[dependencies] Update golangci/golangci-lint-action action to v8

documentation: Bump version
Add firewalld compatibility for auto redirect
2025-07-24 06:54:08 +08:00 · 2025-07-07 10:57:00 +00:00 · 2025-07-07 18:56:29 +08:00 · 2025-07-07 18:56:29 +08:00 · 2025-07-07 14:12:43 +08:00 · 2025-07-07 14:08:49 +08:00
14 changed files with 70 additions and 48 deletions
--- a/.fpm_systemd
+++ b/.fpm_systemd
@ -16,7 +16,7 @@ release/config/sing-box.service=/usr/lib/systemd/system/sing-box.service
 release/config/sing-box@.service=/usr/lib/systemd/system/sing-box@.service
 release/config/sing-box.sysusers=/usr/lib/sysusers.d/sing-box.conf
 release/config/sing-box.rules=usr/share/polkit-1/rules.d/sing-box.rules
-release/config/sing-box-split-dns.xml=/usr/share/dbus-1/system.d/sing-box-split-dns.conf
+release/config/sing-box-dbus.xml=/usr/share/dbus-1/system.d/sing-box-dbus.conf

 release/completions/sing-box.bash=/usr/share/bash-completion/completions/sing-box.bash
 release/completions/sing-box.fish=/usr/share/fish/vendor_completions.d/sing-box.fish
--- a/.goreleaser.fury.yaml
+++ b/.goreleaser.fury.yaml
@ -59,8 +59,8 @@ nfpms:
        dst: /usr/lib/sysusers.d/sing-box.conf
      - src: release/config/sing-box.rules
        dst: /usr/share/polkit-1/rules.d/sing-box.rules
-      - src: release/config/sing-box-split-dns.xml
-        dst: /usr/share/dbus-1/system.d/sing-box-split-dns.conf
+      - src: release/config/sing-box-dbus.xml
+        dst: /usr/share/dbus-1/system.d/sing-box-dbus.conf

      - src: release/completions/sing-box.bash
        dst: /usr/share/bash-completion/completions/sing-box.bash
--- a/.goreleaser.yaml
+++ b/.goreleaser.yaml
@ -140,8 +140,8 @@ nfpms:
        dst: /usr/lib/sysusers.d/sing-box.conf
      - src: release/config/sing-box.rules
        dst: /usr/share/polkit-1/rules.d/sing-box.rules
-      - src: release/config/sing-box-split-dns.xml
-        dst: /usr/share/dbus-1/system.d/sing-box-split-dns.conf
+      - src: release/config/sing-box-dbus.xml
+        dst: /usr/share/dbus-1/system.d/sing-box-dbus.conf

      - src: release/completions/sing-box.bash
        dst: /usr/share/bash-completion/completions/sing-box.bash
--- a/clients/android
+++ b/clients/android
@ -1 +1 @@
-Subproject commit eb2e13a6f9a8c03a35ae672395ccab0a6bdcd954
+Subproject commit 7f1fa971e3c7bbc504c2bd455f4e813a562990cb
--- a/clients/apple
+++ b/clients/apple
@ -1 +1 @@
-Subproject commit ae5818ee5a24af965dc91f80bffa16e1e6c109c1
+Subproject commit f7883b0f3ec26c449cba26b3b1a692f070f5424d
--- a/dns/client.go
+++ b/dns/client.go
@ -195,8 +195,13 @@ func (c *Client) Exchange(ctx context.Context, transport adapter.DNSTransport, m
 		}
 	}*/
 	if responseChecker != nil {
-		addr, addrErr := MessageToAddresses(response)
-		if addrErr != nil || !responseChecker(addr) {
+		var rejected bool
+		if !(response.Rcode == dns.RcodeSuccess || response.Rcode == dns.RcodeNameError) {
+			rejected = true
+		} else {
+			rejected = !responseChecker(MessageToAddresses(response))
+		}
+		if rejected {
