nebula

0 Fork 0

mirror of https://github.com/slackhq/nebula.git synced 2026-11-15 21:36:52 +01:00

Author	SHA1	Message	Date
Nate Brown	a274c7b9bd	Keep static_host_map DNS results when a lookup fails	2026-10-21 09:28:03 -05:00
John Maguire	9a5bdb508e	Apply remote_allow_list before capping addrs at MaxRemotes (#1985 ) smoke-extra / freebsd-amd64 (push) Failing after 16s Details smoke-extra / linux-amd64-ipv6disable (push) Failing after 17s Details smoke-extra / netbsd-amd64 (push) Failing after 17s Details smoke-extra / openbsd-amd64 (push) Failing after 17s Details smoke-extra / linux-386 (push) Failing after 18s Details smoke / Run multi node smoke test (push) Failing after 1m43s Details Build and test / Static checks (push) Successful in 48s Details Build and test / Test linux (push) Failing after 1m28s Details Build and test / Test linux-pkcs11 (push) Failing after 2m18s Details Build and test / Test linux-boringcrypto (push) Failing after 2m59s Details Build and test / Test linux-fips140 (push) Failing after 3m3s Details Build and test / Cross-build linux-arm (push) Successful in 3m9s Details Build and test / Cross-build linux-mips (push) Successful in 3m56s Details Build and test / Cross-build linux-other (push) Successful in 3m15s Details Build and test / Cross-build windows (push) Successful in 1m5s Details Build and test / Cross-build freebsd (push) Successful in 1m36s Details Build and test / Cross-build netbsd (push) Successful in 1m34s Details Build and test / Cross-build openbsd (push) Successful in 1m33s Details Build and test / Cross-build mobile (push) Successful in 3m34s Details smoke / Run self traffic smoke test on macOS (push) Canceled after 0s Details smoke-extra / Run windows smoke test (push) Canceled after 0s Details Build and test / Test macos (push) Canceled after 0s Details Build and test / Test windows (push) Canceled after 0s Details Build and test / CI status (push) Canceled after 0s Details unlockedSetV4/V6 truncated the reported list to MaxRemotes and only then ran the allow list check. A host reporting more than MaxRemotes addrs (docker bridges, temporary v6 addrs, etc) could have every allowed addr discarded if the denied ones sorted first. Filter the full list and stop once MaxRemotes allowed addrs are collected. This affects lighthouses processing HostUpdateNotification and clients processing HostQueryReply.	2026-10-20 22:08:55 -04:00
Nate Brown	6c7ebb0875	Reset static host list addresses on change (#1713 )	2026-05-15 15:35:49 -05:00
Nate Brown Jack Doan brad-defined Jack Doan	d97ed57a19	V2 certificate format (#1216 ) Co-authored-by: Nate Brown <nbrown.us@gmail.com> Co-authored-by: Jack Doan <jackdoan@rivian.com> Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com> Co-authored-by: Jack Doan <me@jackdoan.com>	2025-03-06 11:28:26 -06:00
Nate Brown	e264a0ff88	Switch most everything to netip in prep for ipv6 in the overlay (#1173 )	2024-07-31 10:18:56 -05:00
brad-defined	bd9cc01d62	Dns static lookerupper (#796 ) * Support lighthouse DNS names, and regularly resolve the name in a background goroutine to discover DNS updates.	2023-05-09 11:22:08 -04:00
Nate Brown	bcabcfdaca	Rework some things into packages (#489 )	2021-11-03 20:54:04 -05:00
Wade Simmons	ea2c186a77	remote_allow_ranges: allow inside CIDR specific remote_allow_lists (#540 ) This allows you to configure remote allow lists specific to different subnets of the inside CIDR. Example: remote_allow_ranges: 10.42.42.0/24: 192.168.0.0/16: true This would only allow hosts with a VPN IP in the 10.42.42.0/24 range to have private IPs (and thus don't connect over public IPs). The PR also refactors AllowList into RemoteAllowList and LocalAllowList to make it clearer which methods are allowed on which allow list.	2021-10-19 10:54:30 -04:00
Nathan Brown	710df6a876	Refactor remotes and handshaking to give every address a fair shot (#437 )	2021-04-14 13:50:09 -05:00