Commit Graph

Select branches

Hide Pull Requests

add-http-pprof

batched-path

botched-path

cert-v2-more-todo

cert-v2-reloads-with-relay-stuff

changelog-v1.9.7

channels

channels-batching

channels-sendmmsg-batching

channels-spicy

channels2

channels_and_minimal_gsogro

cross-stack-relay

cross-stack-relay-overlaps

dependabot/github_actions/actions/download-artifact-7

dependabot/github_actions/actions/upload-artifact-6

dependabot/go_modules/github.com/miekg/dns-1.1.69

dependabot/go_modules/golang-x-dependencies-9ef65289e0

dependabot/go_modules/protobuf-dependencies-00e33601bf

fips140

firewall-forward-table

interface-hooks

io-uring-gso-gro-offtherails

jay.wren-dns-ctx

jay.wren-lint

jay.wren-maybe-ipv4-6-fix

jay.wren-wireguard-tun

jay.wren-wireguard-tun-2

make-boringcrypto-checklinkname

master

master-1-9-tag

multiport

mutex-debug

no-exit

prometheus-static-labels

psk

psk-v2

release-1.9

release-1.9-hostmap-networks-fix

remove-olddead-tunnels

stinkier

stinky

synctrace

tun-name-template

update-lh-on-netlink-addr

vhost

windows_udp_buffer_setting

#1

#10

#100

#1002

#1003

#1004

#1006

#1010

#1012

#1013

#1017

#102

#1021

#1022

#1023

#1024

#1026

#1027

#1028

#103

#1030

#1032

#1034

#1035

#1036

#1037

#1038

#1039

#1043

#1044

#1045

#1046

#1047

#1048

#1049

#105

#1053

#1054

#1055

#1057

#1058

#1059

#106

#1063

#1065

#1067

#1069

#107

#1071

#1072

#1075

#1077

#1081

#1083

#1085

#1086

#1087

#1090

#1091

#1092

#1093

#1094

#1098

#1099

#1108

#1109

#1110

#1111

#1112

#1114

#1115

#1116

#1123

#1126

#1127

#1128

#1129

#113

#1132

#1133

#1134

#1135

#1137

#1138

#1139

#114

#1141

#1141

#1146

#1147

#1148

#1150

#1151

#1152

#1153

#1154

#1155

#1156

#1160

#1161

#1162

#1163

#1164

#1166

#1166

#1167

#1168

#117

#1171

#1173

#1174

#1176

#1177

#1178

#1179

#1179

#1181

#1184

#1185

#1186

#1188

#119

#1190

#1191

#1194

#1195

#1196

#1197

#1198

#1199

#120

#1200

#1201

#1202

#1203

#1204

#1206

#1208

#121

#1210

#1211

#1212

#1213

#1214

#1214

#1216

#1218

#1219

#122

#1223

#1224

#1226

#1228

#1231

#1233

#1237

#1239

#124

#1242

#1243

#1244

#1245

#1249

#125

#1250

#1251

#1252

#1253

#1256

#1257

#1258

#1259

#1260

#1261

#1262

#1264

#1265

#1266

#1267

#1268

#1270

#1271

#1272

#1273

#1274

#1275

#1275

#1276

#1277

#1278

#1279

#1280

#1281

#1282

#1285

#1289

#1291

#1293

#1294

#1295

#1297

#1298

#1299

#1302

#1303

#1308

#1309

#1310

#1311

#1316

#1318

#1319

#1320

#1321

#1323

#1324

#1324

#1326

#1329

#133

#1330

#1331

#1332

#1337

#1337

#1338

#1339

#1340

#1341

#1342

#1343

#1344

#1345

#1346

#1347

#1350

#1351

#1353

#1356

#1357

#1357

#1358

#1358

#1359

#1361

#1362

#1363

#1364

#1365

#1369

#1370

#1371

#1372

#1373

#1374

#1375

#1375

#1376

#1378

#138

#1381

#1382

#1383

#1384

#1386

#1389

#139

#1390

#1390

#1391

#1392

#1393

#1394

#1395

#1399

#1400

#1401

#1403

#1404

#1405

#1406

#1407

#1408

#1409

#141

#1410

#1412

#1413

#1414

#1415

#1416

#1416

#1417

#1417

#1419

#1421

#1422

#1423

#1426

#1427

#1428

#1431

#1432

#1433

#1434

#1435

#1437

#1438

#1441

#1442

#1443

#1444

#1448

#1449

#1450

#1451

#1453

#1457

#1457

#1459

#146

#1463

#1464

