Tailscale hide real domain name so Clash can not work properly anymore

[shenmo7192]

What is the issue?

Clash is a traffic proxy tool. It can get the domain name I'm visiting and forward the traffic to different nodes as I wish. After the upgrade of tailscale, I found clash can not get real domain name anymore. Instead get only IPs. It works well on 1.68.2, but after i tried to downgrade it to 1.68, it does not works too

Steps to reproduce

Install Clash for Windows , install Service mode and start TUN mode

Are there any recent changes that introduced the issue?

No response

OS

Linux

OS version

Debian 12

Tailscale version

1.70.0

Other software

Clash for Windows

Bug report

No response

[shenmo7192]

Add: On Windows the problem does not exist

[bradfitz]

It works well on 1.68.2, but after i tried to downgrade it to 1.68, it does not works too

There were no changes between 1.68 and 1.68.2 in this area.

I'm not sure what to tell you. We always send SNI in TLS requests and Host headers in the HTTP cleartext upgrades to ts2021 Noise. That isn't obscured.

Maybe Clash doesn't handle the ts2021 upgrade and the race is sometimes going one way vs the other way. Try setting env TS_FORCE_NOISE_443=1?

[shenmo7192]

It works well on 1.68.2, but after i tried to downgrade it to 1.68, it does not works too

There were no changes between 1.68 and 1.68.2 in this area.

I'm not sure what to tell you. We always send SNI in TLS requests and Host headers in the HTTP cleartext upgrades to ts2021 Noise. That isn't obscured.

Maybe Clash doesn't handle the ts2021 upgrade and the race is sometimes going one way vs the other way. Try setting env TS_FORCE_NOISE_443=1?

Roger. Will try it later.

It's strange that it can only show in one of my device, others works well.

[lwabish]

Met this too on my macbook with clash x 1.118.1.1 and tailscale 1.70.0

[shenmo7192]

Met this too on my macbook with clash x 1.118.1.1 and tailscale 1.70.0

This situation happen when I connect to my home wifi.But does not happen when I change to my phone wifi hotspot or use wired connection. Wierd.