110 Commits

Author	SHA1	Message	Date
Sijie.Sun	e06e8a9e8a	allow enable log with cli, limit log size (#1384) ... * impl logger rpc * use size based appender * add log args	2025-09-18 16:35:12 +08:00
Sijie.Sun	5c90431876	fix smoltcp attempt to subtract sequence numbers with underflow (#1360)	2025-09-13 15:03:04 +08:00
fanyang	ae704d1d5f	Fix jemalloc warning on macOS (#1344) ... fix: ``` -> % easytier-core <jemalloc>: option background_thread currently supports pthread only ``` Reference: https://github.com/apache/arrow/pull/5729	2025-09-08 21:53:40 +08:00
Sijie.Sun	719a1fe7cf	bump version to 2.4.3 (#1296)	2025-08-26 12:22:08 +08:00
Mg Pig	08a92a53c3	feat(acl): add group-based ACL rules and related structures (#1265) ... * feat(acl): add group-based ACL rules and related structures * refactor(acl): optimize group handling with Arc and improve cache management * refactor(acl): clippy * feat(tests): add performance tests for generate_with_proof and verify methods * feat: update group_trust_map to use HashMap for more secure group proofs * refactor: refactor the logic of the trusted group getting and setting * feat(acl): support kcp/quic use group acl * feat(proxy): optimize group retrieval by IP in Kcp and Quic proxy handlers * feat(tests): add group-based ACL tree node test * always allow quic proxy traffic --------- Co-authored-by: Sijie.Sun <sunsijie@buaa.edu.cn> Co-authored-by: sijie.sun <sijie.sun@smartx.com>	2025-08-22 22:25:00 +08:00
fanyang	df7eb47593	Support tokio-console (#1259)	2025-08-21 11:41:42 +08:00
Sijie.Sun	1eec27b5ff	bump version to 2.4.2 (#1218)	2025-08-11 09:03:13 +08:00
Sijie.Sun	e43537939a	clippy all codes (#1214) ... 1. clippy code 2. add fmt and clippy check in ci	2025-08-10 22:56:41 +08:00
CyiceK	0087ac3ffc	feat(encrypt): Add XOR and ChaCha20 encryption with low-end device optimization and openssl support. (#1186) ... Add ChaCha20 XOR algorithm, extend AES-GCM-256 capabilities, and integrate OpenSSL support. --------- Co-authored-by: Sijie.Sun <sunsijie@buaa.edu.cn>	2025-08-09 18:53:55 +08:00
Sijie.Sun	6d14e9e441	fix jemalloc prof feature (#1201)	2025-08-08 17:54:39 +08:00
sijie.sun	84bfac144c	bump version to 2.4.1	2025-08-02 10:48:17 +08:00
Tunglies	b1b2421561	fix: compiling with socket2::Type::RAW not found on macOS #1168 (#1169)	2025-07-30 00:33:38 +08:00
Sijie.Sun	1f6a715939	releases/v2.4.0 (#1145) ... * bump version to v2.4.0 * update tauri. * allow try direct connect to public server	2025-07-25 00:16:15 +08:00
Sijie.Sun	8e7a8de5e5	Implement ACL (#1140) ... 1. get acl stats ``` ./easytier-cli acl stats AclStats: Global: CacheHits: 4 CacheMaxSize: 10000 CacheSize: 5 DefaultAllows: 3 InboundPacketsAllowed: 2 InboundPacketsTotal: 2 OutboundPacketsAllowed: 7 OutboundPacketsTotal: 7 PacketsAllowed: 9 PacketsTotal: 9 RuleMatches: 2 ConnTrack: [src: 10.14.11.1:57444, dst: 10.14.11.2:1000, proto: Tcp, state: New, pkts: 1, bytes: 60, created: 2025-07-24 10:13:39 +08:00, last_seen: 2025-07-24 10:13:39 +08:00] Rules: [name: 'tcp_whitelist', prio: 1000, action: Allow, enabled: true, proto: Tcp, ports: ["1000"], src_ports: [], src_ips: [], dst_ips: [], stateful: true, rate: 0, burst: 0] [pkts: 2, bytes: 120] ``` 2. use tcp/udp whitelist to block unexpected traffic. `sudo ./easytier-core -d --tcp-whitelist 1000` 3. use complete acl ability with config file: ``` [[acl.acl_v1.chains]] name = "inbound_whitelist" chain_type = 1 description = "Auto-generated inbound whitelist from CLI" enabled = true default_action = 2 [[acl.acl_v1.chains.rules]] name = "tcp_whitelist" description = "Auto-generated TCP whitelist rule" priority = 1000 enabled = true protocol = 1 ports = ["1000"] source_ips = [] destination_ips = [] source_ports = [] action = 1 rate_limit = 0 burst_limit = 0 stateful = true ```	2025-07-24 22:13:45 +08:00
