Commit Graph

  • 9f34c5e2ba Typo Fix (#523) Ben Yanke 2021-09-16 00:12:08 -05:00
  • 3f5caf67ff Add info about Distribution Packages. (#414) Joe Doss 2021-09-15 17:57:35 -05:00
  • e01213cd21 Update README.md (#378) Stan Grishin 2021-09-15 16:50:01 -06:00
  • af3674ac7b add peer cert issuer to handshake log entries (#510) Jack Adamson 2021-08-31 11:57:38 +10:00
  • c726d20578 Fix single command ssh exec (#483) Nate Brown 2021-06-07 17:06:59 -05:00
  • d13f4b5948 fixed recv_errors spoofing condition (#482) Andrii Chubatiuk 2021-06-03 20:04:04 +03:00
  • 2e1d6743be v1.4.0 (#458) v1.4.0 Nate Brown 2021-05-10 20:23:49 -05:00
  • d004fae4f9 Unlock the hostmap quickly, lock hostinfo instead (#459) Nate Brown 2021-05-05 13:10:55 -05:00
  • 95f4c8a01b Don't check for rebind if we are closing the tunnel (#457) Nate Brown 2021-05-04 19:15:24 -05:00
  • 9ff73cb02f Increase the timestamp resolution for handshakes (#453) Nate Brown 2021-05-03 14:10:00 -05:00
  • 98c391396c Remove log when no handshake message is sent (#452) John Maguire 2021-04-30 19:19:40 -04:00
  • 1bc6f5fe6c Minor windows focused improvements (#443) Nate Brown 2021-04-30 15:04:47 -05:00
  • 44cb697552 Add more metrics (#450) Wade Simmons 2021-04-27 22:23:18 -04:00
  • db23fdf9bc Dont apply race avoidance to existing handshakes, use the handshake time to determine who wins (#451) Nathan Brown 2021-04-27 21:15:34 -05:00
  • df7c7eec4a Get out faster on nil udpAddr (#449) Nathan Brown 2021-04-26 20:21:47 -05:00
  • 6f37280e8e Fully close tunnels when CloseAllTunnels is called (#448) Nathan Brown 2021-04-26 10:42:24 -05:00
  • a0735dd7d5 Add locking around ssh conns to avoid concurrent map access on reload (#447) Nathan Brown 2021-04-23 14:43:16 -05:00
  • 1deb5d98e8 Fix tun funcs for ios and android (#446) Nathan Brown 2021-04-22 15:23:40 -05:00
  • a1ee521d79 Fix a failed return in an error case (#445) Nathan Brown 2021-04-17 18:47:31 -05:00
  • 7859140711 Only set serveDns if the host is also configured to be a lighthouse. (#433) brad-defined 2021-04-16 14:33:56 -04:00
  • 17106f83a0 Ensure the Nebula device exists before attempting to bind to the Nebula IP (#375) brad-defined 2021-04-16 11:34:28 -04:00
  • ab08be1e3e Don't panic on a nil response from the lighthouse (#442) Nathan Brown 2021-04-15 09:12:21 -05:00
  • 710df6a876 Refactor remotes and handshaking to give every address a fair shot (#437) Nathan Brown 2021-04-14 13:50:09 -05:00
  • 20bef975cd Remove obsolete systemd unit settings (take 2) (#438) John Maguire 2021-04-07 13:02:40 -04:00
  • 480036fbc8 Remove unused structs in hostmap.go (#430) Nathan Brown 2021-04-01 22:07:11 -05:00
  • 1499be3e40 Fix name resolution for host names in config (#431) Nathan Brown 2021-04-01 21:48:41 -05:00
  • 64d8e5aa96 More LH cleanup (#429) Nathan Brown 2021-04-01 10:23:31 -05:00
  • 75f7bda0a4 Lighthouse performance pass (#418) Nathan Brown 2021-03-31 17:32:02 -05:00
  • e7e55618ff Include bad backets in the good handshake test (#428) Nathan Brown 2021-03-31 13:36:10 -05:00
  • 0c2e5973e1 Simple lie test (#427) Nathan Brown 2021-03-31 10:26:35 -05:00
  • 830d6d4639 Start of end to end testing with a good handshake between two nodes (#425) Nathan Brown 2021-03-29 14:29:20 -05:00
  • 883e09a392 Don't use a global ca pool (#426) Nathan Brown 2021-03-29 12:10:19 -05:00
  • 4603b5b2dd fix PromoteEvery check (#424) Wade Simmons 2021-03-26 15:01:05 -04:00
