 Nate Brown
|
72a40007ea
|
v1.10.1 (#1575)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.1
|
2026-01-16 10:33:54 -05:00 |
|
|
Nate Brown
|
ac3bd9cdd0
|
Avoid losing system originated unsafe routes on reload (#1573)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-01-15 13:48:17 -06:00 |
|
|
Nate Brown
|
1283ff0db4
|
Add option to control accepting recv_error (#1569)
|
2026-01-13 00:00:27 -06:00 |
|
|
Nate Brownandbrad-defined
|
69259e6307
|
Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) (#1568)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2026-01-09 10:35:09 -06:00 |
|
|
Nate Brown
|
2d16940232
|
Slight improvement to hot path benchmark, add a relay hot path benchmark (#1539)
gofmt / Run gofmt (push) Failing after 15s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-09 22:29:26 -06:00 |
|
|
Nate Brown
|
59e24b98bd
|
v1.10.0 (#1534)
gofmt / Run gofmt (push) Failing after 4s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.0
|
2025-12-04 14:42:31 -05:00 |
|
|
Nate Brown
|
56067afca2
|
Stab at better logging when a relay is being used (#1533)
gofmt / Run gofmt (push) Failing after 5s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-03 17:48:29 -06:00 |
|
|
Nate Brown
|
64f202fa17
|
Make 0.0.0.0/0 and ::/0 not mean any address family, add any for that (#1538)
gofmt / Run gofmt (push) Failing after 13s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-11-21 13:46:36 -06:00 |
|
|
Nate Brown
|
83ae8077f5
|
No need to clear counter 0 (#1537)
|
2025-11-20 13:22:58 -06:00 |
|
|
Nate Brown
|
7aff313a17
|
Relax the restriction on routines from the config (#1531)
|
2025-11-19 13:10:11 -06:00 |
|
|
Nate Brown
|
99faab505c
|
Fix a potential bug with udp ipv4 only on darwin (#1532)
|
2025-11-19 09:56:58 -06:00 |
|
|
Nate Brown
|
52f1908126
|
Don't log every blocklisted fingerprint (#1525)
|
2025-11-12 09:41:46 -06:00 |
|
|
Nate Brown
|
45c1d3eab3
|
Support for multi proto tun device on OpenBSD (#1495)
|
2025-10-08 16:56:42 -05:00 |
|
|
Nate Brown
|
eb89839d13
|
Support for multi proto tun device on NetBSD (#1492)
|
2025-10-07 20:17:50 -05:00 |
|
|
Nate Brown
|
fb7f0c3657
|
Use x/net/route to manage routes directly (#1488)
|
2025-10-03 10:59:53 -05:00 |
|
|
Nate Brown
|
52623820c2
|
Drop inactive tunnels (#1427)
|
2025-07-03 09:58:37 -05:00 |
|
|
Nate Brown
|
c2420642a0
|
Darwin udp fix (#1428)
|
2025-07-02 15:50:22 -05:00 |
|
|
Nate Brown
|
f8734ffa43
|
Improve logging when handshaking with an invalid cert (#1345)
|
2025-03-07 10:45:31 -06:00 |
|
|
|
d97ed57a19
|
V2 certificate format (#1216)
Co-authored-by: Nate Brown <nbrown.us@gmail.com>
Co-authored-by: Jack Doan <jackdoan@rivian.com>
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
Co-authored-by: Jack Doan <me@jackdoan.com>
|
2025-03-06 11:28:26 -06:00 |
|
|
Nate Brown
|
3e6c75573f
|
Fix static host map wrong responder situations, correct logging (#1259)
|
2024-10-23 14:28:02 -05:00 |
|
|
Nate Brown
|
08ac65362e
|
Cert interface (#1212)
|
2024-10-10 18:00:22 -05:00 |
|
|
Nate Brown
|
e264a0ff88
|
