Commit Graph

  • 1ca8749062 hysteria2: bound H3 authentication input through the hardened fork cfal 2026-10-31 07:56:57 +00:00
  • 9de6c9dc8c quic: preserve TUIC commands across cancellation and simplify lifecycle state cfal 2026-10-31 07:56:56 +00:00
  • 40c12acaa5 quic: preserve hostname verification with SNI disabled cfal 2026-10-31 01:35:54 +00:00
  • 340836710f quic: harden client retirement and stream credit cfal 2026-10-31 01:22:57 +00:00
  • 3b35fd9ab0 tuic: release pre-auth stream credit before awaiting AUTH cfal 2026-10-31 01:22:56 +00:00
  • b320db1603 quic: verify client lifecycle and interoperability cfal 2026-10-31 00:59:29 +00:00
  • 0f05a7488b hysteria2: add connection-owned port hopping cfal 2026-10-31 00:50:06 +00:00
  • d865d28323 hysteria2: support Salamander transport obfuscation cfal 2026-10-31 00:46:39 +00:00
  • 5afbeb063a tuic: add carrier-backed v5 TCP and UDP clients cfal 2026-10-31 00:43:45 +00:00
  • 265a1db412 tuic: preserve commands received before authentication cfal 2026-10-31 00:43:40 +00:00
  • 6c8fb58478 hysteria2: add carrier-backed TCP and UDP client cfal 2026-10-31 00:34:06 +00:00
  • 1fac4c231c Add Xray-compatible Sudoku TCP masking (#246) cfal 2026-10-30 22:58:56 +08:00
  • c0d9baaad5 Deduplicate Sudoku tests sudoku-finalmask cfal 2026-10-30 13:51:21 +00:00
  • 4d4dd8776d Simplify Sudoku configuration traversal cfal 2026-10-30 13:51:13 +00:00
  • c101c11017 Make Sudoku benchmarks reproducible and cover custom layouts cfal 2026-10-30 12:48:56 +00:00
  • cd79e3d26d Align Sudoku read/write ownership with TLS cfal 2026-10-30 09:48:42 +00:00
  • b6534d8293 Batch Sudoku codecs while preserving stream semantics cfal 2026-10-30 08:37:26 +00:00
  • 469f9e518f Update Xray interoperability peers to v26.10.29 cfal 2026-10-30 06:40:59 +00:00
  • 33f88432c0 Simplify Sudoku carrier wrapping and interoperability cases cfal 2026-10-30 03:56:40 +00:00
  • 46ca1246d9 Restrict Sudoku masks to outer protocol layers cfal 2026-10-30 02:52:44 +00:00
  • 2f22647038 Simplify Sudoku mask integration and strengthen control regression tests cfal 2026-10-29 23:39:43 +00:00
  • 1816f06ad8 Verify and document Sudoku TCP interoperability cfal 2026-10-29 16:52:00 +00:00
  • 218970478e Integrate composable Sudoku masks into TCP handlers and XHTTP cfal 2026-10-29 16:49:37 +00:00
  • 3cc1762707 Preserve split-task readiness while draining Sudoku writes cfal 2026-10-29 16:31:21 +00:00
  • 257b6bbff3 Implement and cross-check the Sudoku TCP codec cfal 2026-10-29 15:06:45 +00:00
  • 829625ad2c Simplify TLS read/write ownership (#245) cfal 2026-10-30 16:19:52 +08:00
  • 10cc77ac3e Keep TLS reads independent of writes refactor/tls-read-write-ownership cfal 2026-10-30 07:27:13 +00:00
  • 00137ee86f Make TLS protocol handoff flushes explicit cfal 2026-10-30 07:26:57 +00:00
  • 7460f5d046 Add managed Linux desktop TUN capture (#241) cfal 2026-10-30 15:07:46 +08:00
  • ae92c66b77 Merge branch 'master' into feat/managed-desktop-tun feat/managed-desktop-tun cfal 2026-10-30 14:39:04 +08:00
  • 3fbc1602dd Refresh managed capture dependency notices cfal 2026-10-30 05:21:16 +00:00
  • 0e6f4be139 Deduplicate managed capture test fixtures cfal 2026-10-30 05:02:28 +00:00
  • 087674016f Simplify managed socket policy ownership cfal 2026-10-30 05:02:24 +00:00
  • 09f09bf611 Fix lost TLS writer wakeups (#244) cfal 2026-10-30 11:55:41 +08:00
