 Nate Brown
|
072edd56b3
|
Fix re-entrant GetOrHandshake issues (#1044)
|
2023-12-19 11:58:31 -06:00 |
|
|
Nate Brown
|
3356e03d85
|
Default pki.disconnect_invalid to true and make it reloadable (#859)
|
2023-11-13 12:39:38 -06:00 |
|
|
Nate Brown
|
5181cb0474
|
Use generics for CIDRTrees to avoid casting issues (#1004)
|
2023-11-02 17:05:08 -05:00 |
|
|
Nate Brown
|
a44e1b8b05
|
Clean up a hostinfo to reduce memory usage (#955)
|
2023-11-02 16:53:59 -05:00 |
|
|
Nate Brown
|
50d6a1e8ca
|
QueryServer needs to be done outside of the lock (#996)
|
2023-10-17 15:43:51 -05:00 |
|
|
Nate Brown
|
5fccbb8676
|
Retry wintun creation (#985)
|
2023-10-16 10:06:43 -05:00 |
|
|
Nate Brown
|
f7e392995a
|
Fix rebind to not put the socket in blocking mode (#972)
|
2023-09-07 11:56:09 -05:00 |
|
|
Nate Brown
|
076ebc6c6e
|
Simplify getting a hostinfo or starting a handshake with one (#954)
|
2023-08-21 18:51:45 -05:00 |
|
|
Nate Brown
|
7edcf620c0
|
We only need the certificate in ConnectionState (#953)
|
2023-08-21 14:11:06 -05:00 |
|
|
Nate Brown
|
5a131b2975
|
Combine ca, cert, and key handling (#952)
|
2023-08-14 21:32:40 -05:00 |
|
|
Nate BrownandWade Simmons
|
223cc6e660
|
Limit how often a busy tunnel can requery the lighthouse (#940)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-08-08 13:26:41 -05:00 |
|
|
Nate Brown
|
14d0106716
|
Send the lh update worker into its own routine instead of taking over the reload routine (#935)
|
2023-07-27 14:38:10 -05:00 |
|
|
Nate Brown
|
0bffa76b5e
|
Build for openbsd (#812)
|
2023-07-27 14:27:35 -05:00 |
|
|
Nate Brown
|
9c6592b159
|
Guard e2e udp and tun channels when closed (#934)
|
2023-07-26 12:52:14 -05:00 |
|
|
Nate Brown
|
a10baeee92
|
Pull hostmap and pending hostmap apart, remove unused functions (#843)
|
2023-07-24 12:37:52 -05:00 |
|
|
Nate Brown
|
1e3c155896
|
Attempt to notify systemd of service readiness on linux (#929)
|
2023-07-24 11:30:18 -05:00 |
|
|
Nate Brown
|
c5ce945852
|
Update README to include a link to go install docs (#919)
|
2023-07-20 21:30:38 -05:00 |
|
|
Nate Brown
|
a3e59a38ef
|
Use registered io on Windows when possible (#905)
|
2023-07-10 12:43:48 -05:00 |
|
|
Nate Brown
|
3bbf5f4e67
|
Use an interface for udp conns (#901)
|
2023-06-14 10:48:52 -05:00 |
|
|
Nate Brown
|
57eb80e9fb
|
v1.7.2 (#887)
Update CHANGELOG for Nebula v1.7.2
|
2023-06-01 11:05:07 -04:00 |
|
|
Nate Brown
|
54a8499c7b
|
Fix go vet (#868)
|
2023-05-09 11:01:30 -05:00 |
|
|
Nate Brown
|
a9cb2e06f4
|
Add ability to respect the system route table for unsafe route on linux (#839)
|
2023-05-09 10:36:55 -05:00 |
|
|
Nate Brown
|
d1f786419c
|
Try rehandshaking a main hostinfo after releasing hostmap locks (#863)
|
2023-05-08 14:43:03 -05:00 |
|
|
Nate Brown
|
48eb63899f
|
Have lighthouses ack updates to reduce test packet traffic (#851)
|
2023-05-05 14:44:03 -05:00 |
|
|
Nate Brown
|
b26c13336f
|
Fix test on master (#860)
|
2023-05-04 20:11:33 -05:00 |
|
|
Nate Brown
|
702e1c59bd
|
