Repository navigation

Merge latest slack master - #28

Merged

matt-defined merged 326 commits into

masterfrom

mrr/merge-slack-20260816

Aug 17, 2026

Merged

Merge latest slack master#28
matt-defined merged 326 commits into
masterfrom
mrr/merge-slack-20260816

This pull request is big! We're only showing the most recent 250 commits

Commits on Mar 6, 2025
- build with go1.23 (#1198)
  wadey
  authored
  32d3a6e
- Bump the golang-x-dependencies group across 1 directory with 5 updates (#1303)
  dependabot[bot]
  authored
  750e4a8
- bump go.mod to go1.23 (#1342)
  wadey
  authored
  9feda81
- Bump github.com/gaissmai/bart from 0.13.0 to 0.18.1 (#1341)
  
  dependabot[bot]
  and
  nbrownus
  authored
  8a090e5
- Bump the golang-x-dependencies group with 5 updates (#1339)
  dependabot[bot]
  authored
  13799f4
- Bump google.golang.org/protobuf (#1344)
  dependabot[bot]
  authored
  775c6bc
- smoke-test-extra: cleanup ncat references (#1343)
  wadey
  authored
  c46ef43
Commits on Mar 7, 2025
Commits on Mar 10, 2025
- smoke-tests: guess the lighthouse container IP better (#1347)
  wadey
  authored
  94e89a1
- Fix `testifylint` lint errors (#1321)
  jasikpark
  authored
  612637f
- Enable running testifylint in CI (#1350)
  jasikpark
  authored
  088af8e
Commits on Mar 12, 2025
- Fixed homebrew formula path (#1219)
  sashazykov
  authored
  2fb018c
- add so_mark sockopt support (#1331)
  jampe
  authored
  1d3c853
Commits on Mar 13, 2025
- Update example config to listen on `::` by default (#1351)
  jasikpark
  authored
  50473bd
Commits on Mar 14, 2025
- build with go1.24 (#1338)
  wadey
  authored
  3de36c9
Commits on Mar 24, 2025
- Implement ECMP for unsafe_routes (#1332)
  dioss-Machiel
  authored
  f86953c
Commits on Mar 25, 2025
- Add `certVersion` field to logs when logging the cert name in handshakes (#1359)
  jasikpark
  authored
  4444ed1
Commits on Mar 31, 2025
- Bump golang.org/x/net in the golang-x-dependencies group (#1370)
  dependabot[bot]
  authored
  75faa5f
- upgrade to yaml.v3 (#1148)
  wadey
  authored
  879852c
Commits on Apr 1, 2025
Commits on Apr 2, 2025
- move to golang.org/x/term (#1372)
  wadey
  authored
  f5d096d
Commits on Apr 3, 2025
- Update config.go (#1353)
  odaysec
  authored
  e83a1c6
Commits on Apr 7, 2025
- Rename pki.default_version to pki.initiating_version (#1381)
  johnmaguire
  authored
  d4a7df3
Commits on Apr 8, 2025
- Bump the golang-x-dependencies group with 4 updates (#1382)
  dependabot[bot]
  authored
  c7fb3ad
- Bump github.com/miekg/dns from 1.1.64 to 1.1.65 (#1384)
  dependabot[bot]
  authored
  18279ed
Commits on Apr 16, 2025
- Bump github.com/gaissmai/bart from 0.20.1 to 0.20.4 (#1391)
  
