Commit Graph

  • 0f53b8a6ef test JackDoan 2025-10-10 09:30:20 -05:00
  • 7797927401 test and stupid fix JackDoan 2025-10-06 15:02:37 -05:00
  • 45c1d3eab3 Support for multi proto tun device on OpenBSD (#1495) Nate Brown 2025-10-08 17:56:42 -04:00
  • 634181ba66 Fix incorrect CIDR construction in hostmap (#1493) Gary Guo 2025-10-08 17:02:36 +01:00
  • 824cd3f0d6 Update CHANGELOG for Nebula v1.9.7 Nate Brown 2025-10-07 21:10:16 -05:00
  • eb89839d13 Support for multi proto tun device on NetBSD (#1492) Nate Brown 2025-10-07 21:17:50 -04:00
  • 9f692175e1 HostInfo.remoteCidr should only be populated with the entire vpn ip address issued in the certificate (#1494) Nate Brown 2025-10-07 18:35:58 -04:00
  • 5fa386bb70 test and stupid fix cert-v2-reloads-with-relay-stuff JackDoan 2025-10-06 15:02:37 -05:00
  • 2ea8a72d5c dunno channels Nate Brown 2025-05-08 12:01:46 -05:00
  • 663232e1fc Testing the concept Nate Brown 2025-04-17 12:21:58 -05:00
  • 2f48529e8b Cleanup and note more work Nate Brown 2025-04-16 21:56:53 -05:00
  • f3e1ad64cd Try the timeout Nate Brown 2025-04-16 17:11:11 -05:00
  • 1d8112a329 Revert "More playing" way too much garbage emitted Nate Brown 2025-04-16 16:56:04 -05:00
  • 31eea0cc94 More playing Nate Brown 2025-04-16 16:21:53 -05:00
  • dbba4a4c77 Playing Nate Brown 2025-04-15 21:00:50 -05:00
  • 194fde45da non-blocking io for linux Nate Brown 2025-04-02 22:57:37 -05:00
  • f46b83f2c4 Remove more os.Exit calls and give a more reliable wait for stop function Nate Brown 2025-04-02 09:51:59 -05:00
  • fb7f0c3657 Use x/net/route to manage routes directly (#1488) Nate Brown 2025-10-03 11:59:53 -04:00
  • b1f53d8d25 Support IPv6 tunneling in FreeBSD (#1399) sl274 2025-10-03 02:54:30 +00:00
  • f488873d70 fixy fixy JackDoan 2025-10-02 17:33:47 -05:00
  • c073eebe42 fixy fixy JackDoan 2025-10-02 17:19:22 -05:00
  • 8824eeaea2 helper functions to more correctly marshal curve 25519 public keys (#1481) Jack Doan 2025-10-02 13:56:41 -05:00
  • 1a1255d557 make tryRehandshake easier to understand JackDoan 2025-10-02 12:29:56 -05:00
  • 32649de665 we accept mismatched handshakes now, no need to kill now-mismatched tunnels (this is fine as long as we don't let you change your set of vpnNetworks on reload) JackDoan 2025-10-02 10:54:30 -05:00
  • 26a00a5647 reduce log spam JackDoan 2025-10-02 10:39:25 -05:00
  • 888ba400b9 good idea JackDoan 2025-10-02 09:41:50 -05:00
  • dc3081ea49 nit JackDoan 2025-10-02 09:31:42 -05:00
  • 68bbb53b90 fix comment JackDoan 2025-09-11 10:11:05 -05:00
  • 41273a94bb even spicier change to rehandshake if we detect our cert is lower-version than our peer, and we have a newer-version cert available JackDoan 2025-09-10 13:32:41 -05:00
  • 0946831f88 very spicy change to respond to handshakes with cert versions we cannot match with a cert that we can indeed match JackDoan 2025-09-10 12:47:39 -05:00
  • d2d3e21780 squish bug from cert removals JackDoan 2025-09-10 12:29:01 -05:00
  • 241b0a6d7f don't wait forever JackDoan 2025-09-10 11:47:45 -05:00
  • 0721dde24b working e2e test?! JackDoan 2025-09-10 10:57:04 -05:00
  • a6640b4540 try to make certificate addition/removal reloadable in some cases JackDoan 2025-09-08 14:29:07 -05:00
  • 071589f7c7 Bump actions/setup-go from 5 to 6 (#1469) dependabot[bot] 2025-10-02 00:05:12 -05:00
