Cuong Manh Le b6d5abfae8 cli: hold NAT64 discovery while the OS resolver predates a network change ...

After a network change, the OS resolver keeps the previous network's
nameservers until a read finds the new ones. In Standard mode that
usually waits for the recovery to remove ctrld's DNS settings: while
127.0.0.1 is configured, the system reports nothing else, and on macOS
an RDNSS-only IPv6 network has no other source. macOS resolves
ipv4only.arpa through ctrld right after the change to discover the
NAT64 prefix; a fast SERVFAIL from the stale set ends that discovery,
macOS never starts its CLAT, and an IPv4-only upstream never recovers.

On every accepted network change, on all platforms and in both Standard
and intercept mode, mark the OS resolver stale and read the nameservers
once before the re-bootstrap, without the scutil retry loop. While the
set is stale, a failed ipv4only.arpa AAAA lookup gets no reply, so the
host retries it. A read that finds nameservers clears the mark, and the
mark expires after 30s.

Network-change recovery also re-reads the nameservers right after the
reset and then at 1s, 2s, 5s and every 30s while it waits, for networks
that publish their resolvers late.

2026-10-20 17:23:47 +07:00

..

winres

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00

ad_os_lookup_test.go

fix(cli): mark AD lookups on the bypass and OS retry paths

2026-10-20 17:17:54 +07:00

ad_others.go

all: use local resolver for ADDC

2025-01-24 14:54:20 +07:00

ad_windows_test.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

ad_windows.go

Including system metadata when posting to utility API

2025-12-18 17:10:39 +07:00

api_maintenance_review_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_maintenance_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_maintenance.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

api_reload_shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

cgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

change_logger_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

change_logger.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

cli_intercept_listener_test.go

cmd/cli: preserve fallback listener port across reload in DNS intercept

2026-07-28 16:11:37 +07:00

cli_preflight_test.go

Send full host metadata on managed startup

2026-10-20 17:23:47 +07:00

cli_provision_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

cli_test.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

cli.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

commands_cleanup_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

commands_diag_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_diag.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands_start_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

commands.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

conn.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

control_client.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server_tail_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

control_server.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

dns64_dnssec_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns64_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns64.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_config_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_config.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_darwin_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_darwin.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

dns_intercept_ignored_change_windows_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

dns_intercept_lifecycle_windows_test.go

dns_intercept: don't write a GP sibling on failed NRPT handback

2026-09-28 16:45:45 +07:00

dns_intercept_others.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

dns_intercept_settle_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

dns_intercept_settle.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

dns_intercept_windows.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

dns_proxy_sampling_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

dns_proxy_test.go

darwin: route Zscaler's DNS echo name through the OS resolver

2026-09-28 16:45:03 +07:00

dns_proxy.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

dns_reset_missing_iface_test.go

test(cli): cover the DNS reset failure paths through the real code

2026-09-28 16:50:50 +07:00

dns_target_darwin_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_darwin.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_dhcp_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_diagnostic_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_diagnostic_test.go

Scope OS-only recovery and retain DNS-target diagnostics

2026-09-28 16:52:27 +07:00

dns_target_diagnostic.go

Scope OS-only recovery and retain DNS-target diagnostics

2026-09-28 16:52:27 +07:00

dns_target_filter_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_integration_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_ipv6only_darwin_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_ipv6only_reader_test.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_native_capture_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_darwin_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_darwin.go

fix(cli): set the Intercept DNS target on IPv6-only networks before CLAT starts

2026-10-20 17:23:47 +07:00

dns_target_native_reader_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_native_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

dns_target_native.go

fix(cli): accept IPv4 link-local as no usable IPv4 on IPv6-only networks

2026-10-20 17:23:47 +07:00

dns_target_ownership_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_service_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target_service.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

dns_target_stub.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

dns_target_test.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns_target_usb_darwin_test.go

macOS: use the networksetup service name for USB CLAT targets

2026-09-28 16:55:27 +07:00

dns_target.go

dns intercept: handle DNS-less networks and canceled-recovery state leak

2026-09-01 11:08:13 +07:00

dns.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

force_reload_lifetime_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

hostname_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

hostname.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

intercept_listener_linux_test.go

test(cli): bind the explicit intercept listener test to its own ports

2026-10-20 17:23:47 +07:00

intercept_mode_config_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_mode_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_mode.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

intercept_probe.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

intercept_target.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

internal_domains_fallback_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains_review_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_domains.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

internal_log_shutdown_test.go

test(cli): verify closed log files portably on Windows

2026-09-28 16:52:10 +07:00

library_retry_test.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

library.go

all: keep the first-attempt error when the direct-ip fallback also fails

2026-08-21 14:49:58 +07:00

listener_5353_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_5353_target_darwin_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_5353_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

listener_intercept_mode_test.go

fix(cli): treat explicit intercept-mode off as final in listener setup

2026-08-22 01:34:48 +07:00

listener_shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

log_budget_apply_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_budget_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_budget.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_file_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_file.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_header_test.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

log_header.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_journal_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_journal.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_path_rotation_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_path.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_reader_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

log_reader.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_send_audit_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_darwin_test.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

log_send_darwin.go

fix(cli): enable macOS log-send socket with a Control D custom config

2026-10-20 17:23:47 +07:00

log_send_linux.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_listener_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_other.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_startup_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_transport_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_unix_test.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_send.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

log_setup_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

log_tail_follow.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_tail_test.go

