Commit Graph
79 Commits
Author SHA1 Message Date
Viktor Liu 48f58d776c Treat the whole localhost range as local IPs 2025-01-29 22:43:14 +01:00
Viktor Liu e3d4f9819f Add test cases for port ranges in peer ACLs 2025-01-23 19:28:42 +01:00
Viktor Liu da43d33540 Merge branch 'port-range-acl' into userspace-router 2025-01-23 19:27:45 +01:00
Viktor Liu 862d548d4d Support port ranges 2025-01-23 18:04:00 +01:00
Viktor Liu 21a3679590 Fix regression 2025-01-15 18:27:15 +01:00
Viktor Liu 22991b3963 Process drop rules first (#3167) 2025-01-15 17:51:08 +01:00
Viktor Liu ea6c947f5d Merge branch 'main' into userspace-router 2025-01-15 17:01:32 +01:00
Viktor Liu 5a82477d48 [client] Remove outbound chains (#3157) 2025-01-15 16:57:41 +01:00
Viktor Liu 8dce13113d Disable local forwarding in netstack mode by default for security reasons 2025-01-14 18:11:02 +01:00
Viktor Liu af46f259ac Block wg net forwarded traffic 2025-01-11 00:38:30 +01:00
Viktor Liu 706f98c1f1 Improve routing decision logic 2025-01-09 17:37:12 +01:00
Viktor Liu 6335ef8b48 Correct comment 2025-01-09 14:10:33 +01:00
Viktor Liu daf935942c Handle disable-server-routes flag in userspace router 2025-01-09 14:08:44 +01:00
Viktor Liu 28f5cd523a Merge branch 'main' into userspace-router 2025-01-08 11:38:30 +01:00
Viktor Liu d9905d1a57 [client] Add disable system flags (#3153) 2025-01-07 20:38:18 +01:00
Viktor Liu 5ea39dfe8a Adjust limits for iOS 2025-01-06 23:53:12 +01:00
Viktor Liu 4a189a87ce Use MTU for udp max size 2025-01-06 23:47:03 +01:00
Viktor Liu fe7a2aa263 Fix test 2025-01-05 22:44:04 +01:00
Viktor Liu 290e6992a8 Demote close error levels 2025-01-05 14:50:17 +01:00
Viktor Liu 474fb33305 Remove established field from udp and icmp (unused) 2025-01-04 23:46:32 +01:00
Viktor Liu 766e0cccc9 Add packet tracer 2025-01-03 21:09:40 +01:00
Viktor Liu 7dfe7e426e Always use userspace routing in netstack mode 2025-01-03 18:38:57 +01:00
Viktor Liu eaadb75144 Add env var to force userspace routing if native routing is available 2025-01-03 18:02:35 +01:00
Viktor Liu 0b116b3941 Use native firewall for nat/firewall operations if available 2025-01-03 17:52:36 +01:00
Viktor Liu f69dd6fb62 Make extra IPs from interfaces optional 2025-01-03 16:54:46 +01:00
Viktor Liu 62a20f5f1a Add local IPs test 2025-01-03 16:50:00 +01:00
Viktor Liu a6ad4dcf22 Close endpoint when stopping udp forwarder 2025-01-03 16:40:51 +01:00
Viktor Liu f26b418e83 Allow to set firewall log level 2025-01-03 16:04:00 +01:00
Viktor Liu 979fe6bb6a Reduce complexity and fix linter issues 2025-01-03 15:43:28 +01:00
Viktor Liu c68be6b61b Remove fractions of seconds 2025-01-03 15:18:36 +01:00
Viktor Liu fc799effda Set log level from logrus 2025-01-03 15:16:30 +01:00
Viktor Liu 955b2b98e1 Complete route ACLs and add tests 2025-01-03 15:16:23 +01:00
Viktor Liu 9490e9095b Reduce complexity 2025-01-03 11:50:51 +01:00
Viktor Liu d711172f67 Fix benchmarks 2025-01-03 11:30:55 +01:00
Viktor Liu 0c2fa38e26 Exclude benchmark from CI 2025-01-03 11:27:52 +01:00
Viktor Liu 0b9854b2b1 Fix tests 2025-01-03 00:01:40 +01:00
Viktor Liu f772a21f37 Fix log level handling 2025-01-02 19:02:40 +01:00
Viktor Liu e912f2d7c0 Fix double close in logger 2025-01-02 19:02:40 +01:00
Viktor Liu 568d064089 Drop certain forwarded icmp packets 2025-01-02 19:02:40 +01:00
Viktor Liu 911f86ded8 Support local IPs in netstack mode 2025-01-02 19:02:40 +01:00
Viktor Liu 2b8092dfad Close endpoints 2025-01-02 16:41:54 +01:00
Viktor Liu fa27369b59 Fix linter issues 2025-01-02 16:21:03 +01:00
Viktor Liu 657413b8a6 Move icmp acceptance logic 2025-01-02 15:59:53 +01:00
Viktor Liu d85e57e819 Handle other icmp types in forwarder 2025-01-02 15:59:53 +01:00
Viktor Liu 7667886794 Add more tcp logging 2025-01-02 15:17:53 +01:00
Viktor Liu a12a9ac290 Handle all local IPs 2025-01-02 14:59:41 +01:00
Viktor Liu ed22d79f04 Add more control with env vars, also allow to pass traffic to native firewall 2025-01-02 13:40:36 +01:00
Viktor Liu 509b4e2132 Lower udp timeout and add teardown messages 2024-12-31 16:06:17 +01:00
Viktor Liu fb1a10755a Fix lint and test issues 2024-12-31 14:38:59 +01:00
Viktor Liu 9feaa8d767 Add icmp forwarder 2024-12-31 12:23:16 +01:00