 Nate Brown
|
89178f45ba
|
windows: Fix NLMTU for ipv6 (#1871)
smoke-extra / freebsd-amd64 (push) Failing after 16s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 15s
smoke-extra / netbsd-amd64 (push) Failing after 14s
smoke-extra / openbsd-amd64 (push) Failing after 17s
smoke-extra / linux-386 (push) Failing after 16s
smoke / Run multi node smoke test (push) Failing after 1m33s
Build and test / Static checks (push) Successful in 21s
Build and test / Test linux (push) Failing after 59s
Build and test / Test linux-pkcs11 (push) Failing after 1m49s
Build and test / Test linux-boringcrypto (push) Failing after 2m38s
Build and test / Test linux-fips140 (push) Failing after 2m52s
Build and test / Cross-build linux-arm (push) Successful in 2m54s
Build and test / Cross-build linux-mips (push) Successful in 3m35s
Build and test / Cross-build linux-other (push) Successful in 2m58s
Build and test / Cross-build windows (push) Successful in 59s
Build and test / Cross-build freebsd (push) Successful in 1m28s
Build and test / Cross-build netbsd (push) Successful in 1m28s
Build and test / Cross-build openbsd (push) Successful in 1m28s
Build and test / Cross-build mobile (push) Successful in 3m7s
smoke-extra / Run windows smoke test (push) Canceled after 0s
smoke / Run self traffic smoke test on macOS (push) Canceled after 0s
Build and test / Test macos (push) Canceled after 0s
Build and test / Test windows (push) Canceled after 0s
Build and test / CI status (push) Canceled after 0s
|
2026-09-08 18:30:16 -05:00 |
|
|
Nate Brown
|
657f6ad044
|
Fold the rebind counter and traffic flags into one atomic word (#1820)
smoke-extra / freebsd-amd64 (push) Failing after 23s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 14s
smoke-extra / netbsd-amd64 (push) Failing after 13s
smoke-extra / openbsd-amd64 (push) Failing after 13s
smoke-extra / linux-386 (push) Failing after 11s
smoke / Run multi node smoke test (push) Failing after 1m36s
Build and test / Static checks (push) Successful in 2m15s
Build and test / Test linux (push) Failing after 58s
Build and test / Test linux-pkcs11 (push) Failing after 1m55s
Build and test / Test linux-boringcrypto (push) Failing after 2m40s
Build and test / Test linux-fips140 (push) Failing after 2m41s
Build and test / Cross-build linux-arm (push) Successful in 3m3s
Build and test / Cross-build linux-mips (push) Successful in 3m43s
Build and test / Cross-build linux-other (push) Successful in 3m5s
Build and test / Cross-build windows (push) Successful in 1m2s
Build and test / Cross-build freebsd (push) Successful in 1m32s
Build and test / Cross-build netbsd (push) Successful in 1m32s
Build and test / Cross-build openbsd (push) Successful in 1m33s
Build and test / Cross-build mobile (push) Successful in 3m18s
smoke-extra / Run windows smoke test (push) Canceled after 0s
Build and test / Test macos (push) Canceled after 0s
Build and test / Test windows (push) Canceled after 0s
Build and test / CI status (push) Canceled after 0s
|
2026-08-26 15:15:37 -05:00 |
|
|
Nate Brown
|
b8b159a486
|
release: retry the STS assume until the secret key survives Windows (#1855)
|
2026-08-21 11:03:43 -05:00 |
|
|
Nate Brown
|
49e35d1283
|
parseV6: only walk real ipv6 extension headers, fail closed on unknown protocols (#1840)
|