Add log tail command for live log streaming

2026-03-25 13:58:44 +07:00

log_writer_silent_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

log_writer_test.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

log_writer.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

loop_test.go

cmd/cli: improving loop guard test

2023-12-13 14:53:29 +07:00

loop.go

fix(cli): bound the DNS loop check probe by upstream timeout

2026-09-28 16:52:51 +07:00

main_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

main.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

metadata_scope_test.go

Send full host metadata on managed startup

2026-10-20 17:23:47 +07:00

metrics.go

security: default metrics server to loopback

2026-08-21 14:48:20 +07:00

net_darwin_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

net_darwin.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

net_linux_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_linux.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_windows_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

net_windows.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_delta_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_delta.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_events_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_events.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_manager_linux.go

cmd/cli: use better approach for detecting NetworkManager

2023-09-22 18:42:21 +07:00

network_manager_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

network_monitor_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

network_service_order_test.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

network_service_order.go

macOS: share network service-order parsing

2026-09-28 16:55:42 +07:00

network_shutdown_test.go

test(cli): keep the indefinite recovery wait test off the host's DNS

2026-10-20 17:23:47 +07:00

network_snapshot_prog_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_snapshot_prog.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

network_snapshot_test.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_snapshot.go

fix(cli): fix three log journal defects and test Windows with the race detector

2026-10-06 14:52:42 +07:00

network_source_error_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_source_state_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

network_transition_concurrency_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_reordered_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_review_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

network_transition_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

network_transition.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

nextdns.go

cmd/cli: fix wrong generated config for nextdns resolver

2023-11-16 20:55:39 +07:00

nocgo.go

cmd/cli: support nocgo version for upgrade command

2025-02-18 20:25:13 +07:00

nrpt_external_gp_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp_windows_test.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_external_gp.go

windows: adopt GP-managed NRPT catch-all

2026-08-21 14:46:44 +07:00

nrpt_handback_windows_test.go

dns_intercept: don't write a GP sibling on failed NRPT handback

2026-09-28 16:45:45 +07:00

nrpt_recovery_limiter_windows_test.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

nrpt_recovery_limiter_windows.go

Add Windows NRPT recovery circuit breaker

2026-07-14 01:12:37 +07:00

os_darwin.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_freebsd.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

os_linux_test.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_linux.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

os_others.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

os_resolver_stale_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

os_resolver_stale.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

os_windows_test.go

cmd/cli: get static DNS using syscall

2024-12-19 21:34:37 +07:00

os_windows.go

feat: add Windows NRPT and WFP DNS interception

2026-03-03 14:29:09 +07:00

pf_diagnostic_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_darwin.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_log_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_log.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_diagnostic.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_probe_darwin_test.go

macOS: gate DNS-target fallback on native CLAT and diagnose IPv6 blocking

2026-09-28 16:55:15 +07:00

pf_probe_test.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

pf_probe.go

macOS: repair network recovery and improve diagnostics

2026-09-28 16:45:33 +07:00

pf_ruleset_test.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

pf_ruleset.go

fix: validate pf state before stabilization

2026-08-21 14:45:56 +07:00

pf_state_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

pf_state_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

pf_state.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

prog_darwin.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_freebsd.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

prog_intercept_fallback_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

prog_linux_test.go

cmd/cli: fix systemd-networkd-wait-online blocks ctrld starts

2024-05-09 18:39:30 +07:00

prog_linux.go

Add mobile sandbox optimizations for v1.5.3

2026-08-05 00:39:42 +07:00

prog_others.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog_test.go

fix: back off unroutable IPv6 DoH upstream health-check spam

2026-07-14 01:12:34 +07:00

prog_windows.go

cmd/cli: add DNS as ctrld service dependency

2025-02-26 00:44:13 +07:00

prog.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

prometheus.go

cmd/cli: write new config file on reload

2024-08-07 15:51:11 +07:00

provision_boundary_guard_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_input_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

provision_result_test.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

provision_result.go

feat(cli): keep serving DNS through Control D API maintenance

2026-10-20 17:17:54 +07:00

provision_terminal_paths_test.go

feat(cli): port provisioning hardening to v1.0

2026-09-28 16:44:51 +07:00

query_error_sampler_test.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

query_error_sampler.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

query_health_prog_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

query_health_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

query_health.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_events_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_os_refresh_test.go