  • a9c1e03091 Simplify TLS readiness regression tests fix/tls-split-readiness cfal 2026-10-30 03:11:05 +00:00
  • c9d4250289 Test managed DNS egress and retained-ingress rollback cfal 2026-10-30 02:54:48 +00:00
  • 6a0447e68a Fix split-task readiness during TLS read-driven flushes cfal 2026-10-30 00:00:45 +00:00
  • 24008e986f Reject empty child runs in managed TUN tests cfal 2026-10-29 23:38:50 +00:00
  • 8258a4b25f Centralize managed TUN and REDIRECT ingress startup cfal 2026-10-29 17:43:47 +00:00
  • 09d4588c6f Reject hostname listeners during managed TUN validation cfal 2026-10-29 15:12:25 +00:00
  • ddf05483c6 Fix managed TUN capture and recursive egress guards cfal 2026-10-29 15:12:20 +00:00
  • c916ccd114 Simplify managed TUN validation and helper plumbing cfal 2026-10-29 10:45:46 +00:00
  • 56e17b03b1 Simplify managed TUN firewall ownership and recovery cfal 2026-10-29 10:16:48 +00:00
  • 4fcbd7c776 Fix resolver refresh after DNS transport failures (#242) cfal 2026-10-29 15:20:08 +08:00
  • 606a94dbce Simplify DNS refresh regression test wireguard-throughput cfal 2026-10-29 06:46:34 +00:00
  • 246b74cd55 Make managed TUN DNS integration best-effort cfal 2026-10-29 06:19:25 +00:00
  • 1095964f08 Fix resolver refresh after DNS transport failures cfal 2026-10-29 06:18:32 +00:00
  • 3d556988d5 Guard resolved namespace access with best-effort DNS setup cfal 2026-10-28 16:24:45 +00:00
  • 9b3eb7b27e Preserve confirmed native UDP and untracked traffic cfal 2026-10-28 16:24:37 +00:00
  • 637bc3ad89 Share TCP admission across managed TUN ingress paths cfal 2026-10-28 16:24:22 +00:00
  • 60357d1a6a Keep startup configuration reads interruptible and watched cfal 2026-10-28 16:24:10 +00:00
  • e4db054f9f Use 8 MiB UDP buffers across QUIC endpoints (#240) cfal 2026-10-28 23:25:51 +08:00
  • d236f0ae6c Share systemd-resolved Manager call construction cfal 2026-10-28 14:40:03 +00:00
  • 9388b1f003 Simplify nft REDIRECT family selection cfal 2026-10-28 14:40:02 +00:00
  • 32e845b4e0 Refactor managed TUN routing cleanup and ownership helpers cfal 2026-10-28 14:40:01 +00:00
  • 0fbf00f227 docs: explain QUIC socket buffer tuning fix/quic-socket-buffer-defaults cfal 2026-10-28 14:35:46 +00:00
  • 6ff88b7b04 quic: request 8 MiB socket buffers across endpoints cfal 2026-10-28 14:35:45 +00:00
  • 63bc31c383 net: centralize best-effort UDP buffer tuning cfal 2026-10-28 14:35:44 +00:00
  • 9e36b8f8dc Harden managed TUN routing and firewall ownership cfal 2026-10-28 13:38:30 +00:00
  • 6d5c97d583 Batch systemd-resolved property reads cfal 2026-10-28 13:38:02 +00:00
  • 99e179c637 Skip outbound setup when TCP REDIRECT is disabled cfal 2026-10-28 13:38:01 +00:00
  • a7920bb136 Reject synthetic addresses in managed DNS bootstrap endpoints cfal 2026-10-28 13:38:00 +00:00
  • ca85eb37ea Keep configuration checks read-only and interruptible cfal 2026-10-28 13:37:51 +00:00
  • f5f2ab7d70 Simplify managed desktop networking without changing behavior cfal 2026-10-28 08:04:05 +00:00
  • 5b3e02877c Package managed desktop capture and run namespace tests in CI cfal 2026-10-28 07:34:09 +00:00
  • 918d7093ca Manage Linux desktop capture as a process-owned network session cfal 2026-10-28 07:33:49 +00:00
  • 98cad97257 Protect process sockets and route native DNS through controlled bootstrap cfal 2026-10-28 05:20:26 +00:00
  • e6bed281e4 Separate DNS interception from fake-IP synthesis cfal 2026-10-28 04:58:52 +00:00