 			if c.rdrc != nil {
 				c.rdrc.SaveRDRCAsync(transport.Tag(), question.Name, question.Qtype, c.logger)
 			}
@ -420,7 +425,10 @@ func (c *Client) lookupToExchange(ctx context.Context, transport adapter.DNSTran
 	if err != nil {
 		return nil, err
 	}
-	return MessageToAddresses(response)
+	if response.Rcode != dns.RcodeSuccess {
+		return nil, RcodeError(response.Rcode)
+	}
+	return MessageToAddresses(response), nil
 }

 func (c *Client) questionCache(question dns.Question, transport adapter.DNSTransport) ([]netip.Addr, error) {
@ -428,7 +436,10 @@ func (c *Client) questionCache(question dns.Question, transport adapter.DNSTrans
 	if response == nil {
 		return nil, ErrNotCached
 	}
-	return MessageToAddresses(response)
+	if response.Rcode != dns.RcodeSuccess {
+		return nil, RcodeError(response.Rcode)
+	}
+	return MessageToAddresses(response), nil
 }

 func (c *Client) loadResponse(question dns.Question, transport adapter.DNSTransport) (*dns.Msg, int) {
@ -505,10 +516,7 @@ func (c *Client) loadResponse(question dns.Question, transport adapter.DNSTransp
 	}
 }

-func MessageToAddresses(response *dns.Msg) ([]netip.Addr, error) {
-	if response.Rcode != dns.RcodeSuccess {
-		return nil, RcodeError(response.Rcode)
-	}
+func MessageToAddresses(response *dns.Msg) []netip.Addr {
 	addresses := make([]netip.Addr, 0, len(response.Answer))
 	for _, rawAnswer := range response.Answer {
 		switch answer := rawAnswer.(type) {
@ -524,7 +532,7 @@ func MessageToAddresses(response *dns.Msg) ([]netip.Addr, error) {
 			}
 		}
 	}
-	return addresses, nil
+	return addresses
 }

 func wrapError(err error) error {
--- a/dns/transport/local/local.go
+++ b/dns/transport/local/local.go
@ -3,7 +3,6 @@ package local
 import (
 	"context"
 	"math/rand"
-	"net/netip"
 	"time"

 	"github.com/sagernet/sing-box/adapter"
@ -91,9 +90,9 @@ func (t *Transport) exchangeParallel(ctx context.Context, systemConfig *dnsConfi
 	startRacer := func(ctx context.Context, fqdn string) {
 		response, err := t.tryOneName(ctx, systemConfig, fqdn, message)
 		if err == nil {
-			var addresses []netip.Addr
-			addresses, err = dns.MessageToAddresses(response)
-			if err == nil && len(addresses) == 0 {
+			if response.Rcode != mDNS.RcodeSuccess {
+				err = dns.RcodeError(response.Rcode)
+			} else if len(dns.MessageToAddresses(response)) == 0 {
 				err = E.New(fqdn, ": empty result")
 			}
 		}
--- a/docs/changelog.md
+++ b/docs/changelog.md
@ -2,7 +2,19 @@
 icon: material/alert-decagram
 ---

-#### 1.12.0-beta.31
+#### 1.12.0-beta.33
+
+* Add firewalld compatibility for auto redirect
+* Fixes and improvements
+
+### 1.11.15
+
+* Fixes and improvements
+
+_We are temporarily unable to update sing-box apps on the App Store because the reviewer mistakenly found that we
+violated the rules (TestFlight users are not affected)._
+
+#### 1.12.0-beta.32

 * Improve tun performance on Apple platforms **1**
 * Fixes and improvements
--- a/go.mod
+++ b/go.mod
@ -28,13 +28,13 @@ require (
 	github.com/sagernet/gomobile v0.1.7
