 Yves Rutschle
|
17a0425f4f
|
incoming TLS connections get routed to GetEchClientHelloInner
|
2026-08-20 07:56:34 +00:00 |
|
|
Yves Rutschle
|
34645a62b2
|
ECH configs are build with sslh public name, not the target SNI...
|
2026-07-18 18:01:11 +00:00 |
|
|
Yves Rutschle
|
6d50082993
|
ECH configuration generation for each SNI, with DNS configuration printed in logs
|
2026-07-18 16:13:06 +00:00 |
|
|
Yves Rutschle
|
6219527ce4
|
remove warning if MAX is defined somewhere else
|
2026-06-20 16:31:59 +00:00 |
|
|
Yves Rutschle
|
0dd580f45b
|
move symbol definition for Cygwin (fix #506)
|
2025-09-24 14:48:16 +02:00 |
|
|
Yves Rutschle
|
63e15bb55c
|
Prepare for 2.3.0
|
2025-09-10 15:50:52 +02:00 |
|
|
Yves Rutschle
|
6f3dcfb365
|
Merge branch 'proxyprotocol'
|
2025-09-10 15:31:43 +02:00 |
|
|
Yves Rutschle
|
f8e031ecb9
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-09-10 15:29:59 +02:00 |
|
|
Yves Rutschle
|
fcfc348aee
|
added proxyprotocol documentation
|
2025-09-10 15:29:04 +02:00 |
|
|
Yves Rutschle
|
6905498d60
|
proxyprotocol on client-side can be removed on server side, and its info is then logged
|
2025-09-10 12:14:41 +02:00 |
|
|
Yves Rűtschlé
|
eea50a97fc
|
support for proxy_protocol on incoming (client-side) link
|
2025-09-10 09:28:54 +02:00 |
|
|
Yves Rutschle
|
387ef13f52
|
fix memory leak when server-side is not yet attached, and potential memory leak when forking hash is full (fix #504)
|
2025-09-04 23:50:17 +02:00 |
|
|
Yves Rűtschlé
|
dcb2cc928a
|
import main branch for endpoint tracking
|
2025-08-29 20:44:15 +02:00 |
|
|
Yves Rűtschlé
|
2106bd6527
|
added test for client-side proxyprotocol
|
2025-08-29 20:39:42 +02:00 |
|
|
Yves Rűtschlé
|
12f748fe8e
|
include test for server-side proxyprotocol
|
2025-08-29 12:22:30 +02:00 |
|
|
yrutschle
|
b6c8e116af
|
verify there is space in pid followup table before forking (fix #502)
|
2025-08-27 22:57:04 +02:00 |
|
|
yrutschle
|
4427a9570f
|
remove noisy logging from harmless interrupted system calls
|
2025-08-27 22:21:51 +02:00 |
|
|
yrutschle
|
3c237b3c9a
|
have some minimum hash size if no protocols have a max_connections setting
|
2025-08-26 23:22:17 +02:00 |
|
|
yrutschle
|
2914fe7b5c
|
fix embarassingly wrong error check
|
2025-08-26 22:23:30 +02:00 |
|
|
yrutschle
|
829a7299e1
|
remove obsolete debug statement
|
2025-08-26 22:18:21 +02:00 |
|
|
yrutschle
|
f2e86a3df7
|
do not log if accept returns EAGAIN
|
2025-08-26 22:17:58 +02:00 |
|
|
yrutschle
|
f64f0c5ba5
|
some markdown formating fixes
|
2025-08-26 22:15:49 +02:00 |
|
|
Yves Rűtschlé
|
9e2e02d58e
|
print settings include proxyprotocol setting
|
2025-08-21 12:39:01 +02:00 |
|
|
yrutschle
|
00e8a3b084
|
some markdown formating fixes
|
2025-08-20 09:55:43 +02:00 |
|
|
Yves Rűtschlé
|
988f7135ef
|
add link to libev documentation
|
2025-08-17 10:47:19 +02:00 |
|
|