  • a71541fb0b export build version as a prometheus label (#405) Wade Simmons 2021-03-26 14:16:35 -04:00
  • 3ea7e1b75f Don't use a global logger (#423) Nathan Brown 2021-03-26 09:46:30 -05:00
  • 7a9f9dbded Don't craft buffers if we don't need them (#416) Nathan Brown 2021-03-22 18:25:06 -05:00
  • 7073d204a8 IPv6 support for outside (udp) (#369) Nathan Brown 2021-03-18 20:37:24 -05:00
  • 9e94442ce7 Add fedora dist files. (#413) Joe Doss 2021-03-18 14:33:43 -05:00
  • 13471f5792 Remove obsolete systemd unit settings. (#412) Joe Doss 2021-03-18 14:29:36 -05:00
  • b6c6b96c79 also darwin windows_udp_buffer_setting Ryan Huber 2021-03-17 18:21:42 -05:00
  • 6dea7760cb *WIP* this is just test code but works to increase throughput on windows significantly. the default windows buffers are 8192KB which is :( Ryan Huber 2021-03-17 17:57:05 -05:00
  • ea07a89cc8 Ensure mutex is unlocked when adding remote IP. (#406) Thomas Roten 2021-03-16 12:41:35 -04:00
  • 3aaaea6309 don't allow a useless handshake with yourself (#402) Ryan Huber 2021-03-15 12:58:23 -07:00
  • 5506da3de9 Fix selection of UDP remote to use during stage2 (#404) Wade Simmons 2021-03-12 21:43:24 -05:00
  • 6c55d67f18 Refactor handshake_ix (#401) Wade Simmons 2021-03-12 14:16:25 -05:00
  • 64d8035d09 fix race in getOrHandshake (#400) Wade Simmons 2021-03-09 09:27:02 -05:00
  • 73a5ed90b2 Do not allow someone to run a nebula lighthouse with an ephemeral port (#399) Ryan Huber 2021-03-08 12:42:06 -08:00
  • d604270966 Fix most known data races (#396) Wade Simmons 2021-03-05 21:18:33 -05:00
  • 29c5f31f90 Add a check in the makefile to ensure a minimum version of go is installed (#383) Nathan Brown 2021-03-02 13:29:05 -06:00
  • b6234abfb3 Add a way to trigger punch backs via lighthouse (#394) Nathan Brown 2021-03-01 19:06:01 -06:00
  • 2a4beb41b9 Routine-local conntrack cache (#391) Wade Simmons 2021-03-01 19:52:17 -05:00
  • d232ccbfab add metrics for the udp sockets using SO_MEMINFO (#390) Wade Simmons 2021-03-01 19:51:33 -05:00
  • ecfb40f29c Fix osx for mq changes, this does not implement mq on osx (#395) Nathan Brown 2021-03-01 15:57:05 -06:00
  • 1bae5b2550 more validation in pending hostmap deletes (#344) Wade Simmons 2021-03-01 12:40:46 -05:00
  • 73081d99bc add make smoke-docker (#287) Wade Simmons 2021-03-01 11:15:15 -05:00
  • e7e6a23cde fix a few typos (#302) Tim Rots 2021-03-01 17:14:34 +01:00
  • a0583ebdca tun_disabled: reply to ICMP Echo Request (#342) Wade Simmons 2021-03-01 11:09:41 -05:00
  • 27d9a67dda Proper multiqueue support for tun devices (#382) Wade Simmons 2021-02-25 15:01:14 -05:00
  • 2bce222550 List possible cipher options in example config (#385) John Maguire 2021-02-19 22:46:42 -05:00
  • 3dd1108099 Go 1.16 and darwin-arm64 (#381) Wade Simmons 2021-02-17 13:11:57 -05:00
  • d4b81f9b8d Add QR code support to nebula-cert (#297) Nathan Brown 2021-02-11 18:53:25 -06:00
  • 454bc8a6bb Check certificate banner during nebula-cert print (#373) brad-defined 2021-02-05 15:52:32 -05:00
  • ce9ad37431 fix regression with LightHouseHandler and punchBack (#346) Wade Simmons 2020-11-25 17:49:26 -05:00
  • ee7c27093c add HostMap.RemoteIndexes (#329) Wade Simmons 2020-11-23 14:51:16 -05:00
  • 2e7ca027a4 Lighthouse handler optimizations (#320) Wade Simmons 2020-11-23 14:50:01 -05:00
  • 672ce1f0a8 Move slice allocations in connection manager monitor loop (#340) mhp 2020-11-19 15:44:05 -08:00