 	github.com/sagernet/gvisor v0.0.0-20250325023245-7a9c0f5725fb
 	github.com/sagernet/quic-go v0.52.0-beta.1
-	github.com/sagernet/sing v0.6.12-0.20250703120903-7081a0c40539
+	github.com/sagernet/sing v0.6.12-0.20250704043954-da981379f151
 	github.com/sagernet/sing-mux v0.3.2
 	github.com/sagernet/sing-quic v0.5.0-beta.2
 	github.com/sagernet/sing-shadowsocks v0.2.8
 	github.com/sagernet/sing-shadowsocks2 v0.2.1
 	github.com/sagernet/sing-shadowtls v0.2.1-0.20250503051639-fcd445d33c11
-	github.com/sagernet/sing-tun v0.6.10-0.20250703121732-a0881ada3251
+	github.com/sagernet/sing-tun v0.6.10-0.20250707094843-b2e2674d73e5
 	github.com/sagernet/sing-vmess v0.2.4-0.20250605032146-38cc72672c88
 	github.com/sagernet/smux v1.5.34-mod.2
 	github.com/sagernet/tailscale v1.80.3-mod.5
@ -45,10 +45,10 @@ require (
 	github.com/vishvananda/netns v0.0.5
 	go.uber.org/zap v1.27.0
 	go4.org/netipx v0.0.0-20231129151722-fdeea329fbba
-	golang.org/x/crypto v0.38.0
+	golang.org/x/crypto v0.39.0
 	golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6
-	golang.org/x/mod v0.24.0
-	golang.org/x/net v0.40.0
+	golang.org/x/mod v0.25.0
+	golang.org/x/net v0.41.0
 	golang.org/x/sys v0.33.0
 	golang.zx2c4.com/wireguard/wgctrl v0.0.0-20241231184526-a9ab2273dd10
 	google.golang.org/grpc v1.72.0
@ -107,7 +107,7 @@ require (
 	github.com/quic-go/qpack v0.5.1 // indirect
 	github.com/safchain/ethtool v0.3.0 // indirect
 	github.com/sagernet/netlink v0.0.0-20240612041022-b9a21c07ac6a // indirect
-	github.com/sagernet/nftables v0.3.0-beta.4 // indirect
+	github.com/sagernet/nftables v0.3.0-mod.1 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect
 	github.com/tailscale/certstore v0.1.1-0.20231202035212-d3fa0460f47e // indirect
 	github.com/tailscale/go-winio v0.0.0-20231025203758-c4f33415bf55 // indirect
@ -123,9 +123,9 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap/exp v0.3.0 // indirect
 	go4.org/mem v0.0.0-20240501181205-ae6ca9944745 // indirect
-	golang.org/x/sync v0.14.0 // indirect
+	golang.org/x/sync v0.15.0 // indirect
 	golang.org/x/term v0.32.0 // indirect
-	golang.org/x/text v0.25.0 // indirect
+	golang.org/x/text v0.26.0 // indirect
 	golang.org/x/time v0.9.0 // indirect
 	golang.org/x/tools v0.33.0 // indirect
 	golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 // indirect
--- a/go.sum
+++ b/go.sum
@ -163,13 +163,13 @@ github.com/sagernet/gvisor v0.0.0-20250325023245-7a9c0f5725fb h1:pprQtDqNgqXkRsX
 github.com/sagernet/gvisor v0.0.0-20250325023245-7a9c0f5725fb/go.mod h1:QkkPEJLw59/tfxgapHta14UL5qMUah5NXhO0Kw2Kan4=
 github.com/sagernet/netlink v0.0.0-20240612041022-b9a21c07ac6a h1:ObwtHN2VpqE0ZNjr6sGeT00J8uU7JF4cNUdb44/Duis=
 github.com/sagernet/netlink v0.0.0-20240612041022-b9a21c07ac6a/go.mod h1:xLnfdiJbSp8rNqYEdIW/6eDO4mVoogml14Bh2hSiFpM=
-github.com/sagernet/nftables v0.3.0-beta.4 h1:kbULlAwAC3jvdGAC1P5Fa3GSxVwQJibNenDW2zaXr8I=
-github.com/sagernet/nftables v0.3.0-beta.4/go.mod h1:OQXAjvjNGGFxaTgVCSTRIhYB5/llyVDeapVoENYBDS8=
