Cuong Manh Le 7da2507d19 cli: route organization Internal Domains from managed config ...

Consume resolver.split_dns and generate a policy rule per domain, plus its
wildcard, so a suffix and its subdomains route to the OS resolver when no
resolvers are given, or to the configured resolvers when they are.

Explicit resolvers are exclusive: when all of them fail the query returns
SERVFAIL rather than taking the OS catch-all or starting recovery, and it
skips VPN split routing, which is auto-detected. Excludes and custom config
keep precedence; a refresh regenerates the config, so removals leave no
stale rule or upstream.

2026-09-28 16:45:16 +07:00

..

winres

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00

ad_others.go

all: use local resolver for ADDC

2025-01-24 14:54:20 +07:00

ad_windows_test.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

ad_windows.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

cgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

cli_intercept_listener_test.go

cmd/cli: preserve fallback listener port across reload in DNS intercept

2026-07-28 16:11:37 +07:00

cli_preflight_test.go

cmd/cli: bound API preflight by service lifetime

2026-08-21 14:49:30 +07:00

cli_provision_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

cli_test.go

cmd/cli: write new config file on reload

2024-08-07 15:51:11 +07:00

cli.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

commands_diag_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_diag.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_start_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

conn.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

control_client.go

Add log tail command for live log streaming

2026-03-25 13:58:44 +07:00

control_server_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

control_server.go

cmd/cli: bound API preflight by service lifetime

2026-08-21 14:49:30 +07:00

dns64_test.go

dns proxy: DNS64 synthesis for IPv6-only networks without CLAT

2026-09-28 16:43:43 +07:00

dns64.go

dns proxy: DNS64 synthesis for IPv6-only networks without CLAT

2026-09-28 16:43:43 +07:00

dns_intercept_darwin_test.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

dns_intercept_darwin.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

dns_intercept_ignored_change_windows_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

dns_intercept_lifecycle_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

dns_intercept_others.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

dns_intercept_settle_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

dns_intercept_settle.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

dns_intercept_windows.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

dns_proxy_test.go

darwin: route Zscaler's DNS echo name through the OS resolver

2026-09-28 16:45:03 +07:00

dns_proxy.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

dns_target_darwin_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_darwin.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_filter_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_stub.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

hostname_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

hostname.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

intercept_mode_config_test.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

intercept_probe.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

internal_domains_review_test.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

internal_domains_test.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

internal_domains.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

library_retry_test.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

library.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

listener_intercept_mode_test.go

fix(cli): treat explicit intercept-mode off as final in listener setup

2026-08-22 01:34:48 +07:00

log_tail_test.go

Add log tail command for live log streaming

2026-03-25 13:58:44 +07:00

log_writer_silent_test.go

fix: skip internal logging in silent mode

2026-07-28 16:13:19 +07:00

log_writer_test.go

log: persist internal runtime logs to disk

2026-04-29 15:12:44 +07:00

log_writer.go

fix: skip internal logging in silent mode

2026-07-28 16:13:19 +07:00

loop_test.go

cmd/cli: improving loop guard test

2023-12-13 14:53:29 +07:00

loop.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

main_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

main.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

metrics.go

security: default metrics server to loopback

2026-08-21 14:48:20 +07:00

net_darwin.go

remove leaking timeout, fix blocking upstreams checks, leaking is per listener, OS resolvers are tested in parallel, reset is only done is os is down

2025-01-20 15:03:27 +07:00

net_linux.go

cmd/cli: implement valid interfaces map for all systems

2025-02-10 18:45:17 +07:00

net_others.go

cmd/cli: implement valid interfaces map for all systems

2025-02-10 18:45:17 +07:00

net_windows_test.go

cmd/cli: get physical interfaces using Windows WMI

2024-12-19 21:34:26 +07:00

net_windows.go

fix upgrade flow

2025-01-31 20:04:03 +07:00

network_manager_linux.go

cmd/cli: use better approach for detecting NetworkManager

2023-09-22 18:42:21 +07:00

network_manager_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

nextdns.go

cmd/cli: fix wrong generated config for nextdns resolver

2023-11-16 20:55:39 +07:00

nocgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

nrpt_external_gp_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_handback_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_recovery_limiter_windows_test.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

nrpt_recovery_limiter_windows.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

os_darwin.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_freebsd.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_linux_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_linux.go

Fix: Filter root domain from search domains on Linux

2025-11-12 15:14:40 +07:00

os_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_windows_test.go

cmd/cli: get static DNS using syscall

2024-12-19 21:34:37 +07:00

os_windows.go

feat: add Windows NRPT and WFP DNS interception

2026-03-03 14:29:09 +07:00

pf_ruleset_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

pf_ruleset.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

prog_darwin.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_freebsd.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_intercept_fallback_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

prog_linux_test.go

cmd/cli: fix systemd-networkd-wait-online blocks ctrld starts

2024-05-09 18:39:30 +07:00

prog_linux.go

Add mobile sandbox optimizations for v1.5.3

2026-08-05 00:39:42 +07:00

prog_others.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog_test.go

fix: back off unroutable IPv6 DoH upstream health-check spam

2026-07-14 01:12:34 +07:00

prog_windows.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog.go

cli: route organization Internal Domains from managed config

2026-09-28 16:45:16 +07:00

prometheus.go

cmd/cli: write new config file on reload

2024-08-07 15:51:11 +07:00

provision_boundary_guard_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_input_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_result_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_result.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_terminal_paths_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

recovery_state_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

recovery_state.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

reload_others.go

all: implement reload command

2023-11-06 20:01:03 +07:00

reload_windows.go

all: implement reload command

2023-11-06 20:01:03 +07:00

resolvconf_darwin.go

cmd/cli: fix issue with editing /etc/resolv.conf directly on Darwin

2024-08-07 15:54:20 +07:00

resolvconf_not_darwin_unix.go

cmd/cli: preserve search domains when reverting resolv.conf

2025-06-04 18:36:51 +07:00

resolvconf_windows.go

cmd/cli: watch resolv.conf on all unix platforms

2024-02-22 18:15:36 +07:00

resolvconf.go

remove leaking logic in favor of recovery logic.

2025-02-10 18:55:36 +07:00

search_domains_unix.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

search_domains_windows.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

self_delete_others.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_delete_windows.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_kill_others.go

cmd/cli: ensure DNS goroutines terminated before self-uninstall

2024-08-16 13:50:11 +07:00

self_kill_unix.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_others.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_windows.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

sema.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

service_args_darwin_test.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

service_args_darwin.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

service_args_others.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

service_args_windows_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

service_args_windows.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

service_image_path_others.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_windows.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_others.go

Resolve "OS upstream failure / wrong default route"

2025-02-24 18:36:08 +07:00

service_status_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_status.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_test.go

feat(cli): add stable provisioning failure codes for manual and MDM installs

2026-08-21 14:52:02 +07:00

service_windows_test.go

cmd/cli: check local DNS using Windows API

2024-12-19 21:34:21 +07:00

service_windows.go

fix: close handle leak in hasLocalDnsServerRunning()

2026-03-25 13:58:24 +07:00

service.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

suspend_detector_test.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

suspend_detector.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

uninstall_invalid_test.go

fix: restore DNS during invalid-device uninstall

2026-07-28 16:12:36 +07:00

upgrade_rollback_test.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upgrade_rollback.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upstream_monitor.go

fix: back off unroutable IPv6 DoH upstream health-check spam

2026-07-14 01:12:34 +07:00

vpn_dns_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

vpn_dns.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

winres_windows.go

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00