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2024-07-31 10:18:56 -05:00 |
|
|
Nate Brown
|
a99618e95c
|
Don't log invalid certificates (#1116)
|
2024-04-29 15:21:00 -05:00 |
|
|
Nate Brown
|
a5a07cc760
|
Allow :: in lighthouse.dns.host config (#1115)
|
2024-04-11 21:44:36 -05:00 |
|
|
Nate Brown
|
c1711bc9c5
|
Remove tcp rtt tracking from the firewall (#1114)
|
2024-04-11 21:44:22 -05:00 |
|
|
Nate Brown
|
a390125935
|
Support reloading preferred_ranges (#1043)
|
2024-04-03 22:14:51 -05:00 |
|
|
Nate Brown
|
bbb15f8cb1
|
Unsafe route reload (#1083)
|
2024-03-28 15:17:28 -05:00 |
|
|
Nate Brown
|
cc8b3cc961
|
Add config option for local_cidr control
|
2024-02-15 11:46:45 -06:00 |
|
|
Nate Brown
|
f346cf4109
|
At the end
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
8f44f22c37
|
In the middle
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
072edd56b3
|
Fix re-entrant GetOrHandshake issues (#1044)
|
2023-12-19 11:58:31 -06:00 |
|
|
Nate Brown
|
3356e03d85
|
Default pki.disconnect_invalid to true and make it reloadable (#859)
|
2023-11-13 12:39:38 -06:00 |
|
|
Nate Brown
|
5181cb0474
|
Use generics for CIDRTrees to avoid casting issues (#1004)
|
2023-11-02 17:05:08 -05:00 |
|
|
Nate Brown
|
a44e1b8b05
|
Clean up a hostinfo to reduce memory usage (#955)
|
2023-11-02 16:53:59 -05:00 |
|
|
Nate Brown
|
50d6a1e8ca
|
QueryServer needs to be done outside of the lock (#996)
|
2023-10-17 15:43:51 -05:00 |
|
|
Nate Brown
|
5fccbb8676
|
Retry wintun creation (#985)
|
2023-10-16 10:06:43 -05:00 |
|
|
Nate Brown
|
f7e392995a
|
Fix rebind to not put the socket in blocking mode (#972)
|
2023-09-07 11:56:09 -05:00 |
|
|
Nate Brown
|
076ebc6c6e
|
Simplify getting a hostinfo or starting a handshake with one (#954)
|
2023-08-21 18:51:45 -05:00 |
|
|
Nate Brown
|
7edcf620c0
|
We only need the certificate in ConnectionState (#953)
|
2023-08-21 14:11:06 -05:00 |
|
|
Nate Brown
|
5a131b2975
|
Combine ca, cert, and key handling (#952)
|
2023-08-14 21:32:40 -05:00 |
|
|
Nate BrownandWade Simmons
|
223cc6e660
|
Limit how often a busy tunnel can requery the lighthouse (#940)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-08-08 13:26:41 -05:00 |
|
|
Nate Brown
|
14d0106716
|
Send the lh update worker into its own routine instead of taking over the reload routine (#935)
|
2023-07-27 14:38:10 -05:00 |
|
|
Nate Brown
|
0bffa76b5e
|
Build for openbsd (#812)
|
2023-07-27 14:27:35 -05:00 |
|
|
Nate Brown
|
9c6592b159
|
Guard e2e udp and tun channels when closed (#934)
|
2023-07-26 12:52:14 -05:00 |
|
|
Nate Brown
|
a10baeee92
|
Pull hostmap and pending hostmap apart, remove unused functions (#843)
|
2023-07-24 12:37:52 -05:00 |
|
|
Nate Brown
|
1e3c155896
|
Attempt to notify systemd of service readiness on linux (#929)
|
2023-07-24 11:30:18 -05:00 |
|
|
Nate Brown
|
c5ce945852
|
Update README to include a link to go install docs (#919)
|
2023-07-20 21:30:38 -05:00 |
|
|
Nate Brown
|
a3e59a38ef
|
Use registered io on Windows when possible (#905)
|
2023-07-10 12:43:48 -05:00 |
|
|
Nate Brown
|
3bbf5f4e67
|
Use an interface for udp conns (#901)
