Commit Graph

  • 4e5df42a76 fix JackDoan 2026-05-11 11:26:51 -05:00
  • 2caabe2453 faster JackDoan 2026-05-06 16:06:36 -05:00
  • 92df52a068 no JackDoan 2026-05-06 15:46:28 -05:00
  • 03fbdfee6e use clear() JackDoan 2026-05-06 15:46:17 -05:00
  • 3a9d8bca38 remove udp-level RX reorder buf JackDoan 2026-05-06 13:51:05 -05:00
  • f54922f134 make relays take the fast path maybe JackDoan 2026-05-06 13:26:54 -05:00
  • 866ee3798a scoot pinning around JackDoan 2026-05-05 12:58:33 -05:00
  • b3086ec9b6 scoot stuff around for e2e JackDoan 2026-05-04 12:18:54 -05:00
  • bed2840376 disable sort-on-RX, CPU pinning seems to work for now JackDoan 2026-05-04 11:57:33 -05:00
  • e56b92aef8 switch to ASM vector checksum JackDoan 2026-05-04 11:56:58 -05:00
  • a7740f5b64 GSO/GRO offloads, with TCP+ECN and UDP support JackDoan 2026-04-17 10:25:05 -05:00
  • 58b204407f better and batched tun interface JackDoan 2026-04-17 10:25:05 -05:00
  • 147c202c27 Swap back to a blocking udp socket, test shutdown(2) (#1806) Nate Brown 2026-07-17 15:16:45 -05:00
  • e290a6892f Fix relay re-establishment for handshake on Disestablised entry (#1805) John Maguire 2026-07-17 11:57:47 -04:00
  • 10e9514e44 pin tun reader threads to CPUs so per-flow packets keep wire order better-tun-interface-minimal JackDoan 2026-07-16 12:25:23 -05:00
  • 913a37cfee overlay: replace per-fd tun readers with a batched Queue interface JackDoan 2026-07-16 12:18:38 -05:00
  • 7fe4fab167 tun: default pin CPUs avoid NIC IRQ cores tun-pin-avoid-nic-irqs JackDoan 2026-07-14 15:14:40 -05:00
  • 37b924945d unslop some comments JackDoan 2026-07-14 13:38:39 -05:00
  • 5631346b07 batch: back SendBatch with Arena instead of a hand-rolled slab JackDoan 2026-07-14 11:52:29 -05:00
  • 97eb3c635a batch: move shared-arena Reset ownership from lanes to their owner JackDoan 2026-07-14 11:51:32 -05:00
  • 05f7923860 re-align to master JackDoan 2026-07-14 11:38:43 -05:00
  • 49028cb755 some tests JackDoan 2026-07-14 10:57:53 -05:00
  • adf71d1458 simplify making new Queues JackDoan 2026-07-14 10:56:21 -05:00
  • cefda6524c make service test less annoying JackDoan 2026-07-14 10:41:19 -05:00
  • d0f14de739 checkpt JackDoan 2026-07-14 10:41:02 -05:00
  • 9e7646ee62 checkpt JackDoan 2026-07-14 10:40:57 -05:00
  • 6e6cfc89db more ram -> more speed JackDoan 2026-07-13 18:56:07 -05:00
  • 3719f135e3 more fixes! JackDoan 2026-07-13 18:55:44 -05:00
  • 2724b4a96c more fixes! JackDoan 2026-07-13 17:54:17 -05:00
  • e386e290ab lint JackDoan 2026-07-13 16:41:13 -05:00
  • 0a44376403 datapath: fix 12 correctness findings from tun/UDP offload review JackDoan 2026-07-13 16:35:20 -05:00
  • 9e61269935 make mobile happy JackDoan 2026-07-13 15:25:57 -05:00
  • a0836aa819 correctly shutdown the pprofserver JackDoan 2026-07-13 15:16:28 -05:00
  • cf2800f7bd SendVia: don't emit a zero-length packet when prepareSendVia fails JackDoan 2026-07-13 14:56:19 -05:00
  • fc89b9d14c adapt Control lifecycle tests to the batched tio.Queue Device interface JackDoan 2026-07-13 14:42:38 -05:00
  • 3e5326e60a udp setsockopt correctness fixes JackDoan 2026-05-12 11:41:42 -05:00
  • 840841a53c use less ram pls JackDoan 2026-05-11 17:30:56 -05:00
  • cfb4ab24c3 clean up a comment a bit JackDoan 2026-05-11 17:10:33 -05:00