#1465

#1465

#1466

#1467

#1468

#1469

#1470

#1471

#1472

#1473

#1476

#1477

#1478

#1481

#1482

#1483

#1487

#1487

#1488

#149

#1491

#1492

#1493

#1494

#1495

#1496

#1496

#1497

#1498

#1498

#1499

#15

#150

#1501

#1502

#1503

#1503

#1505

#1506

#1507

#1507

#1508

#1509

#151

#1510

#1512

#1513

#1514

#1515

#1516

#1518

#1520

#1521

#1522

#1523

#1524

#1524

#1525

#1526

#1527

#1527

#153

#1530

#1531

#1532

#1533

#1534

#1535

#1536

#1537

#1538

#1539

#1541

#1544

#1547

#1549

#155

#1550

#1552

#1555

#1556

#1556

#1557

#1557

#1558

#1558

#1559

#1559

#1560

#1560

#1561

#1561

#16

#163

#165

#166

#167

#17

#170

#177

#179

#181

#183

#184

#186

#187

#188

#189

#191

#192

#195

#196

#197

#198

#2

#200

#202

#205

#209

#21

#210

#211

#213

#215

#216

#217

#219

#22

#220

#225

#23

#230

#231

#233

#234

#236

#239

#240

#244

#245

#246

#247

#248

#249

#252

#253

#255

#257

#257

#258

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#275

#277

#279

#28

#284

#285

#287

#288

#289

#29

#292

#293

#296

#297

#299

#3

#30

#302

#303

#305

#31

#310

#312

#317

#320

#321

#323

#324

#325

#329

#330

#331

#339

#340

#342

#344

#345

#346

#35

#350

#350

#351

#355

#357

#367

#369

#37

#370

#373

#374

#374

#375

#378

#381

#382

#383

#385

#386

#387

#388

#39

#390

#391

#392

#394

#395

#396

#399

#400

#401

#402

#404

#405

#406

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#421

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#433

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#450

#451

#452

#453

#456

#457

#458

#459

#460

#461

#462

#463

#464

#465

#466

#47

#471

#472

#473

#474

#48

#481

#482

#483

#489

#49

#491

#494

#497

#501

#503

#505

#506

#507

#510

#511

#514

#522

#523

#530

#530

#531

#531

#532

#533

#535

#537

#540

#541

#542

#547

#548

#549

#550

#551

#552

#553

#56

#561

#563

#564

#566

#567

#571

#572

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#586

#587

#590

#592

#595

#596

#598

#599

#60

#602

#603

#604

#606

#607

#61

#610

#611

#612

#613

#614

#615

#615

#616

#617

#618

#626

#627

#630

#638

#641

#648

#649

#650

#653

#655

#656

#658

#659

#662

#662

#664

#67

#670

#673

#674

#675

#677

#678

#679

#679

#68

#684

#685

#687

#688

#691

#692

#693

#696

#700

#701

#702

#703

#711

#716

#719

#721

#722

#725

#726

#728

#729

#735

#736

#737

#738

#739

#74

#741

#742

#746

#747

#748

#750

#751

#752

#753

#757

#758

#759

#762

#763

#767

#768

#768

#769

#77

#771

#772

#775

#78

#780

#782

#783

#787

#788

#789

#79

#790

#791

#792

#793

#794

#796

#80

#802

#803

#804

#805

#807

#808

#81

#811

#812

#815

#82

#820

#821

#824

#825

#827

#828

#83

#830

#831

#833

#835

#837

#838

#839

#840

#842

#843

#844

#845

#849

#851

#854

#855

#856

#857

#858

#859

#860

#861

#863

#864

#865

#866

#866

#867

#868

#869

#87

#870

#871

#873

#877

#878

#879

#88

#881

#882

#886

#887

#89

#891

#900

#901

#903

#905

#91

#912

#913

#913

#916

#919

#922

#923

#924

#925

#926

#927

#928

#929

#930

#931

#932

#933

#934

#935

#938

#94

#940

#941

#943

#946

#947

#948

#949

#950

