 Nate Brown
|
1ad0f57c1e
Remove unusable networks from remote tunnels at handshake time (#1318)
|
vor 6 Monaten |
|
Nate Brown
|
9d310e72c2
Resolve some todos (#1274)
|
vor 8 Monaten |
|
Nate Brown
|
f2c32421c4
Support for ipv6 in the overlay with v2 certificates
|
vor 9 Monaten |
|
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
vor 9 Monaten |
|
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
vor 1 Jahr |
|
Nate Brown
|
c1711bc9c5
Remove tcp rtt tracking from the firewall (#1114)
|
vor 1 Jahr |
 John Maguire
|
8b68a08723
Fix "any" firewall rules for unsafe_routes (#1099)
|
vor 1 Jahr |
|
Nate Brown
|
cc8b3cc961
Add config option for local_cidr control
|
vor 1 Jahr |
|
Nate Brown
|
f346cf4109
At the end
|
vor 1 Jahr |
|
Nate Brown
|
8f44f22c37
In the middle
|
vor 1 Jahr |
 Ben Ritcey
|
01cddb8013
Added firewall.rules.hash metric (#1010)
|
vor 1 Jahr |
|
Nate Brown
|
5181cb0474
Use generics for CIDRTrees to avoid casting issues (#1004)
|
vor 1 Jahr |
 Ilya Lukyanov
|
1701087035
Add destination CIDR checking (#507)
|
vor 2 Jahren |
 Wade Simmons
|
6e0ae4f9a3
firewall: add option to send REJECT replies (#738)
|
vor 2 Jahren |
|
Nate Brown
|
5278b6f926
Generic timerwheel (#804)
|
vor 2 Jahren |
 Wade Simmons
|
9af242dc47
switch to new sync/atomic helpers in go1.19 (#728)
|
vor 2 Jahren |
|
Nate Brown
|
bcabcfdaca
Rework some things into packages (#489)
|
vor 3 Jahren |
|
Wade Simmons
|
44cb697552
Add more metrics (#450)
|
vor 4 Jahren |
|
Nathan Brown
|
3ea7e1b75f
Don't use a global logger (#423)
|
vor 4 Jahren |
|
Wade Simmons
|
2a4beb41b9
Routine-local conntrack cache (#391)
|
vor 4 Jahren |
|
Nathan Brown
|
68e3e84fdc
More like a library (#279)
|
vor 4 Jahren |
|
Wade Simmons
|
f3a6d8d990
Preserve conntrack table during firewall rules reload (SIGHUP) (#233)
|
vor 5 Jahren |
|
Wade Simmons
|
aba42f9fa6
enforce the use of goimports (#248)
|
vor 5 Jahren |
 Patrick Bogen
|
363c836422
log the reason for fw drops (#220)
|
vor 5 Jahren |
 Wade Simmons
|
add1b21777
only create a CIDRTree for each host if necessary (#198)
|
vor 5 Jahren |
|
Nate Brown
|
2d8a8143de
Actual fix for the real issue with tests
|
vor 5 Jahren |
|
Nate Brown
|
56657065e0
Fix ca* checks
|
vor 5 Jahren |
|
Nate Brown
|
a9c93da8cb
Detect group array usage and try to be kind
|
vor 5 Jahren |
 Ryan Huber
|
9333a8e3b7
subnet support
|
vor 5 Jahren |
 Slack Security Team
|
f22b4b584d
Public Release
|
vor 5 Jahren |