  • f1e992f6dd don't require a detailsVpnAddr in a HostUpdateNotification (#1472) Jack Doan 2025-09-29 13:43:12 -05:00
  • 1ea5f776d7 update to go 1.25, use the cool new ECDSA key marshalling functions (#1483) Jack Doan 2025-09-29 13:02:25 -05:00
  • 4cdeb284ef Set CKA_VALUE_LEN attribute in DeriveNoise (#1482) Henry Graham 2025-09-25 13:24:52 -05:00
  • 5cccd39465 update RemoteList.vpnAddrs when we complete a handshake (#1467) Jack Doan 2025-09-10 09:44:25 -05:00
  • 8196c22b5a store lighthouses as a slice (#1473) Jack Doan 2025-09-10 09:43:25 -05:00
  • 9642afa149 use netlink events to emit lh updates instead of a timer update-lh-on-netlink-addr JackDoan 2025-09-09 13:11:49 -05:00
  • 65cc253c19 prevent linux from assigning ipv6 link-local addresses (#1476) Jack Doan 2025-09-09 13:25:23 -05:00
  • 73cfa7b5b1 add firewall tests for ipv6 (#1451) Wade Simmons 2025-09-08 13:57:36 -04:00
  • 768325c9b4 cert-v2 chores (#1466) Jack Doan 2025-09-05 15:08:22 -05:00
  • 22af56f156 Fix recv_error receipt limit allowance for v1.9.x (#1459) Nate Brown 2025-09-04 15:52:32 -05:00
  • 932e329164 Don't delete static host mappings for non-primary IPs (#1464) Jack Doan 2025-09-04 14:49:40 -05:00
  • 4bea299265 don't send recv errors for packets outside the connection window anymore (#1463) Jack Doan 2025-09-03 11:52:52 -05:00
  • 5cff83b282 netlink: ignore route updates with no destination (#1437) Wade Simmons 2025-08-25 14:05:35 -04:00
  • 1d73e463cd Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) brad-defined 2025-08-19 17:33:31 -04:00
  • 7da79685ff fix lighthouse.calculated_remotes parsing (#1438) Wade Simmons 2025-07-29 13:12:07 -04:00
  • 0496ef101e Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2025-07-28 13:50:26 -04:00
  • b418a081a8 cleanup Wade Simmons 2025-07-25 14:57:49 -04:00
  • fd3fa57e79 comments Wade Simmons 2025-07-25 14:42:54 -04:00
  • 0eb92dcab4 WIP Wade Simmons 2025-07-25 14:32:37 -04:00
  • f6b206d96c cleanup Wade Simmons 2025-07-25 10:38:52 -04:00
  • 31cc3a4169 Merge remote-tracking branch 'origin/master' into fips140 Wade Simmons 2025-07-24 13:57:12 -04:00
  • 6da314aa6b WIP Wade Simmons 2025-07-24 13:56:42 -04:00
  • 3da3d41fb5 log if fips140 in use Wade Simmons 2025-07-24 12:37:33 -04:00
  • 105e0ec66c v1.9.6 (#1434) v1.9.6 brad-defined 2025-07-18 08:39:33 -04:00
  • 91eff03418 Update slack OSS invite link (#1435) brad-defined 2025-07-15 16:05:28 -04:00
  • ae9de47dd9 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2025-07-11 12:57:52 -04:00
  • 52623820c2 Drop inactive tunnels (#1427) Nate Brown 2025-07-03 09:58:37 -05:00
  • c2420642a0 Darwin udp fix (#1428) Nate Brown 2025-07-02 15:50:22 -05:00
  • b3a1f7b0a3 Disable UDP receive error returns due to ICMP messages on Windows. (#1412) (#1415) brad-defined 2025-07-02 11:37:41 -04:00
  • 94142aded5 Fix relay migration panic by covering every possible relay state (#1414) brad-defined 2025-07-02 08:48:02 -04:00
  • b158eb0c4c Use a list for relay IPs instead of a map (#1423) brad-defined 2025-07-02 08:47:05 -04:00
  • e4b7dbcfb0 Bump dario.cat/mergo from 1.0.1 to 1.0.2 (#1408) dependabot[bot] 2025-07-01 23:30:40 -05:00
  • 882edf11d7 Bump github.com/vishvananda/netlink from 1.3.0 to 1.3.1 (#1407) dependabot[bot] 2025-07-01 23:29:15 -05:00
