40c6de8e31
fix(core): restrict implicit config merge to explicit config files ( #2127 )
2026-04-19 10:39:04 +08:00
2db655bd6d
fix: refresh ACL groups and enable TCP_NODELAY for WebSocket ( #2118 )
...
* fix: refresh ACL groups and enable TCP_NODELAY for WebSocket
* add remove_peers to remove list of peer id in ospf route
* fix secure tunnel for unreliable udp tunnel
* fix(web-client): timeout secure tunnel handshake
* fix(web-server): tolerate delayed secure hello
* fix quic endpoint panic
* fix replay check
2026-04-19 10:37:39 +08:00
c49c56612b
feat(ui): add ACL graphical configuration interface ( #1815 )
2026-04-18 20:23:53 +08:00
84430055ab
remove hashbrown ( #2108 )
2026-04-18 11:06:34 +08:00
fae32361f2
chore: update Rust to 1.95; replace cfg_if with cfg_select ( #2121 )
2026-04-17 23:41:31 +08:00
bcb2e512d4
utils: move code to a dedicated mod; add AsyncRuntime ( #2072 )
2026-04-16 23:32:07 +08:00
82ca04a8a7
proto(utils): add MessageModel & RepeatedMessageModel ( #2068 )
...
* add FromIterator, Extend, AsRef, AsMut, TryFrom<[Message]>
2026-04-15 19:40:09 +08:00
2ef3b72224
proto: add some conversion for Url ( #2067 )
2026-04-15 19:39:24 +08:00
6d319cba1d
tests(relay_peer_e2e_encryption): wait for the key of inst3 before ping test ( #2069 )
2026-04-15 19:39:00 +08:00
3687519ef3
turn off ansi for file log ( #2110 )
...
Co-authored-by: KKRainbow <443152178@qq.com >
2026-04-15 19:38:27 +08:00
3a4ac59467
log: change default log level of tests to WARNING ( #2113 )
2026-04-14 18:10:38 +08:00
5b35c51da9
fix packet split on udp tunnel and avoid tcp proxy access rpc portal ( #2107 )
...
* distinct control / data when forward packets
* fix rpc split for udp tunnel
* feat(easytier-web): pass public ip in validate token webhook
* protect rpc port from subnet proxy
2026-04-13 11:03:09 +08:00
ec7ddd3bad
fix: filter overlapped proxy cidrs in ProxyCidrsMonitor ( #2079 )
...
* feat(route): add async methods to list proxy CIDRs for IPv4 and IPv6
* refactor(ProxyCidrsMonitor): get proxy cidrs from list_proxy_cidrs
2026-04-12 22:18:54 +08:00
6f3e708679
tunnel(bind): gather all bind logic to a single function ( #2070 )
...
* extract a Bindable trait for binding TcpSocket, TcpListener, and UdpSocket
2026-04-12 22:16:58 +08:00
869e1b89f5
fix: remove log (file) when level is explicitly set to OFF ( #2083 )
...
* fix level filter for OFF
* remove unwrap of file appender creation
2026-04-12 22:16:30 +08:00
9e0a3b6936
ci: rewrite build workflows ( #2089 )
2026-04-12 22:14:41 +08:00
c6cb1a77d0
chore: clippy fix some code on Windows ( #2106 )
2026-04-12 22:13:58 +08:00
83010861ba
Optimize network interface configuration for macOS and FreeBSD to avoid hard-coded IP addresses ( #1853 )
...
Co-authored-by: KKRainbow <443152178@qq.com >
2026-04-12 21:00:59 +08:00
daa53e5168
log: auto-init log for tests ( #2073 )
2026-04-12 13:04:21 +08:00
51befdbf87
fix(faketcp): harden packet parsing against malformed frames ( #2103 )
...
Discard malformed fake TCP frames instead of panicking so OpenWrt
nodes can survive unexpected or truncated packets.
Also emit the correct IPv6 ethertype and cover the parser with
round-trip and truncation regression tests.
2026-04-12 13:02:23 +08:00
8311b11713
refactor: remove NoGroAsyncUdpSocket ( #1867 )
2026-04-10 23:22:08 +08:00
19c80c7b9c
cli: do not add offset when port = 0 ( #2085 )
2026-04-10 23:21:15 +08:00
a879dd1b14
chore: update Rust to 2024 edition ( #2066 )
2026-04-10 00:22:12 +08:00
a8feb9ac2b
chore: use Debug to print errors ( #2086 )
2026-04-09 09:45:55 +08:00
371b4b70a3
proto(utils): add TransientDigest trait ( #2071 )
2026-04-08 00:06:48 +08:00
b2cc38ee63
chore(clippy): disallow some methods from itertools ( #2075 )
2026-04-07 16:27:33 +08:00
79b562cdc9
drop peer_mgr in time ( #2064 )
2026-04-06 11:31:05 +08:00
e3f089251c
fix(ospf): mitigate route sync storm under connection flapping ( #2063 )
...
Addresses issue #2016 where nodes behind unstable networks
(e.g. campus firewalls) cause excessive traffic that can freeze
the remote node.
