Commit Graph

  • c899bd0221 checkpt v6hax JackDoan 2026-02-13 12:55:32 -06:00
  • c2a63499ac use in-Nebula SNAT to send IPv4 UnsafeNetworks traffic over an IPv6 overlay JackDoan 2026-01-14 12:36:55 -06:00
  • 39452b5eec connection-track ICMP and ICMPv6 traffic conntrack-icmp JackDoan 2026-01-14 12:36:55 -06:00
  • e8bb874e14 smoke-extra: try AMD-V workaround (#1610) master Wade Simmons 2026-02-13 13:55:19 -05:00
  • 353ad1f271 firewall: icmp no longer requires a port spec (#1609) Jack Doan 2026-02-13 11:10:40 -06:00
  • 2190c04201 go fix go-fix Wade Simmons 2026-02-12 12:16:16 -05:00
  • be58a866d9 skeleton to handle other tunless packets tun-dnshax JackDoan 2026-02-11 10:54:46 -06:00
  • ed960c7fb8 refactor JackDoan 2026-02-11 10:54:34 -06:00
  • 25451dc42e Bump github.com/gaissmai/bart from 0.26.0 to 0.26.1 dependabot/go_modules/github.com/gaissmai/bart-0.26.1 dependabot[bot] 2026-02-09 22:57:23 +00:00
  • 0993d1a78e Bump the golang-x-dependencies group with 4 updates dependabot/go_modules/golang-x-dependencies-0900014c3e dependabot[bot] 2026-02-09 22:57:19 +00:00
  • 00016ff066 add test stupid-ed25519-panic JackDoan 2026-02-06 14:19:08 -06:00
  • 9546cf0aec don't allow mismatched curves JackDoan 2026-02-06 14:13:55 -06:00
  • 8c828b3cae don't panic on bad ed25519 key lengths JackDoan 2026-02-06 14:01:22 -06:00
  • f573e8a266 Merge commit from fork v1.10.3 Jack Doan 2026-02-06 13:26:51 -06:00
  • ef1739bec4 claude does TUN virtio header support jay.wren-batch-packets Jay Wren 2026-02-04 13:13:41 -05:00
  • 030b7e2763 claude implements UDP GRO Jay Wren 2026-02-04 11:02:06 -05:00
  • 6b6a4bc1cc claude implements UDP GSO Jay Wren 2026-02-04 10:29:37 -05:00
  • 30db76ed79 batch tun reads Jay Wren 2026-02-03 17:12:44 -05:00
  • 15333f9fed batch udp packet sending Jay Wren 2026-02-03 16:56:21 -05:00
  • c618b96fef add stats.pprof flag to expose pprof on stats listener jay.wren-stats.pprof Jay Wren 2026-02-03 15:40:35 -05:00
  • 3086364246 block less I guess no-exit JackDoan 2026-01-30 14:48:56 -06:00
  • 0fb3fb798f don't drop packets JackDoan 2026-01-30 13:48:43 -06:00
  • c9d72fd87c shutdown doesn't work JackDoan 2026-01-30 13:44:50 -06:00
  • 6fa1ecdc29 Merge remote-tracking branch 'origin/master' into fips140 fips140 Wade Simmons 2026-01-30 13:41:49 -05:00
  • 5cc3ff594a use wg tun library; batching & locking improvements jay.wren-wireguard-tun-3 Jay Wren 2025-11-04 15:04:24 -05:00
  • 6f8424cef1 remove unreachable JackDoan 2026-01-29 11:42:26 -06:00
  • a141d78cef remove unreachable JackDoan 2026-01-29 11:37:11 -06:00
  • 8c04f32046 remove pprof JackDoan 2026-01-29 11:33:56 -06:00
  • 2944be4bb0 return err no-exit-jack JackDoan 2026-01-29 11:29:07 -06:00
  • 13f8f0c308 use shutdown JackDoan 2026-01-28 13:21:51 -06:00
  • 1584dca21c Fix e2e tests Nate Brown 2025-11-03 22:32:10 -06:00
  • f840812489 Fix tests Nate Brown 2025-11-03 22:25:33 -06:00
  • 252950c02d Rebase cleanup Nate Brown 2025-11-03 22:21:20 -06:00
  • e96e9e3cfa Cleanup and note more work Nate Brown 2025-04-16 21:56:53 -05:00
  • 1f01a5543b Try the timeout Nate Brown 2025-04-16 17:11:11 -05:00
  • 69bf8dadc6 Revert "More playing" way too much garbage emitted Nate Brown 2025-04-16 16:56:04 -05:00
