Commit Graph

  • df7c7eec4a Get out faster on nil udpAddr (#449) Nathan Brown 2021-04-26 20:21:47 -05:00
  • 6f37280e8e Fully close tunnels when CloseAllTunnels is called (#448) Nathan Brown 2021-04-26 10:42:24 -05:00
  • a0735dd7d5 Add locking around ssh conns to avoid concurrent map access on reload (#447) Nathan Brown 2021-04-23 14:43:16 -05:00
  • 1deb5d98e8 Fix tun funcs for ios and android (#446) Nathan Brown 2021-04-22 15:23:40 -05:00
  • a1ee521d79 Fix a failed return in an error case (#445) Nathan Brown 2021-04-17 18:47:31 -05:00
  • 7859140711 Only set serveDns if the host is also configured to be a lighthouse. (#433) brad-defined 2021-04-16 14:33:56 -04:00
  • 17106f83a0 Ensure the Nebula device exists before attempting to bind to the Nebula IP (#375) brad-defined 2021-04-16 11:34:28 -04:00
  • ab08be1e3e Don't panic on a nil response from the lighthouse (#442) Nathan Brown 2021-04-15 09:12:21 -05:00
  • 710df6a876 Refactor remotes and handshaking to give every address a fair shot (#437) Nathan Brown 2021-04-14 13:50:09 -05:00
  • 20bef975cd Remove obsolete systemd unit settings (take 2) (#438) John Maguire 2021-04-07 13:02:40 -04:00
  • 480036fbc8 Remove unused structs in hostmap.go (#430) Nathan Brown 2021-04-01 22:07:11 -05:00
  • 1499be3e40 Fix name resolution for host names in config (#431) Nathan Brown 2021-04-01 21:48:41 -05:00
  • 64d8e5aa96 More LH cleanup (#429) Nathan Brown 2021-04-01 10:23:31 -05:00
  • 75f7bda0a4 Lighthouse performance pass (#418) Nathan Brown 2021-03-31 17:32:02 -05:00
  • e7e55618ff Include bad backets in the good handshake test (#428) Nathan Brown 2021-03-31 13:36:10 -05:00
  • 0c2e5973e1 Simple lie test (#427) Nathan Brown 2021-03-31 10:26:35 -05:00
  • 830d6d4639 Start of end to end testing with a good handshake between two nodes (#425) Nathan Brown 2021-03-29 14:29:20 -05:00
  • 883e09a392 Don't use a global ca pool (#426) Nathan Brown 2021-03-29 12:10:19 -05:00
  • 4603b5b2dd fix PromoteEvery check (#424) Wade Simmons 2021-03-26 15:01:05 -04:00
  • a71541fb0b export build version as a prometheus label (#405) Wade Simmons 2021-03-26 14:16:35 -04:00
  • 3ea7e1b75f Don't use a global logger (#423) Nathan Brown 2021-03-26 09:46:30 -05:00
  • 7a9f9dbded Don't craft buffers if we don't need them (#416) Nathan Brown 2021-03-22 18:25:06 -05:00
  • 7073d204a8 IPv6 support for outside (udp) (#369) Nathan Brown 2021-03-18 20:37:24 -05:00
  • 9e94442ce7 Add fedora dist files. (#413) Joe Doss 2021-03-18 14:33:43 -05:00
  • 13471f5792 Remove obsolete systemd unit settings. (#412) Joe Doss 2021-03-18 14:29:36 -05:00
  • b6c6b96c79 also darwin windows_udp_buffer_setting Ryan Huber 2021-03-17 18:21:42 -05:00
  • 6dea7760cb *WIP* this is just test code but works to increase throughput on windows significantly. the default windows buffers are 8192KB which is :( Ryan Huber 2021-03-17 17:57:05 -05:00
  • ea07a89cc8 Ensure mutex is unlocked when adding remote IP. (#406) Thomas Roten 2021-03-16 12:41:35 -04:00
  • 3aaaea6309 don't allow a useless handshake with yourself (#402) Ryan Huber 2021-03-15 12:58:23 -07:00
  • 5506da3de9 Fix selection of UDP remote to use during stage2 (#404) Wade Simmons 2021-03-12 21:43:24 -05:00
  • 6c55d67f18 Refactor handshake_ix (#401) Wade Simmons 2021-03-12 14:16:25 -05:00
  • 64d8035d09 fix race in getOrHandshake (#400) Wade Simmons 2021-03-09 09:27:02 -05:00
