MHSanaei 68e06a174b fix(job): withhold fail2ban bans for addresses a datagram alone reports ...

The IP-limit job treated every address on the core's online list as one
its sender proved to own and wrote the oldest over-limit ones for the
3x-ipl jail. For Shadowsocks over UDP and for mKCP the core lists a
datagram's source field with no exchange behind it, so a client with an
IP limit could forge sources and get any address firewalled.

A client attached to an enabled inbound that accepts such datagrams,
on the master or on a node, is still counted and disconnected, but its
old addresses are no longer written for fail2ban; a warning says why.

2026-11-01 00:39:26 +01:00

..

controller

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(job): withhold fail2ban bans for addresses a datagram alone reports

2026-11-01 00:39:26 +01:00

locale

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

middleware

fix(api): accept config envelopes only on requests that carry a body

2026-10-31 09:09:06 +00:00

network

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

runtime

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

service

fix(inbounds): delete an inbound's dependent rows on every delete path

2026-11-01 00:36:45 +01:00

session

fix(web): start a fresh session at login

2026-10-31 09:05:28 +00:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): drop a swept inbound's bookkeeping from the node runtime

2026-10-31 09:28:39 +00:00

routes_contract_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00