2026-08-20 13:21:08 -05:00 |
|
|
Nate Brown
|
f15d10fc54
|
Enforce outbound message counter limits to prevent nonce reuse (#1841)
|
2026-08-19 20:48:02 -05:00 |
|
|
Nate Brown
|
e7b4e094b9
|
Take Apple signing credentials from Secrets Manager (#1833)
|
2026-08-18 15:35:57 -05:00 |
|
|
Nate Brown
|
72bf111209
|
Add an e2e Drop exit type and a roaming recovery measurement (#1819)
smoke-extra / freebsd-amd64 (push) Failing after 15s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 15s
smoke-extra / netbsd-amd64 (push) Failing after 14s
smoke-extra / openbsd-amd64 (push) Failing after 15s
smoke-extra / linux-386 (push) Failing after 16s
smoke / Run multi node smoke test (push) Failing after 1m37s
Build and test / Static checks (push) Successful in 18s
Build and test / Test linux (push) Failing after 58s
Build and test / Test linux-boringcrypto (push) Failing after 2m45s
Build and test / Test linux-pkcs11 (push) Failing after 2m10s
Build and test / Cross-build linux-arm (push) Successful in 3m11s
Build and test / Cross-build linux-mips (push) Successful in 3m53s
Build and test / Cross-build linux-other (push) Successful in 3m16s
Build and test / Cross-build windows (push) Successful in 1m2s
Build and test / Cross-build freebsd (push) Successful in 1m36s
Build and test / Cross-build netbsd (push) Successful in 1m36s
Build and test / Cross-build openbsd (push) Successful in 1m37s
Build and test / Cross-build mobile (push) Successful in 3m23s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-07-23 17:02:02 -05:00 |
|
|
Nate Brown
|
1617897043
|
v1.11.0 changelog (#1792)
smoke-extra / freebsd-amd64 (push) Failing after 25s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 13s
smoke-extra / netbsd-amd64 (push) Failing after 13s
smoke-extra / openbsd-amd64 (push) Failing after 11s
smoke-extra / linux-386 (push) Failing after 12s
smoke / Run multi node smoke test (push) Failing after 1m39s
Build and test / Static checks (push) Successful in 2m9s
Build and test / Test linux (push) Failing after 1m3s
Build and test / Test linux-boringcrypto (push) Failing after 2m48s
Build and test / Test linux-pkcs11 (push) Failing after 2m0s
Build and test / Cross-build linux-arm (push) Successful in 3m17s
Build and test / Cross-build linux-mips (push) Successful in 4m5s
Build and test / Cross-build linux-other (push) Successful in 3m23s
Build and test / Cross-build windows (push) Successful in 1m4s
Build and test / Cross-build freebsd (push) Successful in 1m42s
Build and test / Cross-build netbsd (push) Successful in 1m38s
Build and test / Cross-build openbsd (push) Successful in 1m43s
Build and test / Cross-build mobile (push) Successful in 3m34s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-07-23 13:13:45 -05:00 |
|
|
Nate Brown
|
f8775bb6ca
|
Use go 1.26 (latest 1.26.5) (#1818)
|
2026-07-23 10:36:20 -05:00 |
|
|
Nate Brown
|
15f0f0d5d0
|
Be less verbose with handshake send errors (#1810)
|
2026-07-23 09:26:45 -05:00 |
|
|
Nate BrownandJack Doan
|
7902ce674e
|
Rebind for MacOS (#1816)
Co-authored-by: Jack Doan <me@jackdoan.com>
|
2026-07-23 09:26:24 -05:00 |
|
|
Nate Brown
|
c2fbe215e6
|
Fix a test race, make dns server reload/restart safer (#1815)
smoke-extra / freebsd-amd64 (push) Failing after 54s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 11s