|
2023-06-14 10:48:52 -05:00 |
|
|
Nate Brown
|
57eb80e9fb
|
v1.7.2 (#887)
Update CHANGELOG for Nebula v1.7.2
|
2023-06-01 11:05:07 -04:00 |
|
|
Nate Brown
|
54a8499c7b
|
Fix go vet (#868)
|
2023-05-09 11:01:30 -05:00 |
|
|
Nate Brown
|
a9cb2e06f4
|
Add ability to respect the system route table for unsafe route on linux (#839)
|
2023-05-09 10:36:55 -05:00 |
|
|
Nate Brown
|
d1f786419c
|
Try rehandshaking a main hostinfo after releasing hostmap locks (#863)
|
2023-05-08 14:43:03 -05:00 |
|
|
Nate Brown
|
48eb63899f
|
Have lighthouses ack updates to reduce test packet traffic (#851)
|
2023-05-05 14:44:03 -05:00 |
|
|
Nate Brown
|
b26c13336f
|
Fix test on master (#860)
|
2023-05-04 20:11:33 -05:00 |
|
|
Nate Brown
|
702e1c59bd
|
Always disconnect block listed hosts (#858)
|
2023-05-04 16:09:42 -05:00 |
|
|
Nate Brown
|
5fe8f45d05
|
Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857)
|
2023-05-04 15:42:12 -05:00 |
|
|
|
03e4a7f988
|
Rehandshaking (#838)
Co-authored-by: Brad Higgins <brad@defined.net>
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-05-04 15:16:37 -05:00 |
|
|
Nate Brown
|
397fe5f879
|
Add ability to skip installing unsafe routes on the os routing table (#831)
|
2023-04-10 12:32:37 -05:00 |
|
|
Nate Brown
|
3cb4e0ef57
|
Allow listen.host to contain names (#825)
|
2023-04-05 11:29:26 -05:00 |
|
|
Nate Brown
|
d3fe3efcb0
|
Fix handshake retry regression (#842)
|
2023-04-05 10:04:30 -05:00 |
|
|
Nate Brown
|
fd99ce9a71
|
Use fewer test packets (#840)
|
2023-04-04 13:42:24 -05:00 |
|
|
Nate Brownandbrad-defined
|
ee8e1348e9
|
Use connection manager to drive NAT maintenance (#835)
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2023-03-31 15:45:05 -05:00 |
|
|
Nate Brown
|
1a6c657451
|
Normalize logs (#837)
|
2023-03-30 15:07:31 -05:00 |
|
|
Nate Brown
|
6b3d42efa5
|
Use atomic.Pointer for certState (#833)
|
2023-03-30 13:04:09 -05:00 |
|
|
Nate Brown
|
f0ef80500d
|
Remove dead code and re-order transit from pending to main hostmap on stage 2 (#828)
|
2023-03-17 15:36:24 -05:00 |
|
|
Nate BrownandWade Simmons
|
92cc32f844
|
Remove handshake race avoidance (#820)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-03-13 12:35:14 -05:00 |
|
|
Nate Brown
|
2ea360e5e2
|
Render hostmaps as mermaid graphs in e2e tests (#815)
|
2023-02-16 13:23:33 -06:00 |
|
|
Nate Brown
|
a06977bbd5
|
Track connections by local index id instead of vpn ip (#807)
|
2023-02-13 14:41:05 -06:00 |
|
|
Nate Brown
|
5278b6f926
|
Generic timerwheel (#804)
|
2023-01-18 10:56:42 -06:00 |
|
|
Nate Brown
|
c177126ed0
|
Fix possible panic in the timerwheels (#802)
|
2023-01-11 19:35:19 -06:00 |
|
|
Nate Brown
|
4c0ae3df5e
|
Refuse to process double encrypted packets (#741)
|
2022-09-19 12:47:48 -05:00 |
|
|
Nate Brown
|
feb3e1317f
|
Add a simple benchmark to e2e tests (#739)
|
2022-09-01 09:44:58 -05:00 |
|
|
Nate Brown
|
b1eeb5f3b8
|
Support unsafe_routes on mobile again (#729)
|
2022-08-05 09:58:10 -05:00 |
|
|
Nate Brown
|
2adf0ca1d1
|
Use issue templates to improve bug reports (#726)
|
2022-07-29 12:57:05 -05:00 |