  dependabot[bot]
  and
  wadey
  authored
  459cb38
Commits on Apr 17, 2025
- Bump golang.org/x/net in the golang-x-dependencies group (#1392)
  dependabot[bot]
  authored
  e49f279
- Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 (#1393)
  dependabot[bot]
  authored
  4eb056a
Commits on Apr 18, 2025
- optimize usage of bart (#1395)
  wadey
  authored
  b8ea55e
Commits on Apr 21, 2025
- Support 32-bit machines in crypto test (#1394)
  johnmaguire
  authored
  2dc30fc
- add netlink options (#1326)
  nikitos
  authored
  e5ce896
- Update issue and PR templates (#1376)
  johnmaguire
  authored
  15b5a43
- Allow configuration of logger and build version in gvisor service library (#1239)
  maggie44
  authored
  8536c57
Commits on Apr 28, 2025
- Mention CA expiration in the README (#1378)
  johnmaguire
  authored
  83ff246
Commits on May 2, 2025
- Minor fixes to Readme shell snippets (#1389)
  andygeorge
  authored
  92a9248
Commits on May 13, 2025
- Fix slack invitation link in issue template (#1406)
  IanVS
  authored
  061e733
Commits on Jun 11, 2025
- Fix off by one error in IPv6 packet parser (#1419)
  brad-defined
  authored
  442a528
Commits on Jul 2, 2025
Commits on Jul 3, 2025
- Drop inactive tunnels (#1427)
  nbrownus
  authored
  5262382
Commits on Jul 15, 2025
- Update slack OSS invite link (#1435)
  brad-defined
  authored
  91eff03
Commits on Jul 29, 2025
- fix lighthouse.calculated_remotes parsing (#1438)
  wadey
  authored
  7da7968
Commits on Aug 25, 2025
- netlink: ignore route updates with no destination (#1437)
  wadey
  authored
  5cff83b
Commits on Sep 3, 2025
- don't send recv errors for packets outside the connection window anymore (#1463)
  JackDoan
  authored
  4bea299
Commits on Sep 4, 2025
- Don't delete static host mappings for non-primary IPs (#1464)
  JackDoan
  authored
  932e329
Commits on Sep 5, 2025
- cert-v2 chores (#1466)
  JackDoan
  authored
  768325c
Commits on Sep 8, 2025
- add firewall tests for ipv6 (#1451)
  wadey
  authored
  73cfa7b
Commits on Sep 9, 2025
- prevent linux from assigning ipv6 link-local addresses (#1476)
  JackDoan
  authored
  65cc253
Commits on Sep 10, 2025
- store lighthouses as a slice (#1473)
  JackDoan
  authored
  8196c22
- update RemoteList.vpnAddrs when we complete a handshake (#1467)
  JackDoan
  authored
  5cccd39
Commits on Sep 25, 2025
- Set CKA_VALUE_LEN attribute in DeriveNoise (#1482)
  HenryGrahamRivian
  authored
  4cdeb28
Commits on Sep 29, 2025
- update to go 1.25, use the cool new ECDSA key marshalling functions (#1483)
  JackDoan
  authored
  1ea5f77
- don't require a detailsVpnAddr in a HostUpdateNotification (#1472)
  JackDoan
  authored
  f1e992f
Commits on Oct 2, 2025
- Bump actions/setup-go from 5 to 6 (#1469)
  
  dependabot[bot]
  and
  nbrownus
  authored
  071589f
- helper functions to more correctly marshal curve 25519 public keys (#1481)
  JackDoan
  authored
  8824eea
Commits on Oct 3, 2025
- Support IPv6 tunneling in FreeBSD (#1399)
  sl274
  authored
  b1f53d8
- Use x/net/route to manage routes directly (#1488)
  nbrownus
  authored
  fb7f0c3
Commits on Oct 8, 2025
Commits on Oct 13, 2025
Commits on Oct 21, 2025
- fix make bench (#1510)
  JackDoan
  authored
  7701472
Commits on Nov 4, 2025
- try to make certificate addition/removal reloadable in some cases (#1468)
  JackDoan
  authored
  01909f4
Commits on Nov 5, 2025
- don't block startup on failure to configure SSH (#1520)
  JackDoan
  authored
  0f305d5
Commits on Nov 10, 2025
- honor remote_allow_list in hole punch response (#1186)
  wadey
  authored
  97b3972
Commits on Nov 12, 2025
Commits on Nov 13, 2025
- Bump github.com/gaissmai/bart from 0.25.0 to 0.26.0 (#1508)
  
  dependabot[bot]
  and
  wadey
  authored
  4400124
Commits on Nov 14, 2025
- populate default Build version if missing (#1386)
  wadey
  authored
  36c890e
Commits on Nov 17, 2025
- nebula-cert: support reading CA passphrase from env (#1421)
  
  halmartin
  and
  JackDoan
  authored
  4df8bcb
Commits on Nov 18, 2025
- add more tests around bits counters (#1441)
  
  wadey
  and
  nbrownus
  authored
  27ea667
Commits on Nov 19, 2025
Commits on Nov 20, 2025
- feat: support via gateway for v6 multihop for v4 routes (#1521)
  
