wweir 30e80ab510 fix(router): bound degrade retry to snapshot, gate internal PTR on selected upstream ...

- degradeUpstream now takes the caller's snapshot length: a concurrent
  refresh that grows the live upstream list no longer lets the retry
  index past the stale snapshot and panic the DNS handler.
- Internal reverse lookups take a dedicated forward path that never runs
  the degrade state machine: the query goes only to the selected internal
  upstream and surfaces SERVFAIL on failure instead of retrying onto a
  public fallback, closing the TOCTOU leak in the PTR gate.
- Local DNS replies set the RecursionAvailable bit per RFC 1035.
- A failed TCP retry for a truncated UDP response keeps the truncated
  response (with TC set) instead of dropping it for SERVFAIL, so
  networks that block TCP/53 still get usable answers.

2026-08-12 17:08:32 +08:00

..

country.go

feat(router): split DialSmart/DialProxyOnly, fail-fast on bad MMDB/CIDR, add Close

2026-06-24 13:30:18 +08:00

dns_bench_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

dns_ecs_test.go

fix(router,admin): trust full-length ECS only, gate PTR on selected upstream, harden hostname cache

2026-08-12 14:53:13 +08:00

dns_reverse_test.go

fix(router): bound degrade retry to snapshot, gate internal PTR on selected upstream

2026-08-12 17:08:32 +08:00

dns.go

fix(router): bound degrade retry to snapshot, gate internal PTR on selected upstream

2026-08-12 17:08:32 +08:00

ping.go

feat(router): split DialSmart/DialProxyOnly, fail-fast on bad MMDB/CIDR, add Close

2026-06-24 13:30:18 +08:00

router_test.go

fix(router): bound degrade retry to snapshot, gate internal PTR on selected upstream

2026-08-12 17:08:32 +08:00

router.go

feat(router): report matched rule text for hit tracking

2026-08-09 19:02:18 +08:00

ruleset_bench_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

ruleset_memory_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

ruleset_test.go

fix(router): drop empty rules parsed from empty TOML arrays

2026-08-09 18:56:45 +08:00

ruleset.go

feat(router): report matched rule text for hit tracking

2026-08-09 19:02:18 +08:00

util.go

fix: http_proxy

2024-10-12 07:20:39 +08:00