Always disconnect block listed hosts (#858)
|
2023-05-04 16:09:42 -05:00 |
|
|
Nate Brown
|
5fe8f45d05
|
Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857)
|
2023-05-04 15:42:12 -05:00 |
|
|
|
03e4a7f988
|
Rehandshaking (#838)
Co-authored-by: Brad Higgins <brad@defined.net>
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-05-04 15:16:37 -05:00 |
|
|
Nate Brown
|
397fe5f879
|
Add ability to skip installing unsafe routes on the os routing table (#831)
|
2023-04-10 12:32:37 -05:00 |
|
|
Nate Brown
|
3cb4e0ef57
|
Allow listen.host to contain names (#825)
|
2023-04-05 11:29:26 -05:00 |
|
|
Nate Brown
|
d3fe3efcb0
|
Fix handshake retry regression (#842)
|
2023-04-05 10:04:30 -05:00 |
|
|
Nate Brown
|
fd99ce9a71
|
Use fewer test packets (#840)
|
2023-04-04 13:42:24 -05:00 |
|
|
Nate Brownandbrad-defined
|
ee8e1348e9
|
Use connection manager to drive NAT maintenance (#835)
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2023-03-31 15:45:05 -05:00 |
|
|
Nate Brown
|
1a6c657451
|
Normalize logs (#837)
|
2023-03-30 15:07:31 -05:00 |
|
|
Nate Brown
|
6b3d42efa5
|
Use atomic.Pointer for certState (#833)
|
2023-03-30 13:04:09 -05:00 |
|
|
Nate Brown
|
f0ef80500d
|
Remove dead code and re-order transit from pending to main hostmap on stage 2 (#828)
|
2023-03-17 15:36:24 -05:00 |
|
|
Nate BrownandWade Simmons
|
92cc32f844
|
Remove handshake race avoidance (#820)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-03-13 12:35:14 -05:00 |
|
|
Nate Brown
|
2ea360e5e2
|
Render hostmaps as mermaid graphs in e2e tests (#815)
|
2023-02-16 13:23:33 -06:00 |
|
|
Nate Brown
|
a06977bbd5
|
Track connections by local index id instead of vpn ip (#807)
|
2023-02-13 14:41:05 -06:00 |
|
|
Nate Brown
|
5278b6f926
|
Generic timerwheel (#804)
|
2023-01-18 10:56:42 -06:00 |
|
|
Nate Brown
|
c177126ed0
|
Fix possible panic in the timerwheels (#802)
|
2023-01-11 19:35:19 -06:00 |
|
|
Nate Brown
|
4c0ae3df5e
|
Refuse to process double encrypted packets (#741)
|
2022-09-19 12:47:48 -05:00 |
|
|
Nate Brown
|
feb3e1317f
|
Add a simple benchmark to e2e tests (#739)
|
2022-09-01 09:44:58 -05:00 |
|
|
Nate Brown
|
b1eeb5f3b8
|
Support unsafe_routes on mobile again (#729)
|
2022-08-05 09:58:10 -05:00 |
|
|
Nate Brown
|
2adf0ca1d1
|
Use issue templates to improve bug reports (#726)
|
2022-07-29 12:57:05 -05:00 |
|
|
|
92dfccf01a
|
v1.6.0 (#701)
Update CHANGELOG for Nebula v1.6.0
Co-authored-by: Wade Simmons <wsimmons@slack-corp.com>
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2022-06-30 16:15:18 -04:00 |
|
|
Nate Brown
|
0d1ee4214a
|
Add relay e2e tests and output some mermaid sequence diagrams (#691)
|
2022-06-27 12:33:29 -05:00 |
|
|
Nate Brown
|
d85e24f49f
|
Allow for self reported ips to the lighthouse (#650)
|
2022-04-04 12:35:23 -05:00 |
|
|
Nate BrownandJohn Maguire
|
312a01dc09
|
Lighthouse reload support (#649)
Co-authored-by: John Maguire <contact@johnmaguire.me>
|
2022-03-14 12:35:13 -05:00 |
|
|
Nate Brown
|
bbe0a032bb
|
