741 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
JackDoan	60e07370de	fix	2026-05-14 14:19:11 -05:00
JackDoan	44530cb610	tweaks	2026-05-14 14:09:34 -05:00
JackDoan	c5abf30102	checkpt	2026-05-14 14:09:34 -05:00
JackDoan	3a329ec217	size arena to match batch size	2026-05-14 14:09:34 -05:00
JackDoan	afcdf2163b	batched tun interface	2026-05-14 14:09:34 -05:00
JackDoan	9a30c5b6a1	fixes	2026-05-14 12:20:08 -05:00
JackDoan	ad0c99f262	fixes	2026-05-14 12:16:33 -05:00
JackDoan	c1ad7a3af2	snip	2026-05-14 11:50:40 -05:00
JackDoan	cef69465db	fix userdevice	2026-05-14 11:48:15 -05:00
JackDoan	daef13e53a	snip	2026-05-14 11:45:45 -05:00
JackDoan	6e1df81473	snip	2026-05-14 11:43:56 -05:00
JackDoan	c61de54ec3	change Queue.Read signature	2026-05-14 11:42:59 -05:00
JackDoan	1b59636028	flatten tio.Capabilities	2026-05-14 09:50:52 -05:00
JackDoan	487bae4c2f	speed	2026-05-14 09:44:04 -05:00
JackDoan	2bdd284993	new tun interface	2026-05-14 09:30:07 -05:00
Nate Brown	398d67e2da	Windows code signing (#1718)	2026-05-08 14:43:19 -05:00
Nate Brown	696903d6d9	Add a way to set the network type on windows + tests (#1710)	2026-05-07 20:17:38 -05:00
Nate Brown	c82db210ef	Change windows unsafe routes to link routes, fix sshd reload bug (#1709)	2026-05-07 11:30:26 -05:00
Nate Brown	1ada3d4dd9	Use DefinedNets fancy new netbsd10 vagrant box for smokes (#1711)	2026-05-07 10:30:29 -05:00
Nate Brown	5f920fdd7d	Remove the global noiseEndianness var (#1707)	2026-05-06 17:37:03 -05:00
dependabot[bot]	cba9ea5b1f	Bump github.com/gaissmai/bart from 0.26.0 to 0.26.1 (#1604) ... Bumps [github.com/gaissmai/bart](https://github.com/gaissmai/bart) from 0.26.0 to 0.26.1. - [Release notes](https://github.com/gaissmai/bart/releases) - [Commits](https://github.com/gaissmai/bart/compare/v0.26.0...v0.26.1) --- updated-dependencies: - dependency-name: github.com/gaissmai/bart dependency-version: 0.26.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:36:07 -05:00
dependabot[bot]	83809a599a	Bump actions/download-artifact from 7 to 8 (#1617) ... Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 7 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:34:06 -05:00
dependabot[bot]	23c67bd8d8	Bump actions/upload-artifact from 6 to 7 (#1618) ... Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:33:47 -05:00
dependabot[bot]	dd3a7ad03c	Bump docker/setup-buildx-action from 3 to 4 (#1627) ... Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3 to 4. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:33:16 -05:00
dependabot[bot]	dd2ac5d655	Bump docker/login-action from 3 to 4 (#1628) ... Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:32:45 -05:00
dependabot[bot]	76e82a5256	Bump golang.org/x/net (#1664) ... Bumps the golang-x-dependencies group with 1 update in the / directory: [golang.org/x/net](https://github.com/golang/net). Updates `golang.org/x/net` from 0.52.0 to 0.53.0 - [Commits](https://github.com/golang/net/compare/v0.52.0...v0.53.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang-x-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-06 17:32:21 -05:00
dependabot[bot]	eaf756ea6c	Bump Apple-Actions/import-codesign-certs from 6 to 7 (#1697)	2026-05-06 17:31:48 -05:00
Jack Doan	a82a8dc547	don't panic on bad ed25519 key lengths (#1601) ... * don't panic on bad ed25519 key lengths * don't allow mismatched curves * add test	2026-05-06 17:00:07 -05:00
Nate Brown	213dd46588	Stop leaking goroutines past Control.Stop, consolidate punching in Punchy (#1708)	2026-05-06 16:21:16 -05:00