  6ixfalls
  and
  nbrownus
  authored
  12cf348
- No need to clear counter 0 (#1537)
  nbrownus
  authored
  83ae807
- improve nebula-cert sign version auto-select (#1535)
  JackDoan
  authored
  6d7cf61
Commits on Nov 21, 2025
- Make 0.0.0.0/0 and ::/0 not mean any address family, add any for that (#1538)
  nbrownus
  authored
  64f202f
Commits on Dec 3, 2025
- Stab at better logging when a relay is being used (#1533)
  nbrownus
  authored
  56067af
Commits on Dec 4, 2025
- v1.10.0 (#1534)
  nbrownus
  authored
  59e24b9
Commits on Dec 10, 2025
Commits on Jan 9, 2026
- Ensure pubkey coherency when rehydrating a handshake cert (#1566)
  brad-defined
  authored
  2f71d6b
- Quietly log error on UDP_NETRESET ioctl on Windows. (#1453) (#1568)
  
  nbrownus
  and
  brad-defined
  authored
  69259e6
Commits on Jan 12, 2026
Commits on Jan 13, 2026
- Add option to control accepting recv_error (#1569)
  nbrownus
  authored
  1283ff0
- Bump golang.org/x/net in the golang-x-dependencies group (#1571)
  dependabot[bot]
  authored
  88379b8
Commits on Jan 15, 2026
- Avoid losing system originated unsafe routes on reload (#1573)
  nbrownus
  authored
  ac3bd9c
Commits on Jan 16, 2026
- v1.10.1 (#1575)
  nbrownus
  authored
  72a4000
Commits on Jan 20, 2026
- Bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#1581)
  dependabot[bot]
  authored
  bf49e78
- chore: fix some typos in comments (#1582)
  zhetaicheleba
  authored
  e5f60fa
- initialize routesFromSystem (#1580)
  wadey
  authored
  e1e92f0
Commits on Jan 21, 2026
- v1.10.2 (#1584)
  wadey
  authored
  0b02d98
Commits on Jan 28, 2026
- Remove lighthouse goroutine leaks in lighthouse_test.go (#1589)
  jasikpark
  authored
  02d8bca
- Report if Nebula start fails because of tun device name (#1588)
  JackDoan
  authored
  42bee7c
Commits on Feb 6, 2026
- Merge commit from fork
  JackDoan
  authored
  f573e8a
Commits on Feb 13, 2026
- firewall: icmp no longer requires a port spec (#1609)
  JackDoan
  authored
  353ad1f
- smoke-extra: try AMD-V workaround (#1610)
  wadey
  authored
  e8bb874
Commits on Feb 17, 2026
- go fix (#1608)
  wadey
  authored
  422fc2a
Commits on Feb 19, 2026
- connection-track ICMP traffic (#1602)
  JackDoan
  authored
  51308b8
Commits on Mar 6, 2026
- fix logging copy pasta (#1621)
  jrwren
  authored
  7760cce
Commits on Mar 16, 2026
- #ECCN:Open Source in CODEOWNERS (#1632)
  jrwren
  authored
  1aa1a04
Commits on Mar 23, 2026
- Fix dissector logic (#1626)
  johnmaguire
  authored
  9f1aef5
Commits on Mar 25, 2026
- properly handle closetunnel packets (#1638)
  JackDoan
  authored
  91d1f46
Commits on Mar 30, 2026
- Add a small link to DN Managed Nebula (#1641)
  johnmaguire
  authored
  951d368
Commits on Apr 3, 2026
- add sshd.sandbox_dir config option (#1622)
  
  jrwren
  and
  Claude
  authored
  f858795
Commits on Apr 6, 2026
- gh workflow release: protect from ref_name attack (#1650)
  jrwren
  authored
  6727113
Commits on Apr 13, 2026
- Refactor CA pool handling to use streaming (#1644)
  
  authored
  0ad5c77
Commits on Apr 14, 2026
- Additional e2e tests to assert current handshake behavior (#1653)
  nbrownus
  authored
  3fae693
- udp_linux: wrap socket operations with syscall.RawConn for clean teardown (#1654)
  JackDoan
  authored
  b319423
Commits on Apr 15, 2026
Commits on Apr 17, 2026
- Try the hot new DefinedNet openbsd78 box (#1657)
  nbrownus
  authored
  49e3c46
Commits on Apr 20, 2026
- Remove more os.Exit calls and give a more reliable wait for stop function (attempt 3) (#1661)
  JackDoan
  authored
  e80b983
- Try to make smoke less flakey (#1663)
  nbrownus
  authored
  3d34cc9
Commits on Apr 21, 2026
Commits on Apr 22, 2026
- fix: guard QueryCert against panic on short/empty QNAME (#1635)
  
