 Yves Rutschle
|
d51da940da
|
remove leftover debug messages
|
2026-10-18 17:34:21 +02:00 |
|
|
Yves Rutschle
|
e3020e8441
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2026-10-18 17:30:41 +02:00 |
|
|
Yves Rutschle
|
cb894df702
|
sslh-ev: add timeout management for incoming connections (should help with #539)
|
2026-10-18 17:30:37 +02:00 |
|
|
Yves Rutschle
|
f1b4fa1744
|
robustness: check return values before changing num_probing
|
2026-10-17 22:33:52 +02:00 |
|
|
Yves Rutschle
|
ca5e7fe6f3
|
check socket() return value
|
2026-10-07 15:20:21 +02:00 |
|
|
Yves Rutschle
|
bebc109b94
|
print_message() restores errno (fix #538)
|
2026-10-04 11:07:55 +02:00 |
|
|
Yves Rutschle
|
1e1cde863b
|
Merge branch 'TigerP-improve-configure-ac'
|
2026-09-19 18:25:18 +02:00 |
|
|
Yves Rutschle
|
224efd36c3
|
Merge branch 'improve-configure-ac' of github.com:TigerP/sslh into TigerP-improve-configure-ac
|
2026-09-19 18:24:16 +02:00 |
|
|
Yves Rutschle
|
03067e9ab7
|
respect hosts_ctl() prototype
|
2026-08-02 09:03:51 +02:00 |
|
|
Yves Rutschle
|
eb976475be
|
declare pp_log_connection() as inline (avoids warning with proxyprotocol not present)
|
2026-07-12 18:10:34 +02:00 |
|
|
Yves Rutschle
|
7eabafc6e2
|
added updated QUIC example
|
2026-05-31 09:58:57 +02:00 |
|
|
Yves Rutschle
|
5f9ff68f1c
|
mention Wireguard probe in documentation (fix #535)
|
2026-05-31 09:51:06 +02:00 |
|
|
Yves Rutschle
|
4752c8647d
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2026-05-08 22:52:40 +02:00 |
|
|
Yves Rutschle
|
a8352c137c
|
udp_c2s_forward: silently ignor EAGAIN/EWOULDBLOCK on recvfrom (fix #534)
|
2026-05-08 22:52:26 +02:00 |
|
|
Yves Rutschle
|
dc70cc0d3b
|
verbose_packet now dumps UDP packets as well (fix #527)
|
2026-03-15 22:12:00 +01:00 |
|
|
Yves Rutschle
|
d39388d1ed
|
prepare v2.3.1
|
2026-03-05 19:14:57 +01:00 |
|
|
Yves Rutschle
|
70a776fb9a
|
-V now outputs compile-time configuration (fix #519)
|
2026-03-04 22:35:56 +01:00 |
|
|
Yves Rutschle
|
9fadd60eed
|
sanity check that libwrap is present when using service option
|
2026-03-03 22:42:52 +01:00 |
|
|
Yves Rutschle
|
83c9465c37
|
sanity check that proxyprotocol is compiled in when used by listening endpoints
|
2026-03-03 22:34:36 +01:00 |
|
|
Yves Rutschle
|
1137779b9c
|
sanity check that libproxyprocol is compiled in when option is used
|
2026-03-03 22:29:01 +01:00 |
|
|
Yves Rutschle
|
4d3aa6c6e0
|
sanity checks that regex options are only used with the right probe and with libpcre2 support compiled in
|
2026-03-03 22:05:01 +01:00 |
|
|
Yves Rutschle
|
579baae363
|
fix syntax error in documentation example
|
2026-02-28 21:42:01 +01:00 |
|
|
Yves Rutschle
|
e2d01a7440
|
close file descriptors upon forking a connection shoveler (fix #521)
|
2026-02-15 11:17:36 +01:00 |
|
|
Yves Rutschle
|
ecc76071c1
|
downgrade SNI matching logs from error to info to reduce log verboseness (Fix #520)
