 Nate Brown
|
3a95495c63
|
Fix duplicate log fields which slog duplicates (#1734)
smoke-extra / freebsd-amd64 (push) Failing after 16s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 16s
smoke-extra / netbsd-amd64 (push) Failing after 15s
smoke-extra / openbsd-amd64 (push) Failing after 15s
smoke-extra / linux-386 (push) Failing after 15s
smoke / Run multi node smoke test (push) Failing after 1m27s
Build and test / Static checks (push) Successful in 40s
Build and test / Test linux (push) Failing after 1m7s
Build and test / Test linux-boringcrypto (push) Failing after 2m41s
Build and test / Test linux-pkcs11 (push) Failing after 2m3s
Build and test / Cross-build linux-arm (push) Successful in 3m5s
Build and test / Cross-build linux-mips (push) Successful in 3m57s
Build and test / Cross-build linux-other (push) Successful in 3m5s
Build and test / Cross-build windows (push) Successful in 1m0s
Build and test / Cross-build freebsd (push) Successful in 1m33s
Build and test / Cross-build netbsd (push) Successful in 1m31s
Build and test / Cross-build openbsd (push) Successful in 1m33s
Build and test / Cross-build mobile (push) Successful in 3m13s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-05-22 10:19:53 -05:00 |
|
|
Nate Brown
|
873f94f465
|
Reduce relay log spam (#1733)
|
2026-05-22 10:19:06 -05:00 |
|
|
Nate Brown
|
0c1ad9bb48
|
Parallelize the tests a bit more (#1730)
smoke-extra / freebsd-amd64 (push) Failing after 15s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 12s
smoke-extra / netbsd-amd64 (push) Failing after 12s
smoke-extra / openbsd-amd64 (push) Failing after 21s
smoke-extra / linux-386 (push) Failing after 17s
smoke / Run multi node smoke test (push) Failing after 1m26s
Build and test / Static checks (push) Successful in 1m39s
Build and test / Test linux (push) Failing after 1m57s
Build and test / Test linux-boringcrypto (push) Failing after 2m33s
Build and test / Test linux-pkcs11 (push) Failing after 3m22s
Build and test / Cross-build linux-arm (push) Successful in 2m56s
Build and test / Cross-build linux-mips (push) Successful in 3m35s
Build and test / Cross-build linux-other (push) Successful in 2m57s
Build and test / Cross-build windows (push) Successful in 56s
Build and test / Cross-build freebsd (push) Successful in 1m29s
Build and test / Cross-build netbsd (push) Successful in 1m27s
Build and test / Cross-build openbsd (push) Successful in 1m29s
Build and test / Cross-build mobile (push) Successful in 3m6s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Test macos (push) Has been cancelled
Build and test / Test windows (push) Has been cancelled
Build and test / CI status (push) Has been cancelled
|
2026-05-19 08:35:04 -05:00 |
|
|
Nate Brown
|
04dea41f74
|
Make firewall reload when unsafe networks in the cert changes (#1719)
|
2026-05-18 11:25:34 -05:00 |
|
|
Nate Brown
|
0d23377c65
|
Fix flakey cert tests (#1728)
|
2026-05-18 11:10:30 -05:00 |
|
|
Nate Brown
|
ffd5249cf5
|
Search for config.yaml/yml in both service and cli mode (#1717)
gofmt / Run gofmt (push) Successful in 11s
smoke-extra / freebsd-amd64 (push) Failing after 13s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 12s
smoke-extra / netbsd-amd64 (push) Failing after 14s
smoke-extra / openbsd-amd64 (push) Failing after 12s
smoke-extra / linux-386 (push) Failing after 12s
smoke / Run multi node smoke test (push) Failing after 1m27s
Build and test / Build all and test on ubuntu-linux (push) Failing after 20m14s
