1.5.2

v1.5.3

v1.5.4

v1.5.5

v1.5.6

v1.5.7

v1.5.8

779fe015f0 fix: validate pf state before stabilization Dev Scribe 2026-08-06 11:51:55 +00:00
0db5ee44be cmd/cli: log the config error that rejected a custom config Cuong Manh Le 2026-08-12 15:43:40 +07:00
062dcbfb12 cmd/cli: report whether ctrld finished starting up, not just what SCM thinks Cuong Manh Le 2026-07-30 16:48:04 +07:00
88e076abe7 cmd/cli: stop the replacement before rolling its binary back Cuong Manh Le 2026-07-30 16:23:44 +07:00
052b057756 all: keep the first-attempt error when the direct-ip fallback also fails Cuong Manh Le 2026-07-30 16:15:34 +07:00
891d5d9821 cmd/cli: drop stale intercept enforcement at startup, before API bootstrap Cuong Manh Le 2026-07-30 15:49:09 +07:00
7de6298fa4 cmd/cli: scope ctrld's WFP objects to a dynamic session on Windows Cuong Manh Le 2026-07-30 15:28:41 +07:00
52b7aaab87 cmd/cli, internal/controld: bound API preflight by service lifetime Cuong Manh Le 2026-07-30 14:52:00 +07:00
e5f2506199 cmd/cli: fix linter Cuong Manh Le 2026-08-12 14:42:34 +07:00
0c8281c879 fix: ensure log and cache flags are processed during reload Cuong Manh Le 2025-11-04 20:03:04 +07:00
24fc9085fa fix: retry macOS OS resolver with route-selected source Dev Scribe 2026-08-10 07:54:39 +00:00
e4e1c0abb9 windows: adopt GP-managed NRPT catch-all Dev Scribe 2026-08-10 07:48:17 +00:00
58a5ea56af fix: validate pf state before stabilization Dev Scribe 2026-08-06 11:51:55 +00:00
246c1b9691 Merge pull request #327 from Control-D-Inc/release-branch-v1.5.5 v1.5.5 Cuong Manh Le 2026-08-05 01:37:29 +07:00
959f49dae3 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
171dd0a7e6 fix(firewall): support VM/container egress under macOS Firewall Mode Cuong Manh Le 2026-07-30 14:32:11 +07:00
8ebe911b1a Bump golang.org/x/text to v0.40.0 Cuong Manh Le 2026-07-28 16:15:14 +07:00
d38538f593 fix: partition DNS cache by EDNS Client Subnet Cuong Manh Le 2026-07-21 15:54:02 +07:00
737fc79b58 fix: harden DoH oversized-body tests against server write timing Cuong Manh Le 2026-07-16 21:53:23 +07:00
fa074f1f5e fix: count DoQ/UDP test server call before writing reply Cuong Manh Le 2026-07-15 22:48:39 +07:00
c596ef586b fix: skip internal logging in silent mode Cuong Manh Le 2026-07-15 00:58:58 +07:00
a4cfd4e479 cmd/cli: discard upstream answers whose question mismatches the request Cuong Manh Le 2026-07-14 03:45:19 +07:00
b79098658a fix: restore DNS during invalid-device uninstall Dev Scribe 2026-07-04 15:56:26 -04:00
d29e7d131e fix: wrong DoQ resolver rewriting upstream responses with SetReply Cuong Manh Le 2026-07-13 20:52:57 +07:00
836c9ccf12 fix: treat 464XLAT CLAT source as local, not WAN Cuong Manh Le 2026-07-09 16:59:54 +07:00
53d3d3d44a cmd/cli: preserve fallback listener port across reload in DNS intercept Cuong Manh Le 2026-07-08 15:00:23 +07:00
cbef8b911c fix: partition DNS cache by EDNS Client Subnet Cuong Manh Le 2026-07-21 15:54:02 +07:00
06238e5b12 Bump golang.org/x/text to v0.40.0 Cuong Manh Le 2026-07-22 21:54:21 +07:00
8ffe8d4aaf fix: harden DoH oversized-body tests against server write timing Cuong Manh Le 2026-07-16 21:54:50 +07:00
19b222f6a8 fix: count DoQ/UDP test server call before writing reply Cuong Manh Le 2026-07-15 22:52:18 +07:00
c43739e42d fix: restore v1 intercept parity on master Dev Scribe 2026-07-15 12:28:08 -04:00
7f3d332b64 cmd/cli: discard upstream answers whose question mismatches the request Cuong Manh Le 2026-07-14 03:45:19 +07:00
