 Jack Doan
|
13af8dd6f3
Cap configured MTUs at 8937 so relayed sends never outgrow their buffers (#1899)
|
1 week ago |
 Nate Brown
|
5f26c1a7e5
Add a simple rate limiter with a helper to use it in logging (#1915)
|
1 week ago |
 Caleb Jasik
|
ec3304e3a9
Recompute the transport checksum on self-forwarded packets (#1862)
|
1 month ago |
|
Nate Brown
|
657f6ad044
Fold the rebind counter and traffic flags into one atomic word (#1820)
|
1 month ago |
|
Jack Doan
|
edc3c5e018
the definitive tun offloads branch (#1704)
|
2 months ago |
|
Nate Brown
|
f15d10fc54
Enforce outbound message counter limits to prevent nonce reuse (#1841)
|
2 months ago |
|
Nate Brown
|
15f0f0d5d0
Be less verbose with handshake send errors (#1810)
|
2 months ago |
|
Jack Doan
|
861d3aabd7
correct directionality of firewall.inbound_action and firewall.outbound_action (#1798)
|
3 months ago |
 John Maguire
|
0a953915bb
Make HostInfo.remote atomic to fix torn reads on the send path (#1773)
|
3 months ago |
|
Nate Brown
|
3a95495c63
Fix duplicate log fields which slog duplicates (#1734)
|
5 months ago |
|
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
5 months ago |
|
Jack Doan
|
a89f95182c
Firewall types and cross-stack subnet stuff (#1509)
|
11 months ago |
|
Nate Brown
|
52623820c2
Drop inactive tunnels (#1427)
|
1 year ago |
 Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
1 year ago |
 dioss-Machiel
|
f86953ca56
Implement ECMP for unsafe_routes (#1332)
|
1 year ago |
|
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
1 year ago |
|
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2 years ago |
|
Nate Brown
|
c1711bc9c5
Remove tcp rtt tracking from the firewall (#1114)
|
2 years ago |
|
Nate Brown
|
072edd56b3
Fix re-entrant `GetOrHandshake` issues (#1044)
|
2 years ago |
|
Wade Simmons
|
fe16ea566d
firewall reject packets: cleanup error cases (#957)
|
2 years ago |
|
Nate Brown
|
a44e1b8b05
Clean up a hostinfo to reduce memory usage (#955)
|
3 years ago |
|
Nate Brown
|
076ebc6c6e
Simplify getting a hostinfo or starting a handshake with one (#954)
|
3 years ago |
|
Nate Brown
|
7edcf620c0
We only need the certificate in ConnectionState (#953)
|
3 years ago |
|
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
3 years ago |
|
Nate Brown
|
a10baeee92
Pull hostmap and pending hostmap apart, remove unused functions (#843)
|
3 years ago |
|
Nate Brown
|
03e4a7f988
Rehandshaking (#838)
|
3 years ago |
 brad-defined
|
9b03053191
update EncReader and EncWriter interface function args to have concrete types (#844)
|
3 years ago |
|
Wade Simmons
|
e0553822b0
Use NewGCMTLS (when using experiment boringcrypto) (#803)
|
3 years ago |
|
Nate Brown
|
1a6c657451
Normalize logs (#837)
|
3 years ago |
|
Wade Simmons
|
e1af37e46d
add calculated_remotes (#759)
|
3 years ago |