Fix windows unsafe_routes regression (#648)
|
2022-03-09 13:23:29 -06:00 |
|
|
Nate Brown
|
15fdabc3ab
|
v1.5.1 (#606)
Update CHANGELOG for Nebula v1.5.1
|
2021-12-13 20:43:25 -05:00 |
|
|
Nate Brown
|
e31006d546
|
Be more clear about ipv4 in nebula-cert (#604)
|
2021-12-07 21:40:30 -06:00 |
|
|
Nate Brown
|
48c47f5841
|
Warn if no lighthouses were configured on a non lighthouse node (#587)
|
2021-11-30 10:31:33 -06:00 |
|
|
Nate Brown
|
78d0d46bae
|
Remove WriteRaw, cidrTree -> routeTree to better describe its purpose, remove redundancy from field names (#582)
|
2021-11-12 12:47:09 -06:00 |
|
|
Nate Brown
|
467e605d5e
|
Push route handling into overlay, a few more nits fixed (#581)
|
2021-11-12 11:19:28 -06:00 |
|
|
Nate Brown
|
2f1f0d602f
|
Cleanup most of the remaining nits (#578)
|
2021-11-12 10:47:36 -06:00 |
|
|
Nate Brown
|
e07524a654
|
Move all of tun into overlay (#577)
|
2021-11-11 16:37:29 -06:00 |
|
|
Nate Brown
|
88ce0edf76
|
Start the overlay package with the old Inside interface (#576)
|
2021-11-10 21:52:26 -06:00 |
|
|
Nate Brown
|
4453964e34
|
Move util to test, contextual errors to util (#575)
|
2021-11-10 21:47:38 -06:00 |
|
|
Nate Brown
|
7801b589b6
|
Sign and notarize darwin universal binaries (#571)
|
2021-11-09 10:49:54 -06:00 |
|
|
Nate Brown
|
b6391292d1
|
Move wintun distributable into release zip for windows (#572)
|
2021-11-08 21:55:10 -06:00 |
|
|
Nate Brown
|
94aaab042f
|
Fix race between punchback and lighthouse handler reset (#566)
|
2021-11-03 21:54:27 -05:00 |
|
|
Nate Brown
|
bcabcfdaca
|
Rework some things into packages (#489)
|
2021-11-03 20:54:04 -05:00 |
|
|
Nate Brown
|
1f75fb3c73
|
Add link to further documentation (#563)
|
2021-11-02 20:55:34 -05:00 |
|
|
Nate Brown
|
32cd9a93f1
|
Bump to go1.17 (#553)
|
2021-10-21 16:24:11 -05:00 |
|
|
Nate Brown
|
97afe2ec48
|
Update changelog for #370 (#551)
|
2021-10-20 14:36:56 -05:00 |
|
|
Nate Brown
|
c726d20578
|
Fix single command ssh exec (#483)
|
2021-06-07 17:06:59 -05:00 |
|
|
Nate BrownandWade Simmons
|
2e1d6743be
|
v1.4.0 (#458)
Update CHANGELOG for Nebula v1.4.0
Co-authored-by: Wade Simmons <wade@wades.im>
|
2021-05-10 21:23:49 -04:00 |
|
|
Nate Brown
|
d004fae4f9
|
Unlock the hostmap quickly, lock hostinfo instead (#459)
|
2021-05-05 13:10:55 -05:00 |
|
|
Nate Brown
|
95f4c8a01b
|
Don't check for rebind if we are closing the tunnel (#457)
|
2021-05-04 19:15:24 -05:00 |
|
|
Nate Brown
|
9ff73cb02f
|
Increase the timestamp resolution for handshakes (#453)
|
2021-05-03 14:10:00 -05:00 |
|
|
Nate BrownandWade Simmons
|
1bc6f5fe6c
|
Minor windows focused improvements (#443)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2021-04-30 15:04:47 -05:00 |
|
|
Nathan BrownandWade Simmons
|
db23fdf9bc
|
Dont apply race avoidance to existing handshakes, use the handshake time to determine who wins (#451)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2021-04-27 21:15:34 -05:00 |
|
|
Nathan Brown
|
df7c7eec4a
|
Get out faster on nil udpAddr (#449)
