v1.2.4

enesilhaydin released this 11 Jun 22:55

· 1 commit to main since this release

fba34d4

Adds built-in WireGuard endpoint-loop guard for ZTE F50 / Mullvad style full-tunnel routing.
Adds TCP MSS clamp on tun+ forwarding to avoid MTU blackholes.
Adds tun+ MASQUERADE keepalive for strict tunnel providers such as Mullvad.
Keeps the watchdog passive/idempotent: no ip monitor listener, no order policing, no APN accept/NAT path.
Verified with endpoint-guard, logic, and netns leak tests.

Assets 3