smoke-extra / netbsd-amd64 (push) Failing after 11s
smoke-extra / openbsd-amd64 (push) Failing after 22s
smoke-extra / linux-386 (push) Failing after 23s
smoke / Run multi node smoke test (push) Failing after 1m26s
Build and test / Static checks (push) Successful in 2m11s
Build and test / Test linux (push) Failing after 1m7s
Build and test / Test linux-boringcrypto (push) Failing after 2m41s
Build and test / Test linux-pkcs11 (push) Failing after 2m2s
Build and test / Cross-build linux-arm (push) Successful in 3m5s
Build and test / Cross-build linux-mips (push) Successful in 3m48s
Build and test / Cross-build linux-other (push) Successful in 3m8s
Build and test / Cross-build windows (push) Successful in 1m4s
Build and test / Cross-build freebsd (push) Successful in 1m36s
Build and test / Cross-build netbsd (push) Successful in 1m33s
Build and test / Cross-build openbsd (push) Successful in 1m32s
Build and test / Cross-build mobile (push) Successful in 3m16s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-07-22 15:05:10 -05:00 |
|
|
Nate BrownandJack Doan
|
147c202c27
|
Swap back to a blocking udp socket, test shutdown(2) (#1806)
Co-authored-by: Jack Doan <me@jackdoan.com>
|
2026-07-17 15:16:45 -05:00 |
|
|
Nate Brown
|
6c3972f464
|
code-sign: default the S3 key-prefix to the calling repo (#1799)
|
2026-07-13 11:49:59 -05:00 |
|
|
Nate Brown
|
ab736e4c6b
|
Make Control safe to stop and wait on from any lifecycle state (#1794)
|
2026-07-10 10:35:17 -05:00 |
|
|
Nate Brown
|
5ecdd4eaa9
|
Fix e2e test races when looking at hostmap counts (#1795)
|
2026-07-09 18:48:14 -05:00 |
|
|
Nate Brown
|
1b84bd0050
|
Remove dev fmt.Println (#1793)
|
2026-07-09 11:04:25 -05:00 |
|
|
Nate Brown
|
384610f81a
|
hostmap: replace the shared next/prev hostinfo chain with independent per-address lists so divergent or overlapping vpnAddr sets cannot corrupt the map (#1790)
|
2026-07-09 09:34:30 -05:00 |
|
|
Nate Brown
|
c1eea118f4
|
fix firewall port/proto bypass in parseV6 from uint8 extension-header length overflow (#1789)
|
2026-07-07 20:43:26 -05:00 |
|
|
Nate Brown
|
1e66c0d3ee
|
hostmap: unlink a multi-vpnAddr hostinfo from the shared chain exactly once on delete (#1788)
|
2026-07-07 17:32:25 -05:00 |
|
|
Nate Brown
|
e5c0fdad8d
|
Darwin and openbsd in line with the other bsds for tun support (#1703)
|
2026-07-07 17:05:12 -05:00 |
|
|
Nate Brown
|
7bd0bc285a
|
sshd: guard trustedKeys/trustedCAs with a mutex to fix a concurrent map crash on reload (#1787)
|
2026-07-07 15:50:06 -05:00 |
|
|
Nate Brown
|
942ee522e0
|
lighthouse: unmap 4-in-6 addresses in protoV6AddrPortToNetAddrPort so remote_allow_list v4 rules apply (#1786)
|
2026-07-07 15:23:39 -05:00 |
|
|
Nate Brown
|
abfeb502a8
|
iputil: fix infinite loop in ipv6FindUpperProtocol from uint8 extension-header length overflow (#1784)
|
2026-07-07 13:28:52 -05:00 |
|
|
Nate Brown
|
6aa3363d85
|
Add explicit unmarshaller for signing and key agreement public keys (#1777)
|
2026-07-07 13:16:57 -05:00 |
|
|
Nate Brown
|
3a95495c63
|
Fix duplicate log fields which slog duplicates (#1734)
smoke-extra / freebsd-amd64 (push) Failing after 16s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 16s
smoke-extra / netbsd-amd64 (push) Failing after 15s
smoke-extra / openbsd-amd64 (push) Failing after 15s
