Commit Graph

  • 31ed9269d7 add test for GOEXPERIMENT=boringcrypto (#861) Wade Simmons 2023-05-08 13:27:01 -04:00
  • e6eeef785e mutex_debug Wade Simmons 2023-05-08 11:17:14 -04:00
  • 48eb63899f Have lighthouses ack updates to reduce test packet traffic (#851) Nate Brown 2023-05-05 14:44:03 -05:00
  • b26c13336f Fix test on master (#860) Nate Brown 2023-05-04 20:11:33 -05:00
  • e0185c4b01 Support NIST curve P256 (#769) Wade Simmons 2023-05-04 17:50:23 -04:00
  • 702e1c59bd Always disconnect block listed hosts (#858) Nate Brown 2023-05-04 16:09:42 -05:00
  • 5fe8f45d05 Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857) Nate Brown 2023-05-04 15:42:12 -05:00
  • 03e4a7f988 Rehandshaking (#838) Nate Brown 2023-05-04 15:16:37 -05:00
  • 0b67b19771 add boringcrypto Makefile targets (#856) Wade Simmons 2023-05-04 15:42:45 -04:00
  • a0d3b93ae5 update dependencies: 2023-05 (#855) Wade Simmons 2023-05-04 15:42:15 -04:00
  • 58ec1f7a7b build with go1.20 (#854) Wade Simmons 2023-05-04 11:35:03 -04:00
  • 28ecfcbc03 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-05-03 10:50:06 -04:00
  • 397fe5f879 Add ability to skip installing unsafe routes on the os routing table (#831) Nate Brown 2023-04-10 12:32:37 -05:00
  • 9b03053191 update EncReader and EncWriter interface function args to have concrete types (#844) brad-defined 2023-04-07 14:28:37 -04:00
  • 3cb4e0ef57 Allow listen.host to contain names (#825) Nate Brown 2023-04-05 11:29:26 -05:00
  • e0553822b0 Use NewGCMTLS (when using experiment boringcrypto) (#803) Wade Simmons 2023-04-05 11:08:23 -04:00
  • d3fe3efcb0 Fix handshake retry regression (#842) Nate Brown 2023-04-05 10:04:30 -05:00
  • fd99ce9a71 Use fewer test packets (#840) Nate Brown 2023-04-04 13:42:24 -05:00
  • 6685856b5d emit certificate.expiration_ttl_seconds metric (#782) Wade Simmons 2023-04-03 21:18:16 -04:00
  • a56a97e5c3 Add ability to encrypt CA private key at rest (#386) John Maguire 2023-04-03 13:59:38 -04:00
  • e71059a410 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-04-03 11:30:41 -04:00
  • ee8e1348e9 Use connection manager to drive NAT maintenance (#835) Nate Brown 2023-03-31 15:45:05 -05:00
  • 1a6c657451 Normalize logs (#837) Nate Brown 2023-03-30 15:07:31 -05:00
  • 6b3d42efa5 Use atomic.Pointer for certState (#833) Nate Brown 2023-03-30 13:04:09 -05:00
  • 2801fb2286 Fix relay (#827) brad-defined 2023-03-30 12:09:20 -04:00
  • e28336c5db probes to the lh are not generally useful as recv_error should catch (#408) Ryan Huber 2023-03-29 13:09:36 -07:00
  • 3e5c7e6860 add punchy.respond_delay config option (#721) Wade Simmons 2023-03-29 15:32:35 -04:00
  • 8a82e0fb16 ssh: add save-mutex-profile (#737) Wade Simmons 2023-03-29 15:30:28 -04:00
  • f0ef80500d Remove dead code and re-order transit from pending to main hostmap on stage 2 (#828) Nate Brown 2023-03-17 15:36:24 -05:00
  • 61b784d2bb Update dependencies 2023-03 (#824) Wade Simmons 2023-03-13 15:37:32 -04:00
  • 5da79e2a4c Run make vet in CI (#693) Caleb Jasik 2023-03-13 14:35:12 -05:00
  • e1af37e46d add calculated_remotes (#759) Wade Simmons 2023-03-13 15:09:08 -04:00
  • 6e0ae4f9a3 firewall: add option to send REJECT replies (#738) Wade Simmons 2023-03-13 15:08:40 -04:00
  • aec7f5f865 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-03-13 15:07:32 -04:00
