Commit graph

  • 71c849e63e extra stinky slop that works kinda Ryan Huber 2025-10-31 13:34:39 -04:00
  • d6c5c00ef7 Merge remote-tracking branch 'origin/release-1.9' into master master-1-9-tag Wade Simmons 2025-10-28 15:53:51 -04:00
  • d52d2ed91a change HostInfo.buildNetworks argument to reference the cert JackDoan 2025-10-28 11:33:35 -05:00
  • a3b1645c2f
    Bump actions/download-artifact from 4 to 6 dependabot[bot] 2025-10-27 22:10:53 +00:00
  • 8d9c202b2b
    Bump actions/upload-artifact from 4 to 5 dependabot[bot] 2025-10-27 19:33:43 +00:00
  • 0db5fb948b
    Bump golang.org/x/net in the golang-x-dependencies group dependabot[bot] 2025-10-27 19:05:56 +00:00
  • 8d4dd26484
    try to fix windows? jay.wren-wireguard-tun Jay Wren 2025-10-23 16:50:10 -04:00
  • 0a94f9f990
    fix tun_linux_test.go & a nit Jay Wren 2025-10-23 16:16:40 -04:00
  • 433c531ae4
    put linux tx_queue back Jay Wren 2025-10-23 16:06:13 -04:00
  • 4c0aad1b1f
    put back the previous darwin interface naming Jay Wren 2025-10-23 16:04:52 -04:00
  • c8b0281736
    gofmt Jay Wren 2025-10-23 14:50:50 -04:00
  • 8281b1699f
    fix BatchRead interface & make batch size configurable Jay Wren 2025-10-23 14:37:26 -04:00
  • 0827a6f1c5
    claude suggests this bound checking optimization Jay Wren 2025-10-23 13:27:37 -04:00
  • cd413e4841 add groups-contains-any warning JackDoan 2025-10-23 11:46:16 -05:00
  • 273119638d
    claude did not want netbsd Jay Wren 2025-10-22 17:32:03 -04:00
  • 484de41b58
    claude first stab and first cleanup - ugh Jay Wren 2025-10-22 16:49:26 -04:00
  • 0eb50661c2 warn user if they accidentally configure a firewall rule that will allow way more traffic than you might expect JackDoan 2025-10-22 15:09:09 -05:00
  • c98d12d574 unsafe network test reply JackDoan 2025-10-22 14:19:06 -05:00
  • 7b3dcf3026 unsafe network test JackDoan 2025-10-22 13:17:26 -05:00
  • 2a7e0f17cc lint JackDoan 2025-10-22 11:20:33 -05:00
  • ed7db6c571 these comments were backwards and bamboozled me JackDoan 2025-10-22 11:19:03 -05:00
  • efb9cdde5f lint JackDoan 2025-10-22 11:15:52 -05:00
  • 7eee093928 wow JackDoan 2025-10-21 15:29:13 -05:00
  • b6d4ed3bae checkpt JackDoan 2025-10-21 11:03:41 -05:00
  • 4a843ccb61 allow handshakes without overlaps JackDoan 2025-10-21 10:20:28 -05:00
  • 76df6c1973 experiment with not filtering out non-common addresses in hostinfo.networks JackDoan 2025-10-21 11:03:13 -05:00
  • f09b99ab89 firewall can distinguish if the host connecting has an overlapping network, is a VPN peer without an overlapping network, or is a unsafe network JackDoan 2025-10-21 11:03:13 -05:00
  • 770147264d
    fix make bench (#1510) Jack Doan 2025-10-21 11:32:34 -05:00
  • a1ba323065 fix make bench JackDoan 2025-10-17 17:07:09 -05:00
  • f597aa71e3 firewall can distinguish if the host connecting has an overlapping network, is a VPN peer without an overlapping network, or is a unsafe network cross-stack-relay-overlaps JackDoan 2025-10-21 11:03:13 -05:00
  • 20b7219fbe allow handshakes without overlaps JackDoan 2025-10-21 10:20:28 -05:00
  • 3b53c27170 retarget punch notification messages if needed to deal with being a lighthouse not on the lowest-numbered subnet JackDoan 2025-10-17 18:14:29 -05:00
  • 526236c5fa lighthouse replies via hostinfo JackDoan 2025-10-17 17:08:33 -05:00