  • 73a5ed90b2 Do not allow someone to run a nebula lighthouse with an ephemeral port (#399) Ryan Huber 2021-03-08 12:42:06 -08:00
  • d604270966 Fix most known data races (#396) Wade Simmons 2021-03-05 21:18:33 -05:00
  • 29c5f31f90 Add a check in the makefile to ensure a minimum version of go is installed (#383) Nathan Brown 2021-03-02 13:29:05 -06:00
  • b6234abfb3 Add a way to trigger punch backs via lighthouse (#394) Nathan Brown 2021-03-01 19:06:01 -06:00
  • 2a4beb41b9 Routine-local conntrack cache (#391) Wade Simmons 2021-03-01 19:52:17 -05:00
  • d232ccbfab add metrics for the udp sockets using SO_MEMINFO (#390) Wade Simmons 2021-03-01 19:51:33 -05:00
  • ecfb40f29c Fix osx for mq changes, this does not implement mq on osx (#395) Nathan Brown 2021-03-01 15:57:05 -06:00
  • 1bae5b2550 more validation in pending hostmap deletes (#344) Wade Simmons 2021-03-01 12:40:46 -05:00
  • 73081d99bc add make smoke-docker (#287) Wade Simmons 2021-03-01 11:15:15 -05:00
  • e7e6a23cde fix a few typos (#302) Tim Rots 2021-03-01 17:14:34 +01:00
  • a0583ebdca tun_disabled: reply to ICMP Echo Request (#342) Wade Simmons 2021-03-01 11:09:41 -05:00
  • 27d9a67dda Proper multiqueue support for tun devices (#382) Wade Simmons 2021-02-25 15:01:14 -05:00
  • 2bce222550 List possible cipher options in example config (#385) John Maguire 2021-02-19 22:46:42 -05:00
  • 3dd1108099 Go 1.16 and darwin-arm64 (#381) Wade Simmons 2021-02-17 13:11:57 -05:00
  • d4b81f9b8d Add QR code support to nebula-cert (#297) Nathan Brown 2021-02-11 18:53:25 -06:00
  • 454bc8a6bb Check certificate banner during nebula-cert print (#373) brad-defined 2021-02-05 15:52:32 -05:00
  • ce9ad37431 fix regression with LightHouseHandler and punchBack (#346) Wade Simmons 2020-11-25 17:49:26 -05:00
  • ee7c27093c add HostMap.RemoteIndexes (#329) Wade Simmons 2020-11-23 14:51:16 -05:00
  • 2e7ca027a4 Lighthouse handler optimizations (#320) Wade Simmons 2020-11-23 14:50:01 -05:00
  • 672ce1f0a8 Move slice allocations in connection manager monitor loop (#340) mhp 2020-11-19 15:44:05 -08:00
  • 384b1166ea fix panic in UnmarshalNebulaCertificate (#339) Wade Simmons 2020-11-19 08:44:54 -05:00
  • 0389596f66 don't mark handshake packets as "lost" (#331) Wade Simmons 2020-11-16 14:03:08 -05:00
  • 43a3988afc i don't think this is used at all anymore (#323) Ryan Huber 2020-10-29 20:43:50 -05:00
  • 5c23676a0f Added line to systemd config template to start Nebula before sshd (#317) Brian Kelly 2020-10-29 21:43:02 -04:00
  • f6d0b4b893 Update README for supported platforms (#312) Nathan Brown 2020-10-12 13:11:32 -05:00
  • db11e2f1af Revert "smoke test" interface-hooks Dave Russell 2020-10-03 00:09:18 +10:00
  • 2ee428b067 Hook send should use a code path that actually firewalls Dave Russell 2020-10-02 23:42:20 +10:00
  • e9657d571e control->Send: Also set the src port Dave Russell 2020-10-02 22:25:31 +10:00
  • 3cebf38504 The custom message packet sender needs a dest port Dave Russell 2020-10-02 20:46:08 +10:00
  • ae3ee42469 Provide hooks for custom message packet handlers Dave Russell 2020-09-28 22:31:16 +10:00
  • fa034a6d83 smoke test Dave Russell 2020-09-27 22:43:24 +10:00
  • 55d72ac46f Tighten up the inside handlers with a bit of DRY Dave Russell 2020-09-27 22:37:20 +10:00
  • 2c931d5691 Move inside packet handlers into map Dave Russell 2020-09-27 22:04:14 +10:00
  • 0d6b55e495 Bring in the new version of kardianos/service and output logfiles on osx (#303) Ryan Huber 2020-09-24 15:34:08 -07:00