+github.com/sagernet/nftables v0.3.0-mod.1 h1:OMe+qoEAx8EipYAQbD2FI5erVvKmTS9+cYhdpg+vezY=
+github.com/sagernet/nftables v0.3.0-mod.1/go.mod h1:8kslHG4VvYNihcco+i6uxIX7qbT8A56T0y5q7U44ZaQ=
 github.com/sagernet/quic-go v0.52.0-beta.1 h1:hWkojLg64zjV+MJOvJU/kOeWndm3tiEfBLx5foisszs=
 github.com/sagernet/quic-go v0.52.0-beta.1/go.mod h1:OV+V5kEBb8kJS7k29MzDu6oj9GyMc7HA07sE1tedxz4=
 github.com/sagernet/sing v0.6.9/go.mod h1:ARkL0gM13/Iv5VCZmci/NuoOlePoIsW0m7BWfln/Hak=
-github.com/sagernet/sing v0.6.12-0.20250703120903-7081a0c40539 h1:SK4M4FCNdwV4EiYKIUZ9qM4lr/1NQogJe1YoyYw5DV8=
-github.com/sagernet/sing v0.6.12-0.20250703120903-7081a0c40539/go.mod h1:ARkL0gM13/Iv5VCZmci/NuoOlePoIsW0m7BWfln/Hak=
+github.com/sagernet/sing v0.6.12-0.20250704043954-da981379f151 h1:UCiQ1d/t5Y9uKAL9ir3i06+ClqS93OGGG8oqB82RMCE=
+github.com/sagernet/sing v0.6.12-0.20250704043954-da981379f151/go.mod h1:ARkL0gM13/Iv5VCZmci/NuoOlePoIsW0m7BWfln/Hak=
 github.com/sagernet/sing-mux v0.3.2 h1:meZVFiiStvHThb/trcpAkCrmtJOuItG5Dzl1RRP5/NE=
 github.com/sagernet/sing-mux v0.3.2/go.mod h1:pht8iFY4c9Xltj7rhVd208npkNaeCxzyXCgulDPLUDA=
 github.com/sagernet/sing-quic v0.5.0-beta.2 h1:j7KAbBuGmsKwSxVAQL5soJ+wDqxim4/llK2kxB0hSKk=
@ -180,8 +180,8 @@ github.com/sagernet/sing-shadowsocks2 v0.2.1 h1:dWV9OXCeFPuYGHb6IRqlSptVnSzOelnq
 github.com/sagernet/sing-shadowsocks2 v0.2.1/go.mod h1:RnXS0lExcDAovvDeniJ4IKa2IuChrdipolPYWBv9hWQ=
 github.com/sagernet/sing-shadowtls v0.2.1-0.20250503051639-fcd445d33c11 h1:tK+75l64tm9WvEFrYRE1t0YxoFdWQqw/h7Uhzj0vJ+w=
 github.com/sagernet/sing-shadowtls v0.2.1-0.20250503051639-fcd445d33c11/go.mod h1:sWqKnGlMipCHaGsw1sTTlimyUpgzP4WP3pjhCsYt9oA=
-github.com/sagernet/sing-tun v0.6.10-0.20250703121732-a0881ada3251 h1:eH9naJXvyF/DZDk0V1SYkL6ypYD+A1tUFWLcT7PRezg=
-github.com/sagernet/sing-tun v0.6.10-0.20250703121732-a0881ada3251/go.mod h1:fisFCbC4Vfb6HqQNcwPJi2CDK2bf0Xapyz3j3t4cnHE=
+github.com/sagernet/sing-tun v0.6.10-0.20250707094843-b2e2674d73e5 h1:JHa9vyTie1FbWGofPt4TEpysl7tBeEoiQDtwVK0Scqg=
+github.com/sagernet/sing-tun v0.6.10-0.20250707094843-b2e2674d73e5/go.mod h1:c/7Blmaw8GRL4JPvoajBfwUfdzoa2KCMtAnq5Q9AjA0=
 github.com/sagernet/sing-vmess v0.2.4-0.20250605032146-38cc72672c88 h1:0pVm8sPOel+BoiCddW3pV3cKDKEaSioVTYDdTSKjyFI=
 github.com/sagernet/sing-vmess v0.2.4-0.20250605032146-38cc72672c88/go.mod h1:IL8Rr+EGwuqijszZkNrEFTQDKhilEpkqFqOlvdpS6/w=
 github.com/sagernet/smux v1.5.34-mod.2 h1:gkmBjIjlJ2zQKpLigOkFur5kBKdV6bNRoFu2WkltRQ4=
@ -263,21 +263,21 @@ go4.org/mem v0.0.0-20240501181205-ae6ca9944745/go.mod h1:reUoABIJ9ikfM5sgtSF3Wus
 go4.org/netipx v0.0.0-20231129151722-fdeea329fbba h1:0b9z3AuHCjxk0x/opv64kcgZLBseWJUpBw5I82+2U4M=
 go4.org/netipx v0.0.0-20231129151722-fdeea329fbba/go.mod h1:PLyyIXexvUFg3Owu6p/WfdlivPbZJsZdgWZlrGope/Y=
 golang.org/x/crypto v0.0.0-20210513164829-c07d793c2f9a/go.mod h1:P+XmwS30IXTQdn5tA2iutPOUgjI07+tq3H3K9MVA1s8=
-golang.org/x/crypto v0.38.0 h1:jt+WWG8IZlBnVbomuhg2Mdq0+BBQaHbtqHEFEigjUV8=
-golang.org/x/crypto v0.38.0/go.mod h1:MvrbAqul58NNYPKnOra203SB9vpuZW0e+RRZV+Ggqjw=