smoke-extra / linux-386 (push) Failing after 15s
smoke / Run multi node smoke test (push) Failing after 1m27s
Build and test / Static checks (push) Successful in 40s
Build and test / Test linux (push) Failing after 1m7s
Build and test / Test linux-boringcrypto (push) Failing after 2m41s
Build and test / Test linux-pkcs11 (push) Failing after 2m3s
Build and test / Cross-build linux-arm (push) Successful in 3m5s
Build and test / Cross-build linux-mips (push) Successful in 3m57s
Build and test / Cross-build linux-other (push) Successful in 3m5s
Build and test / Cross-build windows (push) Successful in 1m0s
Build and test / Cross-build freebsd (push) Successful in 1m33s
Build and test / Cross-build netbsd (push) Successful in 1m31s
Build and test / Cross-build openbsd (push) Successful in 1m33s
Build and test / Cross-build mobile (push) Successful in 3m13s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-05-22 10:19:53 -05:00 |
|
|
Nate Brown
|
873f94f465
|
Reduce relay log spam (#1733)
|
2026-05-22 10:19:06 -05:00 |
|
|
Nate Brown
|
0c1ad9bb48
|
Parallelize the tests a bit more (#1730)
smoke-extra / freebsd-amd64 (push) Failing after 15s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 12s
smoke-extra / netbsd-amd64 (push) Failing after 12s
smoke-extra / openbsd-amd64 (push) Failing after 21s
smoke-extra / linux-386 (push) Failing after 17s
smoke / Run multi node smoke test (push) Failing after 1m26s
Build and test / Static checks (push) Successful in 1m39s
Build and test / Test linux (push) Failing after 1m57s
Build and test / Test linux-boringcrypto (push) Failing after 2m33s
Build and test / Test linux-pkcs11 (push) Failing after 3m22s
Build and test / Cross-build linux-arm (push) Successful in 2m56s
Build and test / Cross-build linux-mips (push) Successful in 3m35s
Build and test / Cross-build linux-other (push) Successful in 2m57s
Build and test / Cross-build windows (push) Successful in 56s
Build and test / Cross-build freebsd (push) Successful in 1m29s
Build and test / Cross-build netbsd (push) Successful in 1m27s
Build and test / Cross-build openbsd (push) Successful in 1m29s
Build and test / Cross-build mobile (push) Successful in 3m6s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-05-19 08:35:04 -05:00 |
|
|
Nate Brown
|
04dea41f74
|
Make firewall reload when unsafe networks in the cert changes (#1719)
|
2026-05-18 11:25:34 -05:00 |
|
|
Nate Brown
|
0d23377c65
|
Fix flakey cert tests (#1728)
|
2026-05-18 11:10:30 -05:00 |
|
|
Nate Brown
|
ffd5249cf5
|
Search for config.yaml/yml in both service and cli mode (#1717)
gofmt / Run gofmt (push) Successful in 11s
smoke-extra / freebsd-amd64 (push) Failing after 13s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 12s
smoke-extra / netbsd-amd64 (push) Failing after 14s
smoke-extra / openbsd-amd64 (push) Failing after 12s
smoke-extra / linux-386 (push) Failing after 12s
smoke / Run multi node smoke test (push) Failing after 1m27s
Build and test / Build all and test on ubuntu-linux (push) Failing after 20m14s
Build and test / Build and test on linux with boringcrypto (push) Failing after 5m14s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3m12s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-15 15:37:01 -05:00 |
|
|
Nate Brown
|
625f58b84a
|