Build and test / Build and test on linux with boringcrypto (push) Failing after 5m14s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3m12s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-15 15:37:01 -05:00 |
|
|
Nate Brown
|
625f58b84a
|
Record my local details in the dns server if enabled (#1716)
|
2026-05-15 15:36:44 -05:00 |
|
|
Nate Brown
|
99c5854e5c
|
Prime some critical stats before the first scrape (#1715)
|
2026-05-15 15:36:26 -05:00 |
|
|
Nate Brown
|
3c121e7ab1
|
Allow for - to stand in for stdin/out (#1714)
|
2026-05-15 15:36:08 -05:00 |
|
|
Nate Brown
|
6c7ebb0875
|
Reset static host list addresses on change (#1713)
|
2026-05-15 15:35:49 -05:00 |
|
|
Nate Brown
|
398d67e2da
|
Windows code signing (#1718)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / freebsd-amd64 (push) Failing after 3s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 3s
smoke-extra / netbsd-amd64 (push) Failing after 3s
smoke-extra / openbsd-amd64 (push) Failing after 2s
smoke-extra / linux-386 (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-08 14:43:19 -05:00 |
|
|
Nate Brown
|
696903d6d9
|
Add a way to set the network type on windows + tests (#1710)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / freebsd-amd64 (push) Failing after 2s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 3s
smoke-extra / netbsd-amd64 (push) Failing after 3s
smoke-extra / openbsd-amd64 (push) Failing after 3s
smoke-extra / linux-386 (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
smoke-extra / Run windows smoke test (push) Has been cancelled
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-07 20:17:38 -05:00 |
|
|
Nate Brown
|
c82db210ef
|
Change windows unsafe routes to link routes, fix sshd reload bug (#1709)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / freebsd-amd64 (push) Failing after 3s
smoke-extra / linux-amd64-ipv6disable (push) Failing after 2s
smoke-extra / netbsd-amd64 (push) Failing after 2s
smoke-extra / openbsd-amd64 (push) Failing after 3s
smoke-extra / linux-386 (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-07 11:30:26 -05:00 |
|
|
Nate Brown
|
1ada3d4dd9
|
Use DefinedNets fancy new netbsd10 vagrant box for smokes (#1711)
|
2026-05-07 10:30:29 -05:00 |
|
|
Nate Brown
|
5f920fdd7d
|
Remove the global noiseEndianness var (#1707)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-06 17:37:03 -05:00 |
|
|
Nate Brown
|
213dd46588
|
Stop leaking goroutines past Control.Stop, consolidate punching in Punchy (#1708)
|
2026-05-06 16:21:16 -05:00 |
|
|
Nate Brown
|
b7e9939e92
|
More stable e2e test harness, better for benchmarking (#1702)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-04 10:12:58 -05:00 |
|
|
Nate Brown
|
33c2d7277c
|
Reduce HandshakeManager complexity a little bit (#1701)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-05-01 13:21:38 -05:00 |
|
|
Nate Brown
|
f141cebe8d
|
Run e2e tests in parallel, include a goroutine leak detector test (#1700)
gofmt / Run gofmt (push) Failing after 41s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-30 21:30:56 -05:00 |
|
|
Nate Brown
|
9ec8cf10f3
|
Handshake state machine (#1656)
|
2026-04-30 21:30:27 -05:00 |
|
|
Nate Brown
|
1ab1f71dba
|
Make stats a server we can reconfigure and start/stop (#1670)
gofmt / Run gofmt (push) Failing after 2s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-27 12:25:24 -05:00 |
|
|
Nate Brown
|
d0f02ba873
|
Switch to slog, remove logrus (#1672)
|
2026-04-27 09:41:47 -05:00 |
|
|
Nate Brown
|
db9218b0be
|
Another shot at the flakey smoke test (#1688)
|
2026-04-23 13:51:15 -05:00 |