|
2026-02-08 09:50:45 +01:00 |
|
|
Yves Rutschle
|
e5d7cd0575
|
revert some useless changes to really fix #515
|
2026-02-06 22:08:59 +01:00 |
|
|
Yves Rutschle
|
d288125ff3
|
test combinations of ipv4 <-> ipv6 over proxyprotocol
|
2026-02-06 22:05:27 +01:00 |
|
|
Yves Rutschle
|
2cc1e1f1d9
|
add CAP_NET_RAW in systemd configuration to support transparent proxying
|
2026-02-03 21:00:40 +01:00 |
|
|
yrutschle
|
77dc76a0f2
|
Change IPv4 to IPv6 addresses when using proxyprotocol and protocols are different (Fix #515)
|
2026-02-01 18:02:03 +01:00 |
|
|
Yves Rutschle
|
c29081f71d
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-11-14 14:54:17 +01:00 |
|
|
Yves Rutschle
|
8d58164fdd
|
Libwrap requires access to some more files when using landlock (fix #450 again)
|
2025-11-14 14:53:56 +01:00 |
|
|
yrutschle
|
894eacfb42
|
Fix sslh-fork segmentation fault (Fix #508)
|
2025-10-30 08:22:48 +01:00 |
|
|
Yves Rutschle
|
0dd580f45b
|
move symbol definition for Cygwin (fix #506)
|
2025-09-24 14:48:16 +02:00 |
|
|
Yves Rutschle
|
63e15bb55c
|
Prepare for 2.3.0
|
2025-09-10 15:50:52 +02:00 |
|
|
Yves Rutschle
|
6f3dcfb365
|
Merge branch 'proxyprotocol'
|
2025-09-10 15:31:43 +02:00 |
|
|
Yves Rutschle
|
f8e031ecb9
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-09-10 15:29:59 +02:00 |
|
|
Yves Rutschle
|
fcfc348aee
|
added proxyprotocol documentation
|
2025-09-10 15:29:04 +02:00 |
|
|
Yves Rutschle
|
6905498d60
|
proxyprotocol on client-side can be removed on server side, and its info is then logged
|
2025-09-10 12:14:41 +02:00 |
|
|
Yves Rűtschlé
|
eea50a97fc
|
support for proxy_protocol on incoming (client-side) link
|
2025-09-10 09:28:54 +02:00 |
|
|
Yves Rutschle
|
387ef13f52
|
fix memory leak when server-side is not yet attached, and potential memory leak when forking hash is full (fix #504)
|
2025-09-04 23:50:17 +02:00 |
|
|
Yves Rűtschlé
|
dcb2cc928a
|
import main branch for endpoint tracking
|
2025-08-29 20:44:15 +02:00 |
|
|
Yves Rűtschlé
|
2106bd6527
|
added test for client-side proxyprotocol
|
2025-08-29 20:39:42 +02:00 |
|
|
Yves Rűtschlé
|
12f748fe8e
|
include test for server-side proxyprotocol
|
2025-08-29 12:22:30 +02:00 |
|
|
yrutschle
|
b6c8e116af
|
verify there is space in pid followup table before forking (fix #502)
|
2025-08-27 22:57:04 +02:00 |
|
|
yrutschle
|
4427a9570f
|
remove noisy logging from harmless interrupted system calls
|
2025-08-27 22:21:51 +02:00 |
|
|
yrutschle
|
3c237b3c9a
|
have some minimum hash size if no protocols have a max_connections setting
|
2025-08-26 23:22:17 +02:00 |
|
|
yrutschle
|
2914fe7b5c
|
fix embarassingly wrong error check
|
2025-08-26 22:23:30 +02:00 |
|
|
yrutschle
|
829a7299e1
|
remove obsolete debug statement
|
2025-08-26 22:18:21 +02:00 |
|
|
yrutschle
|
f2e86a3df7
|
do not log if accept returns EAGAIN
|
