Commit Graph

  • 2bce222550 List possible cipher options in example config (#385) John Maguire 2021-02-19 22:46:42 -05:00
  • 3dd1108099 Go 1.16 and darwin-arm64 (#381) Wade Simmons 2021-02-17 13:11:57 -05:00
  • d4b81f9b8d Add QR code support to nebula-cert (#297) Nathan Brown 2021-02-11 18:53:25 -06:00
  • 454bc8a6bb Check certificate banner during nebula-cert print (#373) brad-defined 2021-02-05 15:52:32 -05:00
  • ce9ad37431 fix regression with LightHouseHandler and punchBack (#346) Wade Simmons 2020-11-25 17:49:26 -05:00
  • ee7c27093c add HostMap.RemoteIndexes (#329) Wade Simmons 2020-11-23 14:51:16 -05:00
  • 2e7ca027a4 Lighthouse handler optimizations (#320) Wade Simmons 2020-11-23 14:50:01 -05:00
  • 672ce1f0a8 Move slice allocations in connection manager monitor loop (#340) mhp 2020-11-19 15:44:05 -08:00
  • 384b1166ea fix panic in UnmarshalNebulaCertificate (#339) Wade Simmons 2020-11-19 08:44:54 -05:00
  • 0389596f66 don't mark handshake packets as "lost" (#331) Wade Simmons 2020-11-16 14:03:08 -05:00
  • 43a3988afc i don't think this is used at all anymore (#323) Ryan Huber 2020-10-29 20:43:50 -05:00
  • 5c23676a0f Added line to systemd config template to start Nebula before sshd (#317) Brian Kelly 2020-10-29 21:43:02 -04:00
  • f6d0b4b893 Update README for supported platforms (#312) Nathan Brown 2020-10-12 13:11:32 -05:00
  • 0d6b55e495 Bring in the new version of kardianos/service and output logfiles on osx (#303) Ryan Huber 2020-09-24 15:34:08 -07:00
  • c71c84882e v1.3.0 (#268) Wade Simmons 2020-09-22 12:21:12 -04:00
  • 0010db46e4 Fix a data race on message counter (#284) Darren Hoo 2020-09-22 09:41:46 +08:00
  • 68e3e84fdc More like a library (#279) Nathan Brown 2020-09-18 09:20:09 -05:00
  • 6238f1550b Handle panic when invalid IP entered in sshd (#296) Brian Luong 2020-09-18 07:10:25 -07:00
  • 50b04413c7 Block nebula ssh server from listening on port 22 (#266) forfuncsake 2020-09-15 23:57:32 +10:00
  • ef498a31da Add disable_timestamp option (#288) CzBiX 2020-09-09 19:42:11 +08:00
  • 2e5a477a50 Align linux UDP performance optimizations with configuration (#275) forfuncsake 2020-08-13 08:24:05 +10:00
  • 32fe9bfe75 Use Go 1.15 (#277) Wade Simmons 2020-08-12 16:16:21 -04:00
  • 9b8b3c478b Support startup without a tun device (#269) forfuncsake 2020-08-10 23:15:55 +10:00
  • 7b3f23d9a1 Start nebula after the network is up (#270) Michael Hardy 2020-08-07 09:33:48 -07:00
  • 25964b54f6 Use inclusive terminology for cert blocking (#272) forfuncsake 2020-08-06 11:17:47 +10:00
  • ac557f381b drop unroutable packets (#267) Wade Simmons 2020-08-04 22:59:04 -04:00
  • a54f3fc681 fix fast handshake trigger for static hosts (#265) Wade Simmons 2020-08-02 20:59:50 -04:00
  • 5545cff6ef log remote certificate fingerprint on handshakes (#262) Alan Lam 2020-07-31 15:54:51 -07:00
  • f3a6d8d990 Preserve conntrack table during firewall rules reload (SIGHUP) (#233) Wade Simmons 2020-07-31 18:53:36 -04:00
  • 9b06748506 Make Interface.Inside an interface type (#252) forfuncsake 2020-07-28 22:53:16 +10:00
  • 4756c9613d trigger handshakes when lighthouse reply arrives (#246) Wade Simmons 2020-07-22 10:35:10 -04:00
  • 4645e6034b Fix up the tun for android (#249) Nathan Brown 2020-07-01 10:20:52 -05:00
  • aba42f9fa6 enforce the use of goimports (#248) Wade Simmons 2020-06-30 18:53:30 -04:00