  gnesher
  and
  JackDoan
  authored
  2a1cc62
- Fix e2e tests writing after the tester tun is closed causing a panic (#1681)
  nbrownus
  authored
  5f00ab4
Commits on Apr 23, 2026
- Another shot at the flakey smoke test (#1688)
  nbrownus
  authored
  db9218b
- SSH handshake in goroutine and defer close (#1640)
  brad-defined
  authored
  db85d61
Commits on Apr 24, 2026
- noise: only type-assert once (#1691)
  JackDoan
  authored
  5f890db
Commits on Apr 27, 2026
- Switch to slog, remove logrus (#1672)
  nbrownus
  authored
  d0f02ba
- Make stats a server we can reconfigure and start/stop (#1670)
  nbrownus
  authored
  1ab1f71
Commits on May 1, 2026
Commits on May 4, 2026
- More stable e2e test harness, better for benchmarking (#1702)
  nbrownus
  authored
  b7e9939
Commits on May 6, 2026
- switch Bits to a packed u64 (#1705)
  JackDoan
  authored
  ff91c37
- refactor readOutsidePackets (#1642)
  wadey
  authored
  4fb5cdb
- Stop leaking goroutines past Control.Stop, consolidate punching in Punchy (#1708)
  nbrownus
  authored
  213dd46
- don't panic on bad ed25519 key lengths (#1601)
  JackDoan
  authored
  a82a8dc
- Bump Apple-Actions/import-codesign-certs from 6 to 7 (#1697)
  dependabot[bot]
  authored
  eaf756e
- Bump golang.org/x/net (#1664)
  dependabot[bot]
  authored
  76e82a5
- Bump docker/login-action from 3 to 4 (#1628)
  dependabot[bot]
  authored
  dd2ac5d
- Bump docker/setup-buildx-action from 3 to 4 (#1627)
  dependabot[bot]
  authored
  dd3a7ad
- Bump actions/upload-artifact from 6 to 7 (#1618)
  dependabot[bot]
  authored
  23c67bd
- Bump actions/download-artifact from 7 to 8 (#1617)
  dependabot[bot]
  authored
  83809a5
- Bump github.com/gaissmai/bart from 0.26.0 to 0.26.1 (#1604)
  dependabot[bot]
  authored
  cba9ea5
- Remove the global noiseEndianness var (#1707)
  nbrownus
  authored
  5f920fd
Commits on May 7, 2026
- Use DefinedNets fancy new netbsd10 vagrant box for smokes (#1711)
  nbrownus
  authored
  1ada3d4
- Change windows unsafe routes to link routes, fix sshd reload bug (#1709)
  nbrownus
  authored
  c82db21
Commits on May 8, 2026
- Add a way to set the network type on windows + tests (#1710)
  nbrownus
  authored
  696903d
- Windows code signing (#1718)
  nbrownus
  authored
  398d67e
Commits on May 15, 2026
Commits on May 18, 2026
Commits on May 19, 2026
- Parallelize the tests a bit more (#1730)
  nbrownus
  authored
  0c1ad9b
Commits on May 22, 2026
- Bump github.com/gaissmai/bart from 0.26.1 to 0.27.1 (#1732)
  dependabot[bot]
  authored
  72bad16
- Reduce relay log spam (#1733)
  nbrownus
  authored
  873f94f
- Fix duplicate log fields which slog duplicates (#1734)
  nbrownus
  authored
  3a95495
Commits on Jun 3, 2026
- Bump the golang-x-dependencies group with 3 updates (#1742)
  dependabot[bot]
  authored
  b041f30
Commits on Jun 9, 2026
- correctly record window counters for relayed packets in a tunnel (#1751)
  JackDoan
  authored
  e6032f8
Commits on Jun 10, 2026
Commits on Jun 15, 2026
Commits on Jun 16, 2026
- Add smoke test for ipv6 (#1764)
  wadey
  authored
  ab539f8
- Relay log fix (#1765)
  JackDoan
  authored
  16b302c
- add IPv6 reject packet generation (#1766)
  wadey
  authored
  e4cc80a
- add IPv6 support to CreateICMPEchoResponse (#1767)
  wadey
  authored
  fe1c568
- cleanup ipv6 iputil helpers / skip reject for ICMP error packets and fragments (#1768)
  wadey
  authored
  7d3166a
Commits on Jun 23, 2026
- Add OCI image labels with version info (#1772)
  johnmaguire
  authored
  184cdc8
Commits on Jun 29, 2026
- Bump actions/checkout from 6 to 7 (#1771)
  dependabot[bot]
  authored
  58ab725
Commits on Jul 1, 2026
- wireshark: fix Lua 5.4 bitwise operation (#1776)
  zorvios
  authored
  02471b4
Commits on Jul 3, 2026
- correctly handle a test packet with a payload longer than the header (#1778)
  JackDoan
  authored
  6afca0f
Commits on Jul 7, 2026
Commits on Jul 8, 2026
- fix firewall port/proto bypass in parseV6 from uint8 extension-header length overflow (#1789)
  nbrownus
  authored
  c1eea11
Commits on Jul 9, 2026
Commits on Jul 10, 2026
- Make Control safe to stop and wait on from any lifecycle state (#1794)
  nbrownus
  authored
  ab736e4
- don't make new relay state on a just-discarded tunnel (#1796)
  JackDoan
  authored
  8673386
Commits on Jul 13, 2026
- correct directionality of firewall.inbound_action and firewall.outbound_action (#1798)
  JackDoan
  authored
  861d3aa
- code-sign: default the S3 key-prefix to the calling repo (#1799)
  nbrownus
  authored
  6c3972f
Commits on Jul 17, 2026
- Fix relay re-establishment for handshake on Disestablised entry (#1805)
  johnmaguire
  authored
  e290a68
- Swap back to a blocking udp socket, test `shutdown(2)` (#1806)
  
