third-party-mirrors/sslh
1
0
Fork 0
mirror of https://github.com/yrutschle/sslh.git synced 2025-04-14 16:17:14 +03:00
Code Issues Packages Projects Releases Wiki Activity

document UDP support

Browse Source
This commit is contained in:
yrutschle 2021-07-16 22:38:53 +02:00
parent c049885758
commit 4a4c571116
1 changed files with 18 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

33
ChangeLog
View File

@ -1,24 +1,27 @@
vNEXT: vNEXT:
UDP support now works. It only works with sslh-select. sslh-select now supports UDP protocols.
Probes specified in the `protocols` configuration entry are tried on Probes specified in the `protocols`
incoming packets, TCP or UDP, and forwarded based on configuration entry are tried on incoming packets,
the input protocol (an incoming TCP connection will TCP or UDP, and forwarded based on the input
be forwarded as TCP, and same with UDP). protocol (an incoming TCP connection will be
forwarded as TCP, and same with UDP).
This has been tested with DNS as shown in udp.cfg: This has been tested with DNS as shown in udp.cfg:
incoming packets that contain my domain name are incoming packets that contain my domain name are
assumed to be a DNS request and forwarded assumed to be a DNS request and forwarded
accordingly. Note this could cause problems if accordingly. Note this could cause problems if
combined with incoming TLS with SNI. combined with incoming TLS with SNI. UDP clients
UDP clients and servers need to agree on the and servers need to agree on the IPv4/IPv6 they use:
IPv4/IPv6 they use: use the same protocol on all use the same protocol on all sides! Often, this
sides! Often, this means explicitely using means explicitely using 'ip4-localhost'.
'ip4-localhost'. UDP sender-receiver pairs (connections, so to speak)
Currently there is a hard limit of MAX_UDP_SRC are kept for 60s, which can be changed with
(1024) UDP connections tracked at once, which get `udp_timeout` in the configuration.
forgotten after a hardcoded timeout of UDP_TIMEOUT
(60s), all defined in udp-listener.c.
sslh-select refactored to remove linear searches. sslh-select refactored to change linear searches
through connections to linear searches through
fd_set.
Fixed a libconfig call to support libconfig 1.7.3.
Added symbol to support libconfig 1.4.9, still in Added symbol to support libconfig 1.4.9, still in
use in CentOS7. use in CentOS7.