Yves Rutschle
fcfc348aee
added proxyprotocol documentation
2025-09-10 15:29:04 +02:00
Yves Rutschle
6905498d60
proxyprotocol on client-side can be removed on server side, and its info is then logged
2025-09-10 12:14:41 +02:00
Yves Rűtschlé
eea50a97fc
support for proxy_protocol on incoming (client-side) link
2025-09-10 09:28:54 +02:00
Yves Rűtschlé
dcb2cc928a
import main branch for endpoint tracking
2025-08-29 20:44:15 +02:00
Yves Rűtschlé
2106bd6527
added test for client-side proxyprotocol
2025-08-29 20:39:42 +02:00
Yves Rűtschlé
12f748fe8e
include test for server-side proxyprotocol
2025-08-29 12:22:30 +02:00
Yves Rűtschlé
9e2e02d58e
print settings include proxyprotocol setting
2025-08-21 12:39:01 +02:00
yrutschle
00e8a3b084
some markdown formating fixes
2025-08-20 09:55:43 +02:00
Yves Rűtschlé
988f7135ef
add link to libev documentation
2025-08-17 10:47:19 +02:00
Yves Rűtschlé
0baf23df95
fix probing on partial reception
2025-08-17 10:31:18 +02:00
Yves Rűtschlé
81e2d0e2f4
check udp timeouts on all new connections including TCP
2025-08-15 19:54:51 +02:00
Yves Rűtschlé
b57b333a39
update documentation for accept() disabling
2025-08-15 18:49:56 +02:00
Yves Rűtschlé
effa0f2615
sslh-select now has backup strategy when ulimit -n (file descriptor) is reached
2025-08-15 18:32:14 +02:00
Yves Rűtschlé
8769d86c04
EWOULDBLOCK should not cause accept() disable
2025-08-15 18:29:05 +02:00
Yves Rűtschlé
663e41e98c
remove debug printf
2025-08-15 10:30:27 +02:00
Yves Rűtschlé
d97cda1fa5
sslh-ev now has backup strategy when ulimit -f (file descriptor) is reached
2025-08-15 10:11:20 +02:00
Yves Rűtschlé
c512fd5279
update doc for connections
2025-08-13 12:44:45 +02:00
Yves Rűtschlé
d4de0a8859
update doc for connections
2025-08-13 12:33:45 +02:00
Yves Rűtschlé
4f7ba84e9a
fix headers
2025-08-13 12:32:55 +02:00
Yves Rűtschlé
e1619707f6
check allocation success
2025-08-13 12:24:15 +02:00
Yves Rűtschlé
ad34bc5c5a
check allocation success
2025-08-12 23:14:42 +02:00
Yves Rűtschlé
2975ae88f2
cleanup debug code
2025-08-12 23:06:47 +02:00
Yves Rűtschlé
2624877232
sslh-ev: keep track of forked processes
2025-08-12 23:05:24 +02:00
Yves Rűtschlé
eb6a3c6724
zero out listen_endpoint data when allocating to ensure counters are 0 at start
2025-08-12 22:56:38 +02:00
Yves Rűtschlé
0a0392e7ee
refactor: separate pid processing from child signal processing
2025-08-12 10:17:03 +02:00
Yves Rűtschlé
3817f2d728
count listen endpoint connections for forked protocols
2025-08-11 12:13:09 +02:00
Yves Rűtschlé
860631f910
refactor: move out forking code
2025-08-11 09:37:57 +02:00
Yves Rűtschlé
51ba24c1b2
count protocol connections when forking, in sslh-select
2025-08-11 09:28:43 +02:00
Yves Rűtschlé
22987e7d94
add max_connections to protocol print settings
2025-08-11 09:04:29 +02:00
Yves Rűtschlé
02ea8e7ea4
add host and port to print settings when resolving on forward
2025-08-11 09:02:13 +02:00
Yves Rűtschlé
691aa936cc
add listen max_connections to print settings
2025-08-11 08:57:10 +02:00
Yves Rűtschlé
78a1ed6899
refactor: make hash dump usuable for debugging
2025-08-10 23:12:24 +02:00
Yves Rűtschlé
eac34ec36f
refactor: consolidate loop init between sslh-select and sslh-ev
2025-08-10 08:49:02 +02:00
yrutschle
8aa97d7118
Include OpenSUSE's security review
2025-08-06 09:55:19 +02:00
yrutschle
8ad8bfdb5d
fix link
2025-08-06 09:44:15 +02:00
yrutschle
4c2e4e01f2
document new settings in ChangeLog
2025-08-06 09:42:37 +02:00
yrutschle
2ecb681277
fix warning on void return
2025-08-06 09:38:52 +02:00
yrutschle
54dc8374ab
properly define function in header
2025-08-06 09:37:07 +02:00
yrutschle
8c4253f145
refactor: rename proto inc and dec functions for clarity
2025-08-06 09:36:39 +02:00
yrutschle
4483e9c7e5
support for max_connections on listen_endpoint for sslh-ev/sslh-select
2025-08-06 09:32:19 +02:00
yrutschle
65c9c4ce95
count protocol connections even if no maximum is set
2025-08-06 08:00:35 +02:00
yrutschle
5434dc59df
fix tags target for Debian's version of ctags
2025-08-05 18:21:48 +02:00
yrutschle
20290bbfa6
sslh-fork can now limit the number of concurrent connections for each incoming port
2025-08-05 18:15:58 +02:00
Yves Rutschle
1dfd70c20c
Merge branch 'master' of github.com:yrutschle/sslh
2025-07-24 19:49:01 +02:00
Yves Rutschle
feaf528a60
add setting for maximum connection per protocol
2025-07-24 19:48:50 +02:00
Sergei Zhmylev
11da63cf4e
Fix mistype in accept(2) error handling
...
Due to a mistype in errno checking, sslh-fork process died repeatedly
resulting to a complete denial of service on systems with no built-in
process supervisors, like FreeBSD.
Signed-off-by: Sergei Zhmylev <zhmylove@narod.ru >
2025-06-30 21:57:12 +02:00
Yves Rutschle
28ea73301e
new gap feature: hardlimit, with test suite
2025-06-22 16:45:50 +02:00
Adrian Bunk
cd9b85fd4f
Add a missing change in the second part of the CVE-2025-46806 fix
2025-06-19 22:34:30 +02:00
Yves Rutschle
bd9ed060e4
fix memory leak in regex probe ( fix #500 )
2025-06-19 22:31:02 +02:00
Yves Rutschle
071e7500a2
new test framework, with test classes for robustness and probe tests. Not all tests are ported yet.
2025-06-15 16:02:02 +02:00
Yves Rutschle
Sergei Zhmylev
Adrian Bunk