  • f446121e21 More playing Nate Brown 2025-04-16 16:21:53 -05:00
  • c5393e7e07 Playing Nate Brown 2025-04-15 21:00:50 -05:00
  • 685364e10f non-blocking io for linux Nate Brown 2025-04-02 22:57:37 -05:00
  • 6f022a2fff Remove more os.Exit calls and give a more reliable wait for stop function Nate Brown 2025-04-02 09:51:59 -05:00
  • 42bee7cf17 Report if Nebula start fails because of tun device name (#1588) Jack Doan 2026-01-28 10:03:36 -06:00
  • 02d8bcac68 Remove lighthouse goroutine leaks in lighthouse_test.go (#1589) Caleb Jasik 2026-01-27 23:44:43 -06:00
  • b558262b19 Bump github.com/miekg/dns from 1.1.70 to 1.1.72 dependabot/go_modules/github.com/miekg/dns-1.1.72 dependabot[bot] 2026-01-26 21:27:47 +00:00
  • 054cba9d8c Bump github.com/miekg/pkcs11 dependabot/go_modules/github.com/miekg/pkcs11-1.1.2 dependabot[bot] 2026-01-26 21:27:42 +00:00
  • 8bb6090ffd cute prototype firewall-feedback JackDoan 2026-01-23 13:12:46 -06:00
  • 0b02d982b2 v1.10.2 (#1584) v1.10.2 Wade Simmons 2026-01-21 12:42:34 -05:00
  • 0824035906 Merge remote-tracking branch 'origin/master' into multiport multiport Wade Simmons 2026-01-21 10:58:11 -05:00
  • 43bdf9066e remove the requirement for a cert-v2 certificate to have an IPv4 Network to have IPv4 UnsafeNetworks cert-v2-mixed-af-unsafe-nets JackDoan 2026-01-20 10:18:15 -06:00
  • e1e92f017c initialize routesFromSystem (#1580) Wade Simmons 2026-01-20 11:15:20 -05:00
  • e5f60fa54f chore: fix some typos in comments (#1582) zhetaicheleba 2026-01-21 01:03:31 +09:00
  • bf49e78243 Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#1581) dependabot[bot] 2026-01-20 10:40:24 -05:00
  • 886141decf read the docs stream-cas-scanner JackDoan 2026-01-16 12:43:51 -06:00
  • 6c9fa3f342 use bufio.Scanner JackDoan 2026-01-16 12:26:01 -06:00
  • 72a40007ea v1.10.1 (#1575) v1.10.1 Nate Brown 2026-01-16 09:33:54 -06:00
  • ac3bd9cdd0 Avoid losing system originated unsafe routes on reload (#1573) Nate Brown 2026-01-15 13:48:17 -06:00
  • 12bf7a154d release: build artifacts on Release publish instead of tag push github-release-upload Wade Simmons 2026-01-13 09:14:15 -05:00
  • 88379b89f5 Bump golang.org/x/net in the golang-x-dependencies group (#1571) dependabot[bot] 2026-01-13 00:02:44 -06:00
  • 1283ff0db4 Add option to control accepting recv_error (#1569) Nate Brown 2026-01-13 00:00:27 -06:00
  • 523209ec0b Bump github.com/miekg/dns from 1.1.68 to 1.1.69 (#1561) dependabot[bot] 2026-01-12 16:16:42 -05:00
  • a4a6143b6a Bump google.golang.org/protobuf in the protobuf-dependencies group (#1560) dependabot[bot] 2026-01-12 16:16:01 -05:00
  • 1b2d639b14 Bump actions/download-artifact from 6 to 7 (#1557) dependabot[bot] 2026-01-12 15:40:47 -05:00
  • 9933970e67 Bump actions/upload-artifact from 5 to 6 (#1558) dependabot[bot] 2026-01-12 15:40:13 -05:00
  • d7a3f01465 Bump the golang-x-dependencies group across 1 directory with 4 updates (#1570) dependabot[bot] 2026-01-12 15:35:34 -05:00
  • 69259e6307 Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) (#1568) Nate Brown 2026-01-09 10:35:09 -06:00
  • 2f71d6b22d Ensure pubkey coherency when rehydrating a handshake cert (#1566) brad-defined 2026-01-09 09:52:03 -05:00