+golang.org/x/crypto v0.39.0 h1:SHs+kF4LP+f+p14esP5jAoDpHU8Gu/v9lFRK6IT5imM=
+golang.org/x/crypto v0.39.0/go.mod h1:L+Xg3Wf6HoL4Bn4238Z6ft6KfEpN0tJGo53AAPC632U=
 golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6 h1:y5zboxd6LQAqYIhHnB48p0ByQ/GnQx2BE33L8BOHQkI=
 golang.org/x/exp v0.0.0-20250506013437-ce4c2cf36ca6/go.mod h1:U6Lno4MTRCDY+Ba7aCcauB9T60gsv5s4ralQzP72ZoQ=
 golang.org/x/image v0.23.0 h1:HseQ7c2OpPKTPVzNjG5fwJsOTCiiwS4QdsYi5XU6H68=
 golang.org/x/image v0.23.0/go.mod h1:wJJBTdLfCCf3tiHa1fNxpZmUI4mmoZvwMCPP0ddoNKY=
-golang.org/x/mod v0.24.0 h1:ZfthKaKaT4NrhGVZHO1/WDTwGES4De8KtWO0SIbNJMU=
-golang.org/x/mod v0.24.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
+golang.org/x/mod v0.25.0 h1:n7a+ZbQKQA/Ysbyb0/6IbB1H/X41mKgbhfv7AfG/44w=
+golang.org/x/mod v0.25.0/go.mod h1:IXM97Txy2VM4PJ3gI61r1YEk/gAj6zAHN3AdZt6S9Ww=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210525063256-abc453219eb5/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
-golang.org/x/net v0.40.0 h1:79Xs7wF06Gbdcg4kdCCIQArK11Z1hr5POQ6+fIYHNuY=
-golang.org/x/net v0.40.0/go.mod h1:y0hY0exeL2Pku80/zKK7tpntoX23cqL3Oa6njdgRtds=
+golang.org/x/net v0.41.0 h1:vBTly1HeNPEn3wtREYfy4GZ/NECgw2Cnl+nK6Nz3uvw=
+golang.org/x/net v0.41.0/go.mod h1:B/K4NNqkfmg07DQYrbwvSluqCJOOXwUjeb/5lOisjbA=
 golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.14.0 h1:woo0S4Yywslg6hp4eUFjTVOyKt0RookbpAHG4c1HmhQ=
-golang.org/x/sync v0.14.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
+golang.org/x/sync v0.15.0 h1:KWH3jNZsfyT6xfAfKiz6MRNmd46ByHDYaZ7KSkCtdW8=
+golang.org/x/sync v0.15.0/go.mod h1:1dzgHSNfp02xaA81J2MS99Qcpr2w7fw1gpm99rleRqA=
 golang.org/x/sys v0.0.0-20200217220822-9197077df867/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20200728102440-3e129f6d46b1/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@ -293,8 +293,8 @@ golang.org/x/term v0.32.0 h1:DR4lr0TjUs3epypdhTOkMmuF5CDFJ/8pOnbzMZPQ7bg=
 golang.org/x/term v0.32.0/go.mod h1:uZG1FhGx848Sqfsq4/DlJr3xGGsYMu/L5GW4abiaEPQ=
 golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
 golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
-golang.org/x/text v0.25.0 h1:qVyWApTSYLk/drJRO5mDlNYskwQznZmkpV2c8q9zls4=
-golang.org/x/text v0.25.0/go.mod h1:WEdwpYrmk1qmdHvhkSTNPm3app7v4rsT8F2UD6+VHIA=
+golang.org/x/text v0.26.0 h1:P42AVeLghgTYr4+xUnTRKDMqpar+PtX7KWuNQL21L8M=
+golang.org/x/text v0.26.0/go.mod h1:QK15LZJUUQVJxhz7wXgxSy/CJaTFjd0G+YLonydOVQA=
 golang.org/x/time v0.9.0 h1:EsRrnYcQiGH+5FfbgvV4AP7qEZstoyrHB0DzarOQ4ZY=
 golang.org/x/time v0.9.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
--- a/protocol/tun/inbound.go
+++ b/protocol/tun/inbound.go
@ -134,7 +134,8 @@ func NewInbound(ctx context.Context, router adapter.Router, logger log.ContextLo
 	tunMTU := options.MTU
 	if tunMTU == 0 {
 		if platformInterface != nil && platformInterface.UnderNetworkExtension() {
-			tunMTU = 4000
+			// In Network Extension, when MTU exceeds 4064 (4096-UTUN_IF_HEADROOM_SIZE), the performance of tun will drop significantly, which may be a system bug.
