From 513910462e3104bf146038e6b0b98d3038fa9038 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E4=B8=96=E7=95=8C?= <i@sekai.icu>
Date: Mon, 27 Jul 2026 10:41:51 +0800
Subject: [PATCH] Fix DNS route suffix matching

---
 protocol/tailscale/dns_transport.go | 2 +-
 service/resolved/transport.go       | 3 +--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/protocol/tailscale/dns_transport.go b/protocol/tailscale/dns_transport.go
index 6c4b551f..9edbfbc4 100644
--- a/protocol/tailscale/dns_transport.go
+++ b/protocol/tailscale/dns_transport.go
@@ -283,7 +283,7 @@ func (t *DNSTransport) Exchange(ctx context.Context, message *mDNS.Msg) (*mDNS.M
 		}
 	}
 	for domainSuffix, transports := range routes {
-		if strings.HasSuffix(question.Name, domainSuffix) {
+		if mDNS.IsSubDomain(domainSuffix, question.Name) {
 			if len(transports) == 0 {
 				return &mDNS.Msg{
 					MsgHdr: mDNS.MsgHdr{
diff --git a/service/resolved/transport.go b/service/resolved/transport.go
index bdc35551..f4beafd8 100644
--- a/service/resolved/transport.go
+++ b/service/resolved/transport.go
@@ -6,7 +6,6 @@ import (
 	"context"
 	"net/netip"
 	"os"
-	"strings"
 	"sync"
 	"sync/atomic"
 	"time"
@@ -200,7 +199,7 @@ func (t *Transport) Exchange(ctx context.Context, message *mDNS.Msg) (*mDNS.Msg,
 			if domain.Domain == "." && domain.RoutingOnly && !t.acceptDefaultResolvers {
 				continue
 			}
-			if strings.HasSuffix(question.Name, domain.Domain) {
+			if mDNS.IsSubDomain(domain.Domain, question.Name) {
 				selectedLink = link
 			}
 		}