Sijie.Sun	876d550f68	reduce memory usage (#1133) ... Large memory usage comes from: Mimalloc hold large thread cache, causing abort 13M+ usage. QUIC endpoint occupy 3M when GRO is enabled. Smoltcp 64 tcp listener use 2MB.	2025-07-20 19:15:28 +08:00
Sijie.Sun	2660ed5fda	try create tun device if not exist (#1131)	2025-07-19 22:56:19 +08:00
Jiangqiu Shen	0b729b99e7	add options to generate completions (#1103) ... * add options to generate completions use clap-complete crate to generate completions scripts: easytier-core --generate fish > ~/.config/fish/completions/easytier-core.fish --------- Co-authored-by: Sijie.Sun <sunsijie@buaa.edu.cn>	2025-07-17 20:35:49 +08:00
Sijie.Sun	a4bb555fac	use winapi to config ip and route (remove dep on netsh) (#1079) ... On some windows machines can not execut netsh. Also this avoid black cmd window when using gui.	2025-07-05 16:50:09 +08:00
韩嘉乐	01e491ec07	support ohos (#974) ... * support ohos --------- Co-authored-by: FrankHan <2777926911@qq.com>	2025-07-02 09:44:45 +08:00
Sijie.Sun	40601bd05b	add bps limiter (#1015) ... * add token bucket * remove quinn-proto	2025-06-19 21:15:04 +08:00
chenxudong2020	72d5ed908e	quic uses the bbr congestion control algorithm (#1010)	2025-06-18 23:17:52 +08:00
Sijie.Sun	40b5fe9a54	support quic proxy (#993) ... QUIC proxy works like kcp proxy, it can proxy TCP streams and transfer data with QUIC. QUIC has better congestion algorithm (BBR) for network with both high loss rate and high bandwidth. QUIC proxy can be enabled by passing `--enable-quic-proxy` to easytier in the client side. The proxy status can be viewed by `easytier-cli proxy`.	2025-06-15 19:43:45 +08:00
Sijie.Sun	25dcdc652a	support mapping subnet proxy (#978) ... - **support mapping subproxy network cidr** - **add command line option for proxy network mapping** - **fix Instance leak in tests.	2025-06-14 11:42:45 +08:00
Sijie.Sun	870353c499	fix ospf route (#970) ... - **fix deadlock in ospf route introducd by #958 ** - **use random peer id for foreign network entry, because ospf route algo need peer id change after peer info version reset. this may interfere route propagation and cause node residual** - **allow multiple nodes broadcast same network ranges for subnet proxy** - **bump version to v2.3.2**	2025-06-11 09:44:03 +08:00
Sijie.Sun	a6773aa549	zstd should reuse ctx to avoid huge mmap cost (#941)	2025-06-06 08:59:06 +08:00
Sijie.Sun	96fc19b803	fix minor bugs (#936) ... 1. update upx to v5.0.1 to avoid mips bug. 2. use latest mimalloc. 3. fix panic in ospf route 4. potential residual conn.	2025-06-05 11:55:44 +08:00
Sijie.Sun	4608bca998	improve performance of route generation (#914) ... this may fix following problem: 1. cpu 100% when large number of nodes in network. 2. high cpu usage when large number of foreign networks. 3. packet loss when new node enters/exits. 4. old routes not cleand and show as an obloleted entry.	2025-06-02 20:12:27 +08:00
Sijie.Sun	f9c24bc205	fix bugs (#892) ... 1. traffic stats not work. 2. magisk zip malformat	2025-05-27 09:28:28 +08:00
Sijie.Sun	b0fd37949a	fix direct connector only select one listener (#875)	2025-05-25 13:56:08 +08:00
Sijie.Sun	83d1ecc4da	bump version to v2.3.0 (#859) ... also some improvements: 1. add magic dns option in gui. 2. allow icmp proxy fail on android 3. when no_tun is enabled, android do not start vpn service Co-authored-by: Your Name <you@example.com>	2025-05-18 16:45:39 +08:00