9cf8bc3b5b fix: wrong DoQ resolver rewriting upstream responses with SetReply Cuong Manh Le 2026-07-13 20:52:57 +07:00
265573c744 fix: restore DNS during invalid-device uninstall Dev Scribe 2026-07-04 15:56:26 -04:00
69340d151e added missing func. mobile-optimizations-v1.5.4 Ginder Singh 2026-07-02 15:21:08 -04:00
1688ff61e9 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
d7f43ea4bf Merge pull request #323 from Control-D-Inc/release-branch-v1.5.4 v1.5.4 Cuong Manh Le 2026-07-14 21:06:20 +07:00
41ca69849a Add Windows NRPT recovery circuit breaker Dev Scribe 2026-07-09 05:54:32 -04:00
0d8df38dc1 fix: back off unroutable IPv6 DoH upstream health-check spam Cuong Manh Le 2026-06-30 14:47:33 +07:00
3ef17bc5b9 fix: back off macOS pf watchdog exec storms Dev Scribe 2026-06-30 04:22:50 -04:00
5ef0a59081 cmd/cli: preserve fallback listener port across reload in DNS intercept Cuong Manh Le 2026-07-08 15:00:23 +07:00
3226c2d0e2 Port NRPT recovery limits to master Dev Scribe 2026-07-10 03:05:17 -04:00
eb8756bbe5 fix: treat 464XLAT CLAT source as local, not WAN Cuong Manh Le 2026-07-09 16:59:54 +07:00
ff14fc8ac9 fix: back off unroutable IPv6 DoH upstream health-check spam Cuong Manh Le 2026-06-30 14:47:33 +07:00
8948fa402b fix: back off macOS pf watchdog exec storms Dev Scribe 2026-06-30 04:22:50 -04:00
8330049b66 feat: add firewall mode DNS-resolved IP allowlist Codescribe 2026-06-24 03:38:19 -04:00
2e3e5a67e1 added missing func. mobile-optimizations-v1.5.3 Ginder Singh 2026-07-02 15:21:08 -04:00
8704db2476 Add mobile sandbox optimizations for v1.5.3 Ginder Singh 2026-07-02 15:10:57 -04:00
9eb7067fbe Upgrade quic-go to v0.59.1 Cuong Manh Le 2026-06-22 17:04:19 +07:00
c1d3686f9a fix: stop self-upgrade tests from fork-bombing the windows test runner Cuong Manh Le 2026-06-15 15:50:12 +07:00
9399f4590b fix: refresh macOS VPN DNS after pf stabilization Dev Scribe 2026-06-12 07:50:20 -04:00
a4bc23d17e fix: allow intercept fallback for default listener Codescribe 2026-06-04 19:35:52 -04:00
7a8450cc40 fix: flush pf states after forced DNS intercept reload Codescribe 2026-06-04 15:49:22 -04:00
5ccbf63e58 test: isolate VPN DNS settling tests from host adapters Cuong Manh Le 2026-06-08 15:31:12 +07:00
5bf26da585 Merge pull request #318 from Control-D-Inc/release-branch-v1.5.3 v1.5.3 Cuong Manh Le 2026-06-22 14:40:36 +07:00
a5d536ab79 Upgrade quic-go to v0.59.1 Cuong Manh Le 2026-06-16 15:17:11 +07:00
735590d244 fix: allow intercept fallback for default listener Codescribe 2026-06-04 19:35:52 -04:00
18f01baa01 fix: flush pf states after forced DNS intercept reload Codescribe 2026-06-04 15:49:22 -04:00
723c7827ba fix: stop self-upgrade tests from fork-bombing the windows test runner Cuong Manh Le 2026-06-15 15:50:12 +07:00
1e1c998c89 Refresh macOS VPN DNS after pf stabilization Dev Scribe 2026-06-11 16:52:44 +00:00
da454db8ef docker: update Dockerfile to use bookworm Cuong Manh Le 2026-05-26 15:43:39 +07:00
3fe9b27fb4 fix(doh,doq): reject oversized upstream DNS responses Cuong Manh Le 2026-05-25 18:12:09 +07:00
35455eb0b9 fix(doq): share QUIC transport, close send side before read (RFC 9250) Cuong Manh Le 2026-05-14 21:01:29 +07:00
f1309121ae doq: validate DNS-over-QUIC response framing Cuong Manh Le 2026-05-11 18:08:12 +07:00
06668a2b6c cmd/cli: rate-limit PIN brute-force on control socket Cuong Manh Le 2026-05-08 16:12:49 +07:00
97e5e99b8d cmd/cli: use os.CreateTemp for symlink-safe temp file creation Cuong Manh Le 2026-05-08 15:34:23 +07:00
c54ff701bd internal/router/dnsmasq: use text/template instead of html/template Cuong Manh Le 2026-05-08 15:13:46 +07:00
