Commit Graph

  • fe25928e18 Merge branch 'master' of github.com:yrutschle/sslh master Yves Rutschle 2025-04-08 21:41:23 +02:00
  • eccf7dbdc4 common.h: add a declaration of hosts_ctl for macOS Sergey Fedorov 2025-04-07 14:10:19 +08:00
  • e0bcf282ff include config.h. unclear how this worked without that Yves Rutschle 2025-04-08 21:36:12 +02:00
  • 25c475bff2 common.h: add a declaration of hosts_ctl for macOS Sergey Fedorov 2025-04-07 14:10:19 +08:00
  • 1f462ba166 update tag to v2.2.1 v2.2.1 Yves Rutschle 2025-04-06 11:59:51 +02:00
  • 0e7885bc9f fix compilation when libproxyprotocol is not present Yves Rutschle 2025-04-06 11:59:08 +02:00
  • 5ad1ea1e25 complete changelog for v2.3.0 v2.2.0 Yves Rutschle 2025-04-06 11:46:19 +02:00
  • 4978641271 add reference to new proxyprotocol to README proxyprotocol Yves Rutschle 2025-04-06 11:38:30 +02:00
  • ef6f698d86 document proxyprotocol Yves Rutschle 2025-04-03 21:30:34 +02:00
  • 416a82fcc6 code cleanup Yves Rutschle 2025-03-29 17:34:25 +01:00
  • 2f111b6b8d add missing proxyprotocol.o Yves Rutschle 2025-03-09 17:56:49 +00:00
  • 24c3bb07a0 add support for proxyprotocol v1 on backend server side Yves Rutschle 2025-03-09 18:49:17 +01:00
  • 951b708f61 clarify UDP will not be supported in sslh-fork in the future Yves Rutschle 2025-03-09 09:44:15 +01:00
  • 5a0897c5cb refactor: connect_addr() update the *cnx object upon connecting to backend server, instead of each caller doing it Yves Rutschle 2025-03-09 09:43:41 +01:00
  • 7a6673a877 merged proxyprotocol linking Yves Rutschle 2025-02-21 21:03:59 +01:00
  • 3ebdca5e96 document move of libraries to autoconf detection yrutschle 2025-02-19 09:28:49 +01:00
  • 22a8ba9ef5 move libbsd support to autoconf detection yrutschle 2025-02-19 09:25:59 +01:00
  • dcfa3fa2db move libcap support to autoconf detection yrutschle 2025-02-19 09:01:01 +01:00
  • fabf0a121c actually include config.h yrutschle 2025-02-19 08:59:17 +01:00
  • 3a1c31d8cb move tcp wrapper support to autoconf detection yrutschle 2025-02-18 10:09:12 +01:00
  • e527b8e588 libproxyprotocol: add test and options to link the library if present Yves Rutschle 2025-02-01 10:12:04 +01:00
  • a2b4da8483 fix #486: do not return prematurely when accept fails Yves Rutschle 2025-02-01 09:21:19 +01:00
  • 710807fd3b Fix possible file descriptor leak (fix #485) Yves Rutschle 2025-01-05 18:37:12 +01:00
  • c1c9af3ead fix possible file descriptor leak if fprintf() fails peter15914 2025-01-05 18:16:52 +05:00
  • 2e9f23a2f4 remove unix socket before binding Yves Rutschle 2024-12-23 17:25:40 +01:00
  • bf082292c2 new is_unix field to create listen unix sockets Yves Rutschle 2024-12-22 23:54:14 +01:00
  • 59d89e34f0 refactor: move inet code to its own function Yves Rutschle 2024-12-22 21:58:51 +01:00
  • cac7f48fa7 new is_unix field to connect to unix socket target servers Yves Rutschle 2024-12-22 16:17:47 +01:00
  • 9e6b4fae29 refactor: isolate inet connection Yves Rutschle 2024-12-22 00:06:54 +01:00
  • 16ef412663 use current tag when exporting an archive (fix #481) Yves Rutschle 2024-12-09 22:37:06 +01:00
  • 5f55f7d76a SOL_IP is Linux-specific, replace with portable IPPROTO_IP (fix #481) Yves Rutschle 2024-12-08 21:49:04 +01:00
  • 7058906144
    Merge 135358b063d9a792d9b8d2e856b4b6f317f8659f into 9243a6e36964ba7443f62be05abd19303109e95d Fabian Dellwing 2024-11-11 20:50:22 +01:00
  • 135358b063 Add configuration parameter that allows to skip discovering interfaces Fabian Dellwing 2024-11-11 20:43:16 +01:00
  • 9243a6e369 check asprintf return value (fix #471) Yves Rutschle 2024-09-08 23:11:50 +02:00
  • 686d1f7cb6 refactor close stdin,out,err to own function and clarify the comment Yves Rutschle 2024-09-08 17:12:49 +02:00
  • e7a9a37624 changed SSL to TLS in sslh.pod initial description ftasnetamot 2024-08-27 18:02:13 +02:00
  • 7d41760f9a spellcheck correction, man-page, modified debian-sys-v-startscript ftasnetamot 2024-08-26 19:53:21 +02:00