Yves Rűtschlé
|
0baf23df95
|
fix probing on partial reception
|
2025-08-17 10:31:18 +02:00 |
|
|
Yves Rűtschlé
|
81e2d0e2f4
|
check udp timeouts on all new connections including TCP
|
2025-08-15 19:54:51 +02:00 |
|
|
Yves Rűtschlé
|
b57b333a39
|
update documentation for accept() disabling
|
2025-08-15 18:49:56 +02:00 |
|
|
Yves Rűtschlé
|
effa0f2615
|
sslh-select now has backup strategy when ulimit -n (file descriptor) is reached
|
2025-08-15 18:32:14 +02:00 |
|
|
Yves Rűtschlé
|
8769d86c04
|
EWOULDBLOCK should not cause accept() disable
|
2025-08-15 18:29:05 +02:00 |
|
|
Yves Rűtschlé
|
663e41e98c
|
remove debug printf
|
2025-08-15 10:30:27 +02:00 |
|
|
Yves Rűtschlé
|
d97cda1fa5
|
sslh-ev now has backup strategy when ulimit -f (file descriptor) is reached
|
2025-08-15 10:11:20 +02:00 |
|
|
Yves Rűtschlé
|
c512fd5279
|
update doc for connections
|
2025-08-13 12:44:45 +02:00 |
|
|
Yves Rűtschlé
|
d4de0a8859
|
update doc for connections
|
2025-08-13 12:33:45 +02:00 |
|
|
Yves Rűtschlé
|
4f7ba84e9a
|
fix headers
|
2025-08-13 12:32:55 +02:00 |
|
|
Yves Rűtschlé
|
e1619707f6
|
check allocation success
|
2025-08-13 12:24:15 +02:00 |
|
|
Yves Rűtschlé
|
ad34bc5c5a
|
check allocation success
|
2025-08-12 23:14:42 +02:00 |
|
|
Yves Rűtschlé
|
2975ae88f2
|
cleanup debug code
|
2025-08-12 23:06:47 +02:00 |
|
|
Yves Rűtschlé
|
2624877232
|
sslh-ev: keep track of forked processes
|
2025-08-12 23:05:24 +02:00 |
|
|
Yves Rűtschlé
|
eb6a3c6724
|
zero out listen_endpoint data when allocating to ensure counters are 0 at start
|
2025-08-12 22:56:38 +02:00 |
|
|
Yves Rűtschlé
|
0a0392e7ee
|
refactor: separate pid processing from child signal processing
|
2025-08-12 10:17:03 +02:00 |
|
|
Yves Rűtschlé
|
3817f2d728
|
count listen endpoint connections for forked protocols
|
2025-08-11 12:13:09 +02:00 |
|
|
Yves Rűtschlé
|
860631f910
|
refactor: move out forking code
|
2025-08-11 09:37:57 +02:00 |
|
|
Yves Rűtschlé
|
51ba24c1b2
|
count protocol connections when forking, in sslh-select
|
2025-08-11 09:28:43 +02:00 |
|
|
Yves Rűtschlé
|
22987e7d94
|
add max_connections to protocol print settings
|
2025-08-11 09:04:29 +02:00 |
|
|
Yves Rűtschlé
|
02ea8e7ea4
|
add host and port to print settings when resolving on forward
|
2025-08-11 09:02:13 +02:00 |
|
|
Yves Rűtschlé
|
691aa936cc
|
add listen max_connections to print settings
|
2025-08-11 08:57:10 +02:00 |
|
|
Yves Rűtschlé
|
78a1ed6899
|
refactor: make hash dump usuable for debugging
|
2025-08-10 23:12:24 +02:00 |
|
|
Yves Rűtschlé
|
eac34ec36f
|
refactor: consolidate loop init between sslh-select and sslh-ev
|
2025-08-10 08:49:02 +02:00 |
|
|
yrutschle
|
8aa97d7118
|
Include OpenSUSE's security review
|
2025-08-06 09:55:19 +02:00 |
|
|
yrutschle
|
8ad8bfdb5d
|
fix link
|
2025-08-06 09:44:15 +02:00 |
|
|
yrutschle
|
4c2e4e01f2
|
document new settings in ChangeLog