  nbrownus
  and
  JackDoan
  authored
  147c202
Commits on Jul 20, 2026
- add locks around replay window updates (#1802)
  JackDoan
  authored
  3615a79
Commits on Jul 21, 2026
- before removing a pending hostinfo in handshake_manager, make sure it's the one we wanted to delete (#1811)
  JackDoan
  authored
  a99699e
- Document rootless Nebula in example service script (#1814)
  johnmaguire
  authored
  58f3b6f
Commits on Jul 22, 2026
Commits on Jul 23, 2026
- Rebind for MacOS (#1816)
  
  nbrownus
  and
  JackDoan
  authored
  7902ce6
- Be less verbose with handshake send errors (#1810)
  nbrownus
  authored
  15f0f0d
- Use go 1.26 (latest 1.26.5) (#1818)
  nbrownus
  authored
  f8775bb
- v1.11.0 changelog (#1792)
  nbrownus
  authored
  1617897
- Add an e2e Drop exit type and a roaming recovery measurement (#1819)
  nbrownus
  authored
  72bf111
Commits on Jul 31, 2026
- Tolerate ErrDumpInterrupted when listing tun addresses (#1835)
  johnmaguire
  authored
  6d124d0
Commits on Aug 17, 2026
- Merge remote-tracking branch 'slack/master' into master
  
  matt-defined
  and
  claude
  committed
  19a2397

Commits

Commits on Mar 6, 2025

Commits on Mar 7, 2025

Commits on Mar 10, 2025

Commits on Mar 12, 2025

Commits on Mar 13, 2025

Commits on Mar 14, 2025

Commits on Mar 24, 2025

Commits on Mar 25, 2025

Commits on Mar 31, 2025

Commits on Apr 1, 2025

Commits on Apr 2, 2025

Commits on Apr 3, 2025

Commits on Apr 7, 2025

Commits on Apr 8, 2025

Commits on Apr 16, 2025

Commits on Apr 17, 2025

Commits on Apr 18, 2025

Commits on Apr 21, 2025

Commits on Apr 28, 2025

Commits on May 2, 2025

Commits on May 13, 2025

Commits on Jun 11, 2025

Commits on Jul 2, 2025

Commits on Jul 3, 2025

Commits on Jul 15, 2025

Commits on Jul 29, 2025

Commits on Aug 25, 2025

Commits on Sep 3, 2025

Commits on Sep 4, 2025

Commits on Sep 5, 2025

Commits on Sep 8, 2025

Commits on Sep 9, 2025

Commits on Sep 10, 2025

Commits on Sep 25, 2025

Commits on Sep 29, 2025

Commits on Oct 2, 2025

Commits on Oct 3, 2025

Commits on Oct 8, 2025

Commits on Oct 13, 2025

Commits on Oct 21, 2025

Commits on Nov 4, 2025

Commits on Nov 5, 2025

Commits on Nov 10, 2025

Commits on Nov 12, 2025

Commits on Nov 13, 2025

Commits on Nov 14, 2025

Commits on Nov 17, 2025

Commits on Nov 18, 2025

Commits on Nov 19, 2025