  • 67f9cfad91 drop in a logger JackDoan 2026-05-11 17:10:05 -05:00
  • 1c78f5e500 go mod tidy JackDoan 2026-05-11 14:56:26 -05:00
  • ad8ff2e45e lint JackDoan 2026-05-11 14:04:23 -05:00
  • c13a1ff4ec fix JackDoan 2026-05-11 11:26:51 -05:00
  • 8b66ebaf72 faster JackDoan 2026-05-06 16:06:36 -05:00
  • bbdaf5c3f3 no JackDoan 2026-05-06 15:46:28 -05:00
  • a515aeaf39 use clear() JackDoan 2026-05-06 15:46:17 -05:00
  • 0f6f14eaf6 remove udp-level RX reorder buf JackDoan 2026-05-06 13:51:05 -05:00
  • dafdd34af9 make relays take the fast path maybe JackDoan 2026-05-06 13:26:54 -05:00
  • f6791130df scoot pinning around JackDoan 2026-05-05 12:58:33 -05:00
  • 145a6267fa scoot stuff around for e2e JackDoan 2026-05-04 12:18:54 -05:00
  • 7716f1da23 disable sort-on-RX, CPU pinning seems to work for now JackDoan 2026-05-04 11:57:33 -05:00
  • beb1d7d89f switch to ASM vector checksum JackDoan 2026-05-04 11:56:58 -05:00
  • fa0d593f28 GSO/GRO offloads, with TCP+ECN and UDP support JackDoan 2026-04-17 10:25:05 -05:00
  • ff48040c78 better and batched tun interface JackDoan 2026-04-17 10:25:05 -05:00
  • 6c3972f464 code-sign: default the S3 key-prefix to the calling repo (#1799) Nate Brown 2026-07-13 11:49:59 -05:00
  • 861d3aabd7 correct directionality of firewall.inbound_action and firewall.outbound_action (#1798) Jack Doan 2026-07-13 08:40:42 -05:00
  • 459cfc6f83 warn on uselessly low MTU mtu-whiner JackDoan 2026-07-10 20:52:34 -05:00
  • 86733864fe don't make new relay state on a just-discarded tunnel (#1796) Jack Doan 2026-07-10 12:02:17 -05:00
  • ab736e4c6b Make Control safe to stop and wait on from any lifecycle state (#1794) Nate Brown 2026-07-10 10:35:17 -05:00
  • 5ecdd4eaa9 Fix e2e test races when looking at hostmap counts (#1795) Nate Brown 2026-07-09 18:48:14 -05:00
  • bc04261d0b linux: let the kernel resolve the tun.dev %d template atomically tun-name-template-kernel-resolve JackDoan 2026-07-09 18:37:30 -05:00
  • 1b84bd0050 Remove dev fmt.Println (#1793) Nate Brown 2026-07-09 11:04:25 -05:00
  • 384610f81a hostmap: replace the shared next/prev hostinfo chain with independent per-address lists so divergent or overlapping vpnAddr sets cannot corrupt the map (#1790) Nate Brown 2026-07-09 09:34:30 -05:00
  • 57e1a9b6af linux: allow %d anywhere in the tun.dev template tun-name-template JackDoan 2025-10-02 16:18:34 -05:00
  • f671406b82 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2026-07-08 11:38:38 -04:00
  • 3264ebf953 cleanup Wade Simmons 2026-07-08 10:53:08 -04:00
  • 3c1dd52953 update README Wade Simmons 2026-07-08 10:51:38 -04:00
  • 4e8733ca22 run all smoke tests with -race Wade Simmons 2026-07-08 10:46:21 -04:00
  • 6675f5a361 use go:debug to enable fips140=only Wade Simmons 2026-07-08 10:41:24 -04:00
  • 14c9288127 Ensure Curve25519 and ChaChaPoly are not used in fips140 enforced mode Wade Simmons 2026-07-08 10:33:55 -04:00
  • 90c7630270 extract the internal FIPS GCM implementation Wade Simmons 2026-07-08 10:19:48 -04:00
  • c1eea118f4 fix firewall port/proto bypass in parseV6 from uint8 extension-header length overflow (#1789) Nate Brown 2026-07-07 20:43:26 -05:00
  • 1e66c0d3ee hostmap: unlink a multi-vpnAddr hostinfo from the shared chain exactly once on delete (#1788) Nate Brown 2026-07-07 17:32:25 -05:00
