 JackDoan
|
905d01aee5
conntrack: lock-free sync.Map keyed by firewall.Packet with a coarse clock, drop the per-routine cache
|
2 недель назад |
 Caleb Jasik
|
ec3304e3a9
Recompute the transport checksum on self-forwarded packets (#1862)
|
1 месяц назад |
 Nate Brown
|
657f6ad044
Fold the rebind counter and traffic flags into one atomic word (#1820)
|
1 месяц назад |
|
Jack Doan
|
edc3c5e018
the definitive tun offloads branch (#1704)
|
2 месяцев назад |
|
Nate Brown
|
f15d10fc54
Enforce outbound message counter limits to prevent nonce reuse (#1841)
|
2 месяцев назад |
|
Nate Brown
|
15f0f0d5d0
Be less verbose with handshake send errors (#1810)
|
2 месяцев назад |
|
Jack Doan
|
861d3aabd7
correct directionality of firewall.inbound_action and firewall.outbound_action (#1798)
|
3 месяцев назад |
 John Maguire
|
0a953915bb
Make HostInfo.remote atomic to fix torn reads on the send path (#1773)
|
3 месяцев назад |
|
Nate Brown
|
3a95495c63
Fix duplicate log fields which slog duplicates (#1734)
|
5 месяцев назад |
|
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
5 месяцев назад |
|
Jack Doan
|
a89f95182c
Firewall types and cross-stack subnet stuff (#1509)
|
11 месяцев назад |
|
Nate Brown
|
52623820c2
Drop inactive tunnels (#1427)
|
1 год назад |
 Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
1 год назад |
 dioss-Machiel
|
f86953ca56
Implement ECMP for unsafe_routes (#1332)
|
1 год назад |
|
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
1 год назад |
|
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2 лет назад |
|
Nate Brown
|
c1711bc9c5
Remove tcp rtt tracking from the firewall (#1114)
|
2 лет назад |
|
Nate Brown
|
072edd56b3
Fix re-entrant `GetOrHandshake` issues (#1044)
|
2 лет назад |
|
Wade Simmons
|
fe16ea566d
firewall reject packets: cleanup error cases (#957)
|
2 лет назад |
|
Nate Brown
|
a44e1b8b05
Clean up a hostinfo to reduce memory usage (#955)
|
3 лет назад |
|
Nate Brown
|
076ebc6c6e
Simplify getting a hostinfo or starting a handshake with one (#954)
|
3 лет назад |
|
Nate Brown
|
7edcf620c0
We only need the certificate in ConnectionState (#953)
|
3 лет назад |
|
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
3 лет назад |
|
Nate Brown
|
a10baeee92
Pull hostmap and pending hostmap apart, remove unused functions (#843)
|
3 лет назад |
|
Nate Brown
|
03e4a7f988
Rehandshaking (#838)
|
3 лет назад |
 brad-defined
|
9b03053191
update EncReader and EncWriter interface function args to have concrete types (#844)
|
3 лет назад |
|
Wade Simmons
|
e0553822b0
Use NewGCMTLS (when using experiment boringcrypto) (#803)
|
3 лет назад |
|
Nate Brown
|
1a6c657451
Normalize logs (#837)
|
3 лет назад |
|
Wade Simmons
|
e1af37e46d
add calculated_remotes (#759)
|
3 лет назад |
|
Wade Simmons
|
6e0ae4f9a3
firewall: add option to send REJECT replies (#738)
|
3 лет назад |