|
|
Nate Brown
|
5f00ab4b74
|
Fix e2e tests writing after the tester tun is closed causing a panic (#1681)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 3s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-22 17:18:06 -05:00 |
|
|
Nate Brown
|
8c50fc3f60
|
Plug the conntrack cache ticker leak and nebula-service log.Fatal calls (#1669)
|
2026-04-21 13:19:54 -05:00 |
|
|
Nate Brown
|
2f4532f102
|
No more dns globals, proper cleanup on shutdown (#1667)
|
2026-04-21 12:41:10 -05:00 |
|
|
Nate Brown
|
8c71f2f3f9
|
FreeBSD tun needs to be non blocking as well (#1666)
|
2026-04-21 10:45:46 -05:00 |
|
|
Nate Brown
|
3d34cc9b74
|
Try to make smoke less flakey (#1663)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-20 16:38:14 -05:00 |
|
|
Nate Brown
|
49e3c4649b
|
Try the hot new DefinedNet openbsd78 box (#1657)
gofmt / Run gofmt (push) Failing after 4s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 3s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-17 09:18:23 -05:00 |
|
|
Nate Brown
|
a5e81efe7b
|
Try rsync from somewhere else (#1655)
|
2026-04-15 09:23:33 -05:00 |
|
|
Nate Brown
|
3fae693c42
|
Additional e2e tests to assert current handshake behavior (#1653)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 3s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-04-14 13:32:01 -05:00 |
|
|
Nate Brown
|
72a40007ea
|
v1.10.1 (#1575)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.1
|
2026-01-16 10:33:54 -05:00 |
|
|
Nate Brown
|
ac3bd9cdd0
|
Avoid losing system originated unsafe routes on reload (#1573)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2026-01-15 13:48:17 -06:00 |
|
|
Nate Brown
|
1283ff0db4
|
Add option to control accepting recv_error (#1569)
|
2026-01-13 00:00:27 -06:00 |
|
|
Nate Brownandbrad-defined
|
69259e6307
|
Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) (#1568)
gofmt / Run gofmt (push) Failing after 3s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2026-01-09 10:35:09 -06:00 |
|
|
Nate Brown
|
2d16940232
|
Slight improvement to hot path benchmark, add a relay hot path benchmark (#1539)
gofmt / Run gofmt (push) Failing after 15s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-09 22:29:26 -06:00 |
|
|
Nate Brown
|
59e24b98bd
|
v1.10.0 (#1534)
gofmt / Run gofmt (push) Failing after 4s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 2s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
Update CHANGELOG for Nebula v1.10.0
|
2025-12-04 14:42:31 -05:00 |
|
|
Nate Brown
|
56067afca2
|
Stab at better logging when a relay is being used (#1533)
gofmt / Run gofmt (push) Failing after 5s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 3s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-12-03 17:48:29 -06:00 |
|
|
Nate Brown
|
64f202fa17
|
Make 0.0.0.0/0 and ::/0 not mean any address family, add any for that (#1538)
gofmt / Run gofmt (push) Failing after 13s
smoke-extra / Run extra smoke tests (push) Failing after 2s
smoke / Run multi node smoke test (push) Failing after 2s
Build and test / Build all and test on ubuntu-linux (push) Failing after 2s
Build and test / Build and test on linux with boringcrypto (push) Failing after 3s
Build and test / Build and test on linux with pkcs11 (push) Failing after 2s
Build and test / Build and test on macos-latest (push) Has been cancelled
Build and test / Build and test on windows-latest (push) Has been cancelled
|
2025-11-21 13:46:36 -06:00 |
|
|
Nate Brown
|
83ae8077f5
|
No need to clear counter 0 (#1537)
|
2025-11-20 13:22:58 -06:00 |
|
|