  • c71c84882e v1.3.0 (#268) v1.3.0 Wade Simmons 2020-09-22 12:21:12 -04:00
  • 0010db46e4 Fix a data race on message counter (#284) Darren Hoo 2020-09-22 09:41:46 +08:00
  • 68e3e84fdc More like a library (#279) Nathan Brown 2020-09-18 09:20:09 -05:00
  • 6238f1550b Handle panic when invalid IP entered in sshd (#296) Brian Luong 2020-09-18 07:10:25 -07:00
  • 50b04413c7 Block nebula ssh server from listening on port 22 (#266) forfuncsake 2020-09-15 23:57:32 +10:00
  • ef498a31da Add disable_timestamp option (#288) CzBiX 2020-09-09 19:42:11 +08:00
  • 2e5a477a50 Align linux UDP performance optimizations with configuration (#275) forfuncsake 2020-08-13 08:24:05 +10:00
  • 32fe9bfe75 Use Go 1.15 (#277) Wade Simmons 2020-08-12 16:16:21 -04:00
  • 9b8b3c478b Support startup without a tun device (#269) forfuncsake 2020-08-10 23:15:55 +10:00
  • 7b3f23d9a1 Start nebula after the network is up (#270) Michael Hardy 2020-08-07 09:33:48 -07:00
  • 25964b54f6 Use inclusive terminology for cert blocking (#272) forfuncsake 2020-08-06 11:17:47 +10:00
  • ac557f381b drop unroutable packets (#267) Wade Simmons 2020-08-04 22:59:04 -04:00
  • a54f3fc681 fix fast handshake trigger for static hosts (#265) Wade Simmons 2020-08-02 20:59:50 -04:00
  • 5545cff6ef log remote certificate fingerprint on handshakes (#262) Alan Lam 2020-07-31 15:54:51 -07:00
  • f3a6d8d990 Preserve conntrack table during firewall rules reload (SIGHUP) (#233) Wade Simmons 2020-07-31 18:53:36 -04:00
  • 9b06748506 Make Interface.Inside an interface type (#252) forfuncsake 2020-07-28 22:53:16 +10:00
  • 4756c9613d trigger handshakes when lighthouse reply arrives (#246) Wade Simmons 2020-07-22 10:35:10 -04:00
  • 4645e6034b Fix up the tun for android (#249) Nathan Brown 2020-07-01 10:20:52 -05:00
  • aba42f9fa6 enforce the use of goimports (#248) Wade Simmons 2020-06-30 18:53:30 -04:00
  • 41578ca971 Be more like a library to support mobile (#247) Nathan Brown 2020-06-30 13:48:58 -05:00
  • 1ea8847085 linux: set advmss correctly when route MTU is used (#245) Wade Simmons 2020-06-26 13:47:21 -04:00
  • 55858c64cc smoke test: test firewall inbound / outbound (#240) Wade Simmons 2020-06-26 13:46:51 -04:00
  • e94c6b0125 mips-softfloat (#231) Wade Simmons 2020-06-26 13:46:23 -04:00
  • b37a91cfbc add meta packet statistics (#230) Wade Simmons 2020-06-26 13:45:48 -04:00
  • 3212b769d4 fix typo in conntrack section in examples/config.yml (#236) David Sonder 2020-06-26 18:08:22 +02:00
  • ecf0e5a9f6 drop packets even if we aren't going to emit Debug logs about it (#239) Patrick Bogen 2020-06-10 14:55:49 -07:00
  • ff13aba8fc allow go test -bench=. to run (#234) Wade Simmons 2020-05-27 16:52:34 -04:00
  • cc03ff9e9a Unbreak building for FreeBSD (#103) Mateusz Kwiatkowski 2020-05-27 04:23:23 +02:00
  • 363c836422 log the reason for fw drops (#220) Patrick Bogen 2020-04-10 10:57:21 -07:00
  • fb252db4a1 v1.2.0 (#215) v1.2.0 Wade Simmons 2020-04-08 19:52:24 -04:00
  • 4f6313ebd3 fix config name for {remote,local}_allow_list (#219) Wade Simmons 2020-04-08 16:20:12 -04:00
  • 0a474e757b Add lighthouse.{remoteAllowList,localAllowList} (#217) Wade Simmons 2020-04-08 15:36:43 -04:00
  • 7cd342c7ab Add a systemd unit for arch and a wireshark dissector (#216) Nathan Brown 2020-04-06 18:47:32 -07:00
  • 7cdbb14a18 Better config test (#177) Wade Simmons 2020-04-06 14:35:32 -04:00