nebula

mirror of https://github.com/slackhq/nebula.git synced 2026-09-30 10:26:39 +02:00

Author	SHA1	Message	Date
Nate Brown	c2fbe215e6	Fix a test race, make dns server reload/restart safer (#1815 ) smoke-extra / freebsd-amd64 (push) Failing after 54s Details smoke-extra / linux-amd64-ipv6disable (push) Failing after 11s Details smoke-extra / netbsd-amd64 (push) Failing after 11s Details smoke-extra / openbsd-amd64 (push) Failing after 22s Details smoke-extra / linux-386 (push) Failing after 23s Details smoke / Run multi node smoke test (push) Failing after 1m26s Details Build and test / Static checks (push) Successful in 2m11s Details Build and test / Test linux (push) Failing after 1m7s Details Build and test / Test linux-boringcrypto (push) Failing after 2m41s Details Build and test / Test linux-pkcs11 (push) Failing after 2m2s Details Build and test / Cross-build linux-arm (push) Successful in 3m5s Details Build and test / Cross-build linux-mips (push) Successful in 3m48s Details Build and test / Cross-build linux-other (push) Successful in 3m8s Details Build and test / Cross-build windows (push) Successful in 1m4s Details Build and test / Cross-build freebsd (push) Successful in 1m36s Details Build and test / Cross-build netbsd (push) Successful in 1m33s Details Build and test / Cross-build openbsd (push) Successful in 1m32s Details Build and test / Cross-build mobile (push) Successful in 3m16s Details smoke-extra / Run windows smoke test (push) Has been cancelled Details Build and test / Test macos (push) Has been cancelled Details Build and test / Test windows (push) Has been cancelled Details Build and test / CI status (push) Has been cancelled Details	2026-07-22 15:05:10 -05:00
Nate Brown	625f58b84a	Record my local details in the dns server if enabled (#1716 )	2026-05-15 15:36:44 -05:00
Nate Brown	d0f02ba873	Switch to slog, remove logrus (#1672 )	2026-04-27 09:41:47 -05:00
Guy NesherandJackDoan	2a1cc62001	fix: guard QueryCert against panic on short/empty QNAME (#1635 ) * fix: guard QueryCert against panic on short/empty QNAME QueryCert slices data[:len(data)-1] to strip a trailing dot, which panics when data is empty (slice bounds [:-1]). Add a length check to return early for inputs shorter than a minimal valid "x." form. While miekg/dns currently rejects wire-format packets that would produce an empty QNAME, the Nebula code should not rely on library behavior for crash safety. Made-with: Cursor * fix merge conflicts --------- Co-authored-by: JackDoan <me@jackdoan.com>	2026-04-22 12:42:14 -05:00
John Maguire	32a7c04498	Return NODATA instead of NXDOMAIN for missing record types (#1668 ) The DNS responder was setting RCODE=NXDOMAIN (Name Error) any time the answer section was empty, including for names that exist in the lighthouse but lack a record of the requested type (e.g. an AAAA query for a v4-only host). Per RFC 2308 §2.1, NXDOMAIN means "the domain referred to by the QNAME does not exist", and per RFC 2308 §2.2 a name that exists with no record of the requested type must be answered with RCODE=NOERROR and an empty answer section (NODATA). The practical fallout: busybox ping in Alpine issues AAAA first, treats NXDOMAIN as a hard failure, and never falls through to A. Returning NODATA lets the resolver continue to the A query as it should. Track whether any queried A/AAAA name is known in either map and only set RcodeNameError when no queried name exists at all.	2026-04-21 16:32:48 -04:00
Nate Brown	2f4532f102	No more dns globals, proper cleanup on shutdown (#1667 )	2026-04-21 12:41:10 -05:00
Wade Simmons	879852c32a	upgrade to yaml.v3 (#1148 ) gofmt / Run gofmt (push) Successful in 37s Details smoke-extra / Run extra smoke tests (push) Failing after 20s Details smoke / Run multi node smoke test (push) Failing after 1m25s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 18m51s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 2m44s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 2m27s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details * upgrade to yaml.v3 The main nice fix here is that maps unmarshal into `map[string]any` instead of `map[any]any`, so it cleans things up a bit. * add config.AsBool Since yaml.v3 doesn't automatically convert yes to bool now, for backwards compat * use type aliases for m * more cleanup * more cleanup * more cleanup * go mod cleanup	2025-03-31 16:08:34 -04:00
Nate Brown Jack Doan brad-defined Jack Doan	d97ed57a19	V2 certificate format (#1216 ) Co-authored-by: Nate Brown <nbrown.us@gmail.com> Co-authored-by: Jack Doan <jackdoan@rivian.com> Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com> Co-authored-by: Jack Doan <me@jackdoan.com>	2025-03-06 11:28:26 -06:00
Nate Brown	a5a07cc760	Allow `::` in lighthouse.dns.host config (#1115 )	2024-04-11 21:44:36 -05:00
Slack Security Team	f22b4b584d	Public Release	2019-11-19 17:00:20 +00:00