  • e5c0fdad8d Darwin and openbsd in line with the other bsds for tun support (#1703) Nate Brown 2026-07-07 17:05:12 -05:00
  • 7bd0bc285a sshd: guard trustedKeys/trustedCAs with a mutex to fix a concurrent map crash on reload (#1787) Nate Brown 2026-07-07 15:50:06 -05:00
  • 942ee522e0 lighthouse: unmap 4-in-6 addresses in protoV6AddrPortToNetAddrPort so remote_allow_list v4 rules apply (#1786) Nate Brown 2026-07-07 15:23:39 -05:00
  • 32149f3a93 Bump github.com/kardianos/service from 1.2.4 to 1.3.0 (#1782) dependabot[bot] 2026-07-07 14:42:33 -05:00
  • 19ad3bb904 correctly discard nil proto addresses (#1785) Jack Doan 2026-07-07 14:41:01 -05:00
  • e9357ff426 Experimenting with fw event reporting firewall-events Nate Brown 2026-07-07 14:30:55 -05:00
  • 647775d8c3 Bump golang.zx2c4.com/wireguard/windows (#1665) dependabot[bot] 2026-07-07 13:40:12 -05:00
  • abfeb502a8 iputil: fix infinite loop in ipv6FindUpperProtocol from uint8 extension-header length overflow (#1784) Nate Brown 2026-07-07 13:28:52 -05:00
  • 0a953915bb Make HostInfo.remote atomic to fix torn reads on the send path (#1773) John Maguire 2026-07-07 18:27:53 +00:00
  • 6aa3363d85 Add explicit unmarshaller for signing and key agreement public keys (#1777) Nate Brown 2026-07-07 13:16:57 -05:00
  • 95d98b1f4b firewall: move conntrack check after cert+IP verification (#1779) Jack Doan 2026-07-07 13:10:11 -05:00
  • 6afca0f461 correctly handle a test packet with a payload longer than the header (#1778) Jack Doan 2026-07-03 11:06:22 -05:00
  • 02471b4121 wireshark: fix Lua 5.4 bitwise operation (#1776) claude/fix-test-echo-overlap zorvios 2026-07-01 22:12:14 +01:00
  • 21b207b449 Bump Vampire/setup-wsl from 3 to 7 dependabot/github_actions/Vampire/setup-wsl-7 dependabot[bot] 2026-06-29 17:54:42 +00:00
  • 58ab7250f5 Bump actions/checkout from 6 to 7 (#1771) dependabot[bot] 2026-06-29 12:47:13 -05:00
  • 184cdc8586 Add OCI image labels with version info (#1772) John Maguire 2026-06-23 14:21:28 -04:00
  • 81afed439e Merge remote-tracking branch 'origin/master' into fips140 Wade Simmons 2026-06-18 12:07:19 -04:00
  • 7d3166a19d cleanup ipv6 iputil helpers / skip reject for ICMP error packets and fragments (#1768) Wade Simmons 2026-06-16 16:51:14 -04:00
  • fe1c5682f0 add IPv6 support to CreateICMPEchoResponse (#1767) Wade Simmons 2026-06-16 13:16:47 -04:00
  • e4cc80aaca add IPv6 reject packet generation (#1766) Wade Simmons 2026-06-16 13:04:21 -04:00
  • 16b302c11d Relay log fix (#1765) Jack Doan 2026-06-16 11:38:34 -05:00
  • ab539f8a3f Add smoke test for ipv6 (#1764) Wade Simmons 2026-06-16 12:13:05 -04:00
  • b7d83b0500 Bump golang.org/x/net in the golang-x-dependencies group (#1763) dependabot[bot] 2026-06-15 14:59:19 -04:00
  • ef95b25fa3 Bump github.com/gaissmai/bart from 0.27.1 to 0.28.0 (#1743) dependabot[bot] 2026-06-15 10:09:39 -04:00
  • 36b38396af Bump the golang-x-dependencies group with 4 updates (#1750) dependabot[bot] 2026-06-15 10:04:22 -04:00
  • 2e9117da5b fix tunnels that could permanently escape connection-manager monitoring (#1752) Jack Doan 2026-06-10 11:03:23 -05:00
  • a690c904ba improve rejection of malformed handshakes (#1756) Jack Doan 2026-06-10 09:28:07 -05:00
  • e028e6bf1a disallow negative stats intervals (#1754) Jack Doan 2026-06-10 09:27:40 -05:00