Nate Brown
|
7aff313a17
|
Relax the restriction on routines from the config (#1531)
|
2025-11-19 13:10:11 -06:00 |
|
|
Nate Brown
|
99faab505c
|
Fix a potential bug with udp ipv4 only on darwin (#1532)
|
2025-11-19 09:56:58 -06:00 |
|
|
Nate Brown
|
52f1908126
|
Don't log every blocklisted fingerprint (#1525)
|
2025-11-12 09:41:46 -06:00 |
|
|
Nate Brown
|
45c1d3eab3
|
Support for multi proto tun device on OpenBSD (#1495)
|
2025-10-08 16:56:42 -05:00 |
|
|
Nate Brown
|
eb89839d13
|
Support for multi proto tun device on NetBSD (#1492)
|
2025-10-07 20:17:50 -05:00 |
|
|
Nate Brown
|
fb7f0c3657
|
Use x/net/route to manage routes directly (#1488)
|
2025-10-03 10:59:53 -05:00 |
|
|
Nate Brown
|
52623820c2
|
Drop inactive tunnels (#1427)
|
2025-07-03 09:58:37 -05:00 |
|
|
Nate Brown
|
c2420642a0
|
Darwin udp fix (#1428)
|
2025-07-02 15:50:22 -05:00 |
|
|
Nate Brown
|
f8734ffa43
|
Improve logging when handshaking with an invalid cert (#1345)
|
2025-03-07 10:45:31 -06:00 |
|
|
|
d97ed57a19
|
V2 certificate format (#1216)
Co-authored-by: Nate Brown <nbrown.us@gmail.com>
Co-authored-by: Jack Doan <jackdoan@rivian.com>
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
Co-authored-by: Jack Doan <me@jackdoan.com>
|
2025-03-06 11:28:26 -06:00 |
|
|
Nate Brown
|
3e6c75573f
|
Fix static host map wrong responder situations, correct logging (#1259)
|
2024-10-23 14:28:02 -05:00 |
|
|
Nate Brown
|
08ac65362e
|
Cert interface (#1212)
|
2024-10-10 18:00:22 -05:00 |
|
|
Nate Brown
|
e264a0ff88
|
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2024-07-31 10:18:56 -05:00 |
|
|
Nate Brown
|
a99618e95c
|
Don't log invalid certificates (#1116)
|
2024-04-29 15:21:00 -05:00 |
|
|
Nate Brown
|
a5a07cc760
|
Allow :: in lighthouse.dns.host config (#1115)
|
2024-04-11 21:44:36 -05:00 |
|
|
Nate Brown
|
c1711bc9c5
|
Remove tcp rtt tracking from the firewall (#1114)
|
2024-04-11 21:44:22 -05:00 |
|
|
Nate Brown
|
a390125935
|
Support reloading preferred_ranges (#1043)
|
2024-04-03 22:14:51 -05:00 |
|
|
Nate Brown
|
bbb15f8cb1
|
Unsafe route reload (#1083)
|
2024-03-28 15:17:28 -05:00 |
|
|
Nate Brown
|
cc8b3cc961
|
Add config option for local_cidr control
|
2024-02-15 11:46:45 -06:00 |
|
|
Nate Brown
|
f346cf4109
|
At the end
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
8f44f22c37
|
In the middle
|
2024-02-05 10:23:10 -06:00 |
|
|
Nate Brown
|
072edd56b3
|
Fix re-entrant GetOrHandshake issues (#1044)
|
2023-12-19 11:58:31 -06:00 |
|
|
Nate Brown
|
3356e03d85
|
Default pki.disconnect_invalid to true and make it reloadable (#859)
|
2023-11-13 12:39:38 -06:00 |
|
|
Nate Brown
|
5181cb0474
|
Use generics for CIDRTrees to avoid casting issues (#1004)
|
2023-11-02 17:05:08 -05:00 |
|
|
Nate Brown
|
a44e1b8b05
|
Clean up a hostinfo to reduce memory usage (#955)
|
2023-11-02 16:53:59 -05:00 |
|
|
Nate Brown
|
50d6a1e8ca
|
QueryServer needs to be done outside of the lock (#996)
|
2023-10-17 15:43:51 -05:00 |
|
|
Nate Brown
|
5fccbb8676
|
Retry wintun creation (#985)
|
2023-10-16 10:06:43 -05:00 |
|
|
Nate Brown
|
f7e392995a
|
Fix rebind to not put the socket in blocking mode (#972)
|
2023-09-07 11:56:09 -05:00 |
|
|
Nate Brown
|
076ebc6c6e
|
Simplify getting a hostinfo or starting a handshake with one (#954)
|
2023-08-21 18:51:45 -05:00 |
|
|
Nate Brown
|
7edcf620c0
|
We only need the certificate in ConnectionState (#953)
|
2023-08-21 14:11:06 -05:00 |
|
|
Nate Brown
|
5a131b2975
|
Combine ca, cert, and key handling (#952)
|
2023-08-14 21:32:40 -05:00 |
|
|
Nate BrownandWade Simmons
|
