 Nate Brown
|
48ba879198
Wait for readers to exit before closing their fds on linux (#1979)
|
hace 4 horas |
|
Nate Brown
|
b04d71d96a
Compare a firewall reload with what the running firewall was built from (#1955)
|
hace 8 horas |
|
Nate Brown
|
1a0ac25db0
Report how a config reload went: failures, restarts required, and the keys that need one (#1935)
|
hace 5 días |
 Jack Doan
|
13af8dd6f3
Cap configured MTUs at 8937 so relayed sends never outgrow their buffers (#1899)
|
hace 1 semana |
|
Nate Brown
|
5bb0622192
stats: Follow stats.interval on reload, interface gauges ride the capture loop (#1919)
|
hace 1 semana |
|
Nate Brown
|
5f26c1a7e5
Add a simple rate limiter with a helper to use it in logging (#1915)
|
hace 1 semana |
|
Nate Brown
|
657f6ad044
Fold the rebind counter and traffic flags into one atomic word (#1820)
|
hace 1 mes |
 Wade Simmons
|
9c5d701648
Support native Golang "fips140" mode (#1696)
|
hace 1 mes |
|
Jack Doan
|
edc3c5e018
the definitive tun offloads branch (#1704)
|
hace 2 meses |
|
Nate Brown
|
ab736e4c6b
Make Control safe to stop and wait on from any lifecycle state (#1794)
|
hace 3 meses |
|
Nate Brown
|
04dea41f74
Make firewall reload when unsafe networks in the cert changes (#1719)
|
hace 5 meses |
|
Nate Brown
|
99c5854e5c
Prime some critical stats before the first scrape (#1715)
|
hace 5 meses |
|
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
hace 5 meses |
|
Nate Brown
|
8c50fc3f60
Plug the conntrack cache ticker leak and nebula-service log.Fatal calls (#1669)
|
hace 6 meses |
|
Nate Brown
|
2f4532f102
No more dns globals, proper cleanup on shutdown (#1667)
|
hace 6 meses |
|
Jack Doan
|
e80b9830a3
Remove more os.Exit calls and give a more reliable wait for stop function (attempt 3) (#1661)
|
hace 6 meses |
|
Jack Doan
|
b3194236aa
udp_linux: wrap socket operations with syscall.RawConn for clean teardown (#1654)
|
hace 6 meses |
|
Jack Doan
|
42bee7cf17
Report if Nebula start fails because of tun device name (#1588)
|
hace 8 meses |
|
Nate Brown
|
1283ff0db4
Add option to control accepting recv_error (#1569)
|
hace 9 meses |
|
Nate Brown
|
56067afca2
Stab at better logging when a relay is being used (#1533)
|
hace 10 meses |
|
Nate Brown
|
7aff313a17
Relax the restriction on routines from the config (#1531)
|
hace 11 meses |
|
Nate Brown
|
52623820c2
Drop inactive tunnels (#1427)
|
hace 1 año |
|
Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
hace 1 año |
 John Maguire
|
d4a7df3083
Rename pki.default_version to pki.initiating_version (#1381)
|
hace 1 año |
|
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
hace 1 año |
|
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
hace 2 años |
|
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
hace 2 años |
 Ben Ritcey
|
01cddb8013
Added firewall.rules.hash metric (#1010)
|
hace 2 años |
|
Nate Brown
|
3356e03d85
Default `pki.disconnect_invalid` to true and make it reloadable (#859)
|
hace 2 años |
|
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
hace 3 años |