Record my local details in the dns server if enabled (#1716)
|
2026-05-15 15:36:44 -05:00 |
|
|
Nate Brown
|
99c5854e5c
|
Prime some critical stats before the first scrape (#1715)
|
2026-05-15 15:36:26 -05:00 |
|
|
Nate Brown
|
3c121e7ab1
|
Allow for - to stand in for stdin/out (#1714)
|
2026-05-15 15:36:08 -05:00 |
|
|
Nate Brown
|
6c7ebb0875
|
Reset static host list addresses on change (#1713)
|
2026-05-15 15:35:49 -05:00 |
|
|
Nate Brown
|
398d67e2da
|
Windows code signing (#1718)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / freebsd-amd64 (push) Failing after 3s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 3s
smoke-extra / netbsd-amd64 (push) Failing after 3s
smoke-extra / openbsd-amd64 (push) Failing after 2s
smoke-extra / linux-386 (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-08 14:43:19 -05:00 |
|
|
Nate Brown
|
696903d6d9
|
Add a way to set the network type on windows + tests (#1710)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / freebsd-amd64 (push) Failing after 2s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 3s
smoke-extra / netbsd-amd64 (push) Failing after 3s
smoke-extra / openbsd-amd64 (push) Failing after 3s
smoke-extra / linux-386 (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-07 20:17:38 -05:00 |
|
|
Nate Brown
|
c82db210ef
|
Change windows unsafe routes to link routes, fix sshd reload bug (#1709)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / freebsd-amd64 (push) Failing after 3s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 2s
smoke-extra / netbsd-amd64 (push) Failing after 2s
smoke-extra / openbsd-amd64 (push) Failing after 3s
smoke-extra / linux-386 (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-07 11:30:26 -05:00 |
|
|
Nate Brown
|
1ada3d4dd9
|
Use DefinedNets fancy new netbsd10 vagrant box for smokes (#1711)
|
2026-05-07 10:30:29 -05:00 |
|
|
Nate Brown
|
5f920fdd7d
|
Remove the global noiseEndianness var (#1707)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-06 17:37:03 -05:00 |
|
|
Nate Brown
|
213dd46588
|
Stop leaking goroutines past Control.Stop, consolidate punching in Punchy (#1708)
|
2026-05-06 16:21:16 -05:00 |
|
|
Nate Brown
|
b7e9939e92
|
More stable e2e test harness, better for benchmarking (#1702)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-04 10:12:58 -05:00 |
|
|
Nate Brown
|
33c2d7277c
|
Reduce HandshakeManager complexity a little bit (#1701)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-01 13:21:38 -05:00 |
|
|
Nate Brown
|
f141cebe8d
|
Run e2e tests in parallel, include a goroutine leak detector test (#1700)
gofmt / Run gofmt (push) Failing after 41s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-30 21:30:56 -05:00 |
|
|
Nate Brown
|
9ec8cf10f3
|
Handshake state machine (#1656)
|
2026-04-30 21:30:27 -05:00 |
|
|
Nate Brown
|
1ab1f71dba
|
Make stats a server we can reconfigure and start/stop (#1670)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-27 12:25:24 -05:00 |
|
|
Nate Brown
|
d0f02ba873
|
Switch to slog, remove logrus (#1672)
|
2026-04-27 09:41:47 -05:00 |
|
|
Nate Brown
|
db9218b0be
|
Another shot at the flakey smoke test (#1688)
|
2026-04-23 13:51:15 -05:00 |
|
|
Nate Brown
|
5f00ab4b74
|
Fix e2e tests writing after the tester tun is closed causing a panic (#1681)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-22 17:18:06 -05:00 |