  • f0ac61c1f0 Add nebula.plist based on the homebrew nebula LaunchDaemon plist (#762) Caleb Jasik 2023-03-13 13:16:46 -05:00
  • 92cc32f844 Remove handshake race avoidance (#820) Nate Brown 2023-03-13 12:35:14 -05:00
  • 2ea360e5e2 Render hostmaps as mermaid graphs in e2e tests (#815) Nate Brown 2023-02-16 13:23:33 -06:00
  • 469ae78748 Add homebrew install method to readme (#630) Caleb Jasik 2023-02-13 14:42:58 -06:00
  • a06977bbd5 Track connections by local index id instead of vpn ip (#807) Nate Brown 2023-02-13 14:41:05 -06:00
  • 5bd8712946 Immediately forward packets from self to self on FreeBSD (#808) John Maguire 2023-01-23 16:51:54 -05:00
  • 0fc4d8192f log network as String to match the other log event in interface.go that emits network (#811) Tricia 2023-01-23 11:05:35 -08:00
  • 5278b6f926 Generic timerwheel (#804) Nate Brown 2023-01-18 10:56:42 -06:00
  • c177126ed0 Fix possible panic in the timerwheels (#802) Nate Brown 2023-01-11 19:35:19 -06:00
  • c44da3abee Make DNS queries case insensitive (#793) John Maguire 2022-12-20 16:59:11 -05:00
  • b7e73da943 Add note indicating modes have usage text (#794) John Maguire 2022-12-20 16:53:56 -05:00
  • ff54bfd9f3 Add nebula-cert.exe and cert files to .gitignore (#722) John Maguire 2022-12-20 16:52:51 -05:00
  • b5a85a6eb8 Update example config with IPv6 note for allow lists (#742) John Maguire 2022-12-20 16:50:02 -05:00
  • 3ae242fa5f Add nss-lookup to the systemd wants (#791) Fabio Alessandro Locati 2022-12-19 20:42:07 +01:00
  • cb2ec861ea Nebula is now in Fedora official repositories (#719) Fabio Alessandro Locati 2022-12-19 20:40:53 +01:00
  • a3e6edf9c7 Use config.yml consistently (not config.yaml) (#789) John Maguire 2022-12-19 12:45:15 -05:00
  • ad7222509d Add a link to mobile nebula in the new issue form (#790) John Maguire 2022-12-19 12:28:49 -05:00
  • 12dbbd3dd3 Fix typos found by https://github.com/crate-ci/typos (#735) Caleb Jasik 2022-12-19 11:28:27 -06:00
  • ec48298fe8 Update config to show aes cipher instead of chacha (#788) John Maguire 2022-12-07 12:38:56 -05:00
  • 77769de1e6 Docs: Update doc links (#751) Ian VanSchooten 2022-11-29 11:32:43 -05:00
  • 022ae83a4a Fix typo: my -> may (#758) Alexander Averyanov 2022-11-28 21:59:57 +03:00
  • d4f9500ca5 Update dependencies (2022-11) (#780) Wade Simmons 2022-11-23 10:46:41 -05:00
  • 9a8892c526 Fix 756 SSH command line parsing error to write to user instead of stderr (#757) brad-defined 2022-11-22 21:55:27 -05:00
  • 813b64ffb1 Remove unused variables from connection manager (#677) brad-defined 2022-11-15 21:33:09 -05:00
  • 85f5849d0b Fix a hang when shutting down Android (#772) John Maguire 2022-11-11 09:18:43 -07:00
  • 9af242dc47 switch to new sync/atomic helpers in go1.19 (#728) Wade Simmons 2022-10-31 13:37:41 -04:00
  • 6d8e939648 fix up run of multiport smoke tests Wade Simmons 2022-10-17 13:13:14 -04:00
  • 326fc8758d Support multiple UDP source ports (multiport) Wade Simmons 2022-10-17 11:51:39 -04:00
  • a800a48857 v1.6.1 (#752) v1.6.1 Wade Simmons 2022-09-26 13:38:18 -04:00
  • 4c0ae3df5e Refuse to process double encrypted packets (#741) Nate Brown 2022-09-19 12:47:48 -05:00
  • feb3e1317f Add a simple benchmark to e2e tests (#739) Nate Brown 2022-09-01 09:44:58 -05:00
  • c2259f14a7 explicitly reload config from ssh command (#725) Jon Rafkind 2022-08-08 10:44:09 -07:00