Two changes in peer_ospf_route.rs:
- Make do_sync_route_info only trigger reverse sync_now when
incoming data actually changed the route table or foreign
network state. The previous unconditional sync_now created
an A->B->A->B ping-pong cycle on every RPC exchange.
- Add exponential backoff (50ms..5s) to session_task retry loop.
The previous fixed 50ms retry produced ~20 RPCs/s during
sustained network instability.
2026-04-06 11:26:20 +08:00
cf6dcbc054
Fix IPv6 TCP tunnel display formatting ( #1980 )
...
Normalize composite tunnel display values before rendering peer and
debug output so IPv6 tunnel types no longer append `6` to the port.
- Preserve prefixes like `txt-` while converting tunnel schemes to
their IPv6 form.
- Recover malformed values such as `txt-tcp://...:110106` into
`txt-tcp6://...:11010`.
- Reuse the normalized remote address display in CLI debug output.
2026-04-05 22:12:55 +08:00
2cf2b0fcac
feat(cli): implement connector add/remove, drop peer stubs ( #2058 )
...
Implement the previously stubbed connector add/remove CLI commands
using PatchConfig RPC with InstanceConfigPatch.connectors, and
remove the peer add/remove stubs that had incorrect semantics.
2026-04-05 13:56:17 +08:00
fb59f01058
fix: reconcile webhook-managed configs and make disable_p2p more intelligent ( #2057 )
...
* reconcile infra configs on webhook validate
* make disable_p2p more intelligent
* fix stats
2026-04-04 23:41:57 +08:00
e91a0da70a
refactor: listener/connector protocol abstraction ( #2026 )
...
* fix listener protocol detection
* replace IpProtocol with IpNextHeaderProtocol
* use an enum to gather all listener schemes
* rename ListenerScheme to TunnelScheme; replace IpNextHeaderProtocols with socket2::Protocol
* move TunnelScheme to tunnel
* add IpScheme, simplify connector creation
* format; fix some typos; remove check_scheme_...;
* remove PROTO_PORT_OFFSET
* rename WSTunnel.. -> WsTunnel.., DNSTunnel.. -> DnsTunnel..
2026-04-04 10:55:58 +08:00
443c3ca0b3
fix: append address of reverse proxy to remote_addr ( #2034 )
...
* append address of reverse proxy to remote_addr
* validate proxy address in test
2026-03-30 16:48:23 +08:00
55a0e5952c
chore: use cfg_aliases for mobile ( #2033 )
2026-03-30 16:38:39 +08:00
1dff388717
bump version to v2.6.0 ( #2039 )
2026-03-30 15:50:07 +08:00
61c741f887
add BoxExt trait ( #2036 )
2026-03-30 13:25:53 +08:00
8c19a2293c
fix(windows): avoid pnet interface enumeration panic ( #2031 )
2026-03-29 23:16:44 +08:00
a1bec48dc9
fix android vpn permission grant ( #2023 )
...
* fix android vpn permission grant
* fix url input behaviour
2026-03-29 23:16:32 +08:00
7e289865b2
fix(faketcp): avoid pnet interface lookup on windows ( #2029 )
2026-03-29 19:26:29 +08:00
742c7edd57
fix: use default connection loss rate for peer stats ( #2030 )
2026-03-29 19:25:25 +08:00
b71a2889ef
suppress clippy warnings when no feature flags are enabled ( #2028 )
2026-03-29 11:02:23 +08:00
bcd75d6ce3
Add instance recv limiter in peer conn ( #2027 )
2026-03-29 10:28:02 +08:00
d4c1b0e867
fix: read X-Forwarded-For from HTTP header of WS/WSS ( #2019 )
2026-03-28 22:20:46 +08:00
b037ea9c3f
Relax private mode foreign network secret checks ( #2022 )
2026-03-28 22:19:23 +08:00
b5f475cd4c
filter overlapped proxy cidr ( #2024 )
2026-03-28 09:40:05 +08:00
e000636d83
feat(stats): add by-instance traffic metrics ( #2011 )
2026-03-26 13:46:33 +08:00
8e4dc508bb
test: improve test_txt_public_stun_server with timeout and retry mechanism ( #2014 )
2026-03-26 09:32:07 +08:00
e2684a93de
refactor: use strum on EncryptionAlgorithm, use Xor as default when AesGcm not available ( #1923 )
2026-03-25 18:42:34 +08:00
1d89ddbb16
Add lazy P2P demand tracking and need_p2p override ( #2003 )
...
- add lazy_p2p so nodes only start background P2P for peers that actually have recent business traffic
- add need_p2p so specific peers can still request eager background P2P even when other nodes enable lazy mode
- cover the new behavior with focused connector/peer-manager tests plus three-node integration tests that verify relay-to-direct route transition
2026-03-23 09:38:57 +08:00
2bfdd44759
multi_fix: harden peer/session handling, tighten foreign-network trust, and improve web client metadata ( #1999 )
...
* machine-id should be scoped unbder same user-id
* feat: report device os metadata to console
* fix sync root key cause packet loss
* fix tun packet not invalid
* fix faketcp cause lat jitter
* fix some packet not decrypt
* fix peer info patch, improve performance of update self info
* fix foreign credential identity mismatch handling
2026-03-21 21:06:07 +08:00
Mg Pig