  • 4def95865c still testing, as on i watched reusing fd 0 ftasnetamot 2024-08-26 13:56:41 +02:00
  • 109052fdc7 Updated PR as discussion in issue 468 , currently ony for testing ftasnetamot 2024-08-26 13:27:51 +02:00
  • d6bb000115 close std-filehandles when daemonize ftasnetamot 2024-08-16 16:39:35 +02:00
  • ea57443a97 changed SSL to TLS in sslh.pod initial description ftasnetamot 2024-08-27 18:02:13 +02:00
  • 1e1d9fca8e spellcheck correction, man-page, modified debian-sys-v-startscript ftasnetamot 2024-08-26 19:53:21 +02:00
  • 8908dc47df still testing, as on i watched reusing fd 0 ftasnetamot 2024-08-26 13:56:41 +02:00
  • d4c4b0c161 Updated PR as discussion in issue 468 , currently ony for testing ftasnetamot 2024-08-26 13:27:51 +02:00
  • e5fb5a3e15 close std-filehandles when daemonize ftasnetamot 2024-08-16 16:39:35 +02:00
  • 18a9a882f5 Added some clarifications to scenario 3 added information about iproute 2 ftasnetamot 2024-08-05 21:29:37 +02:00
  • acdbb79d43 include version.h in repo ftasnetamot 2024-07-29 17:12:59 +02:00
  • 1fd072837b added forgotten link to cloudflare blog. Without this link, the wording maked no sense. ftasnetamot 2024-07-31 12:49:18 +02:00
  • a34f34917a Documentation, why Daisy-Chaining IP-Transparent applications will fail. Discuss this in some examples. ftasnetamot 2024-07-28 18:30:08 +02:00
  • d6041c93c4 added missing 3rd argument to CHECK_RES_RESULT ftasnetamot 2024-07-28 19:00:36 +02:00
  • 2e2701de55 Changed a CHECK_RES_DIE to CHECK_RES_RETURN, as the real problem will occur at connect! ftasnetamot 2024-07-28 18:39:21 +02:00
  • 70a9b97f81 optimized setsockopt() options for better cooperation between different transparent-ip applications. See: https://blog.cloudflare.com/how-to-stop-running-out-of-ephemeral-ports-and-start-to-love-long-lived-connections for an explanation for those changes. ftasnetamot 2024-07-27 22:08:42 +02:00
  • 72a4376248 Enhance documentation about compiling; make disabling landlock in Makefile possible, as single point of configuration ftasnetamot 2024-07-27 20:10:28 +02:00
  • 910f09e08b Added some clarifications to scenario 3 added information about iproute 2 ftasnetamot 2024-08-05 21:29:37 +02:00
  • fbbeb7072f Added some clarifications to the transparent proxy documentation. ftasnetamot 2024-08-05 21:07:45 +02:00
  • 6999a9db43 added forgotten link to cloudflare blog. Without this link, the wording maked no sense. ftasnetamot 2024-07-31 12:49:18 +02:00
  • 42abd602cf include version.h in repo ftasnetamot 2024-07-29 17:12:59 +02:00
  • e80c8e192c added missing 3rd argument to CHECK_RES_RESULT ftasnetamot 2024-07-28 19:00:36 +02:00
  • c0d49d4c36 Changed a CHECK_RES_DIE to CHECK_RES_RETURN, as the real problem will occur at connect! ftasnetamot 2024-07-28 18:39:21 +02:00
  • df48ce8a95 Documentation, why Daisy-Chaining IP-Transparent applications will fail. Discuss this in some examples. ftasnetamot 2024-07-28 18:30:08 +02:00
  • 7c28cee26b optimized setsockopt() options for better cooperation between different transparent-ip applications. See: https://blog.cloudflare.com/how-to-stop-running-out-of-ephemeral-ports-and-start-to-love-long-lived-connections for an explanation for those changes. ftasnetamot 2024-07-27 22:08:42 +02:00
  • 1c97dddc1d Enhance documentation about compiling; make disabling landlock in Makefile possible, as single point of configuration ftasnetamot 2024-07-27 20:10:28 +02:00
  • 316e9a1863 fix documentation on verboseness (#452) Yves Rutschle 2024-07-10 15:41:49 +02:00
  • c892fc4b34 add short for verbose; remove config debug printing Yves Rutschle 2024-07-10 15:37:34 +02:00
  • b619f5bf36 add a verbose option that overrides all others Yves Rutschle 2024-07-10 15:31:55 +02:00
  • 06b7d7ed14 add reference to libwrap in example configuration (fix #418) Yves Rutschle 2024-06-26 19:19:03 +02:00
  • a222ea2c99 update Changelog v2.1.4 v2.1.3 Yves Rutschle 2024-06-26 19:17:48 +02:00