+			tunMTU = 4064
 		} else {
 			tunMTU = 9000
 		}
--- a/release/config/sing-box-split-dns.xml
+++ b/release/config/sing-box-split-dns.xml
--- a/release/config/sing-box.rules
+++ b/release/config/sing-box.rules
@ -1,7 +1,9 @@
 polkit.addRule(function(action, subject) {
    if ((action.id == "org.freedesktop.resolve1.set-domains" ||
         action.id == "org.freedesktop.resolve1.set-default-route" ||
-         action.id == "org.freedesktop.resolve1.set-dns-servers") &&
+         action.id == "org.freedesktop.resolve1.set-dns-servers" ||
+         action.id == "org.fedoraproject.FirewallD1.all" ||
+         action.id == "org.fedoraproject.FirewallD1.config") &&
        subject.user == "sing-box") {
        return polkit.Result.YES;
    }
--- a/route/conn.go
+++ b/route/conn.go
@ -277,7 +277,7 @@ func (m *ConnectionManager) connectionCopy(ctx context.Context, source net.Conn,
 			return
 		}
 	}
-	_, err := bufio.CopyWithCounters(destinationWriter, sourceReader, source, readCounters, writeCounters)
+	_, err := bufio.CopyWithCounters(destinationWriter, sourceReader, source, readCounters, writeCounters, bufio.DefaultIncreaseBufferAfter)
 	if err != nil {
 		common.Close(source, destination)
 	} else if duplexDst, isDuplex := destination.(N.WriteCloser); isDuplex {
Author	SHA1	Message	Date
renovate[bot]	cf1632a328	[dependencies] Update golangci/golangci-lint-action action to v8	2025-07-07 10:57:00 +00:00
世界	1974c767c9	documentation: Bump version	2025-07-07 18:56:29 +08:00
世界	2c286b7adc	Add firewalld compatibility for auto redirect	2025-07-07 18:56:29 +08:00
世界	e8b70162de	Fix DNS reject check	2025-07-07 14:12:43 +08:00
世界	30cfd620c2	Improve copy	2025-07-07 14:08:49 +08:00
世界	e8bd70341a	Increase default mtu under network extension to 4064	2025-07-07 14:08:48 +08:00
世界	7acf52d650	release: Fix publish testflight	2025-07-07 14:08:48 +08:00
世界	1ba0827995	Improve darwin tun performance	2025-07-07 14:08:48 +08:00
世界	eb3baf56e7	Improve nftables rules for openwrt	2025-07-07 14:08:48 +08:00
世界	97a44e654a	Fixed DoH server recover from conn freezes	2025-07-07 14:08:47 +08:00
世界	5dec974d09	Update libresolv usage	2025-07-07 14:08:47 +08:00
yu	60dd283043	documentation: Update client configuration manual	2025-07-07 14:08:47 +08:00
yanwo	fcefb52ce4	documentation: Fix typo Signed-off-by: yanwo <ogilvy@gmail.com>	2025-07-07 14:08:47 +08:00
anytinz	c2aaa9903b	documentation: Fix wrong SideStore loopback ip	2025-07-07 14:08:47 +08:00
世界	df2e80d126	Revert "release: Add IPA build" After testing, it seems that since extensions are not handled correctly, it cannot be installed by SideStore.	2025-07-07 14:08:47 +08:00
世界	7552ea4fef	release: Add IPA build	2025-07-07 14:08:46 +08:00
世界	28683d277f	Add API to dump AdGuard rules	2025-07-07 14:08:46 +08:00
Sukka	2476f43123	Improve AdGuard rule-set parser	2025-07-07 14:08:46 +08:00
Restia-Ashbell	c20c41eccc	Add ECH support for uTLS	2025-07-07 14:08:45 +08:00
世界	046ee4a5ba	Improve TLS fragments	2025-07-07 14:08:45 +08:00
世界	52a13e6927	Add cache support for ssm-api	2025-07-07 14:08:45 +08:00
世界	aacbab0874	Fix service will not be closed	2025-07-07 14:08:44 +08:00
世界	388d489246	Add loopback address support for tun	2025-07-07 14:08:44 +08:00
世界	4d66403bfa	Fix tproxy listener	2025-07-07 14:08:44 +08:00
世界	0c3b4ef9ca	Fix systemd package	2025-07-07 14:08:44 +08:00
世界	d0b6ca7099	Fix missing home for derp service	2025-07-07 14:08:43 +08:00
Zero Clover	2be22948f0	documentation: Fix services	2025-07-07 14:08:43 +08:00
世界	fb33008243	Fix `dns.client_subnet` ignored	2025-07-07 14:08:43 +08:00
世界	8455326d9a	documentation: Minor fixes	2025-07-07 14:08:43 +08:00
世界	f51d8df6b0	Fix tailscale forward	2025-07-07 14:08:43 +08:00