|
|
Nate Brown
|
8c50fc3f60
|
Plug the conntrack cache ticker leak and nebula-service log.Fatal calls (#1669)
|
2026-04-21 13:19:54 -05:00 |
|
|
Nate Brown
|
2f4532f102
|
No more dns globals, proper cleanup on shutdown (#1667)
|
2026-04-21 12:41:10 -05:00 |
|
|
Nate Brown
|
8c71f2f3f9
|
FreeBSD tun needs to be non blocking as well (#1666)
|
2026-04-21 10:45:46 -05:00 |
|
|
Nate Brown
|
3d34cc9b74
|
Try to make smoke less flakey (#1663)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-20 16:38:14 -05:00 |
|
|
Nate Brown
|
49e3c4649b
|
Try the hot new DefinedNet openbsd78 box (#1657)
gofmt / Run gofmt (push) Failing after 4s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-17 09:18:23 -05:00 |
|
|
Nate Brown
|
a5e81efe7b
|
Try rsync from somewhere else (#1655)
|
2026-04-15 09:23:33 -05:00 |
|
|
Nate Brown
|
3fae693c42
|
Additional e2e tests to assert current handshake behavior (#1653)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-14 13:32:01 -05:00 |
|
|
Nate Brown
|
72a40007ea
|
v1.10.1 (#1575)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.1
|
2026-01-16 10:33:54 -05:00 |
|
|
Nate Brown
|
ac3bd9cdd0
|
Avoid losing system originated unsafe routes on reload (#1573)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-01-15 13:48:17 -06:00 |
|
|
Nate Brown
|
1283ff0db4
|
Add option to control accepting recv_error (#1569)
|
2026-01-13 00:00:27 -06:00 |
|
|
Nate Brownandbrad-defined
|
69259e6307
|
Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) (#1568)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2026-01-09 10:35:09 -06:00 |
|
|
Nate Brown
|
2d16940232
|
Slight improvement to hot path benchmark, add a relay hot path benchmark (#1539)
gofmt / Run gofmt (push) Failing after 15s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-09 22:29:26 -06:00 |
|
|
Nate Brown
|
59e24b98bd
|
v1.10.0 (#1534)
gofmt / Run gofmt (push) Failing after 4s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.0
|
2025-12-04 14:42:31 -05:00 |
|
|
Nate Brown
|
56067afca2
|
Stab at better logging when a relay is being used (#1533)
gofmt / Run gofmt (push) Failing after 5s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-03 17:48:29 -06:00 |
|
|
Nate Brown
|
64f202fa17
|
Make 0.0.0.0/0 and ::/0 not mean any address family, add any for that (#1538)
gofmt / Run gofmt (push) Failing after 13s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-11-21 13:46:36 -06:00 |
|
|
Nate Brown
|
83ae8077f5
|
No need to clear counter 0 (#1537)
|
2025-11-20 13:22:58 -06:00 |
|
|
Nate Brown
|
7aff313a17
|
Relax the restriction on routines from the config (#1531)
|
2025-11-19 13:10:11 -06:00 |
|
|
Nate Brown
|
99faab505c
|
Fix a potential bug with udp ipv4 only on darwin (#1532)
|
2025-11-19 09:56:58 -06:00 |
|
|
Nate Brown
|
52f1908126
|
Don't log every blocklisted fingerprint (#1525)
|
2025-11-12 09:41:46 -06:00 |
|
|
Nate Brown
|
45c1d3eab3
|
Support for multi proto tun device on OpenBSD (#1495)
|
2025-10-08 16:56:42 -05:00 |
|
|
Nate Brown
|
eb89839d13
|
Support for multi proto tun device on NetBSD (#1492)
|
2025-10-07 20:17:50 -05:00 |
|
|
Nate Brown
|
fb7f0c3657
|
Use x/net/route to manage routes directly (#1488)
|
2025-10-03 10:59:53 -05:00 |
|
|
Nate Brown
|
52623820c2
|
Drop inactive tunnels (#1427)
|