Wade Simmons	4fb5cdb4fa	refactor readOutsidePackets (#1642) ... * refactor readOutsidePackets They layout of this method is confusing and relys on certain parts to return early for things to work correctly. Change the ordering of the logic so that we do this: - Handle unencrypted packets - Decrypt packet - Handle encrypted packets This way, nothing can sneak through unencrypted to where it shouldn't be. * fix comment * code review comments * check for expected type/subtype * check header version * log header * need to handle TestReply * clean roaming / connectionManager * dont need to roam here now, we do it earlier * cleanup metrics and errors * rxInvalid * debug logger checks * ErrOutOfWindow	2026-05-06 12:23:27 -04:00
Jack Doan	ff91c37529	switch Bits to a packed u64 (#1705)	2026-05-06 10:22:26 -05:00
Nate Brown	b7e9939e92	More stable e2e test harness, better for benchmarking (#1702)	2026-05-04 10:12:58 -05:00
Nate Brown	33c2d7277c	Reduce HandshakeManager complexity a little bit (#1701)	2026-05-01 13:21:38 -05:00
Nate Brown	f141cebe8d	Run e2e tests in parallel, include a goroutine leak detector test (#1700)	2026-04-30 21:30:56 -05:00
Nate Brown	9ec8cf10f3	Handshake state machine (#1656)	2026-04-30 21:30:27 -05:00
Nate Brown	1ab1f71dba	Make stats a server we can reconfigure and start/stop (#1670)	2026-04-27 12:25:24 -05:00
Nate Brown	d0f02ba873	Switch to slog, remove logrus (#1672)	2026-04-27 09:41:47 -05:00
Jack Doan	5f890dbc34	noise: only type-assert once (#1691)	2026-04-24 13:12:42 -05:00
brad-defined	db85d61c23	SSH handshake in goroutine and defer close (#1640) ... * SSH handshake in goroutine and defer close	2026-04-23 14:53:52 -04:00
Nate Brown	db9218b0be	Another shot at the flakey smoke test (#1688)	2026-04-23 13:51:15 -05:00
Nate Brown	5f00ab4b74	Fix e2e tests writing after the tester tun is closed causing a panic (#1681)	2026-04-22 17:18:06 -05:00
Guy Nesher	2a1cc62001	fix: guard QueryCert against panic on short/empty QNAME (#1635) ... * fix: guard QueryCert against panic on short/empty QNAME QueryCert slices data[:len(data)-1] to strip a trailing dot, which panics when data is empty (slice bounds [:-1]). Add a length check to return early for inputs shorter than a minimal valid "x." form. While miekg/dns currently rejects wire-format packets that would produce an empty QNAME, the Nebula code should not rely on library behavior for crash safety. Made-with: Cursor * fix merge conflicts --------- Co-authored-by: JackDoan <me@jackdoan.com>	2026-04-22 12:42:14 -05:00
John Maguire	e753e6e93c	Immediate Lighthouse update after reconfig/reconnect (#1645)	2026-04-21 16:33:32 -04:00
John Maguire	32a7c04498	Return NODATA instead of NXDOMAIN for missing record types (#1668) ... The DNS responder was setting RCODE=NXDOMAIN (Name Error) any time the answer section was empty, including for names that exist in the lighthouse but lack a record of the requested type (e.g. an AAAA query for a v4-only host). Per RFC 2308 §2.1, NXDOMAIN means "the domain referred to by the QNAME does not exist", and per RFC 2308 §2.2 a name that exists with no record of the requested type must be answered with RCODE=NOERROR and an empty answer section (NODATA). The practical fallout: busybox ping in Alpine issues AAAA first, treats NXDOMAIN as a hard failure, and never falls through to A. Returning NODATA lets the resolver continue to the A query as it should. Track whether any queried A/AAAA name is known in either map and only set RcodeNameError when no queried name exists at all.	2026-04-21 16:32:48 -04:00
Nate Brown	8c50fc3f60	Plug the conntrack cache ticker leak and nebula-service log.Fatal calls (#1669)	2026-04-21 13:19:54 -05:00
Nate Brown	2f4532f102	No more dns globals, proper cleanup on shutdown (#1667)	2026-04-21 12:41:10 -05:00
Nate Brown	8c71f2f3f9	FreeBSD tun needs to be non blocking as well (#1666)	2026-04-21 10:45:46 -05:00
Nate Brown	3d34cc9b74	Try to make smoke less flakey (#1663)	2026-04-20 16:38:14 -05:00
Jack Doan	e80b9830a3	Remove more os.Exit calls and give a more reliable wait for stop function (attempt 3) (#1661)	2026-04-20 16:08:26 -05:00
Nate Brown	49e3c4649b	Try the hot new DefinedNet openbsd78 box (#1657)	2026-04-17 09:18:23 -05:00