  • 0ab2882b78 fix make bench JackDoan 2025-10-17 17:07:09 -05:00
  • 889d49ff82 experiment with not filtering out non-common addresses in hostinfo.networks JackDoan 2025-10-06 15:02:37 -05:00
  • 71d46c9116 security: add resource limits to config parser to prevent DoS ibrahimu8 2025-10-19 19:44:42 +01:00
  • 9cef6752c9 more incompatibilities, was this a good idea at all? one-nine-bart-update JackDoan 2025-10-17 15:52:15 -05:00
  • a0c6cea6fc backport incompatible bart change (grr) JackDoan 2025-10-17 12:05:23 -05:00
  • fc165a8b75 update CHANGELOG.md JackDoan 2025-10-17 11:54:35 -05:00
  • 845d72b97b update bart, x/crypto, x/net JackDoan 2025-10-17 11:52:58 -05:00
  • ac7570dfde Allow defining a route table id for linux where routes will be installed. Machiel Sleeuwaert 2025-10-16 18:10:43 +02:00
  • 3583a3f7ab feedback tun-name-template JackDoan 2025-10-14 13:46:21 -05:00
  • 36daea9551 linux: opt out of naming your tun device yourself JackDoan 2025-10-02 16:18:34 -05:00
  • fa8c013b97
    Bump github.com/miekg/dns from 1.1.65 to 1.1.68 (#1444) dependabot[bot] 2025-10-13 16:41:51 -04:00
  • b42fd26cd5 Merge remote-tracking branch 'origin/master' into go-yaml-v3 Wade Simmons 2025-10-13 16:03:39 -04:00
  • 67d6943f16
    Bump github.com/miekg/dns from 1.1.65 to 1.1.68 dependabot[bot] 2025-10-13 19:59:15 +00:00
  • 2710f2af06
    Bump github.com/kardianos/service from 1.2.2 to 1.2.4 (#1433) dependabot[bot] 2025-10-13 15:58:15 -04:00
  • ad6d3e6bac
    Bump the golang-x-dependencies group across 1 directory with 5 updates (#1409) dependabot[bot] 2025-10-13 15:54:38 -04:00
  • e7d4047da6
    Bump the golang-x-dependencies group across 1 directory with 5 updates dependabot[bot] 2025-10-13 19:26:20 +00:00
  • ef381fcccf
    Bump github.com/kardianos/service from 1.2.2 to 1.2.4 dependabot[bot] 2025-10-13 19:19:39 +00:00
  • d073db16b4 Merge remote-tracking branch 'origin/master' into go-yaml-v3 Wade Simmons 2025-10-13 15:19:00 -04:00
  • 2b0aa74e85
    Bump github.com/prometheus/client_golang from 1.22.0 to 1.23.2 (#1470) dependabot[bot] 2025-10-13 15:16:24 -04:00
  • b126d88963
    Bump github.com/gaissmai/bart from 0.20.4 to 0.25.0 (#1471) dependabot[bot] 2025-10-13 15:15:07 -04:00
  • 4bdcb22403
    Merge 0c76eaf157 into 45c1d3eab3 Joakim Walldén 2025-10-13 12:23:12 +02:00
  • 9101b62162 weird line breaks cross-stack-relay JackDoan 2025-10-10 16:10:13 -05:00
  • d2cb854bff make sure hosts use the correct IP addresses when relaying JackDoan 2025-10-10 13:28:22 -05:00
  • 7c3f533950
    Better words (#1497) v1.9.7 release-1.9 Nate Brown 2025-10-10 11:31:46 -04:00
  • 23948b47a0 Better words Nate Brown 2025-10-09 16:36:31 -05:00
  • 9bf9fb14bc fix missed error-skipping JackDoan 2025-10-10 09:43:59 -05:00
  • 0f53b8a6ef test JackDoan 2025-10-10 09:30:20 -05:00
  • 7797927401 test and stupid fix JackDoan 2025-10-06 15:02:37 -05:00
  • f8a9286d08 Implement test for the "unsafe-peer-routing" feature Gary Guo 2025-10-07 15:06:04 +01:00
  • 157c81cd4e Implement "unsafe-peer-routing" feature Gary Guo 2025-10-06 19:12:12 +01:00
  • 45c1d3eab3
    Support for multi proto tun device on OpenBSD (#1495) Nate Brown 2025-10-08 17:56:42 -04:00
  • 634181ba66
    Fix incorrect CIDR construction in hostmap (#1493) Gary Guo 2025-10-08 17:02:36 +01:00
  • 0b7e429b5e Fix some error messages Nate Brown 2025-10-07 22:55:36 -05:00