|
2025-08-06 09:42:37 +02:00 |
|
|
yrutschle
|
2ecb681277
|
fix warning on void return
|
2025-08-06 09:38:52 +02:00 |
|
|
yrutschle
|
54dc8374ab
|
properly define function in header
|
2025-08-06 09:37:07 +02:00 |
|
|
yrutschle
|
8c4253f145
|
refactor: rename proto inc and dec functions for clarity
|
2025-08-06 09:36:39 +02:00 |
|
|
yrutschle
|
4483e9c7e5
|
support for max_connections on listen_endpoint for sslh-ev/sslh-select
|
2025-08-06 09:32:19 +02:00 |
|
|
yrutschle
|
65c9c4ce95
|
count protocol connections even if no maximum is set
|
2025-08-06 08:00:35 +02:00 |
|
|
yrutschle
|
5434dc59df
|
fix tags target for Debian's version of ctags
|
2025-08-05 18:21:48 +02:00 |
|
|
yrutschle
|
20290bbfa6
|
sslh-fork can now limit the number of concurrent connections for each incoming port
|
2025-08-05 18:15:58 +02:00 |
|
|
Yves Rutschle
|
1dfd70c20c
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-07-24 19:49:01 +02:00 |
|
|
Yves Rutschle
|
feaf528a60
|
add setting for maximum connection per protocol
|
2025-07-24 19:48:50 +02:00 |
|
|
Yves Rutschle
|
28ea73301e
|
new gap feature: hardlimit, with test suite
|
2025-06-22 16:45:50 +02:00 |
|
|
Yves Rutschle
|
bd9ed060e4
|
fix memory leak in regex probe (fix #500)
|
2025-06-19 22:31:02 +02:00 |
|
|
Yves Rutschle
|
071e7500a2
|
new test framework, with test classes for robustness and probe tests. Not all tests are ported yet.
|
2025-06-15 16:02:02 +02:00 |
|
|
Yves Rutschle
|
b7556c07bd
|
added podman transparent setup (fix #448)
|
2025-05-29 16:07:57 +02:00 |
|
|
Yves Rutschle
|
6b9ec3a46e
|
remove obsolete getopt definitions (fix #489)
|
2025-05-29 15:46:08 +02:00 |
|
|
Yves Rutschle
|
ad66e79f46
|
Fix proxyprotocol target field (#496)
|
2025-05-29 15:23:10 +02:00 |
|
|
Yves Rutschle
|
b12220e640
|
v2.2.4 ChangeLog
|
2025-05-28 17:51:04 +02:00 |
|
|
Yves Rutschle
|
204305a88f
|
fix unaligned read in OpenVPN UDP probe
|
2025-05-25 11:27:26 +02:00 |
|
|
Yves Rutschle
|
0f96ed8adb
|
fix test script for new command line behaviour
|
2025-05-25 11:27:05 +02:00 |
|
|
Yves Rutschle
|
43e75a0a8c
|
upgrade API to Conf::Libconfig 1.0.3
|
2025-05-22 22:19:00 +02:00 |
|
|
Yves Rutschle
|
ad1f5d68e9
|
fix potential parsing of undefined data is syslog probe and make probe more robust
|
2025-05-09 17:08:30 +02:00 |
|
|
Yves Rutschle
|
ff8206f7c8
|
fix segmentation fault upon too many UDP connection. Also, accepts multiple connection in one cycle
|
2025-05-08 17:58:51 +02:00 |
|
|
Yves Rutschle
|
8298daf686
|
change magic numbers for constants
|
2025-05-06 22:12:29 +02:00 |
|
|
Yves Rutschle
|
168477ea34
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-05-04 11:49:45 +02:00 |
|
|
Yves Rutschle
|
b5d4d4662b
|
v2.2.3 ChangeLog
|
2025-05-04 11:47:44 +02:00 |
|
|
Yves Rutschle
|
6e6d94752a
|
Revert "include version.h in repo"
This reverts commit acdbb79d43.
