Cuong Manh Le 4b665dd504 cli: renew upstream connections after a sleep, and retry before the plaintext fallback ...

After a wake or a network change, a query to an encrypted upstream can
ride a connection opened before the sleep or on the previous network.
It times out there, and the query falls back to the OS resolver, which
sends it in plaintext on port 53, although a new connection would be
answered at once.

Every query now checks whether the host slept since the previous one,
and if so renews the upstream connections before it is sent. A sleep
shows as the wall clock moving ahead of a clock that stops while the
host sleeps: Go's monotonic clock on Linux and macOS, and the unbiased
interrupt time on Windows, where Go's monotonic clock keeps running.
This does not wait for netmon or a wake detector. A wake now also
re-bootstraps the upstreams.

Before the fallback, a query whose upstreams all failed is retried once
on fresh connections when the network epoch moved while it ran: a
network change or a wake was handled, or a sleep was found then.

2026-10-20 17:23:47 +07:00

..

winres

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00

ad_os_lookup_test.go

fix(cli): mark AD lookups on the bypass and OS retry paths

2026-10-20 17:17:54 +07:00

ad_others.go

all: use local resolver for ADDC

2025-01-24 14:54:20 +07:00

ad_windows_test.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

ad_windows.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

api_maintenance_review_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_maintenance_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_maintenance.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_reload_shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

awake_clock_others.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

awake_clock_test.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

awake_clock_windows_test.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

awake_clock_windows.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

cgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

change_logger_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

change_logger.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

cli_intercept_listener_test.go

cmd/cli: preserve fallback listener port across reload in DNS intercept

2026-07-28 16:11:37 +07:00

cli_preflight_test.go

Send full host metadata on managed startup

2026-10-20 17:23:47 +07:00

cli_provision_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

cli_test.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

cli.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

commands_cleanup_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

commands_diag_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_diag.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_start_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

conn.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

control_client.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server_tail_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

dns64_dnssec_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns64_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns64.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_config_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_darwin_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_darwin.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

dns_intercept_ignored_change_windows_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

dns_intercept_lifecycle_windows_test.go

dns_intercept: don't write a GP sibling on failed NRPT handback

2026-09-28 16:45:45 +07:00

dns_intercept_others.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

dns_intercept_settle_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_settle.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

dns_intercept_windows.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

dns_proxy_sampling_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

dns_proxy_test.go

darwin: route Zscaler's DNS echo name through the OS resolver

2026-09-28 16:45:03 +07:00

dns_proxy.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

dns_reset_missing_iface_test.go

test(cli): cover the DNS reset failure paths through the real code

2026-09-28 16:50:50 +07:00

dns_target_darwin_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_darwin.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_dhcp_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_diagnostic_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_diagnostic_test.go

Scope OS-only recovery and retain DNS-target diagnostics

2026-09-28 16:52:27 +07:00

dns_target_diagnostic.go

Scope OS-only recovery and retain DNS-target diagnostics

2026-09-28 16:52:27 +07:00

dns_target_filter_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_integration_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_ipv6only_darwin_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_ipv6only_reader_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_native_capture_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_darwin_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_darwin.go

fix(cli): set the Intercept DNS target on IPv6-only networks before CLAT starts

2026-10-20 17:23:47 +07:00

dns_target_native_reader_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_native.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_ownership_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_service_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_service.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

dns_target_stub.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_usb_darwin_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

force_reload_lifetime_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

fresh_connection_test.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

fresh_connection.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

hostname_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

hostname.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

intercept_listener_linux_test.go

test(cli): bind the explicit intercept listener test to its own ports

2026-10-20 17:23:47 +07:00

intercept_mode_config_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_mode_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_mode.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_probe.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

intercept_target.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

internal_domains_fallback_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains_review_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_log_shutdown_test.go

test(cli): verify closed log files portably on Windows

2026-09-28 16:52:10 +07:00

library_retry_test.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

library.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

listener_5353_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_5353_target_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_5353_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_intercept_mode_test.go

fix(cli): treat explicit intercept-mode off as final in listener setup

2026-08-22 01:34:48 +07:00

listener_shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

log_budget_apply_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_budget_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_budget.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_file_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_file.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_header_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

log_header.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_journal_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_journal.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_path_rotation_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_path.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_reader_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_reader.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_send_audit_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_darwin_test.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

log_send_darwin.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

log_send_linux.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_listener_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_other.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_startup_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_transport_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_unix_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_setup_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_tail_follow.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_tail_test.go