  • eeaf6604f2 Support for multi proto tun device on OpenBSD Nate Brown 2025-10-07 16:57:17 -05:00
  • 824cd3f0d6 Update CHANGELOG for Nebula v1.9.7 changelog-v1.9.7 Nate Brown 2025-10-07 21:10:16 -05:00
  • eb89839d13
    Support for multi proto tun device on NetBSD (#1492) Nate Brown 2025-10-07 21:17:50 -04:00
  • 9f692175e1
    HostInfo.remoteCidr should only be populated with the entire vpn ip address issued in the certificate (#1494) Nate Brown 2025-10-07 18:35:58 -04:00
  • d400d9a5ec HostInfo.remoteCidr should only be populated with the entire vpn ip address issued in the certificate release-1.9-hostmap-networks-fix Nate Brown 2025-10-07 17:11:26 -05:00
  • afa6fbe56e Introduce a regression test for incorrect hostmap CIDR Gary Guo 2025-10-07 15:06:04 +01:00
  • 565b3be13a Fix incorrect CIDR construction in hostmap Gary Guo 2025-10-07 15:06:15 +01:00
  • 58ef70a6c1 Support for multi proto tun device on NetBSD Nate Brown 2025-10-03 17:17:28 -05:00
  • 150484cc7a remove old tests Henry Graham 2025-10-06 20:05:17 -05:00
  • 49eeee7f8c Rough draft of what reworking this might look like. Henry Graham 2025-10-06 19:59:22 -05:00
  • 5fa386bb70 test and stupid fix cert-v2-reloads-with-relay-stuff JackDoan 2025-10-06 15:02:37 -05:00
  • 2ea8a72d5c dunno channels Nate Brown 2025-05-08 12:01:46 -05:00
  • 663232e1fc Testing the concept Nate Brown 2025-04-17 12:21:58 -05:00
  • 2f48529e8b Cleanup and note more work Nate Brown 2025-04-16 21:56:53 -05:00
  • f3e1ad64cd Try the timeout Nate Brown 2025-04-16 17:11:11 -05:00
  • 1d8112a329 Revert "More playing" way too much garbage emitted Nate Brown 2025-04-16 16:56:04 -05:00
  • 31eea0cc94 More playing Nate Brown 2025-04-16 16:21:53 -05:00
  • dbba4a4c77 Playing Nate Brown 2025-04-15 21:00:50 -05:00
  • 194fde45da non-blocking io for linux Nate Brown 2025-04-02 22:57:37 -05:00
  • f46b83f2c4 Remove more os.Exit calls and give a more reliable wait for stop function Nate Brown 2025-04-02 09:51:59 -05:00
  • fb7f0c3657
    Use x/net/route to manage routes directly (#1488) Nate Brown 2025-10-03 11:59:53 -04:00
  • 4a47dca02d Remove duplicate function Nate Brown 2025-10-03 10:27:35 -05:00
  • 48e30eea44 Use x/net/route to manage routes directly Nate Brown 2025-10-02 21:50:35 -05:00
  • b1f53d8d25
    Support IPv6 tunneling in FreeBSD (#1399) sl274 2025-10-03 02:54:30 +00:00
  • f488873d70 fixy fixy JackDoan 2025-10-02 17:33:47 -05:00
  • c073eebe42 fixy fixy JackDoan 2025-10-02 17:19:22 -05:00
  • 5637ac8283
    go mod link Gabriel Meola 2025-10-02 13:34:50 -06:00
  • fddb4d17a8
    add manually update optopns Gabriel Meola 2025-10-02 13:31:24 -06:00
  • 8824eeaea2
    helper functions to more correctly marshal curve 25519 public keys (#1481) Jack Doan 2025-10-02 13:56:41 -05:00
  • 1a1255d557 make tryRehandshake easier to understand JackDoan 2025-10-02 12:29:56 -05:00
  • ae1c0f88be Marshall said to name it Marshal JackDoan 2025-10-02 12:08:30 -05:00
  • 9bc93a8d15 Marshall said to name it Marshal JackDoan 2025-10-02 11:18:15 -05:00
  • 32649de665 we accept mismatched handshakes now, no need to kill now-mismatched tunnels (this is fine as long as we don't let you change your set of vpnNetworks on reload) JackDoan 2025-10-02 10:54:30 -05:00
  • 26a00a5647 reduce log spam JackDoan 2025-10-02 10:39:25 -05:00