223cc6e660
|
Limit how often a busy tunnel can requery the lighthouse (#940)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-08-08 13:26:41 -05:00 |
|
|
Nate Brown
|
14d0106716
|
Send the lh update worker into its own routine instead of taking over the reload routine (#935)
|
2023-07-27 14:38:10 -05:00 |
|
|
Nate Brown
|
0bffa76b5e
|
Build for openbsd (#812)
|
2023-07-27 14:27:35 -05:00 |
|
|
Nate Brown
|
9c6592b159
|
Guard e2e udp and tun channels when closed (#934)
|
2023-07-26 12:52:14 -05:00 |
|
|
Nate Brown
|
a10baeee92
|
Pull hostmap and pending hostmap apart, remove unused functions (#843)
|
2023-07-24 12:37:52 -05:00 |
|
|
Nate Brown
|
1e3c155896
|
Attempt to notify systemd of service readiness on linux (#929)
|
2023-07-24 11:30:18 -05:00 |
|
|
Nate Brown
|
c5ce945852
|
Update README to include a link to go install docs (#919)
|
2023-07-20 21:30:38 -05:00 |
|
|
Nate Brown
|
a3e59a38ef
|
Use registered io on Windows when possible (#905)
|
2023-07-10 12:43:48 -05:00 |
|
|
Nate Brown
|
3bbf5f4e67
|
Use an interface for udp conns (#901)
|
2023-06-14 10:48:52 -05:00 |
|
|
Nate Brown
|
57eb80e9fb
|
v1.7.2 (#887)
Update CHANGELOG for Nebula v1.7.2
|
2023-06-01 11:05:07 -04:00 |
|
|
Nate Brown
|
54a8499c7b
|
Fix go vet (#868)
|
2023-05-09 11:01:30 -05:00 |
|
|
Nate Brown
|
a9cb2e06f4
|
Add ability to respect the system route table for unsafe route on linux (#839)
|
2023-05-09 10:36:55 -05:00 |
|
|
Nate Brown
|
d1f786419c
|
Try rehandshaking a main hostinfo after releasing hostmap locks (#863)
|
2023-05-08 14:43:03 -05:00 |
|
|
Nate Brown
|
48eb63899f
|
Have lighthouses ack updates to reduce test packet traffic (#851)
|
2023-05-05 14:44:03 -05:00 |
|
|
Nate Brown
|
b26c13336f
|
Fix test on master (#860)
|
2023-05-04 20:11:33 -05:00 |
|
|
Nate Brown
|
702e1c59bd
|
Always disconnect block listed hosts (#858)
|
2023-05-04 16:09:42 -05:00 |
|
|
Nate Brown
|
5fe8f45d05
|
Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857)
|
2023-05-04 15:42:12 -05:00 |
|
|
|
03e4a7f988
|
Rehandshaking (#838)
Co-authored-by: Brad Higgins <brad@defined.net>
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-05-04 15:16:37 -05:00 |
|
|
Nate Brown
|
397fe5f879
|
Add ability to skip installing unsafe routes on the os routing table (#831)
|
2023-04-10 12:32:37 -05:00 |
|
|
Nate Brown
|
3cb4e0ef57
|
Allow listen.host to contain names (#825)
|
2023-04-05 11:29:26 -05:00 |
|
|
Nate Brown
|
d3fe3efcb0
|
Fix handshake retry regression (#842)
|
2023-04-05 10:04:30 -05:00 |
|
|
Nate Brown
|
fd99ce9a71
|
Use fewer test packets (#840)
|
2023-04-04 13:42:24 -05:00 |
|
|
Nate Brownandbrad-defined
|
ee8e1348e9
|
Use connection manager to drive NAT maintenance (#835)
Co-authored-by: brad-defined <77982333+brad-defined@users.noreply.github.com>
|
2023-03-31 15:45:05 -05:00 |
|
|
Nate Brown
|
1a6c657451
|
Normalize logs (#837)
|
2023-03-30 15:07:31 -05:00 |
|
|
Nate Brown
|
6b3d42efa5
|
Use atomic.Pointer for certState (#833)
|
2023-03-30 13:04:09 -05:00 |
|
|
Nate Brown
|
f0ef80500d
|
Remove dead code and re-order transit from pending to main hostmap on stage 2 (#828)
|
2023-03-17 15:36:24 -05:00 |
|
|
Nate BrownandWade Simmons
|
92cc32f844
|
Remove handshake race avoidance (#820)
Co-authored-by: Wade Simmons <wadey@slack-corp.com>
|
2023-03-13 12:35:14 -05:00 |
|
|
Nate Brown
|
2ea360e5e2
|
Render hostmaps as mermaid graphs in e2e tests (#815)
|
2023-02-16 13:23:33 -06:00 |
|
|
Nate Brown
|
a06977bbd5
|
Track connections by local index id instead of vpn ip (#807)
|
2023-02-13 14:41:05 -06:00 |
|