世界	e0d14675ad	Minor fixes	2025-07-07 14:08:42 +08:00
世界	a668aaaa02	Add SSM API service	2025-07-07 14:08:42 +08:00
世界	e785431242	Add resolved service and DNS server	2025-07-07 14:08:41 +08:00
世界	6b5de379c6	Add DERP service	2025-07-07 14:08:41 +08:00
世界	c448b2d1ad	Add service component type	2025-07-07 14:08:41 +08:00
世界	e9fc4c3779	Fix tproxy tcp control	2025-07-07 14:08:41 +08:00
愚者	1ba70c8f07	release: Fix build tags for android Signed-off-by: 愚者 <11926619+FansChou@users.noreply.github.com>	2025-07-07 14:08:40 +08:00
世界	9f4bb555f7	prevent creation of bind and mark controls on unsupported platforms	2025-07-07 14:08:40 +08:00
PuerNya	46afe058e6	documentation: Fix description of reject DNS action behavior	2025-07-07 14:08:40 +08:00
Restia-Ashbell	9c3a985b79	Fix TLS record fragment	2025-07-07 14:08:40 +08:00
世界	4ed65e0fa9	Add missing `accept_routes` option for Tailscale	2025-07-07 14:08:40 +08:00
世界	6cbc771bfb	Add TLS record fragment support	2025-07-07 14:08:39 +08:00
世界	ddee7ecb6f	Fix set edns0 client subnet	2025-07-07 14:08:39 +08:00
世界	219d8658be	Update minor dependencies	2025-07-07 14:08:39 +08:00
世界	0f51a47ffe	Update certmagic and providers	2025-07-07 14:08:39 +08:00
世界	a0699e09f8	Update protobuf and grpc	2025-07-07 14:08:38 +08:00
世界	1a55024c95	Add control options for listeners	2025-07-07 14:08:38 +08:00
世界	a57ed46111	Update quic-go to v0.52.0	2025-07-07 14:08:37 +08:00
世界	e3381dea33	Update utls to v1.7.2	2025-07-07 14:08:37 +08:00
世界	ad6fc71e42	Handle EDNS version downgrade	2025-07-07 14:08:37 +08:00
世界	577fc63722	documentation: Fix anytls padding scheme description	2025-07-07 14:08:37 +08:00
安容	f62b579430	Report invalid DNS address early	2025-07-07 14:08:36 +08:00
世界	99496599c2	Fix wireguard `listen_port`	2025-07-07 14:08:36 +08:00
世界	b1a02fd528	clash-api: Add more meta api	2025-07-07 14:08:36 +08:00
世界	bfbdd05e9d	Fix DNS lookup	2025-07-07 14:08:36 +08:00
世界	59cf61cac4	Fix fetch ECH configs	2025-07-07 14:08:35 +08:00
reletor	97b447d399	documentation: Minor fixes	2025-07-07 14:08:35 +08:00
caelansar	ba2009d8a4	Fix callback deletion in UDP transport	2025-07-07 14:08:35 +08:00
世界	a56b9fa0d0	documentation: Try to make the play review happy	2025-07-07 14:08:34 +08:00
世界	cdfec40038	Fix missing handling of legacy `domain_strategy` options	2025-07-07 14:08:34 +08:00
世界	1df6852ad8	Improve local DNS server	2025-07-07 14:08:34 +08:00
anytls	f4a318cac0	Update anytls Co-authored-by: anytls <anytls>	2025-07-07 14:08:34 +08:00
世界	8dc620fb97	Fix DNS dialer	2025-07-07 14:08:33 +08:00
世界	acdfb8affa	release: Skip override version for iOS	2025-07-07 14:08:33 +08:00
iikira	f982d3dcdb	Fix UDP DNS server crash Signed-off-by: iikira <i2@mail.iikira.com>	2025-07-07 14:08:33 +08:00
ReleTor	5f1c5ecc21	Fix fetch ECH configs	2025-07-07 14:08:32 +08:00
世界	e881d5cb2c	Allow direct outbounds without `domain_resolver`	2025-07-07 14:08:32 +08:00
世界	f340a4445c	Fix Tailscale dialer	2025-07-07 14:08:32 +08:00
dyhkwong	4452ae83e8	Fix DNS over QUIC stream close	2025-07-07 14:08:31 +08:00
anytls	7bc92d219a	Update anytls Co-authored-by: anytls <anytls>	2025-07-07 14:08:31 +08:00
Rambling2076	5b5babb7d3	Fix missing `with_tailscale` in Dockerfile Signed-off-by: Rambling2076 <Rambling2076@proton.me>	2025-07-07 14:08:31 +08:00
世界	6c6a215038	Fail when default DNS server not found	2025-07-07 14:08:31 +08:00
世界	34f03a4151	Update gVisor to 20250319.0	2025-07-07 14:08:30 +08:00
世界	338d67bbd5	Explicitly reject detour to empty direct outbounds	2025-07-07 14:08:30 +08:00
世界	d3b3320f51	Add netns support	2025-07-07 14:08:29 +08:00
世界	dda405d580	Add wildcard name support for predefined records	2025-07-07 14:08:29 +08:00
世界	28946f65f7	Remove map usage in options	2025-07-07 14:08:29 +08:00
