yrutschle
20290bbfa6
sslh-fork can now limit the number of concurrent connections for each incoming port
2025-08-05 18:15:58 +02:00
Yves Rutschle
1dfd70c20c
Merge branch 'master' of github.com:yrutschle/sslh
2025-07-24 19:49:01 +02:00
Yves Rutschle
feaf528a60
add setting for maximum connection per protocol
2025-07-24 19:48:50 +02:00
Sergei Zhmylev
11da63cf4e
Fix mistype in accept(2) error handling
...
Due to a mistype in errno checking, sslh-fork process died repeatedly
resulting to a complete denial of service on systems with no built-in
process supervisors, like FreeBSD.
Signed-off-by: Sergei Zhmylev <zhmylove@narod.ru >
2025-06-30 21:57:12 +02:00
Yves Rutschle
28ea73301e
new gap feature: hardlimit, with test suite
2025-06-22 16:45:50 +02:00
Adrian Bunk
cd9b85fd4f
Add a missing change in the second part of the CVE-2025-46806 fix
2025-06-19 22:34:30 +02:00
Yves Rutschle
bd9ed060e4
fix memory leak in regex probe ( fix #500 )
2025-06-19 22:31:02 +02:00
Yves Rutschle
b7556c07bd
added podman transparent setup ( fix #448 )
2025-05-29 16:07:57 +02:00
Yves Rutschle
6b9ec3a46e
remove obsolete getopt definitions ( fix #489 )
2025-05-29 15:46:08 +02:00
Yves Rutschle
ad66e79f46
Fix proxyprotocol target field ( #496 )
2025-05-29 15:23:10 +02:00
Yves Rutschle
b12220e640
v2.2.4 ChangeLog
2025-05-28 17:51:04 +02:00
Yves Rutschle
204305a88f
fix unaligned read in OpenVPN UDP probe
2025-05-25 11:27:26 +02:00
Yves Rutschle
0f96ed8adb
fix test script for new command line behaviour
2025-05-25 11:27:05 +02:00
Yves Rutschle
43e75a0a8c
upgrade API to Conf::Libconfig 1.0.3
2025-05-22 22:19:00 +02:00
Yves Rutschle
ad1f5d68e9
fix potential parsing of undefined data is syslog probe and make probe more robust
2025-05-09 17:08:30 +02:00
Yves Rutschle
ff8206f7c8
fix segmentation fault upon too many UDP connection. Also, accepts multiple connection in one cycle
2025-05-08 17:58:51 +02:00
Yves Rutschle
8298daf686
change magic numbers for constants
2025-05-06 22:12:29 +02:00
Yves Rutschle
168477ea34
Merge branch 'master' of github.com:yrutschle/sslh
2025-05-04 11:49:45 +02:00
Yves Rutschle
b5d4d4662b
v2.2.3 ChangeLog
2025-05-04 11:47:44 +02:00
Yves Rutschle
6e6d94752a
Revert "include version.h in repo"
...
This reverts commit acdbb79d43
2025-05-04 11:45:33 +02:00
Yves Rutschle
b2bcfc26b2
version.h
2025-05-04 11:33:58 +02:00
Yves Rutschle
8fb62445c4
v2.2.2 ChangeLog
2025-05-04 11:28:11 +02:00
Yves Rutschle
c0cc45975c
clean up inline define
2025-04-15 22:27:27 +02:00
npt-1707
0fe9bd5a95
common.c: Fix that symlink does not interferer
2025-04-15 22:20:26 +02:00
Yves Rutschle
fe25928e18
Merge branch 'master' of github.com:yrutschle/sslh
2025-04-08 21:41:23 +02:00
Sergey Fedorov
eccf7dbdc4
common.h: add a declaration of hosts_ctl for macOS
...
Fixes: https://github.com/yrutschle/sslh/issues/492
2025-04-08 21:40:58 +02:00
Yves Rutschle
e0bcf282ff
include config.h. unclear how this worked without that
2025-04-08 21:36:12 +02:00
Yves Rutschle
1f462ba166
update tag to v2.2.1
2025-04-06 11:59:51 +02:00
Yves Rutschle
0e7885bc9f
fix compilation when libproxyprotocol is not present
2025-04-06 11:59:08 +02:00
Yves Rutschle
5ad1ea1e25
complete changelog for v2.3.0
2025-04-06 11:46:19 +02:00
Yves Rutschle
4978641271
add reference to new proxyprotocol to README
2025-04-06 11:38:30 +02:00
Yves Rutschle
ef6f698d86
document proxyprotocol
2025-04-03 21:30:34 +02:00
Yves Rutschle
416a82fcc6
code cleanup
2025-03-29 17:34:25 +01:00
Yves Rutschle
2f111b6b8d
add missing proxyprotocol.o
2025-03-09 17:56:49 +00:00
Yves Rutschle
24c3bb07a0
add support for proxyprotocol v1 on backend server side
2025-03-09 18:49:17 +01:00
Yves Rutschle
951b708f61
clarify UDP will not be supported in sslh-fork in the future
2025-03-09 09:44:15 +01:00
Yves Rutschle
5a0897c5cb
refactor: connect_addr() update the *cnx object upon connecting to backend server, instead of each caller doing it
2025-03-09 09:43:41 +01:00
Yves Rutschle
7a6673a877
merged proxyprotocol linking
2025-02-21 21:03:59 +01:00
yrutschle
3ebdca5e96
document move of libraries to autoconf detection
2025-02-19 09:28:49 +01:00
yrutschle
22a8ba9ef5
move libbsd support to autoconf detection
2025-02-19 09:25:59 +01:00
yrutschle
dcfa3fa2db
move libcap support to autoconf detection
2025-02-19 09:01:01 +01:00
yrutschle
fabf0a121c
actually include config.h
2025-02-19 08:59:17 +01:00
yrutschle
3a1c31d8cb
move tcp wrapper support to autoconf detection
2025-02-18 10:09:12 +01:00
Yves Rutschle
e527b8e588
libproxyprotocol: add test and options to link the library if present
2025-02-01 10:12:04 +01:00
Yves Rutschle
a2b4da8483
fix #486 : do not return prematurely when accept fails
2025-02-01 09:21:19 +01:00
Yves Rutschle
710807fd3b
Fix possible file descriptor leak ( fix #485 )
2025-01-05 18:37:12 +01:00
Yves Rutschle
2e9f23a2f4
remove unix socket before binding
2024-12-23 17:25:40 +01:00
Yves Rutschle
bf082292c2
new is_unix field to create listen unix sockets
2024-12-22 23:54:14 +01:00
Yves Rutschle
59d89e34f0
refactor: move inet code to its own function
2024-12-22 21:58:51 +01:00
Yves Rutschle
cac7f48fa7
new is_unix field to connect to unix socket target servers
2024-12-22 16:17:47 +01:00
yrutschle
Sergei Zhmylev
Adrian Bunk
npt-1707
Sergey Fedorov