  • 384b1166ea fix panic in UnmarshalNebulaCertificate (#339) Wade Simmons 2020-11-19 08:44:54 -05:00
  • 0389596f66 don't mark handshake packets as "lost" (#331) Wade Simmons 2020-11-16 14:03:08 -05:00
  • 43a3988afc i don't think this is used at all anymore (#323) Ryan Huber 2020-10-29 20:43:50 -05:00
  • 5c23676a0f Added line to systemd config template to start Nebula before sshd (#317) Brian Kelly 2020-10-29 21:43:02 -04:00
  • f6d0b4b893 Update README for supported platforms (#312) Nathan Brown 2020-10-12 13:11:32 -05:00
  • db11e2f1af Revert "smoke test" interface-hooks Dave Russell 2020-10-03 00:09:18 +10:00
  • 2ee428b067 Hook send should use a code path that actually firewalls Dave Russell 2020-10-02 23:42:20 +10:00
  • e9657d571e control->Send: Also set the src port Dave Russell 2020-10-02 22:25:31 +10:00
  • 3cebf38504 The custom message packet sender needs a dest port Dave Russell 2020-10-02 20:46:08 +10:00
  • ae3ee42469 Provide hooks for custom message packet handlers Dave Russell 2020-09-28 22:31:16 +10:00
  • fa034a6d83 smoke test Dave Russell 2020-09-27 22:43:24 +10:00
  • 55d72ac46f Tighten up the inside handlers with a bit of DRY Dave Russell 2020-09-27 22:37:20 +10:00
  • 2c931d5691 Move inside packet handlers into map Dave Russell 2020-09-27 22:04:14 +10:00
  • 0d6b55e495 Bring in the new version of kardianos/service and output logfiles on osx (#303) Ryan Huber 2020-09-24 15:34:08 -07:00
  • c71c84882e v1.3.0 (#268) v1.3.0 Wade Simmons 2020-09-22 12:21:12 -04:00
  • 0010db46e4 Fix a data race on message counter (#284) Darren Hoo 2020-09-22 09:41:46 +08:00
  • 68e3e84fdc More like a library (#279) Nathan Brown 2020-09-18 09:20:09 -05:00
  • 6238f1550b Handle panic when invalid IP entered in sshd (#296) Brian Luong 2020-09-18 07:10:25 -07:00
  • 50b04413c7 Block nebula ssh server from listening on port 22 (#266) forfuncsake 2020-09-15 23:57:32 +10:00
  • ef498a31da Add disable_timestamp option (#288) CzBiX 2020-09-09 19:42:11 +08:00
  • 2e5a477a50 Align linux UDP performance optimizations with configuration (#275) forfuncsake 2020-08-13 08:24:05 +10:00
  • 32fe9bfe75 Use Go 1.15 (#277) Wade Simmons 2020-08-12 16:16:21 -04:00
  • 9b8b3c478b Support startup without a tun device (#269) forfuncsake 2020-08-10 23:15:55 +10:00
  • 7b3f23d9a1 Start nebula after the network is up (#270) Michael Hardy 2020-08-07 09:33:48 -07:00
  • 25964b54f6 Use inclusive terminology for cert blocking (#272) forfuncsake 2020-08-06 11:17:47 +10:00
  • ac557f381b drop unroutable packets (#267) Wade Simmons 2020-08-04 22:59:04 -04:00
  • a54f3fc681 fix fast handshake trigger for static hosts (#265) Wade Simmons 2020-08-02 20:59:50 -04:00
  • 5545cff6ef log remote certificate fingerprint on handshakes (#262) Alan Lam 2020-07-31 15:54:51 -07:00
  • f3a6d8d990 Preserve conntrack table during firewall rules reload (SIGHUP) (#233) Wade Simmons 2020-07-31 18:53:36 -04:00
  • 9b06748506 Make Interface.Inside an interface type (#252) forfuncsake 2020-07-28 22:53:16 +10:00
  • 4756c9613d trigger handshakes when lighthouse reply arrives (#246) Wade Simmons 2020-07-22 10:35:10 -04:00
  • 4645e6034b Fix up the tun for android (#249) Nathan Brown 2020-07-01 10:20:52 -05:00
  • aba42f9fa6 enforce the use of goimports (#248) Wade Simmons 2020-06-30 18:53:30 -04:00
  • 41578ca971 Be more like a library to support mobile (#247) Nathan Brown 2020-06-30 13:48:58 -05:00