  • 41578ca971 Be more like a library to support mobile (#247) Nathan Brown 2020-06-30 13:48:58 -05:00
  • 1ea8847085 linux: set advmss correctly when route MTU is used (#245) Wade Simmons 2020-06-26 13:47:21 -04:00
  • 55858c64cc smoke test: test firewall inbound / outbound (#240) Wade Simmons 2020-06-26 13:46:51 -04:00
  • e94c6b0125 mips-softfloat (#231) Wade Simmons 2020-06-26 13:46:23 -04:00
  • b37a91cfbc add meta packet statistics (#230) Wade Simmons 2020-06-26 13:45:48 -04:00
  • 3212b769d4 fix typo in conntrack section in examples/config.yml (#236) David Sonder 2020-06-26 18:08:22 +02:00
  • ecf0e5a9f6 drop packets even if we aren't going to emit Debug logs about it (#239) Patrick Bogen 2020-06-10 14:55:49 -07:00
  • ff13aba8fc allow go test -bench=. to run (#234) Wade Simmons 2020-05-27 16:52:34 -04:00
  • cc03ff9e9a Unbreak building for FreeBSD (#103) Mateusz Kwiatkowski 2020-05-27 04:23:23 +02:00
  • 363c836422 log the reason for fw drops (#220) Patrick Bogen 2020-04-10 10:57:21 -07:00
  • fb252db4a1 v1.2.0 (#215) Wade Simmons 2020-04-08 19:52:24 -04:00
  • 4f6313ebd3 fix config name for {remote,local}_allow_list (#219) Wade Simmons 2020-04-08 16:20:12 -04:00
  • 0a474e757b Add lighthouse.{remoteAllowList,localAllowList} (#217) Wade Simmons 2020-04-08 15:36:43 -04:00
  • 7cd342c7ab Add a systemd unit for arch and a wireshark dissector (#216) Nathan Brown 2020-04-06 18:47:32 -07:00
  • 7cdbb14a18 Better config test (#177) Wade Simmons 2020-04-06 14:35:32 -04:00
  • b4f2f7ce4e log certName alongside vpnIp (#200) Wade Simmons 2020-04-06 14:34:00 -04:00
  • ff64d1f952 unsafe_routes mtu (#209) Alex 2020-04-06 11:33:30 -07:00
  • 9e2ff7df57 Correct typos in noise.go (#205) Felix Yan 2020-03-30 13:23:55 -05:00
  • 1297090af3 add configurable punching delay because of race-condition-y conntracks (#210) Ryan Huber 2020-03-27 11:26:39 -07:00
  • add1b21777 only create a CIDRTree for each host if necessary (#198) Wade Simmons 2020-03-02 16:21:33 -05:00
  • 1cb3201b5e Github Actions: cache modules and only run when necessary (#197) Wade Simmons 2020-03-02 16:21:19 -05:00
  • 41968551f9 clarify that lighthouse IP should be nebula range (#196) Ryan Huber 2020-02-28 11:35:55 -08:00
  • 8548ac3c31 build and test with go1.14 (#195) Wade Simmons 2020-02-27 15:48:39 -05:00
  • fb9b36f677 allow any config file name if specified directly (#189) Wade Simmons 2020-02-26 15:38:56 -05:00
  • 4d1928f1e3 Support unsafe_routes on Windows (#184) Sebastien Bariteau 2020-02-26 15:23:16 -05:00
  • a91a40212d check that packet isn't bound for my vpn ip (#192) Ryan Huber 2020-02-21 16:49:54 -08:00
  • 179a369130 add configuration options for HandshakeManager (#179) Wade Simmons 2020-02-21 16:25:11 -05:00
  • df69371620 use absolute paths on darwin and windows (#191) Wade Simmons 2020-02-21 15:25:33 -05:00
  • eda344d88f add logging.timestamp_format config option (#187) Wade Simmons 2020-02-21 15:25:00 -05:00
  • 065e2ff88a update golang.org/x/crypto (#188) Wade Simmons 2020-02-20 14:49:55 -05:00
  • 45a5de2719 Print the udp listen address on startup (#181) Nathan Brown 2020-02-06 21:17:43 -08:00
  • 2d24ef7166 validate lighthouses and static hosts are in our subnet (#170) Wade Simmons 2020-01-20 15:52:55 -05:00