  • eb84c6a55b add libwrap files to landlock read list (fix #450) yrutschle 2024-06-17 23:00:16 +02:00
  • 93ab4f1e3a refactor in smaller functions yrutschle 2024-06-17 22:54:52 +02:00
  • 5e252bb3f6 add links to ip-routing transparent proxying Yves Rutschle 2024-06-12 09:40:33 +02:00
  • d6265e2c50 Added svg file corrected link to the diagram in md file ftasnetamot 2024-06-09 21:33:47 +02:00
  • 39ba84d8c6 Added svg file corrected link to the diagram in md file ftasnetamot 2024-06-09 21:33:47 +02:00
  • e1229dca28 updated picture, as png export failed in workflow before :-( ftasnetamot 2024-06-07 11:28:19 +02:00
  • 06e697e029 removed the warning regards kernel forwarding, as this is also not necessary. Updated text and picture ftasnetamot 2024-06-07 11:23:14 +02:00
  • 0bb3286a7d corrected broken style of connection arrows in the diagram showing the scenarios ftasnetamot 2024-06-06 23:39:27 +02:00
  • 2fd9ea600a Added another file, discussing three possible setup scenarios, which should cover up all setups. ftasnetamot 2024-06-06 22:19:11 +02:00
  • 2406ee8cf5 updated picture, as png export failed in workflow before :-( ftasnetamot 2024-06-07 11:28:19 +02:00
  • d22d70f888 removed the warning regards kernel forwarding, as this is also not necessary. Updated text and picture ftasnetamot 2024-06-07 11:23:14 +02:00
  • 92a6e206a3 corrected broken style of connection arrows in the diagram showing the scenarios ftasnetamot 2024-06-06 23:39:27 +02:00
  • 6526285b14 Added another file, discussing three possible setup scenarios, which should cover up all setups. ftasnetamot 2024-06-06 22:19:11 +02:00
  • f4eea875e2 drastically reduced the configuration by putting all the magic into the interface-configuration ftasnetamot 2024-06-03 21:28:14 +02:00
  • e8934f7a81 some more scenarios, how the simple configuration can be used. ftasnetamot 2024-06-02 22:48:06 +02:00
  • 599a953936 drastically reduced the configuration by putting all the magic into the interface-configuration ftasnetamot 2024-06-03 21:28:14 +02:00
  • 15c857c8d7 some more scenarios, how the simple configuration can be used. ftasnetamot 2024-06-02 22:48:06 +02:00
  • 8271db2d9d Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing. Explain how all that works. ftasnetamot 2024-06-01 16:33:18 +02:00
  • 66b0c34c5c Add the description of a simple transparent proxy without the need of iptables/nftables and loopback routing. Explain how all that works. ftasnetamot 2024-06-01 16:33:18 +02:00
  • 995916c923 update history Yves Rutschle 2024-05-16 21:34:45 +02:00
  • 799d75413f echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'} Sergey Ponomarev 2024-05-19 13:57:21 +03:00
  • e8a686cea9 echosrv.c: fix format '%ld' expects argument of type 'long int', but argument 3 has type 'ssize_t' {aka 'int'} Sergey Ponomarev 2024-05-19 13:57:21 +03:00
  • e831b732db update history v2.1.2 Yves Rutschle 2024-05-16 21:34:45 +02:00
  • 8166be1a09 Fix inetd mode (fix #399) Yves Rutschle 2024-05-16 21:30:11 +02:00
  • 684374f353 avoid useless strcpy (fix #440) Yves Rutschle 2024-05-11 17:01:48 +02:00
  • 2234a9ab48 Fix allocation size for interface name to include null-byte kpcyrd 2024-05-06 23:20:54 +02:00
  • de7351fd84 Make basic.cfg more useful (fix #438) Yves Rutschle 2024-04-21 18:20:54 +02:00
  • d2ca706f86 document use of glob for SNI matching (fix #373) yrutschle 2024-04-13 23:38:32 +02:00
  • c859e341aa .gitignore generated files by ./configure Sergey Ponomarev 2024-04-11 00:35:50 +03:00
  • 717fe8fae5 INSTALL.md: reformat Sergey Ponomarev 2024-04-11 00:32:12 +03:00
  • 1ddf45bf52 tcp_protocol_list_init(): allocate once instead of realloc each time Sergey Ponomarev 2024-04-10 00:32:45 +03:00
  • ae7530e33f Fix Narrowing conversion from 'ssize_t' to signed type 'int' is implementation-defined Sergey Ponomarev 2024-04-10 00:17:15 +03:00
  • d0a016221c probe.c: Fix Function 'memcmp' is called without explicitly comparing result Sergey Ponomarev 2024-04-09 23:42:57 +03:00