  • 71bf3744b1 avoid heap problems vhost JackDoan 2025-12-19 15:22:38 -06:00
  • 530cf6b3b8 checkpt, heap problems JackDoan 2025-12-19 14:38:12 -06:00
  • aeded87e71 remove awful per-packet scratch buf JackDoan 2025-12-19 13:37:36 -06:00
  • 188b20457e relay rework JackDoan 2025-12-19 13:08:46 -06:00
  • 3338a2a2a1 tidy JackDoan 2025-12-18 15:33:09 -06:00
  • 111efc0779 pre-fill the tx ring with bogus empty packets JackDoan 2025-12-18 15:18:19 -06:00
  • 726e282d0a refactoring a bit JackDoan 2025-12-18 14:07:28 -06:00
  • 41c9a3b2eb refactoring a bit JackDoan 2025-12-18 13:27:28 -06:00
  • f5c46c43ce checkpt e2e JackDoan 2025-12-16 12:56:32 -06:00
  • e5c11e1cc2 tidy JackDoan 2025-12-16 11:07:30 -06:00
  • 43d26d4fe5 small simplification JackDoan 2025-12-15 14:23:48 -06:00
  • 174ee003b5 hmm JackDoan 2025-12-15 13:45:17 -06:00
  • 39dff27ab8 rebase JackDoan 2025-12-15 11:41:26 -06:00
  • ac5382928e vhost JackDoan 2025-11-07 14:26:35 -06:00
  • 97977982cb whatif? jay.wren-maybe-ipv4-6-fix Jay Wren 2025-12-12 15:32:28 -05:00
  • da05932c5d Refactor CA pool handling to use streaming maggie44 2025-12-11 19:51:40 +00:00
  • 69ed6646f1 dont call writeTo4 if writing to ipv6 Jay Wren 2025-12-10 16:56:06 -05:00
  • 3ec527e42c cert.MarshalSigningPublicKeyToPEM should emit the 'ECDSA' variant of the banner (#1552) Jack Doan 2025-12-10 10:39:36 -06:00
  • 2d16940232 Slight improvement to hot path benchmark, add a relay hot path benchmark (#1539) Nate Brown 2025-12-09 23:29:26 -05:00
  • cba294ffa4 Bump actions/checkout from 5 to 6 (#1541) dependabot[bot] 2025-12-09 22:25:48 -06:00
  • 48406f85da Bump the golang-x-dependencies group with 3 updates (#1550) dependabot[bot] 2025-12-09 22:19:53 -06:00
  • 14a1af132e Bump Apple-Actions/import-codesign-certs from 5 to 6 (#1549) dependabot[bot] 2025-12-09 22:17:50 -06:00
  • 510a8912a9 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2025-12-04 15:22:14 -05:00
  • 59e24b98bd v1.10.0 (#1534) v1.10.0 Nate Brown 2025-12-04 14:42:31 -05:00
  • 56067afca2 Stab at better logging when a relay is being used (#1533) Nate Brown 2025-12-03 18:48:29 -05:00
  • e25016a946 Fix e2e unsafe inbound test firewall-forward-table Nate Brown 2025-11-21 15:51:02 -06:00
  • c2381e7019 Add some comments to make table config clearer Nate Brown 2025-11-21 14:29:46 -06:00
  • 2b0d57b464 Track unsafe in the mock firewall Nate Brown 2025-11-21 14:23:00 -06:00
  • c69b009650 Change name from forward to unsafe Nate Brown 2025-11-21 14:21:08 -06:00
  • 281a9017ce Add forward tables to handle unsafe network packets distinctly from vpn network packets Nate Brown 2025-10-09 22:17:48 -05:00
  • 64f202fa17 Make 0.0.0.0/0 and ::/0 not mean any address family, add any for that (#1538) Nate Brown 2025-11-21 14:46:36 -05:00
  • 6d7cf611c9 improve nebula-cert sign version auto-select (#1535) Jack Doan 2025-11-20 13:27:27 -06:00
  • 83ae8077f5 No need to clear counter 0 (#1537) Nate Brown 2025-11-20 14:22:58 -05:00
  • 12cf348c80 feat: support via gateway for v6 multihop for v4 routes (#1521) Bryan Lee 2025-11-19 20:21:03 -08:00
  • be90e4aa05 handle virtio header in ctrl messages jay.wren-wireguard-tun-2 Jay Wren 2025-11-19 17:09:39 -05:00