Commit Graph

  • f94fa61e36 Make native DNS cache freshness explicit (#227) cfal 2026-10-26 15:44:47 +08:00
  • b821c56f86 Add opt-in connection notes (#226) cfal 2026-10-26 13:12:15 +08:00
  • 51fbd24ceb Improve strict configuration diagnostics (#225) cfal 2026-10-26 00:20:55 -04:00
  • ecf0490606 docs(dns): describe shared native lookup policy fix/native-dns-cache-freshness cfal 2026-10-26 06:43:30 +00:00
  • 87260944d7 docs(dns): clarify native cache option validation cfal 2026-10-26 05:48:50 +00:00
  • 969932d0f0 docs(dns): explain native cache freshness and overrides cfal 2026-10-26 02:47:43 +00:00
  • 6e024f15c6 fix(dns): make native cache freshness explicit cfal 2026-10-26 02:47:29 +00:00
  • 9ead54448b refactor(tests): consolidate bounded rule source setup cfal 2026-10-26 05:49:46 +00:00
  • 011ce6a72b refactor(coverage): simplify line parsing and classification cfal 2026-10-26 05:49:38 +00:00
  • f7d34c8fd1 refactor(bench): clarify advisory validation and collection cfal 2026-10-26 05:49:32 +00:00
  • 0b07261ba0 Add opt-in connection notes (#226) cfal 2026-10-26 13:12:15 +08:00
  • 596eacf48b Improve strict configuration diagnostics (#225) cfal 2026-10-26 00:20:55 -04:00
  • 4ab9e8714c Add bounded background file logging (#224) cfal 2026-10-25 23:26:11 -04:00
  • 266bb5ead2 Simplify connection note formatting and ownership connection-notes cfal 2026-10-26 03:03:54 +00:00
  • dcac3cd4bc test(logging): match writer helper cfg to FFI test callers bounded-logging cfal 2026-10-26 02:35:50 +00:00
  • 85192f4883 test(ffi): verify stop flushing and reject empty subprocess runs cfal 2026-10-26 02:35:48 +00:00
  • fa850f78a6 fix(logging): preserve flush barriers and reduce lock contention cfal 2026-10-25 15:48:06 +00:00
  • 518f777101 test(logging): verify CLI file sinks and shutdown flushing cfal 2026-10-25 13:39:22 +00:00
  • a712bf5588 feat(logging): bound file logging with dedicated writer workers cfal 2026-10-25 13:39:16 +00:00
  • c112f00ea9 Fix fixture startup flakes and DNS connection-close failover (#222) cfal 2026-10-25 11:13:14 -04:00
  • b0e7f5e108 Add opt-in ordered healthy fallback groups cfal 2026-10-25 13:43:48 +00:00
  • f92a1ef25d Clarify fixture reservations and pin simplified Hickory fix fix/post-merge-ci cfal 2026-10-25 13:58:26 +00:00
  • 2f3c89ceba ci: integrate verification workflows and record validation cfal 2026-10-25 13:23:35 +00:00
  • 61c7486ab9 test(coverage): collect Linux unit and subprocess evidence cfal 2026-10-25 13:23:15 +00:00
  • 8e318cd25d test(rules): add bounded deterministic property corpus cfal 2026-10-25 13:23:01 +00:00
  • 4e638157e2 feat(bench): add reproducible advisory performance reports cfal 2026-10-25 13:22:44 +00:00
  • 2d398f7c09 Pin Hickory closed-transport failover fix cfal 2026-10-25 13:34:31 +00:00
  • d3a443117c Merge master and retain reload fixture port reservations cfal 2026-10-25 12:10:02 +00:00
  • 5091f4ebcd Trace Cloudflare H3 cancellation on CI runners cfal 2026-10-25 11:59:18 +00:00
  • 5fdbe696c5 Make reload rollback safe and release TCP setup state (#219) cfal 2026-10-25 07:50:31 -04:00
  • f6029fb928 Remove temporary watcher investigation diagnostics cfal 2026-10-25 08:58:11 +00:00
  • b6ca37b433 Settle native watcher setup events before testing activation cfal 2026-10-25 08:39:12 +00:00
  • 60b56789d4 Close remaining fixture port reuse windows cfal 2026-10-25 08:39:11 +00:00
  • 3a63bf9879 Repeat macOS watcher isolation to capture intermittent events cfal 2026-10-25 08:11:38 +00:00
