nebula

mirror of https://github.com/slackhq/nebula.git synced 2026-09-30 11:26:38 +02:00

Author	SHA1	Message	Date
Nate Brown	5ecdd4eaa9	Fix e2e test races when looking at hostmap counts (#1795 )	2026-07-09 18:48:14 -05:00
Jack Doan	e6032f81aa	correctly record window counters for relayed packets in a tunnel (#1751 ) smoke-extra / freebsd-amd64 (push) Failing after 18s Details smoke-extra / linux-amd64-ipv6disable (push) Failing after 16s Details smoke-extra / netbsd-amd64 (push) Failing after 15s Details smoke-extra / openbsd-amd64 (push) Failing after 16s Details smoke-extra / linux-386 (push) Failing after 16s Details smoke / Run multi node smoke test (push) Failing after 1m27s Details Build and test / Static checks (push) Successful in 1m43s Details Build and test / Test linux (push) Failing after 1m42s Details Build and test / Test linux-boringcrypto (push) Failing after 2m57s Details Build and test / Test linux-pkcs11 (push) Failing after 3m3s Details Build and test / Cross-build linux-arm (push) Successful in 3m2s Details Build and test / Cross-build linux-mips (push) Successful in 3m46s Details Build and test / Cross-build linux-other (push) Successful in 3m7s Details Build and test / Cross-build windows (push) Successful in 1m2s Details Build and test / Cross-build freebsd (push) Successful in 1m36s Details Build and test / Cross-build netbsd (push) Successful in 1m34s Details Build and test / Cross-build openbsd (push) Successful in 1m33s Details Build and test / Cross-build mobile (push) Successful in 3m16s Details smoke-extra / Run windows smoke test (push) Has been cancelled Details Build and test / Test macos (push) Has been cancelled Details Build and test / Test windows (push) Has been cancelled Details Build and test / CI status (push) Has been cancelled Details	2026-06-09 16:18:59 -05:00
Nate Brown	b7e9939e92	More stable e2e test harness, better for benchmarking (#1702 ) gofmt / Run gofmt (push) Failing after 2s Details smoke-extra / Run extra smoke tests (push) Failing after 2s Details smoke / Run multi node smoke test (push) Failing after 3s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 2s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 2s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 3s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details	2026-05-04 10:12:58 -05:00
Nate Brown	f141cebe8d	Run e2e tests in parallel, include a goroutine leak detector test (#1700 ) gofmt / Run gofmt (push) Failing after 41s Details smoke-extra / Run extra smoke tests (push) Failing after 3s Details smoke / Run multi node smoke test (push) Failing after 3s Details Build and test / Build all and test on ubuntu-linux (push) Failing after 3s Details Build and test / Build and test on linux with boringcrypto (push) Failing after 2s Details Build and test / Build and test on linux with pkcs11 (push) Failing after 3s Details Build and test / Build and test on macos-latest (push) Has been cancelled Details Build and test / Build and test on windows-latest (push) Has been cancelled Details	2026-04-30 21:30:56 -05:00
Jack Doan	91d1f4675a	properly handle closetunnel packets (#1638 )	2026-03-25 11:59:37 -05:00
Jack Doan	a89f95182c	Firewall types and cross-stack subnet stuff (#1509 ) * firewall can distinguish if the host connecting has an overlapping network, is a VPN peer without an overlapping network, or is a unsafe network * Cross stack subnet stuff (#1512) * experiment with not filtering out non-common addresses in hostinfo.networks * allow handshakes without overlaps * unsafe network test * change HostInfo.buildNetworks argument to reference the cert	2025-11-12 13:40:20 -06:00
Jack Doan	01909f4715	try to make certificate addition/removal reloadable in some cases (#1468 ) * try to make certificate addition/removal reloadable in some cases * very spicy change to respond to handshakes with cert versions we cannot match with a cert that we can indeed match * even spicier change to rehandshake if we detect our cert is lower-version than our peer, and we have a newer-version cert available * make tryRehandshake easier to understand	2025-11-03 19:38:44 -06:00
Nate Brown	52623820c2	Drop inactive tunnels (#1427 )	2025-07-03 09:58:37 -05:00