MHSanaei 5e6ffebdf2 fix(amneziawg): give each peer a share of the forwarder and UDP relay ...

The embedded interface's TCP forwarder admits 65535 connections in
flight for all peers together, and a forwarded request holds its slot
until the handshake ends or gVisor gives up on it. One client sending
bare SYNs from fresh source ports therefore took every slot and left
the other clients' connections unanswered. The UDP relay likewise
opened a SOCKS5 association and a host UDP socket for every fresh
tunnel source port with no per-peer bound.

The forwarder now names the peer on the SYN, refuses a source no peer
owns and caps one peer at 4096 connections; the UDP relay caps one peer
at 1024 sessions and drops the datagrams that would need more.

2026-11-01 00:16:04 +01:00

..

amneziawg

fix(amneziawg): bound what a handshake allocates and the tunnel MTU

2026-10-31 14:50:18 +01:00

amneziawgkern

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

amneziawgnet

fix(amneziawg): give each peer a share of the forwarder and UDP relay

2026-11-01 00:16:04 +01:00

config

v3.11.0

2026-10-25 20:08:14 +01:00

crypto/nodetoken

fix(nodetoken): stop refusing every node-token key file on Windows

2026-09-27 15:55:42 +02:00

database

fix(clients): store client group names trimmed

2026-11-01 00:03:48 +01:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(logger): reuse the open log rotator when InitLogger runs again

2026-09-27 15:32:20 +02:00

mtproto

feat(mtproto): expose mtg-multi's per-IP pending-handshake limit

2026-10-14 16:46:20 +02:00

nodee2e

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

pia

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

sub

fix(sub): encode the link host and the VLESS id in share links

2026-11-01 00:10:23 +01:00

testpg

test(database): give each package its own schema when tests run on PostgreSQL (#6594)

2026-09-26 21:13:42 +02:00

tuic

fix(tuic): bound what unauthenticated connections cost

2026-10-31 15:03:21 +01:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

web

fix(wireguard): hold /0 allowedIPs to the overlap guard

2026-11-01 00:06:09 +01:00

xray

fix(traffic): keep client accounting independent of outbound counters

2026-10-31 08:46:13 +00:00