2025-07-03 09:58:37 -05:00 |
|
|
Nate Brown
|
c2420642a0
|
Darwin udp fix (#1428)
|
2025-07-02 15:50:22 -05:00 |
|
|
Nate Brown
|
f8734ffa43
|
Improve logging when handshaking with an invalid cert (#1345)
|
2025-03-07 10:45:31 -06:00 |
|
|
|
d97ed57a19
|
V2 certificate format (#1216)
Co-authored-by: Nate Brown <nbrown.us@gmail.com>
Co-authored-by: Jack Doan <jackdoan@rivian.com>
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
Co-authored-by: Jack Doan <me@jackdoan.com>
|
2025-03-06 11:28:26 -06:00 |
|
|
Nate Brown
|
3e6c75573f
|
Fix static host map wrong responder situations, correct logging (#1259)
|
2024-10-23 14:28:02 -05:00 |
|
|
Nate Brown
|
08ac65362e
|
Cert interface (#1212)
|
2024-10-10 18:00:22 -05:00 |
|
|
Nate Brown
|
e264a0ff88
|
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2024-07-31 10:18:56 -05:00 |
|
|
Nate Brown
|
a99618e95c
|
Don't log invalid certificates (#1116)
|
2024-04-29 15:21:00 -05:00 |
|
|
Nate Brown
|
a5a07cc760
|
Allow :: in lighthouse.dns.host config (#1115)
|
2024-04-11 21:44:36 -05:00 |
|
|
Nate Brown
|
c1711bc9c5
|
Remove tcp rtt tracking from the firewall (#1114)
|
2024-04-11 21:44:22 -05:00 |
|
|
Nate Brown
|
a390125935
|
Support reloading preferred_ranges (#1043)
|
2024-04-03 22:14:51 -05:00 |
|
|
Nate Brown
|
bbb15f8cb1
|
Unsafe route reload (#1083)
|
2024-03-28 15:17:28 -05:00 |
|
|
Nate Brown
|
cc8b3cc961
|
Add config option for local_cidr control
|
2024-02-15 11:46:45 -06:00 |
|
|
Nate Brown
|
f346cf4109
|
At the end
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
8f44f22c37
|
In the middle
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
072edd56b3
|
Fix re-entrant GetOrHandshake issues (#1044)
|
2023-12-19 11:58:31 -06:00 |
|
|
Nate Brown
|
3356e03d85
|
Default pki.disconnect_invalid to true and make it reloadable (#859)
|
2023-11-13 12:39:38 -06:00 |
|
|
Nate Brown
|
5181cb0474
|
Use generics for CIDRTrees to avoid casting issues (#1004)
|
2023-11-02 17:05:08 -05:00 |
|
|
Nate Brown
|
a44e1b8b05
|
Clean up a hostinfo to reduce memory usage (#955)
|
2023-11-02 16:53:59 -05:00 |
|
|
Nate Brown
|
50d6a1e8ca
|
QueryServer needs to be done outside of the lock (#996)
|
2023-10-17 15:43:51 -05:00 |
|
|
Nate Brown
|
5fccbb8676
|
Retry wintun creation (#985)
|
2023-10-16 10:06:43 -05:00 |
|
|
Nate Brown
|
f7e392995a
|
Fix rebind to not put the socket in blocking mode (#972)
|
2023-09-07 11:56:09 -05:00 |
|
|
Nate Brown
|
076ebc6c6e
|
Simplify getting a hostinfo or starting a handshake with one (#954)
|
2023-08-21 18:51:45 -05:00 |
|
|
Nate Brown
|
7edcf620c0
|
We only need the certificate in ConnectionState (#953)
|
2023-08-21 14:11:06 -05:00 |
|
|
Nate Brown
|
5a131b2975
|
Combine ca, cert, and key handling (#952)
|
2023-08-14 21:32:40 -05:00 |
|
|
Nate BrownandWade Simmons
|
223cc6e660
|
Limit how often a busy tunnel can requery the lighthouse (#940)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-08-08 13:26:41 -05:00 |
|
|
Nate Brown
|
14d0106716
|
Send the lh update worker into its own routine instead of taking over the reload routine (#935)
|
2023-07-27 14:38:10 -05:00 |
|
|
Nate Brown
|
0bffa76b5e
|
Build for openbsd (#812)
|
2023-07-27 14:27:35 -05:00 |
|
|
Nate Brown
|
9c6592b159
|
Guard e2e udp and tun channels when closed (#934)
|
2023-07-26 12:52:14 -05:00 |
|