  • d34c2b8e06 Bump golangci/golangci-lint-action from 7 to 8 (#1400) dependabot[bot] 2025-07-01 23:25:24 -05:00
  • 4870bb680d Darwin udp fix (#1426) Nate Brown 2025-07-01 16:41:29 -05:00
  • a1498ca8f8 Store relay states in a slice for consistent ordering (#1422) brad-defined 2025-06-24 12:04:00 -04:00
  • 9877648da9 Drop inactive tunnels (#1413) Nate Brown 2025-06-23 11:32:50 -05:00
  • 03ab9a1208 update synctrace synctrace Wade Simmons 2025-06-12 15:22:54 -04:00
  • 4258c1388c Merge remote-tracking branch 'origin/master' into synctrace Wade Simmons 2025-06-12 13:50:39 -04:00
  • 442a52879b Fix off by one error in IPv6 packet parser (#1419) brad-defined 2025-06-11 15:15:15 -04:00
  • 4c745e8cfe maintain existing punchy remove-olddead-tunnels Jack Doan 2025-06-09 12:35:28 -04:00
  • 87a4ec7d90 use queried hostmap info for deletion logging Jack Doan 2025-05-12 09:33:42 -04:00
  • 47d4055e10 remove unused and stale tunnels. punch less. Ryan Huber 2025-05-12 09:29:38 -04:00
  • 8e0a7bcbb7 Disable UDP receive error returns due to ICMP messages on Windows. (#1412) brad-defined 2025-05-22 08:55:45 -04:00
  • 8c29b15c6d fix relay migration panic (#1403) brad-defined 2025-05-13 14:58:58 -04:00
  • 04d7a8ccba Retry UDP receive on Windows in some receive error cases (#1404) brad-defined 2025-05-13 14:58:37 -04:00
  • 061e733007 Fix slack invitation link in issue template (#1406) Ian VanSchooten 2025-05-13 12:00:22 -04:00
  • 92a9248083 Minor fixes to Readme shell snippets (#1389) Andy George 2025-05-02 15:32:00 -05:00
  • 83ff2461e2 Mention CA expiration in the README (#1378) John Maguire 2025-04-28 13:36:06 -04:00
  • 8536c57645 Allow configuration of logger and build version in gvisor service library (#1239) maggie44 2025-04-21 18:45:59 +01:00
  • 15b5a43300 Update issue and PR templates (#1376) John Maguire 2025-04-21 13:45:48 -04:00
  • e5ce8966d6 add netlink options (#1326) Andriyanov Nikita 2025-04-21 20:44:33 +03:00
  • 2dc30fc300 Support 32-bit machines in crypto test (#1394) John Maguire 2025-04-21 13:28:43 -04:00
  • 5ceac2b078 add a little context to dns jay.wren-dns-ctx Jay Wren 2025-04-18 17:09:10 -04:00
  • b8ea55eb90 optimize usage of bart (#1395) Wade Simmons 2025-04-18 12:37:20 -04:00
  • 4eb056af9d Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#1393) dependabot[bot] 2025-04-17 06:43:55 -04:00
  • e49f279004 Bump golang.org/x/net in the golang-x-dependencies group (#1392) dependabot[bot] 2025-04-17 06:41:53 -04:00
  • 459cb38a6d Bump github.com/gaissmai/bart from 0.20.1 to 0.20.4 (#1391) dependabot[bot] 2025-04-16 11:46:46 -04:00
  • 2400e2392b lint jay.wren-lint Jay Wren 2025-04-02 16:24:03 -04:00
  • 18279ed17b Bump github.com/miekg/dns from 1.1.64 to 1.1.65 (#1384) dependabot[bot] 2025-04-08 11:40:34 -04:00
  • c7fb3ad9cf Bump the golang-x-dependencies group with 4 updates (#1382) dependabot[bot] 2025-04-08 11:39:31 -04:00
  • d4a7df3083 Rename pki.default_version to pki.initiating_version (#1381) John Maguire 2025-04-07 18:08:29 -04:00
  • e83a1c6c84 Update config.go (#1353) Zeroday BYTE 2025-04-04 01:11:20 +07:00
  • 2a2b6424ed add new locks added to master Wade Simmons 2025-04-02 11:57:02 -04:00
  • f896e2a863 Merge remote-tracking branch 'origin/master' into synctrace Wade Simmons 2025-04-02 11:00:53 -04:00