Nate Brown
|
1a0ac25db0
Report how a config reload went: failures, restarts required, and the keys that need one (#1935)
|
5 giorni fa |
Matt Richardson
|
f9b0853476
Attach a pending handshake's RemoteList when the handshake starts (#1909)
|
1 settimana fa |
Nate Brown
|
657f6ad044
Fold the rebind counter and traffic flags into one atomic word (#1820)
|
1 mese fa |
Nate Brown
|
f15d10fc54
Enforce outbound message counter limits to prevent nonce reuse (#1841)
|
2 mesi fa |
Jack Doan
|
16b302c11d
Relay log fix (#1765)
|
4 mesi fa |
Jack Doan
|
2e9117da5b
fix tunnels that could permanently escape connection-manager monitoring (#1752)
|
4 mesi fa |
Nate Brown
|
213dd46588
Stop leaking goroutines past Control.Stop, consolidate punching in Punchy (#1708)
|
5 mesi fa |
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
5 mesi fa |
Jack Doan
|
01909f4715
try to make certificate addition/removal reloadable in some cases (#1468)
|
11 mesi fa |
Jack Doan
|
932e329164
Don't delete static host mappings for non-primary IPs (#1464)
|
1 anno fa |
Nate Brown
|
52623820c2
Drop inactive tunnels (#1427)
|
1 anno fa |
brad-defined
|
94142aded5
Fix relay migration panic by covering every possible relay state (#1414)
|
1 anno fa |
John Maguire
|
d4a7df3083
Rename pki.default_version to pki.initiating_version (#1381)
|
1 anno fa |
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
1 anno fa |
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
2 anni fa |
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2 anni fa |
Nate Brown
|
a390125935
Support reloading preferred_ranges (#1043)
|
2 anni fa |
Nate Brown
|
072edd56b3
Fix re-entrant `GetOrHandshake` issues (#1044)
|
2 anni fa |
Nate Brown
|
3356e03d85
Default `pki.disconnect_invalid` to true and make it reloadable (#859)
|
2 anni fa |
brad-defined
|
06b480e177
Fix relay migration (#964)
|
3 anni fa |
Nate Brown
|
076ebc6c6e
Simplify getting a hostinfo or starting a handshake with one (#954)
|
3 anni fa |
Nate Brown
|
7edcf620c0
We only need the certificate in ConnectionState (#953)
|
3 anni fa |
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
3 anni fa |
Wade Simmons
|
9a7ed57a3f
Cache cert verification methods (#871)
|
3 anni fa |
Nate Brown
|
d1f786419c
Try rehandshaking a main hostinfo after releasing hostmap locks (#863)
|
3 anni fa |
Nate Brown
|
48eb63899f
Have lighthouses ack updates to reduce test packet traffic (#851)
|
3 anni fa |
Nate Brown
|
702e1c59bd
Always disconnect block listed hosts (#858)
|
3 anni fa |
Nate Brown
|
5fe8f45d05
Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857)
|
3 anni fa |
Nate Brown
|
03e4a7f988
Rehandshaking (#838)
|
3 anni fa |
Nate Brown
|
fd99ce9a71
Use fewer test packets (#840)
|
3 anni fa |