#952

#953

#954

#955

#957

#958

#961

#964

#965

#967

#968

#969

#97

#972

#976

#977

#979

#98

#981

#984

#985

#987

#988

#989

#99

#990

#996

#999

v1.0.0

v1.1.0

v1.10.0

v1.2.0

v1.3.0

v1.4.0

v1.5.0

v1.5.2

v1.6.0

v1.6.1

v1.7.0

v1.7.1

v1.7.2

v1.8.0

v1.8.1

v1.8.2

v1.9.0

v1.9.1

v1.9.2

v1.9.3

v1.9.4

v1.9.5

v1.9.6

v1.9.7

Mono Color

• 012fcf40fe Revert "More playing" way too much garbage emitted Nate Brown 2025-04-16 16:56:04 -05:00
• ad319b964d More playing Nate Brown 2025-04-16 16:21:53 -05:00
• f42878c5fc Playing Nate Brown 2025-04-15 21:00:50 -05:00
• f2b3ef4b3e non-blocking io for linux Nate Brown 2025-04-02 22:57:37 -05:00
• fd1c52127f first try Ryan Huber 2025-11-04 04:00:29 +00:00
• c3ec96d9c2 Remove more os.Exit calls and give a more reliable wait for stop function Nate Brown 2025-04-02 09:51:59 -05:00
• 01909f4715 try to make certificate addition/removal reloadable in some cases (#1468) Jack Doan 2025-11-03 19:38:44 -06:00
• a4b7f624da sure io-uring-gso-gro-offtherails Ryan Huber 2025-11-03 17:23:57 +00:00
• 1c069a8e42 reuse control on gso Ryan Huber 2025-11-03 11:14:52 +00:00
• 0d8bd11818 reuse GRO slices Ryan Huber 2025-11-03 11:06:07 +00:00
• 5128e2653e reuse packet buffer Ryan Huber 2025-11-03 10:52:09 +00:00
• c73b2dfbc7 fixed fallback for non io_uring packet send/recv Ryan Huber 2025-11-03 10:45:30 +00:00
• 3dea761530 fix compile for 386 Ryan Huber 2025-11-03 10:12:02 +00:00
• b394112ad9 gso and gro with uring on send/receive for udp Ryan Huber 2025-11-03 09:59:45 +00:00
• 703ac81fa6 checkpt3 stinky JackDoan 2025-10-31 13:43:28 -05:00
• 469a5fc350 checkpt3 JackDoan 2025-10-30 16:51:03 -05:00
• 9e38065673 checkpt JackDoan 2025-10-30 14:21:31 -05:00
• 29157f413c tell stupid ai not to meddle with the paths on other platforms by adding a copy stinkier Ryan Huber 2025-10-31 14:16:02 -04:00
• 68746bd907 fix hang on exit Ryan Huber 2025-10-31 13:50:52 -04:00
• 51b383f680 forgot these little guys Ryan Huber 2025-10-31 13:38:43 -04:00
• 71c849e63e extra stinky slop that works kinda Ryan Huber 2025-10-31 13:34:39 -04:00
• d6c5c00ef7 Merge remote-tracking branch 'origin/release-1.9' into master master-1-9-tag Wade Simmons 2025-10-28 15:53:51 -04:00
• 8d4dd26484 try to fix windows? jay.wren-wireguard-tun Jay Wren 2025-10-23 16:50:10 -04:00
• 0a94f9f990 fix tun_linux_test.go & a nit Jay Wren 2025-10-23 16:16:40 -04:00
• 433c531ae4 put linux tx_queue back Jay Wren 2025-10-23 16:06:13 -04:00
• 4c0aad1b1f put back the previous darwin interface naming Jay Wren 2025-10-23 16:04:52 -04:00
• c8b0281736 gofmt Jay Wren 2025-10-23 14:50:50 -04:00
• 8281b1699f fix BatchRead interface & make batch size configurable Jay Wren 2025-10-23 14:37:26 -04:00
• 0827a6f1c5 claude suggests this bound checking optimization Jay Wren 2025-10-23 13:27:37 -04:00
• 273119638d claude did not want netbsd Jay Wren 2025-10-22 17:32:03 -04:00
• 484de41b58 claude first stab and first cleanup - ugh Jay Wren 2025-10-22 16:49:26 -04:00
• 770147264d fix make bench (#1510) Jack Doan 2025-10-21 11:32:34 -05:00
• f597aa71e3 firewall can distinguish if the host connecting has an overlapping network, is a VPN peer without an overlapping network, or is a unsafe network cross-stack-relay-overlaps JackDoan 2025-10-21 11:03:13 -05:00
• 20b7219fbe allow handshakes without overlaps JackDoan 2025-10-21 10:20:28 -05:00