cli: hold NAT64 discovery while the OS resolver predates a network change

2026-10-20 17:23:47 +07:00

recovery_scope_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

recovery_skip_test.go

test(cli): take the upload time bound before reading the upload

2026-10-06 14:53:33 +07:00

recovery_state_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

recovery_state.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

redacted_args_test.go

test(cli): hold the intercept upgrade check line itself to no secrets

2026-10-20 17:23:47 +07:00

reload_others.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

reload_windows.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

resolvconf_darwin.go

cmd/cli: fix issue with editing /etc/resolv.conf directly on Darwin

2024-08-07 15:54:20 +07:00

resolvconf_not_darwin_unix.go

feat(cli): add opt-in macOS unprivileged log-send socket

2026-10-20 17:23:47 +07:00

resolvconf_windows.go

cmd/cli: watch resolv.conf on all unix platforms

2024-02-22 18:15:36 +07:00

resolvconf.go

remove leaking logic in favor of recovery logic.

2025-02-10 18:55:36 +07:00

restore_lock_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

route_darwin_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

route_darwin.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

route_others.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

search_domains_unix.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

search_domains_windows.go

all: preserve search domains settings

2025-05-15 17:00:59 +07:00

self_delete_others.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_delete_windows.go

cmd/cli: make --cleanup removing more files

2024-08-07 15:51:11 +07:00

self_kill_others.go

cmd/cli: ensure DNS goroutines terminated before self-uninstall

2024-08-16 13:50:11 +07:00

self_kill_unix.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_others.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

self_upgrade_windows.go

cmd/cli: handle stop signal from service manager

2025-03-26 23:18:36 +07:00

sema.go

cmd: allow import/running ctrld as library

2023-08-15 18:22:38 +07:00

service_args_darwin_test.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

service_args_darwin.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_args_others.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_args_windows_test.go

Apply managed DNS mode in the macOS package

2026-08-21 15:12:32 +07:00

service_args_windows.go

cli: default to dns intercept mode for new desktop installations

2026-10-20 17:23:47 +07:00

service_image_path_others.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path_windows.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_image_path.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_others.go

feat(cli): keep a log journal on disk with file headers and an upload limit

2026-09-28 16:47:40 +07:00

service_status_test.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_status.go

cmd/cli: report whether ctrld finished starting up, not just what SCM thinks

2026-08-21 14:50:27 +07:00

service_test.go

feat(cli): add stable provisioning failure codes for manual and MDM installs

2026-08-21 14:52:02 +07:00

service_windows_test.go

cmd/cli: check local DNS using Windows API

2024-12-19 21:34:21 +07:00

service_windows.go

fix: close handle leak in hasLocalDnsServerRunning()

2026-03-25 13:58:24 +07:00

service.go

pkg: port managed DNS mode review fixes

2026-09-01 11:03:13 +07:00

shutdown_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

stop_control_server_test.go

fix(cli): stop the control server when the service stop is accepted

2026-10-20 17:23:47 +07:00

suspend_detector_test.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

suspend_detector.go

fix(darwin): probe interception after the host wakes

2026-09-28 16:40:49 +07:00

tailscale_localapi_darwin_test.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi_darwin.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi_others.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_localapi.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_routes_test.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tailscale_routes.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

tunnel_owner_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

tunnel_owner.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

uninstall_invalid_test.go

fix: restore DNS during invalid-device uninstall

2026-07-28 16:12:36 +07:00

upgrade_rollback_test.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upgrade_rollback.go

cmd/cli: stop the replacement before rolling its binary back

2026-08-21 14:50:11 +07:00

upstream_monitor_test.go

cli: add network fallback and explicit-only Internal Domain modes

2026-10-06 14:53:19 +07:00

upstream_monitor.go

fix(cli): carry the review fixes of the master port to v1.0

2026-09-28 16:51:55 +07:00

upstream_probe_journal_test.go

test(cli): scope probe journal assertions to their own log lines

2026-09-28 16:53:02 +07:00

upstream_retirement_test.go

fix(cli): release runtime resources across startup and shutdown

2026-09-28 16:49:42 +07:00

vpn_dns_convergence_test.go

Harden DNS64, VPN routing and DNS recovery ownership

2026-09-28 16:56:04 +07:00

vpn_dns_test.go

feat(cli): put the network state of the host in the log journal

2026-09-28 16:49:05 +07:00

vpn_dns.go

feat(cli): route Tailscale Split DNS and App Connector domains in macOS intercept mode

2026-10-20 17:23:47 +07:00

winres_windows.go

all: include file information in Windows builds

2024-02-07 14:40:18 +07:00