  • cb446bde6e Reserve paired process-contract listeners through startup cfal 2026-10-25 08:11:31 +00:00
  • 5d50145661 Add bounded opt-in connection notes cfal 2026-10-25 08:03:31 +00:00
  • 2d8f3065a6 Trace filesystem notifications in macOS watcher tests cfal 2026-10-25 07:49:09 +00:00
  • 680fc35f05 Reserve Clash fixture listener ports until startup cfal 2026-10-25 07:49:08 +00:00
  • cc0480b7c6 Merge branch 'master' into fix/post-merge-ci cfal 2026-10-25 02:07:22 -04:00
  • 71d7831072 Exercise retained TCP sockets in lifecycle retention regression lifecycle/reload cfal 2026-10-25 06:06:43 +00:00
  • 21a61d3b98 Document reload rollback and listener retention cfal 2026-10-25 05:44:56 +00:00
  • 5af8e4140c Order WireGuard peer startup to avoid readiness port collisions cfal 2026-10-25 06:00:36 +00:00
  • d4dbf8aaf1 Defer overlapping TCP listeners until retirement cfal 2026-10-25 05:44:55 +00:00
  • fe0efc2475 Preserve inherited TUN descriptors across rejected reloads cfal 2026-10-25 05:44:51 +00:00
  • e65fd07bba Reject duplicate fixed TCP addresses during direct startup cfal 2026-10-25 02:35:26 +00:00
  • 08b504050f Simplify reload activation and listener lifecycle code cfal 2026-10-25 02:35:22 +00:00
  • 4136a132a3 Restore failed reloads and retain unchanged TCP listener sockets cfal 2026-10-24 23:54:41 +00:00
  • 4ece01b534 Reserve XHTTP fixture ports until startup cfal 2026-10-25 06:00:30 +00:00
  • 4ab69508e0 Release setup-only routing owners before TCP relay cfal 2026-10-24 23:54:35 +00:00
  • b0b30617a2 Add automatic URL-test upstream groups (#221) cfal 2026-10-24 23:52:28 -04:00
  • 3f17e231a1 test(probes): name wrapped error factory type urltest cfal 2026-10-25 03:28:20 +00:00
  • c23593bafc Merge branch 'master' into urltest cfal 2026-10-24 23:18:41 -04:00
  • d56fdd9a1e refactor(url-test): simplify probe and routing bookkeeping cfal 2026-10-25 02:54:48 +00:00
  • 1e02a9887b Add retention and reload lifetime regressions (#218) cfal 2026-10-24 22:53:56 -04:00
  • 400ed75e14 fix(http2): preserve transport causes through client adapters cfal 2026-10-25 01:46:02 +00:00
  • 3779328e7f test: harden reload fixture cleanup and descriptor coverage regression-lifetimes cfal 2026-10-25 01:19:44 +00:00
  • 41ecbe1e3b test(probes): reproduce H2 local error provenance loss cfal 2026-10-25 00:55:38 +00:00
  • cf725cac94 fix(groups): preserve deep UDP eligibility in controller views cfal 2026-10-25 00:55:36 +00:00
  • a40aae55cc Improve native DNS caching and coalesce concurrent lookups (#220) cfal 2026-10-24 20:44:33 -04:00
  • edacb21342 fix(probes): protect configured attempts and unwrap local errors cfal 2026-10-25 00:22:17 +00:00
  • a9b55c0fc4 Clarify native DNS defaults and cancellation tradeoffs native-dns cfal 2026-10-25 00:20:25 +00:00
  • 8f4d4f43dd Harden native DNS coalescing wakeups and cancellation tests cfal 2026-10-25 00:20:20 +00:00
  • 0234d580fd test: clarify lifetime fixtures and handshake stages cfal 2026-10-25 00:11:00 +00:00
  • 95703ac3e5 test: normalize deterministic matcher seed grouping cfal 2026-10-24 23:53:01 +00:00
  • f183447b7e fix(groups): record carrier demand before pooled reuse cfal 2026-10-24 23:51:07 +00:00
  • 6e69c92a47 fix(probes): isolate filtered attempt eviction cfal 2026-10-24 23:51:06 +00:00
  • 93c25d7b11 bench: bound reload probes and preserve byte-exact provenance cfal 2026-10-24 23:50:33 +00:00
  • c56f6057f9 test: tighten retention and matcher regression assertions cfal 2026-10-24 23:50:32 +00:00