|
2025-05-04 11:45:33 +02:00 |
|
|
Yves Rutschle
|
b2bcfc26b2
|
version.h
|
2025-05-04 11:33:58 +02:00 |
|
|
Yves Rutschle
|
8fb62445c4
|
v2.2.2 ChangeLog
|
2025-05-04 11:28:11 +02:00 |
|
|
Yves Rutschle
|
c0cc45975c
|
clean up inline define
|
2025-04-15 22:27:27 +02:00 |
|
|
Yves Rutschle
|
9522799421
|
preliminary receive proxyprotocol support
|
2025-04-15 22:16:03 +02:00 |
|
|
Yves Rutschle
|
fe25928e18
|
Merge branch 'master' of github.com:yrutschle/sslh
|
2025-04-08 21:41:23 +02:00 |
|
|
Yves Rutschle
|
e0bcf282ff
|
include config.h. unclear how this worked without that
|
2025-04-08 21:36:12 +02:00 |
|
|
Yves Rutschle
|
1f462ba166
|
update tag to v2.2.1
|
2025-04-06 11:59:51 +02:00 |
|
|
Yves Rutschle
|
0e7885bc9f
|
fix compilation when libproxyprotocol is not present
|
2025-04-06 11:59:08 +02:00 |
|
|
Yves Rutschle
|
5ad1ea1e25
|
complete changelog for v2.3.0
|
2025-04-06 11:46:19 +02:00 |
|
|
Yves Rutschle
|
4978641271
|
add reference to new proxyprotocol to README
|
2025-04-06 11:38:30 +02:00 |
|
|
Yves Rutschle
|
ef6f698d86
|
document proxyprotocol
|
2025-04-03 21:30:34 +02:00 |
|
|
Yves Rutschle
|
416a82fcc6
|
code cleanup
|
2025-03-29 17:34:25 +01:00 |
|
|
Yves Rutschle
|
2f111b6b8d
|
add missing proxyprotocol.o
|
2025-03-09 17:56:49 +00:00 |
|
|
Yves Rutschle
|
24c3bb07a0
|
add support for proxyprotocol v1 on backend server side
|
2025-03-09 18:49:17 +01:00 |
|
|
Yves Rutschle
|
951b708f61
|
clarify UDP will not be supported in sslh-fork in the future
|
2025-03-09 09:44:15 +01:00 |
|
|
Yves Rutschle
|
5a0897c5cb
|
refactor: connect_addr() update the *cnx object upon connecting to backend server, instead of each caller doing it
|
2025-03-09 09:43:41 +01:00 |
|
|
Yves Rutschle
|
7a6673a877
|
merged proxyprotocol linking
|
2025-02-21 21:03:59 +01:00 |
|
|
yrutschle
|
3ebdca5e96
|
document move of libraries to autoconf detection
|
2025-02-19 09:28:49 +01:00 |
|
|
yrutschle
|
22a8ba9ef5
|
move libbsd support to autoconf detection
|
2025-02-19 09:25:59 +01:00 |
|
|
yrutschle
|
dcfa3fa2db
|
move libcap support to autoconf detection
|
2025-02-19 09:01:01 +01:00 |
|
|
yrutschle
|
fabf0a121c
|
actually include config.h
|
2025-02-19 08:59:17 +01:00 |
|
|
yrutschle
|
3a1c31d8cb
|
move tcp wrapper support to autoconf detection
|
2025-02-18 10:09:12 +01:00 |
|
|
Yves Rutschle
|
e527b8e588
|
libproxyprotocol: add test and options to link the library if present
|
2025-02-01 10:12:04 +01:00 |
|