  • c3453ef1ab Add ARMv7 release builds and verified artifact packaging (#239) cfal 2026-10-28 12:29:58 +08:00
  • bdbc6f41bc docs: describe ARMv7 releases and artifact verification release-pipeline-armv7 cfal 2026-10-28 03:34:33 +00:00
  • 8021ae8744 ci: build and verify ARMv7 release archives cfal 2026-10-28 03:34:33 +00:00
  • fa74b771a2 test: add packaged release binary smoke checks cfal 2026-10-28 03:34:32 +00:00
  • ba7e54744b build: pin cross images and support ARMv7 musl linking cfal 2026-10-28 03:34:31 +00:00
  • 201ba24ca8 Refresh smoltcp fork to current upstream (#238) cfal 2026-10-28 10:12:44 +08:00
  • 80384e0b23 Refresh smoltcp fork to current upstream chore/smoltcp-refresh-20261028-GsfiI8 cfal 2026-10-28 00:40:55 +00:00
  • 3737e07467 Prepare v0.3.6 release v0.3.6 release-0.3.6 cfal 2026-10-27 03:18:26 +00:00
  • 33bbea93e4 Refresh dependencies and build tooling (#235) cfal 2026-10-27 10:43:07 +08:00
  • 345a5918b3 Require Rust 1.99.1 and align minimum-toolchain CI chore/dependencies-20261027-1793059200041000 cfal 2026-10-27 02:06:09 +00:00
  • 34af205502 Clarify watcher failure classification and release notes cfal 2026-10-27 01:25:20 +00:00
  • f9f7762198 Refresh dependencies and build tooling without changing platform floors cfal 2026-10-27 01:04:12 +00:00
  • c05f92d65b Fix REALITY handshakes with minimal EncryptedExtensions (#236) cfal 2026-10-27 09:42:50 +08:00
  • 82b3440fd0 Merge master and retain REALITY fix under Unreleased fix/reality-minimal-encrypted-extensions cfal 2026-10-27 01:06:30 +00:00
  • 7f346d8861 Fix REALITY handshakes with minimal EncryptedExtensions records cfal 2026-10-27 01:04:47 +00:00
  • 739e2ea91e Extract large unit-test suites into adjacent modules (#234) cfal 2026-10-26 22:27:54 +08:00
  • e848f0f05b Merge branch 'master' into refactor/adjacent-unit-tests refactor/adjacent-unit-tests cfal 2026-10-26 21:54:06 +08:00
  • 881b0472ab Prepare version 0.3.5 v0.3.5 release-0.3.5 cfal 2026-10-26 13:45:46 +00:00
  • 457f8e444b test(config): clarify group and DNS fixture setup cfal 2026-10-26 13:12:45 +00:00
  • 510e88e73e test: simplify proxy-chain and selector fixtures cfal 2026-10-26 13:12:36 +00:00
  • 17a3882723 test(protocols): extract large framing and session suites cfal 2026-10-26 05:39:16 +00:00
  • e3e68d4bc8 test(runtime): extract large lifecycle and I/O suites cfal 2026-10-26 05:39:15 +00:00
  • af002af35d test(routing): extract large DNS and routing suites cfal 2026-10-26 05:39:14 +00:00
  • ee8273ce93 test(config): extract large validation and schema suites cfal 2026-10-26 05:39:13 +00:00
  • 2401917d0e Add ordered health-checked fallback groups (#232) cfal 2026-10-26 19:26:28 +08:00
  • 4f1bc64073 Merge branch 'master' into recommendations/20261025-health recommendations/20261025-health cfal 2026-10-26 18:48:27 +08:00
  • 8f52f98103 Support SS2022 client identity key chains (#233) cfal 2026-10-26 18:39:44 +08:00
  • e5f4272072 Merge branch 'master' into recommendations/20261025-health cfal 2026-10-26 18:08:04 +08:00
  • 39b399cf9a Simplify SS2022 identity parsing and fixtures feat/ss2022-client-identities cfal 2026-10-26 09:15:15 +00:00
  • 234bf160c1 Document SS2022 client identity configuration cfal 2026-10-26 08:25:29 +00:00
  • b7f69d37a6 Test SS2022 identities against pinned reference peers cfal 2026-10-26 08:25:19 +00:00
  • bef61b2cfb Support SS2022 client identity key chains cfal 2026-10-26 08:24:32 +00:00