• 3b53c27170 retarget punch notification messages if needed to deal with being a lighthouse not on the lowest-numbered subnet JackDoan 2025-10-17 18:14:29 -05:00
• 526236c5fa lighthouse replies via hostinfo JackDoan 2025-10-17 17:08:33 -05:00
• 0ab2882b78 fix make bench JackDoan 2025-10-17 17:07:09 -05:00
• 889d49ff82 experiment with not filtering out non-common addresses in hostinfo.networks JackDoan 2025-10-06 15:02:37 -05:00
• 3583a3f7ab feedback tun-name-template JackDoan 2025-10-14 13:46:21 -05:00
• 36daea9551 linux: opt out of naming your tun device yourself JackDoan 2025-10-02 16:18:34 -05:00
• fa8c013b97 Bump github.com/miekg/dns from 1.1.65 to 1.1.68 (#1444) dependabot[bot] 2025-10-13 16:41:51 -04:00
• 2710f2af06 Bump github.com/kardianos/service from 1.2.2 to 1.2.4 (#1433) dependabot[bot] 2025-10-13 15:58:15 -04:00
• ad6d3e6bac Bump the golang-x-dependencies group across 1 directory with 5 updates (#1409) dependabot[bot] 2025-10-13 15:54:38 -04:00
• 2b0aa74e85 Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 (#1470) dependabot[bot] 2025-10-13 15:16:24 -04:00
• b126d88963 Bump github.com/gaissmai/bart from 0.20.4 to 0.25.0 (#1471) dependabot[bot] 2025-10-13 15:15:07 -04:00
• 9101b62162 weird line breaks cross-stack-relay JackDoan 2025-10-10 16:10:13 -05:00
• d2cb854bff make sure hosts use the correct IP addresses when relaying JackDoan 2025-10-10 13:28:22 -05:00
• 7c3f533950 Better words (#1497) v1.9.7 release-1.9 Nate Brown 2025-10-10 11:31:46 -04:00
• 9bf9fb14bc fix missed error-skipping JackDoan 2025-10-10 09:43:59 -05:00
• 0f53b8a6ef test JackDoan 2025-10-10 09:30:20 -05:00
• 7797927401 test and stupid fix JackDoan 2025-10-06 15:02:37 -05:00
• 45c1d3eab3 Support for multi proto tun device on OpenBSD (#1495) Nate Brown 2025-10-08 17:56:42 -04:00
• 634181ba66 Fix incorrect CIDR construction in hostmap (#1493) Gary Guo 2025-10-08 17:02:36 +01:00
• 824cd3f0d6 Update CHANGELOG for Nebula v1.9.7 changelog-v1.9.7 Nate Brown 2025-10-07 21:10:16 -05:00
• eb89839d13 Support for multi proto tun device on NetBSD (#1492) Nate Brown 2025-10-07 21:17:50 -04:00
• 9f692175e1 HostInfo.remoteCidr should only be populated with the entire vpn ip address issued in the certificate (#1494) Nate Brown 2025-10-07 18:35:58 -04:00
• d400d9a5ec HostInfo.remoteCidr should only be populated with the entire vpn ip address issued in the certificate release-1.9-hostmap-networks-fix Nate Brown 2025-10-07 17:11:26 -05:00
• 5fa386bb70 test and stupid fix cert-v2-reloads-with-relay-stuff JackDoan 2025-10-06 15:02:37 -05:00
• 2ea8a72d5c dunno channels Nate Brown 2025-05-08 12:01:46 -05:00
• 663232e1fc Testing the concept Nate Brown 2025-04-17 12:21:58 -05:00
• 2f48529e8b Cleanup and note more work Nate Brown 2025-04-16 21:56:53 -05:00
• f3e1ad64cd Try the timeout Nate Brown 2025-04-16 17:11:11 -05:00
• 1d8112a329 Revert "More playing" way too much garbage emitted Nate Brown 2025-04-16 16:56:04 -05:00
• 31eea0cc94 More playing Nate Brown 2025-04-16 16:21:53 -05:00
• dbba4a4c77 Playing Nate Brown 2025-04-15 21:00:50 -05:00
• 194fde45da non-blocking io for linux Nate Brown 2025-04-02 22:57:37 -05:00
• f46b83f2c4 Remove more os.Exit calls and give a more reliable wait for stop function Nate Brown 2025-04-02 09:51:59 -05:00