|
2021-04-26 20:21:47 -05:00 |
|
|
Nathan Brown
|
6f37280e8e
|
Fully close tunnels when CloseAllTunnels is called (#448)
|
2021-04-26 10:42:24 -05:00 |
|
|
Nathan Brown
|
a0735dd7d5
|
Add locking around ssh conns to avoid concurrent map access on reload (#447)
|
2021-04-23 14:43:16 -05:00 |
|
|
Nathan Brown
|
1deb5d98e8
|
Fix tun funcs for ios and android (#446)
|
2021-04-22 15:23:40 -05:00 |
|
|
Nathan Brown
|
a1ee521d79
|
Fix a failed return in an error case (#445)
|
2021-04-17 18:47:31 -05:00 |
|
|
Nathan Brown
|
ab08be1e3e
|
Don't panic on a nil response from the lighthouse (#442)
|
2021-04-15 09:12:21 -05:00 |
|
|
Nathan Brown
|
710df6a876
|
Refactor remotes and handshaking to give every address a fair shot (#437)
|
2021-04-14 13:50:09 -05:00 |
|
|
Nathan Brown
|
480036fbc8
|
Remove unused structs in hostmap.go (#430)
|
2021-04-01 22:07:11 -05:00 |
|
|
Nathan Brown
|
1499be3e40
|
Fix name resolution for host names in config (#431)
|
2021-04-01 21:48:41 -05:00 |
|
|
Nathan Brown
|
64d8e5aa96
|
More LH cleanup (#429)
|
2021-04-01 10:23:31 -05:00 |
|
|
Nathan Brown
|
75f7bda0a4
|
Lighthouse performance pass (#418)
|
2021-03-31 17:32:02 -05:00 |
|
|
Nathan Brown
|
e7e55618ff
|
Include bad backets in the good handshake test (#428)
|
2021-03-31 13:36:10 -05:00 |
|
|
Nathan Brown
|
0c2e5973e1
|
Simple lie test (#427)
|
2021-03-31 10:26:35 -05:00 |
|
|
Nathan Brown
|
830d6d4639
|
Start of end to end testing with a good handshake between two nodes (#425)
|
2021-03-29 14:29:20 -05:00 |
|
|
Nathan Brown
|
883e09a392
|
Don't use a global ca pool (#426)
|
2021-03-29 12:10:19 -05:00 |
|
|
Nathan Brown
|
3ea7e1b75f
|
Don't use a global logger (#423)
|
2021-03-26 09:46:30 -05:00 |
|
|
Nathan Brown
|
7a9f9dbded
|
Don't craft buffers if we don't need them (#416)
|
2021-03-22 18:25:06 -05:00 |
|
|
Nathan Brown
|
7073d204a8
|
IPv6 support for outside (udp) (#369)
|
2021-03-18 20:37:24 -05:00 |
|
|
Nathan Brown
|
29c5f31f90
|
Add a check in the makefile to ensure a minimum version of go is installed (#383)
|
2021-03-02 13:29:05 -06:00 |
|
|
Nathan Brown
|
b6234abfb3
|
Add a way to trigger punch backs via lighthouse (#394)
|
2021-03-01 19:06:01 -06:00 |
|
|
Nathan Brown
|
ecfb40f29c
|
Fix osx for mq changes, this does not implement mq on osx (#395)
|
2021-03-01 16:57:05 -05:00 |
|
|
Nathan Brown
|
d4b81f9b8d
|
Add QR code support to nebula-cert (#297)
|
2021-02-11 18:53:25 -06:00 |
|
|
Nathan Brown
|
f6d0b4b893
|
Update README for supported platforms (#312)
|
2020-10-12 13:11:32 -05:00 |
|
|
Nathan Brown
|
68e3e84fdc
|
More like a library (#279)
|
2020-09-18 09:20:09 -05:00 |
|
|
Nate Brown
|
9db16d226c
|
Make linux tx queue length an error log instead of a fatal on error
|
2019-12-20 09:10:26 -08:00 |
|
|
Nate Brown
|
2d8a8143de
|
Actual fix for the real issue with tests
|
2019-12-18 21:23:59 -08:00 |
|
|
Nate Brown
|
55525654a8
|
Move tun mtu failing to an error log instead of fatal
|
2019-12-18 16:51:59 -08:00 |
|