  • b1eeb5f3b8 Support unsafe_routes on mobile again (#729) Nate Brown 2022-08-05 09:58:10 -05:00
  • 2adf0ca1d1 Use issue templates to improve bug reports (#726) Nate Brown 2022-07-29 12:57:05 -05:00
  • 92dfccf01a v1.6.0 (#701) v1.6.0 Nate Brown 2022-06-30 15:15:18 -05:00
  • 38e495e0d2 Remove EXPERIMENTAL text from routines example config. (#702) brad-defined 2022-06-30 11:20:41 -04:00
  • 78a0255c91 typeos (#700) brad-defined 2022-06-29 11:19:20 -04:00
  • 169cdbbd35 Immediately forward packets received on the nebula TUN device from self to self (#501) brad-defined 2022-06-27 14:36:10 -04:00
  • 0d1ee4214a Add relay e2e tests and output some mermaid sequence diagrams (#691) Nate Brown 2022-06-27 12:33:29 -05:00
  • 7b9287709c add listen.send_recv_error config option (#670) Wade Simmons 2022-06-27 12:37:54 -04:00
  • 85ec807b7e reserve NebulaHandshakeDetails fields for multiport (#674) Wade Simmons 2022-06-27 12:07:05 -04:00
  • a0b280621d Remove firewall.conntrack.max_connections from examples (#684) John Maguire 2022-06-23 11:29:54 -04:00
  • 527f953c2c Remove x509 config loading code (#685) Caleb Jasik 2022-06-23 16:27:34 +01:00
  • 1a7c575011 Relay (#678) brad-defined 2022-06-21 14:35:23 -04:00
  • 332fa2b825 fix panic in handleInvalidCertificate (#675) Don Stephan 2022-05-16 12:29:57 -05:00
  • 45d1d2b6c6 Update dependencies - 2022-04 (#664) Wade Simmons 2022-04-18 12:12:25 -04:00
  • 3913062c43 build and test with go1.18 (#656) Wade Simmons 2022-04-05 17:08:00 -04:00
  • b38bd36766 fix connection manager check when disconnect_invalid set (#658) Wade Simmons 2022-04-04 13:38:36 -04:00
  • d85e24f49f Allow for self reported ips to the lighthouse (#650) Nate Brown 2022-04-04 12:35:23 -05:00
  • 7672c7087a Add to build all windows-arm64 / bin-windows-arm64 build option (#638) bitshop 2022-03-18 13:23:10 -04:00
  • 730a5c4a23 Update link to nebula docs (#655) Caleb Jasik 2022-03-18 10:15:16 -05:00
  • 03498a0cb2 Make nebula advertise its dynamic port to lighthouses (#653) brad-defined 2022-03-15 19:03:56 -04:00
  • 312a01dc09 Lighthouse reload support (#649) Nate Brown 2022-03-14 12:35:13 -05:00
  • bbe0a032bb Fix windows unsafe_routes regression (#648) Nate Brown 2022-03-09 13:23:29 -06:00
  • b5b9d33ee7 v1.5.2 (#612) v1.5.2 Wade Simmons 2021-12-14 16:48:56 -05:00
  • e434ba6523 fix unsafe routes darwin (#610) Wade Simmons 2021-12-14 11:52:49 -05:00
  • 068a93d1f4 fix makeRouteTree allowMTU (#611) Wade Simmons 2021-12-14 11:52:28 -05:00
  • 15fdabc3ab v1.5.1 (#606) Nate Brown 2021-12-13 19:43:25 -06:00
  • 1110756f0f Allow setup of a CA pool from bytes that contain expired certs (#599) forfuncsake 2021-12-10 14:24:56 +11:00
  • e31006d546 Be more clear about ipv4 in nebula-cert (#604) Nate Brown 2021-12-07 21:40:30 -06:00
  • 949ec78653 don't set ConnectionState to nil (#590) Wade Simmons 2021-12-06 14:09:05 -05:00
  • 127a116bfd update golang.org/x/crypto (#603) Wade Simmons 2021-12-06 14:07:05 -05:00
  • befce3f990 fix crash with -test (#602) Wade Simmons 2021-12-06 14:06:16 -05:00
  • f60ed2b36d overlay: fix tun.RouteFor getting *net.IP (#595) Wade Simmons 2021-12-06 09:35:31 -05:00
  • 48c47f5841 Warn if no lighthouses were configured on a non lighthouse node (#587) Nate Brown 2021-11-30 10:31:33 -06:00
  • 75306487c5 fix wintun package to have // +build comments (#598) Wade Simmons 2021-11-30 11:14:15 -05:00