  • 040d53f010 fix(xhttp): preserve background activity context in workers cfal 2026-10-24 23:20:39 +00:00
  • 6ad606ed04 fix(probes): isolate filtered checks and local expansion failures cfal 2026-10-24 23:20:38 +00:00
  • a95dbc16db docs(groups): clarify probe scheduling and carrier activity cfal 2026-10-24 22:52:08 +00:00
  • b281e7c10b fix(wireguard): separate lazy-group demand from carrier maintenance cfal 2026-10-24 22:52:07 +00:00
  • d0126f76c7 fix(probes): schedule full-budget attempts independently of health cfal 2026-10-24 22:52:06 +00:00
  • 76a0b43b4f docs(groups): announce type migration and probe policy validation cfal 2026-10-24 22:22:36 +00:00
  • 7ddd63aa3e fix(groups): preserve probe health across DNS and queued rounds cfal 2026-10-24 22:22:35 +00:00
  • b7b768e564 fix(groups): make automatic probes fair and cancellation-safe cfal 2026-10-24 21:52:10 +00:00
  • 3d635c5308 fix(resources): preserve local admission errors through DNS cfal 2026-10-24 21:52:09 +00:00
  • 23290f40c1 docs(groups): document group types and automatic selection cfal 2026-10-24 20:28:31 +00:00
  • 4bca4e29be feat(groups): add supervised URL-test upstream selection cfal 2026-10-24 20:28:26 +00:00
  • 8fe87d91fc bench: verify committed reload datapaths and descriptor cleanup cfal 2026-10-24 20:21:32 +00:00
  • a343c7361f test: cover retained owners and repeated resource lifetimes cfal 2026-10-24 20:21:27 +00:00
  • 2191cba13b test: share allocation and lifecycle measurement helpers cfal 2026-10-24 20:21:21 +00:00
  • dd5dea8120 Document native DNS cache age and coalescing limits cfal 2026-10-24 13:13:25 +00:00
  • 9db510ebd0 Improve native DNS cache reuse and coalesce concurrent misses cfal 2026-10-24 13:13:20 +00:00
  • f6abcd8245 Add ACME certificates and live TLS/QUIC rotation (#217) cfal 2026-10-24 06:17:31 -04:00
  • 40a3438259 Anchor ARI deadline assertions to the worker turn start feature/acme-certificates cfal 2026-10-24 09:54:26 +00:00
  • 55a5b40e6b Allow reload debounce in TCP lifecycle integration test cfal 2026-10-24 09:46:33 +00:00
  • 28c8b0d3be Persist ACME authorization and challenge retry hints cfal 2026-10-24 08:33:56 +00:00
  • 1063bfdc79 Release HTTP-01 listener sockets synchronously on shutdown cfal 2026-10-24 08:33:47 +00:00
  • 2c1069b033 Harden certificate input validation and document compatibility cfal 2026-10-24 08:33:38 +00:00
  • 28394d0186 Simplify certificate validation, PEM traversal, and ACME helpers cfal 2026-10-24 05:16:53 +00:00
  • 8f5586acb1 Preserve certificate reload recovery and challenge port handoffs cfal 2026-10-24 03:45:04 +00:00
  • 8a833d5353 Align certificate validation with TLS provider and improve diagnostics cfal 2026-10-24 03:45:03 +00:00
  • 8913e27398 Centralize ACME scheduling and durable retry handling cfal 2026-10-24 03:44:38 +00:00
  • a3f47ad3e9 Preserve TLS passthrough routing for ACME ALPN offers cfal 2026-10-24 03:41:28 +00:00
  • f556ea5305 Increase configuration reload debounce to five seconds cfal 2026-10-23 22:11:43 +00:00
  • 5f2b0d9247 Watch certificate files and debounce configuration reloads cfal 2026-10-23 08:34:31 +00:00
  • 6aa894da9f Document certificate sources and ACME deployment cfal 2026-10-23 05:57:37 +00:00
  • 3f8fdf2e05 Add shared certificate sources with live rotation and ACME cfal 2026-10-23 05:57:31 +00:00
  • fb1fa5b8bb Upgrade Tokio to fix Interval timer race (#216) v0.3.4 release-0.3.4 cfal 2026-10-24 04:33:18 -04:00