2025-08-26 22:17:58 +02:00 |
|
|
yrutschle
|
f64f0c5ba5
|
some markdown formating fixes
|
2025-08-26 22:15:49 +02:00 |
|
|
Yves Rűtschlé
|
9e2e02d58e
|
print settings include proxyprotocol setting
|
2025-08-21 12:39:01 +02:00 |
|
|
yrutschle
|
00e8a3b084
|
some markdown formating fixes
|
2025-08-20 09:55:43 +02:00 |
|
|
Yves Rűtschlé
|
988f7135ef
|
add link to libev documentation
|
2025-08-17 10:47:19 +02:00 |
|
|
Yves Rűtschlé
|
0baf23df95
|
fix probing on partial reception
|
2025-08-17 10:31:18 +02:00 |
|
|
Yves Rűtschlé
|
81e2d0e2f4
|
check udp timeouts on all new connections including TCP
|
2025-08-15 19:54:51 +02:00 |
|
|
Yves Rűtschlé
|
b57b333a39
|
update documentation for accept() disabling
|
2025-08-15 18:49:56 +02:00 |
|
|
Yves Rűtschlé
|
effa0f2615
|
sslh-select now has backup strategy when ulimit -n (file descriptor) is reached
|
2025-08-15 18:32:14 +02:00 |
|
|
Yves Rűtschlé
|
8769d86c04
|
EWOULDBLOCK should not cause accept() disable
|
2025-08-15 18:29:05 +02:00 |
|
|
Yves Rűtschlé
|
663e41e98c
|
remove debug printf
|
2025-08-15 10:30:27 +02:00 |
|
|
Yves Rűtschlé
|
d97cda1fa5
|
sslh-ev now has backup strategy when ulimit -f (file descriptor) is reached
|
2025-08-15 10:11:20 +02:00 |
|
|
Yves Rűtschlé
|
c512fd5279
|
update doc for connections
|
2025-08-13 12:44:45 +02:00 |
|
|
Yves Rűtschlé
|
d4de0a8859
|
update doc for connections
|
2025-08-13 12:33:45 +02:00 |
|
|
Yves Rűtschlé
|
4f7ba84e9a
|
fix headers
|
2025-08-13 12:32:55 +02:00 |
|
|
Yves Rűtschlé
|
e1619707f6
|
check allocation success
|
2025-08-13 12:24:15 +02:00 |
|
|
Yves Rűtschlé
|
ad34bc5c5a
|
check allocation success
|
2025-08-12 23:14:42 +02:00 |
|
|
Yves Rűtschlé
|
2975ae88f2
|
cleanup debug code
|
2025-08-12 23:06:47 +02:00 |
|
|
Yves Rűtschlé
|
2624877232
|
sslh-ev: keep track of forked processes
|
2025-08-12 23:05:24 +02:00 |
|
|
Yves Rűtschlé
|
eb6a3c6724
|
zero out listen_endpoint data when allocating to ensure counters are 0 at start
|
2025-08-12 22:56:38 +02:00 |
|
|
Yves Rűtschlé
|
0a0392e7ee
|
refactor: separate pid processing from child signal processing
|
2025-08-12 10:17:03 +02:00 |
|
|
Yves Rűtschlé
|
3817f2d728
|
count listen endpoint connections for forked protocols
|
2025-08-11 12:13:09 +02:00 |
|
|
Yves Rűtschlé
|
860631f910
|
refactor: move out forking code
|
2025-08-11 09:37:57 +02:00 |
|
|
Yves Rűtschlé
|
51ba24c1b2
|
count protocol connections when forking, in sslh-select
|
2025-08-11 09:28:43 +02:00 |
|
|
Yves Rűtschlé
|
22987e7d94
|
add max_connections to protocol print settings
|
2025-08-11 09:04:29 +02:00 |
|
|
Yves Rűtschlé
|
02ea8e7ea4
|
add host and port to print settings when resolving on forward
|
2025-08-11 09:02:13 +02:00 |
|
|
Yves Rűtschlé
|
691aa936cc
|
add listen max_connections to print settings
|
2025-08-11 08:57:10 +02:00 |
|
|
Yves Rűtschlé
|
78a1ed6899
|
refactor: make hash dump usuable for debugging