  • 13941aa723 Prepare for 1.1.0 release. (#167) Wade Simmons 2020-01-17 12:29:42 -05:00
  • 672edcaf73 add CHANGELOG.md (#166) Wade Simmons 2020-01-17 09:23:54 -05:00
  • 25bf80d8d3 add new invite link without expiration date (#165) Ryan Huber 2020-01-16 10:09:45 -06:00
  • 5c126cd42b conform to new build format for vagrant (#153) Alan Lam 2020-01-08 11:32:28 -08:00
  • 91f7b9c049 Update README.md Ryan Huber 2020-01-07 12:40:25 -06:00
  • 1592da921d fix(nebula-cert): flag duration is optional, so reflect this is the cli help (#117) Stephan 2020-01-06 19:51:29 +01:00
  • 4e0da13180 Support unsafe_routes on Darwin (#139) Chad Harp 2020-01-06 12:09:56 -06:00
  • e9b0498b21 Correct typo (#150) Gábor Lipták 2020-01-06 12:14:11 -05:00
  • efe741ad66 Allow ValidateLHStaticEntries to check all static host map entries (#141) Chad Harp 2020-01-02 20:04:18 -06:00
  • fd8ad5d0d7 Merge pull request #133 from slackhq/interval_zero_check Ryan Huber 2019-12-26 15:57:01 -06:00
  • df8e45c13b if interval is 0 don't even update lh (mobile use case) Ryan Huber 2019-12-26 21:12:31 +00:00
  • 0eb5ce6b41 better windows targets in Makefile (#125) Wade Simmons 2019-12-21 09:31:48 -05:00
  • 8ed8419584 GitHub Action: add release script (#124) Wade Simmons 2019-12-21 01:15:41 -05:00
  • e728b81573 Merge pull request #122 from slackhq/better-makefile Wade Simmons 2019-12-20 14:15:58 -05:00
  • 4c1725772b make arm builds specific Wade Simmons 2019-12-20 14:08:18 -05:00
  • f6aabf14a6 fix whitespace Wade Simmons 2019-12-20 13:55:15 -05:00
  • bc7b3895f9 Makefile improvements Wade Simmons 2019-12-20 13:44:11 -05:00
  • fe8a71ed59 Merge pull request #121 from slackhq/txq-err Nathan Brown 2019-12-20 09:21:46 -08:00
  • 9db16d226c Make linux tx queue length an error log instead of a fatal on error Nate Brown 2019-12-20 09:10:26 -08:00
  • fe58cedd2e Merge pull request #120 from slackhq/add_slack_link Ryan Huber 2019-12-20 08:33:38 -08:00
  • 7ee692663d add invitation link to readme Ryan Huber 2019-12-20 16:28:17 +00:00
  • e465b13045 Merge pull request #113 from slackhq/fw-ca Nathan Brown 2019-12-19 09:06:50 -08:00
  • 2d8a8143de Actual fix for the real issue with tests Nate Brown 2019-12-18 21:23:34 -08:00
  • b39fab3043 Merge pull request #114 from slackhq/mtu-optional Nathan Brown 2019-12-18 16:57:40 -08:00
  • 55525654a8 Move tun mtu failing to an error log instead of fatal Nate Brown 2019-12-18 16:49:46 -08:00
  • 4e378fdb5b Add test for current bug in master, reduce log output in test Nate Brown 2019-12-18 11:06:51 -08:00
  • 99cac0da55 Remove println Nate Brown 2019-12-17 23:48:33 -08:00
  • c359a5cf71 Correct example config doc Nate Brown 2019-12-17 23:43:10 -08:00
  • 56657065e0 Fix ca* checks Nate Brown 2019-12-17 23:36:12 -08:00
  • 8e6b72516b Merge pull request #107 from slackhq/ca-ip Nathan Brown 2019-12-17 19:09:52 -08:00
  • 328db6bb82 Root constraint usage and support in nebula-cert Nate Brown 2019-12-17 17:59:21 -08:00
  • 0dc9aafa14 Support root subnet asserts Nate Brown 2019-12-17 17:10:46 -08:00
  • 98d92ee4cf Support root IP assertions in cert.Verify Nate Brown 2019-12-17 17:06:13 -08:00
  • 8b2ee5cf34 Merge pull request #99 from slackhq/update-deps-2019-12 Wade Simmons 2019-12-17 13:29:21 -05:00
  • 3978664083 Merge pull request #100 from slackhq/smoke-test Wade Simmons 2019-12-17 13:14:47 -05:00