|
|
|
92dfccf01a
|
v1.6.0 (#701)
Update CHANGELOG for Nebula v1.6.0
Co-authored-by: Wade Simmons <wsimmons@slack-corp.com>
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2022-06-30 16:15:18 -04:00 |
|
|
Nate Brown
|
0d1ee4214a
|
Add relay e2e tests and output some mermaid sequence diagrams (#691)
|
2022-06-27 12:33:29 -05:00 |
|
|
Nate Brown
|
d85e24f49f
|
Allow for self reported ips to the lighthouse (#650)
|
2022-04-04 12:35:23 -05:00 |
|
|
Nate BrownandJohn Maguire
|
312a01dc09
|
Lighthouse reload support (#649)
Co-authored-by: John Maguire <contact@johnmaguire.me>
|
2022-03-14 12:35:13 -05:00 |
|
|
Nate Brown
|
bbe0a032bb
|
Fix windows unsafe_routes regression (#648)
|
2022-03-09 13:23:29 -06:00 |
|
|
Nate Brown
|
15fdabc3ab
|
v1.5.1 (#606)
Update CHANGELOG for Nebula v1.5.1
|
2021-12-13 20:43:25 -05:00 |
|
|
Nate Brown
|
e31006d546
|
Be more clear about ipv4 in nebula-cert (#604)
|
2021-12-07 21:40:30 -06:00 |
|
|
Nate Brown
|
48c47f5841
|
Warn if no lighthouses were configured on a non lighthouse node (#587)
|
2021-11-30 10:31:33 -06:00 |
|
|
Nate Brown
|
78d0d46bae
|
Remove WriteRaw, cidrTree -> routeTree to better describe its purpose, remove redundancy from field names (#582)
|
2021-11-12 12:47:09 -06:00 |
|
|
Nate Brown
|
467e605d5e
|
Push route handling into overlay, a few more nits fixed (#581)
|
2021-11-12 11:19:28 -06:00 |
|
|
Nate Brown
|
2f1f0d602f
|
Cleanup most of the remaining nits (#578)
|
2021-11-12 10:47:36 -06:00 |
|
|
Nate Brown
|
e07524a654
|
Move all of tun into overlay (#577)
|
2021-11-11 16:37:29 -06:00 |
|
|
Nate Brown
|
88ce0edf76
|
Start the overlay package with the old Inside interface (#576)
|
2021-11-10 21:52:26 -06:00 |
|
|
Nate Brown
|
4453964e34
|
Move util to test, contextual errors to util (#575)
|
2021-11-10 21:47:38 -06:00 |
|
|
Nate Brown
|
7801b589b6
|
Sign and notarize darwin universal binaries (#571)
|
2021-11-09 10:49:54 -06:00 |
|
|
Nate Brown
|
b6391292d1
|
Move wintun distributable into release zip for windows (#572)
|
2021-11-08 21:55:10 -06:00 |
|
|
Nate Brown
|
94aaab042f
|
Fix race between punchback and lighthouse handler reset (#566)
|
2021-11-03 21:54:27 -05:00 |
|
|
Nate Brown
|
bcabcfdaca
|
Rework some things into packages (#489)
|
2021-11-03 20:54:04 -05:00 |
|
|
Nate Brown
|
1f75fb3c73
|
Add link to further documentation (#563)
|
2021-11-02 20:55:34 -05:00 |
|
|
Nate Brown
|
32cd9a93f1
|
Bump to go1.17 (#553)
|
2021-10-21 16:24:11 -05:00 |
|
|
Nate Brown
|
97afe2ec48
|
Update changelog for #370 (#551)
|
2021-10-20 14:36:56 -05:00 |
|
|
Nate Brown
|
c726d20578
|
Fix single command ssh exec (#483)
|
2021-06-07 17:06:59 -05:00 |
|
|
Nate BrownandWade Simmons
|
2e1d6743be
|
v1.4.0 (#458)
Update CHANGELOG for Nebula v1.4.0
Co-authored-by: Wade Simmons <wade@wades.im>
|
2021-05-10 21:23:49 -04:00 |
|
|
Nate Brown
|
d004fae4f9
|
Unlock the hostmap quickly, lock hostinfo instead (#459)
|
2021-05-05 13:10:55 -05:00 |
|
|
Nate Brown
|
95f4c8a01b
|
Don't check for rebind if we are closing the tunnel (#457)
|
2021-05-04 19:15:24 -05:00 |
|