|
2025-08-10 23:12:24 +02:00 |
|
|
Yves Rűtschlé
|
eac34ec36f
|
refactor: consolidate loop init between sslh-select and sslh-ev
|
2025-08-10 08:49:02 +02:00 |
|
|
yrutschle
|
8aa97d7118
|
Include OpenSUSE's security review
|
2025-08-06 09:55:19 +02:00 |
|
|
yrutschle
|
8ad8bfdb5d
|
fix link
|
2025-08-06 09:44:15 +02:00 |
|
|
yrutschle
|
4c2e4e01f2
|
document new settings in ChangeLog
|
2025-08-06 09:42:37 +02:00 |
|
|
yrutschle
|
2ecb681277
|
fix warning on void return
|
2025-08-06 09:38:52 +02:00 |
|
|
yrutschle
|
54dc8374ab
|
properly define function in header
|
2025-08-06 09:37:07 +02:00 |
|
|
yrutschle
|
8c4253f145
|
refactor: rename proto inc and dec functions for clarity
|
2025-08-06 09:36:39 +02:00 |
|
|
yrutschle
|
4483e9c7e5
|
support for max_connections on listen_endpoint for sslh-ev/sslh-select
|
2025-08-06 09:32:19 +02:00 |
|
|
yrutschle
|
65c9c4ce95
|
count protocol connections even if no maximum is set
|
2025-08-06 08:00:35 +02:00 |
|
|
yrutschle
|
5434dc59df
|
fix tags target for Debian's version of ctags
|
2025-08-05 18:21:48 +02:00 |
|
|
yrutschle
|
20290bbfa6
|
sslh-fork can now limit the number of concurrent connections for each incoming port
|
2025-08-05 18:15:58 +02:00 |
|
|
Yves Rutschle
|
1dfd70c20c
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-07-24 19:49:01 +02:00 |
|
|
Yves Rutschle
|
feaf528a60
|
add setting for maximum connection per protocol
|
2025-07-24 19:48:50 +02:00 |
|
|
Yves Rutschle
|
28ea73301e
|
new gap feature: hardlimit, with test suite
|
2025-06-22 16:45:50 +02:00 |
|
|
Yves Rutschle
|
bd9ed060e4
|
fix memory leak in regex probe (fix #500)
|
2025-06-19 22:31:02 +02:00 |
|
|
Yves Rutschle
|
071e7500a2
|
new test framework, with test classes for robustness and probe tests. Not all tests are ported yet.
|
2025-06-15 16:02:02 +02:00 |
|
|
Yves Rutschle
|
b7556c07bd
|
added podman transparent setup (fix #448)
|
2025-05-29 16:07:57 +02:00 |
|
|
Yves Rutschle
|
6b9ec3a46e
|
remove obsolete getopt definitions (fix #489)
|
2025-05-29 15:46:08 +02:00 |
|
|
Yves Rutschle
|
ad66e79f46
|
Fix proxyprotocol target field (#496)
|
2025-05-29 15:23:10 +02:00 |
|
|
Yves Rutschle
|
b12220e640
|
v2.2.4 ChangeLog
|
2025-05-28 17:51:04 +02:00 |
|
|
Yves Rutschle
|
204305a88f
|
fix unaligned read in OpenVPN UDP probe
|
2025-05-25 11:27:26 +02:00 |
|
|
Yves Rutschle
|
0f96ed8adb
|
fix test script for new command line behaviour
|
2025-05-25 11:27:05 +02:00 |
|
|
Yves Rutschle
|
43e75a0a8c
|
upgrade API to Conf::Libconfig 1.0.3
|
2025-05-22 22:19:00 +02:00 |
|
|
Yves Rutschle
|
ad1f5d68e9
|
fix potential parsing of undefined data is syslog probe and make probe more robust
|
2025-05-09 17:08:30 +02:00 |
|
|
Yves Rutschle
|
ff8206f7c8
|
fix segmentation fault upon too many UDP connection. Also, accepts multiple connection in one cycle
|
2025-05-08 17:58:51 +02:00 |
|