 Nate Brown
|
48f5d2a57d
Add forward tables to handle unsafe network packets distinctly from vpn network packets
|
3 weeks ago |
 Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
6 months ago |
|
Wade Simmons
|
879852c32a
upgrade to yaml.v3 (#1148)
|
7 months ago |
 dependabot[bot]
|
8a090e59d7
Bump github.com/gaissmai/bart from 0.13.0 to 0.18.1 (#1341)
|
7 months ago |
|
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
7 months ago |
|
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
1 year ago |
|
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
1 year ago |
|
Nate Brown
|
c1711bc9c5
Remove tcp rtt tracking from the firewall (#1114)
|
1 year ago |
 John Maguire
|
8b68a08723
Fix "any" firewall rules for unsafe_routes (#1099)
|
1 year ago |
|
Nate Brown
|
cc8b3cc961
Add config option for local_cidr control
|
1 year ago |
|
Nate Brown
|
f346cf4109
At the end
|
1 year ago |
|
Nate Brown
|
8f44f22c37
In the middle
|
1 year ago |
 Ben Ritcey
|
01cddb8013
Added firewall.rules.hash metric (#1010)
|
1 year ago |
|
Nate Brown
|
5181cb0474
Use generics for CIDRTrees to avoid casting issues (#1004)
|
2 years ago |
 Ilya Lukyanov
|
1701087035
Add destination CIDR checking (#507)
|
2 years ago |
|
Wade Simmons
|
6e0ae4f9a3
firewall: add option to send REJECT replies (#738)
|
2 years ago |
|
Nate Brown
|
5278b6f926
Generic timerwheel (#804)
|
2 years ago |
 Wade Simmons
|
9af242dc47
switch to new sync/atomic helpers in go1.19 (#728)
|
3 years ago |
|
Nate Brown
|
bcabcfdaca
Rework some things into packages (#489)
|
4 years ago |
|
Wade Simmons
|
44cb697552
Add more metrics (#450)
|
4 years ago |
|
Nathan Brown
|
3ea7e1b75f
Don't use a global logger (#423)
|
4 years ago |
|
Wade Simmons
|
2a4beb41b9
Routine-local conntrack cache (#391)
|
4 years ago |
|
Nathan Brown
|
68e3e84fdc
More like a library (#279)
|
5 years ago |
|
Wade Simmons
|
f3a6d8d990
Preserve conntrack table during firewall rules reload (SIGHUP) (#233)
|
5 years ago |
|
Wade Simmons
|
aba42f9fa6
enforce the use of goimports (#248)
|
5 years ago |
 Patrick Bogen
|
363c836422
log the reason for fw drops (#220)
|
5 years ago |
 Wade Simmons
|
add1b21777
only create a CIDRTree for each host if necessary (#198)
|
5 years ago |
|
Nate Brown
|
2d8a8143de
Actual fix for the real issue with tests
|
5 years ago |
|
Nate Brown
|
56657065e0
Fix ca* checks
|
5 years ago |
|
Nate Brown
|
a9c93da8cb
Detect group array usage and try to be kind
|
5 years ago |