世界	1119c06dc2	Fix unhandled DNS loop	2025-07-07 14:08:29 +08:00
世界	a577734efb	Add wildcard-sni support for shadow-tls inbound	2025-07-07 14:08:28 +08:00
k9982874	706f4adca4	Add ntp protocol sniffing	2025-07-07 14:08:28 +08:00
世界	ab13ffe20c	option: Fix marshal legacy DNS options	2025-07-07 14:08:28 +08:00
世界	a550e8a563	Make `domain_resolver` optional when only one DNS server is configured	2025-07-07 14:08:28 +08:00
世界	ff00aeb580	Fix DNS lookup context pollution	2025-07-07 14:08:27 +08:00
世界	a810e3213e	Fix http3 DNS server connecting to wrong address	2025-07-07 14:08:27 +08:00
Restia-Ashbell	eecd3d7376	documentation: Fix typo	2025-07-07 14:08:27 +08:00
anytls	d4ed82ebaa	Update sing-anytls Co-authored-by: anytls <anytls>	2025-07-07 14:08:26 +08:00
k9982874	8184d9ee9f	Fix hosts DNS server	2025-07-07 14:08:26 +08:00
世界	f1edfe581e	Fix UDP DNS server crash	2025-07-07 14:08:26 +08:00
世界	7571ff6450	documentation: Fix missing `ip_accept_any` DNS rule option	2025-07-07 14:08:26 +08:00
世界	60f21507ad	Fix anytls dialer usage	2025-07-07 14:08:26 +08:00
世界	b97ca94600	Move predefined DNS server to rule action	2025-07-07 14:08:25 +08:00
世界	7e05192370	Fix domain resolver on direct outbound	2025-07-07 14:08:25 +08:00
Zephyruso	e8c7e278f0	Fix missing AnyTLS display name	2025-07-07 14:08:24 +08:00
anytls	b5d199d8a7	Update sing-anytls Co-authored-by: anytls <anytls>	2025-07-07 14:08:24 +08:00
Estel	c408916b47	documentation: Fix typo Signed-off-by: Estel <callmebedrockdigger@gmail.com>	2025-07-07 14:08:24 +08:00
TargetLocked	fa1dfa3970	Fix parsing legacy DNS options	2025-07-07 14:08:24 +08:00
世界	a8da3bf4b7	Fix DNS fallback	2025-07-07 14:08:23 +08:00
世界	a1a00d36b8	documentation: Fix missing hosts DNS server	2025-07-07 14:08:23 +08:00
anytls	b6a8a84a99	Add MinIdleSession option to AnyTLS outbound Co-authored-by: anytls <anytls>	2025-07-07 14:08:23 +08:00
ReleTor	99b9e7c14c	documentation: Minor fixes	2025-07-07 14:08:23 +08:00
libtry486	fc3d43fc7f	documentation: Fix typo fix typo Signed-off-by: libtry486 <89328481+libtry486@users.noreply.github.com>	2025-07-07 14:08:22 +08:00
Alireza Ahmadi	69c0f424d9	Fix Outbound deadlock	2025-07-07 14:08:22 +08:00
世界	6e87e49690	documentation: Fix AnyTLS doc	2025-07-07 14:08:22 +08:00
anytls	638e5ad2be	Add AnyTLS protocol	2025-07-07 14:08:21 +08:00
世界	366406a558	Migrate to stdlib ECH support	2025-07-07 14:08:21 +08:00
世界	4cf1e58eed	Add fallback local DNS server for iOS	2025-07-07 14:08:21 +08:00
世界	5927d7affe	Get darwin local DNS server from libresolv	2025-07-07 14:08:21 +08:00
世界	6f5dd46b32	Improve resolve action	2025-07-07 14:08:20 +08:00
世界	7d048a014f	Add back port hopping to hysteria 1	2025-07-07 14:08:20 +08:00
xchacha20-poly1305	d51593e8a5	Remove single quotes of raw Moziila certs	2025-07-07 14:08:19 +08:00
世界	fc88d34edc	Add Tailscale endpoint	2025-07-07 14:08:19 +08:00
世界	12a3fd3b60	Build legacy binaries with latest Go	2025-07-07 14:08:19 +08:00
世界	b69a381aa8	documentation: Remove outdated icons	2025-07-07 14:08:18 +08:00
世界	7f0419d34c	documentation: Certificate store	2025-07-07 14:08:18 +08:00
世界	e758cbcd8c	documentation: TLS fragment	2025-07-07 14:08:18 +08:00
世界	8b494f1c4b	documentation: Outbound domain resolver	2025-07-07 14:08:17 +08:00
世界	0eaeef81fe	documentation: Refactor DNS	2025-07-07 14:08:17 +08:00
世界	25ebabeb63	Add certificate store	2025-07-07 14:08:17 +08:00
世界	d2cb0ee4ae	Add TLS fragment support	2025-07-07 14:08:17 +08:00
世界	c81a0ec4d7	refactor: Outbound domain resolver	2025-07-07 14:08:16 +08:00
世界	59fbf08651	refactor: DNS	2025-07-07 14:08:16 +08:00
世界	f792420a78	Bump version	2025-07-07 14:03:10 +08:00
世界	b8502759b5	Fix DNS reject check	2025-07-07 13:57:37 +08:00