v2.0.0-rc10

davidfowl/tallyv2.0.0-rc10Dec 22, 2025by qdm12

AI Summary

Release candidate focusing on connection pooling for DNS over TLS, health server configuration options, and breaking changes to the Go API return types.

Key Highlights

DNS over TLS now uses a pool of connections for TCP reuse.
New `HEALTH_SERVER_ADDRESS` option (defaulting to 127.0.0.1:9999).
Go API refactoring for `GetDNSServers` return types.
Grafana dashboard updated to schema version 3.

Breaking Changes

Go API `GetDNSServers` no longer returns localhost IPs if none are found.
Go API `GetDNSServers` now returns `[]netip.Addr` instead of `[]netip.AddrPort`.

New Features

New `REBINDING_PROTECTION_EXEMPT_HOSTNAMES` option
Debug logging for I/O timeouts
IPv6 Windows error message handling
Blocked element logging in filters

Full Release Notes

## Features

- DNS over TLS now uses a pool of connections to re-use TCP connections when possible (#150)
- `HEALTH_SERVER_ADDRESS` option, defaulting to `127.0.0.1:9999`
- by default log i/o timeout errors are logged at debug level because these are fairly common
- `REBINDING_PROTECTION_EXEMPT_HOSTNAMES` option
- `pkg/middlewares/filter`: log blocked elements with a reason

## Fixes

- `internal/local`: "site" and "network" TLDs are public, not local
- `pkg/middlewares/localdns`:
  - do not log request twice on errors
  - do not debug log NXDOMAIN coded responses since these happen often especially with search domains
- `internal/support/ipv6`: handle Windows error message
- Grafana dashboard plain DNS section updated

## Go API breaking changes

- `pkg/nameserver`: `GetDNSServers`
  - does not return localhost IPs if no nameserver is found 
  - returns an eventual error
  - returns []netip.Addr instead of []netip.AddrPort since it can only be an ip address without port

## Maintenance

- Grafana JSON dashboard upgraded to newer schema version 3
- Fix documentation URLs and CI links check
- bump markdownlint from v11 to v21