859 Commits

Author SHA1 Message Date
yrutschle
93ab4f1e3a refactor in smaller functions 2024-06-17 22:54:52 +02:00
Yves Rutschle
5e252bb3f6 add links to ip-routing transparent proxying 2024-06-12 09:40:33 +02:00
ftasnetamot
d6265e2c50 Added svg file
corrected link to the diagram in md file
2024-06-11 21:40:06 +02:00
ftasnetamot
e1229dca28 updated picture, as png export failed in workflow before :-( 2024-06-09 17:21:04 +02:00
ftasnetamot
06e697e029 removed the warning regards kernel forwarding,
as this is also not necessary.
Updated text and picture
2024-06-09 17:21:04 +02:00
ftasnetamot
0bb3286a7d corrected broken style of connection arrows
in the diagram showing the scenarios
2024-06-09 17:21:04 +02:00
ftasnetamot
2fd9ea600a Added another file, discussing three possible setup scenarios, which
should cover up all setups.

Changes to be committed:
  new file:   scenarios-for-simple-transparent-proxy.md
  modified:   simple_transparent_proxy.md
  new file:   sslh-examples-v1.png
2024-06-09 17:21:04 +02:00
ftasnetamot
f4eea875e2 drastically reduced the configuration by putting all the magic into the interface-configuration 2024-06-04 21:04:56 +02:00
ftasnetamot
e8934f7a81 some more scenarios, how the simple configuration can be used. 2024-06-04 21:04:56 +02:00
ftasnetamot
8271db2d9d Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing.
Explain how all that works.
2024-06-02 14:26:50 +02:00
Yves Rutschle
995916c923 update history 2024-05-25 16:22:47 +02:00
Sergey Ponomarev
799d75413f echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'}
Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-05-25 16:21:50 +02:00
Yves Rutschle
8166be1a09 Fix inetd mode (fix #399) 2024-05-16 21:30:11 +02:00
Yves Rutschle
684374f353 avoid useless strcpy (fix #440) 2024-05-11 17:01:48 +02:00
Yves Rutschle
de7351fd84 Make basic.cfg more useful (fix #438) 2024-04-21 18:20:54 +02:00
yrutschle
d2ca706f86 document use of glob for SNI matching (fix #373) 2024-04-13 23:38:32 +02:00
Sergey Ponomarev
c859e341aa .gitignore generated files by ./configure 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
717fe8fae5 INSTALL.md: reformat
Add ./configure step
Fix libpcre-dev to libpcre2-dev
2024-04-13 20:25:18 +02:00
Sergey Ponomarev
1ddf45bf52 tcp_protocol_list_init(): allocate once instead of realloc each time 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ae7530e33f Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
d0a016221c probe.c: Fix Function 'memcmp' is called without explicitly comparing result 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
9286b55702 echosrv.c: Fix Narrowing conversion from 'ssize_t' (aka 'long') to signed type 'int' is implementation-defined 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
31c9e19abb echosrv.c: fix Narrowing conversion from ssize_t to int 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
ef8f3d1419 INSTALL.md fix typo 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
2759c223be README.Windows.md fix link 2024-04-13 20:25:18 +02:00
Sergey Ponomarev
b3c770898a
Ignore opts (#436)
* Be less strict about args at startup

Ignore unknown options.

* Don't fail if pid file is accessible
2024-04-13 11:03:54 +02:00
yrutschle
fee8491a8e remove useless capabilities and use standard environment in systemd 2024-04-10 18:39:07 +02:00
Yves Rűtschlé
a80d79fd40 Merge multiple sslh systemd unit configurations 2024-04-10 18:07:28 +02:00
Yves Rűtschlé
4b921be69d Merge systemd unit multiple configurations 2024-04-10 18:06:56 +02:00
Yves Rutschle
1799a81079 fix off-by-one error that would sometime ignore the latest connection 2024-03-31 22:18:58 +02:00
Sergio C
5f1c1b1b61
Update README.md (#431)
Updated tproxy.md location
v2.1.1
2024-03-24 08:33:34 +01:00
Yves Rutschle
58783af410 For MacOS, do not have multiple identicat cases in switch 2024-03-23 09:53:01 +01:00
Yves Rutschle
1957be1dc3 v.2.1.0 2024-03-22 16:41:50 +01:00
Yves Rűtschlé
ecca78bde7 for MacOS, define unknown symbols to equivalent values 2024-03-21 18:54:03 +01:00
Yves Rűtschlé
b94060ad76 undef FD_SETSIZE to avoid compiler warning upon redefine 2024-03-15 15:09:39 +01:00
Yves Rűtschlé
736b108a75 dont log error when remote client drops connection on Windows (fix #427) 2024-03-13 16:58:09 +01:00
Yves Rutschle
7ca567fcd9 clarify the difficulty of transparent proxying 2024-03-12 22:07:17 +01:00
Yves Rutschle
3117c15fbd when sslh-fork accept() fails with some errors, retry accept instead of dying 2024-01-11 21:32:39 +01:00
Yves Rutschle
e428fc505c prevent children from continuing the parent's work in case of failure 2024-01-11 21:24:19 +01:00
Yves Rutschle
4dfb4d300a add default LANDLOCK_ACCESS_FS_REFER define for Ubuntu (fix #420) 2024-01-06 11:56:57 +01:00
Yves Rutschle
39184b5622 enable landlock access to files to allow forking and name resolution 2024-01-05 13:21:55 +01:00
Yves Rutschle
940461de18 check name resolution error to avoid segfault 2024-01-05 11:15:53 +01:00
Yves Rutschle
6f949419d1 fix comment to reflect reality 2024-01-05 10:34:29 +01:00
Yves Rutschle
dab5df7409 clarify where the name resolution error comes from 2024-01-05 10:32:41 +01:00
Yves Rutschle
402ca5219b fix warnings on sockaddr storage 2024-01-04 23:22:44 +01:00
Yves Rutschle
046401148d add ./configure stage to docker build 2024-01-04 23:04:26 +01:00
Yves Rutschle
780e536aeb use autoconf to crete build scripts depending on landlock presence (fix #417) 2024-01-04 22:45:10 +01:00
Yves Rutschle
ed0ab12a16 reintroduce --ssl as alias to --tls 2024-01-02 21:38:23 +01:00
Yves Rutschle
b65f1e8b26 Merged Landlock feature 2023-12-09 14:13:07 +01:00
Konstantin
91b649daa0
Set image tag to use github in docker-compose example (#414)
Change image tag of the docker-compose example from ```sslh:latest``` to ```ghcr.io/yrutschle/sslh:latest```
2023-11-19 20:43:13 +01:00