33682e2312 all: explicit TLS MinVersion in tls.Config Cuong Manh Le 2026-05-08 15:03:28 +07:00
d629ecda33 Merge pull request #317 from Control-D-Inc/update-ci v1.5.2 Cuong Manh Le 2026-06-02 03:24:30 -04:00
87ddf03b90 .github/workflows: bump go and staticcheck version Cuong Manh Le 2026-06-02 14:20:05 +07:00
d49a4c67c9 Bump golang.org/x/net to v0.55.0 Cuong Manh Le 2026-05-25 17:28:22 +07:00
2c38ff74c3 Merge pull request #316 from Control-D-Inc/release-branch-v1.5.2 Cuong Manh Le 2026-06-02 03:08:55 -04:00
75e8447c75 test: isolate VPN DNS settling tests from host adapters Cuong Manh Le 2026-06-01 16:30:34 +07:00
4395efcb22 fix: stabilize Windows VPN DNS during adapter settling Codescribe 2026-05-25 06:08:46 -04:00
6c5489873b fix(windows): include domainless VPN DNS adapters in discovery Codescribe 2026-05-27 03:21:58 -04:00
f281466118 fix(doh,doq): port oversized response caps to master Cuong Manh Le 2026-05-25 18:12:09 +07:00
3c740b9693 fix: port Windows VPN DNS settling fix to master Codescribe 2026-05-27 03:08:02 -04:00
0d183feddb Bump golang.org/x/net to v0.55.0 Cuong Manh Le 2026-05-29 13:36:09 +07:00
e15ca5c466 docker: update Dockerfile to use bookworm Cuong Manh Le 2026-05-26 15:43:39 +07:00
7e6f88b4ed Merge pull request #301 from Control-D-Inc/release-branch-v1.5.1 v1.5.1 Cuong Manh Le 2026-05-25 07:08:15 -04:00
98ca63325f fix(doq): share QUIC transport, close send side before read (RFC 9250) Cuong Manh Le 2026-05-14 21:01:29 +07:00
7b360288ed doq: validate DNS-over-QUIC response framing Cuong Manh Le 2026-05-11 18:08:12 +07:00
65d3d468f7 Bump golang.org/x/net to v0.53.0 Cuong Manh Le 2026-05-11 14:18:16 +07:00
01490434a6 cmd/cli: rate-limit PIN brute-force on control socket Cuong Manh Le 2026-05-08 16:12:49 +07:00
a61677b6e4 cmd/cli: use os.CreateTemp for symlink-safe temp file creation Cuong Manh Le 2026-05-08 15:34:23 +07:00
8e2ef7ca65 all: explicit TLS MinVersion in tls.Config Cuong Manh Le 2026-05-08 15:03:28 +07:00
1735d3d55b cmd/cli: skip upstream.os healthcheck when WFP loopback protect enabled Codescribe 2026-05-06 04:47:34 -04:00
5dd5846cca cmd/cli: skip upstream.os healthcheck when WFP loopback protect enabled Cuong Manh Le 2026-04-30 22:58:30 +07:00
81aa6b237b dns_intercept: add WFP loopback protect for VPN block-outside-dns Codescribe 2026-04-29 04:42:12 -04:00
8abeeea4c3 log: persist internal runtime logs to disk Codescribe 2026-04-29 04:36:47 -04:00
b3c670b17e dns: fix recovery race condition during rapid network transitions Codescribe 2026-04-21 13:49:53 -04:00
70b45710e7 docs: improve common gotchas and non-obvious patterns Cuong Manh Le 2026-04-21 15:40:48 +07:00
2742669bc1 fix: prevent panic on network change during SetSelfIP Cuong Manh Le 2026-04-20 14:33:23 +07:00
a767ebdaa5 doq: use OpenStreamSync and retry on StreamLimitReachedError Cuong Manh Le 2026-04-10 14:56:43 +07:00
a92d20cef8 doq: configure QUIC keep-alive and retry on idle timeout Codescribe 2026-04-02 11:47:20 -04:00
a8821e6d00 fix(darwin): support non-standard listener port in intercept mode Codescribe 2026-04-01 07:15:40 -04:00
a3880beec2 docs: port IPv6 learnings and comment fixes to master Codescribe 2026-04-01 06:59:09 -04:00
d7124995d2 fix: bracket IPv6 addresses in VPN DNS upstream config Codescribe 2026-04-01 06:41:20 -04:00
86dafc432d Add log tail command for live log streaming Codescribe 2026-03-17 03:16:06 -04:00
ca8d07d3f5 fix(darwin): correct pf rules tests Cuong Manh Le 2026-03-03 15:39:57 +07:00

1 2 3 4 5 ...