Add log tail command for live log streaming

2026-03-25 13:58:44 +07:00

log_writer_silent_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

log_writer_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_writer.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

loop_test.go

cmd/cli: improving loop guard test

2023-12-13 14:53:29 +07:00

loop.go

fix(cli): bound the DNS loop check probe by upstream timeout

2026-09-28 16:52:51 +07:00

main_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

main.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

metadata_scope_test.go

Send full host metadata on managed startup

2026-10-20 17:23:47 +07:00

metrics.go

security: default metrics server to loopback

2026-08-21 14:48:20 +07:00

net_darwin_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

net_darwin.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

net_linux_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_linux.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_windows_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_windows.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_delta_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_delta.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_events_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_events.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

network_manager_linux.go

cmd/cli: use better approach for detecting NetworkManager

2023-09-22 18:42:21 +07:00

network_manager_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

network_monitor_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

network_service_order_test.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

network_service_order.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

network_shutdown_test.go

test(cli): keep the indefinite recovery wait test off the host's DNS

2026-10-20 17:23:47 +07:00

network_snapshot_prog_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_snapshot_prog.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_snapshot_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_snapshot.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_source_error_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_source_state_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

network_transition_concurrency_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_reordered_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_review_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

network_transition.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

nextdns.go

cmd/cli: fix wrong generated config for nextdns resolver

2023-11-16 20:55:39 +07:00

nocgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

nrpt_external_gp_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_handback_windows_test.go

dns_intercept: don't write a GP sibling on failed NRPT handback

2026-09-28 16:45:45 +07:00

nrpt_recovery_limiter_windows_test.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

nrpt_recovery_limiter_windows.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

os_darwin.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_freebsd.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_linux_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_linux.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

os_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_resolver_stale_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

os_resolver_stale.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

os_windows_test.go

cmd/cli: get static DNS using syscall

2024-12-19 21:34:37 +07:00

os_windows.go

feat: add Windows NRPT and WFP DNS interception

2026-03-03 14:29:09 +07:00

pf_diagnostic_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_darwin.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_log_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_log.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_probe_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_probe_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

pf_probe.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

pf_ruleset_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

pf_ruleset.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

pf_state_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

pf_state_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

pf_state.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

prog_darwin.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_freebsd.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_intercept_fallback_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

prog_linux_test.go

cmd/cli: fix systemd-networkd-wait-online blocks ctrld starts

2024-05-09 18:39:30 +07:00

prog_linux.go

Add mobile sandbox optimizations for v1.5.3

2026-08-05 00:39:42 +07:00

prog_others.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog_test.go

fix: back off unroutable IPv6 DoH upstream health-check spam

2026-07-14 01:12:34 +07:00

prog_windows.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog.go

cli: renew upstream connections after a sleep, and retry before the plaintext fallback

2026-10-20 17:23:47 +07:00

prometheus.go

cmd/cli: write new config file on reload

2024-08-07 15:51:11 +07:00

provision_boundary_guard_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_input_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_result_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

provision_result.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

provision_terminal_paths_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

query_error_sampler_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

query_error_sampler.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

query_health_prog_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

query_health_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

query_health.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_events_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_os_refresh_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

recovery_scope_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

recovery_skip_test.go

test(cli): take the upload time bound before reading the upload

2026-10-06 14:53:33 +07:00

recovery_state_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_state.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

redacted_args_test.go

test(cli): hold the intercept upgrade check line itself to no secrets

2026-10-20 17:23:47 +07:00

reload_others.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

reload_windows.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

resolvconf_darwin.go

cmd/cli: fix issue with editing /etc/resolv.conf directly on Darwin

2024-08-07 15:54:20 +07:00

resolvconf_not_darwin_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

resolvconf_windows.go

cmd/cli: watch resolv.conf on all unix platforms

2024-02-22 18:15:36 +07:00

resolvconf.go

remove leaking logic in favor of recovery logic.

2025-02-10 18:55:36 +07:00

restore_lock_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

route_darwin_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

route_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

route_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

search_domains_unix.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

search_domains_windows.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

self_delete_others.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_delete_windows.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_kill_others.go

cmd/cli: ensure DNS goroutines terminated before self-uninstall

2024-08-16 13:50:11 +07:00

self_kill_unix.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_others.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_windows.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

sema.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

service_args_darwin_test.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

service_args_darwin.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_args_others.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_args_windows_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

service_args_windows.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_image_path_others.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_windows.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_others.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

service_status_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_status.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_test.go

feat(cli): add stable provisioning failure codes for manual and MDM installs

2026-08-21 14:52:02 +07:00

service_windows_test.go

cmd/cli: check local DNS using Windows API

2024-12-19 21:34:21 +07:00

service_windows.go

fix: close handle leak in hasLocalDnsServerRunning()

2026-03-25 13:58:24 +07:00

service.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

stop_control_server_test.go

fix(cli): stop the control server when the service stop is accepted

2026-10-20 17:23:47 +07:00

suspend_detector_test.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

suspend_detector.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

tailscale_localapi_darwin_test.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi_darwin.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi_others.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_routes_test.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_routes.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tunnel_owner_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

tunnel_owner.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

uninstall_invalid_test.go

fix: restore DNS during invalid-device uninstall

2026-07-28 16:12:36 +07:00

upgrade_rollback_test.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upgrade_rollback.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upstream_monitor_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

upstream_monitor.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

upstream_probe_journal_test.go

test(cli): scope probe journal assertions to their own log lines

2026-09-28 16:53:02 +07:00

upstream_retirement_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

vpn_dns_convergence_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

vpn_dns_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

vpn_dns.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

winres_windows.go

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00