Sijie.Sun	28fe6257be	magic dns (#813) ... This patch implements: 1. A dns server that handles .et.net. zone in local and forward all other queries to system dns server. 2. A dns server instance which is a singleton in one machine, using one specific tcp port to be exclusive with each other. this instance is responsible for config system dns and run the dns server to handle dns queries. 3. A dns client instance that all easytier instance will run one, this instance will try to connect to dns server instance, and update the dns record in the dns server instance. this pr only implements the system config for windows. linux & mac will do later.	2025-05-16 09:24:24 +08:00
Sijie.Sun	2675cf2d00	bump hickory-dns version to v0.25.2 (#839)	2025-05-11 08:46:31 +08:00
loecom	c5580feb64	add thunk-rs to support win7 (#812) ... * add thunk-rs to support win7 --------- Co-authored-by: loecomm <loecom@qq.com>	2025-04-25 22:27:36 +08:00
L-Trump	44d93648ee	config from environment variables; CLI args override config file (#755) ... * feat: configure through os environment variables * feat: support CLI args overriding config file options	2025-04-10 18:14:10 +08:00
Sijie.Sun	75f7865769	fix gui memory leak (#768) ... * upgrade primevue * use card instead of panel	2025-04-10 10:02:04 +08:00
Sijie.Sun	01e3ad99ca	optimize memory issues (#767) ... * optimize memory issues 1. introduce jemalloc support, which can dump current memory usage 2. reduce the GlobalEvent broadcaster memory usage. 3. reduce tcp & udp tunnel memory usage TODO: if peer conn tunnel hangs, the unbounded channel of peer rpc may consume lots of memory, which should be improved. * select a port from 15888+ when port is 0	2025-04-09 23:05:49 +08:00
Sijie.Sun	c142db301a	port forward (#736) ... * support tcp port forward * support udp port forward * command line option for port forward	2025-04-01 09:59:53 +08:00
Sijie.Sun	d880dfbbca	bump version to v2.2.4 (#697)	2025-03-19 17:23:15 +08:00
sijie.sun	f52936a103	bump version to v2.2.3	2025-03-17 22:24:19 +08:00
Sijie.Sun	23f69ce6a4	improve direct connector (#685) ... * support ipv6 stun * show interface and public ip in cli node info * direct conn should keep trying unless already direct connected * peer should use conn with smallest latency * deprecate ipv6_listener, use -l instead	2025-03-17 10:46:14 +08:00
sijie.sun	03b55b61e7	support txt/srv record	2025-03-08 12:56:23 +08:00
sijie.sun	673c34cf5a	http redirector	2025-02-21 11:51:13 +08:00
sijie.sun	2050ed78d0	remove some dep	2025-02-21 11:51:13 +08:00
sijie.sun	dd5b00faf4	bump version to v2.2.2	2025-02-10 08:47:18 +08:00
sijie.sun	2af3b82e32	bump version to 2.2.1	2025-02-06 16:54:49 +08:00
sijie.sun	e833c2a28b	improve experience of subnet/kcp proxy ... 1. add self to windows firewall on windows 2. android always use smoltcp	2025-02-06 16:54:49 +08:00
Sijie.Sun	a63778854f	use netlink instead of shell cmd to config ip (#593)	2025-02-03 15:13:50 +08:00
Sijie.Sun	4aea0821dd	forward original peer info in ospf route (#589) ... prost doesn't support unknown field, and these info may be lost when they go through a old version node.	2025-01-27 20:38:22 +08:00
Sijie.Sun	d0f26d9303	bump version to 2.2.0 (#586)	2025-01-26 23:45:50 +08:00
Sijie.Sun	55a39491cb	feat/kcp (#580) ... * support proxy tcp stream with kcp to improve experience of tcp over udp * update rust version * make subnet proxy route metrics lower in windows.	2025-01-26 00:41:15 +08:00