• fb7f0c3657 Use x/net/route to manage routes directly (#1488) Nate Brown 2025-10-03 11:59:53 -04:00
• b1f53d8d25 Support IPv6 tunneling in FreeBSD (#1399) sl274 2025-10-03 02:54:30 +00:00
• f488873d70 fixy fixy JackDoan 2025-10-02 17:33:47 -05:00
• c073eebe42 fixy fixy JackDoan 2025-10-02 17:19:22 -05:00
• 8824eeaea2 helper functions to more correctly marshal curve 25519 public keys (#1481) Jack Doan 2025-10-02 13:56:41 -05:00
• 1a1255d557 make tryRehandshake easier to understand JackDoan 2025-10-02 12:29:56 -05:00
• 32649de665 we accept mismatched handshakes now, no need to kill now-mismatched tunnels (this is fine as long as we don't let you change your set of vpnNetworks on reload) JackDoan 2025-10-02 10:54:30 -05:00
• 26a00a5647 reduce log spam JackDoan 2025-10-02 10:39:25 -05:00
• 888ba400b9 good idea JackDoan 2025-10-02 09:41:50 -05:00
• dc3081ea49 nit JackDoan 2025-10-02 09:31:42 -05:00
• 68bbb53b90 fix comment JackDoan 2025-09-11 10:11:05 -05:00
• 41273a94bb even spicier change to rehandshake if we detect our cert is lower-version than our peer, and we have a newer-version cert available JackDoan 2025-09-10 13:32:41 -05:00
• 0946831f88 very spicy change to respond to handshakes with cert versions we cannot match with a cert that we can indeed match JackDoan 2025-09-10 12:47:39 -05:00
• d2d3e21780 squish bug from cert removals JackDoan 2025-09-10 12:29:01 -05:00
• 241b0a6d7f don't wait forever JackDoan 2025-09-10 11:47:45 -05:00
• 0721dde24b working e2e test?! JackDoan 2025-09-10 10:57:04 -05:00
• a6640b4540 try to make certificate addition/removal reloadable in some cases JackDoan 2025-09-08 14:29:07 -05:00
• 071589f7c7 Bump actions/setup-go from 5 to 6 (#1469) dependabot[bot] 2025-10-02 00:05:12 -05:00
• f1e992f6dd don't require a detailsVpnAddr in a HostUpdateNotification (#1472) Jack Doan 2025-09-29 13:43:12 -05:00
• 1ea5f776d7 update to go 1.25, use the cool new ECDSA key marshalling functions (#1483) Jack Doan 2025-09-29 13:02:25 -05:00
• 4cdeb284ef Set CKA_VALUE_LEN attribute in DeriveNoise (#1482) Henry Graham 2025-09-25 13:24:52 -05:00
• 5cccd39465 update RemoteList.vpnAddrs when we complete a handshake (#1467) Jack Doan 2025-09-10 09:44:25 -05:00
• 8196c22b5a store lighthouses as a slice (#1473) Jack Doan 2025-09-10 09:43:25 -05:00
• 9642afa149 use netlink events to emit lh updates instead of a timer update-lh-on-netlink-addr JackDoan 2025-09-09 13:11:49 -05:00
• 65cc253c19 prevent linux from assigning ipv6 link-local addresses (#1476) Jack Doan 2025-09-09 13:25:23 -05:00
• 73cfa7b5b1 add firewall tests for ipv6 (#1451) Wade Simmons 2025-09-08 13:57:36 -04:00
• 768325c9b4 cert-v2 chores (#1466) Jack Doan 2025-09-05 15:08:22 -05:00
• 22af56f156 Fix recv_error receipt limit allowance for v1.9.x (#1459) Nate Brown 2025-09-04 15:52:32 -05:00
• 932e329164 Don't delete static host mappings for non-primary IPs (#1464) Jack Doan 2025-09-04 14:49:40 -05:00
• 4bea299265 don't send recv errors for packets outside the connection window anymore (#1463) Jack Doan 2025-09-03 11:52:52 -05:00
• 5cff83b282 netlink: ignore route updates with no destination (#1437) Wade Simmons 2025-08-25 14:05:35 -04:00
• 1d73e463cd Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) brad-defined 2025-08-19 17:33:31 -04:00
• 7da79685ff fix lighthouse.calculated_remotes parsing (#1438) Wade Simmons 2025-07-29 13:12:07 -04:00