MHSanaei 8e8541a5d8 fix(web): count login attempts per address and while they are checked ...

The login limiter counted failures per (address, username) only after
the check finished, so attempts sent together all passed before the
first failure was recorded, and one address could own every record of
the bounded table and push out the one holding its own failures.

An admitted attempt now holds a slot until it reports back, and an
address is blocked as a whole after five times the per-username limit
spread over any names, which also caps the records one peer can own.

2026-10-31 09:04:23 +00:00

..

controller

fix(web): count login attempts per address and while they are checked

2026-10-31 09:04:23 +00:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

perf(ip-sync): avoid redundant client IP reads and writes (#6930)

2026-10-25 14:13:18 +01:00

locale

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

middleware

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

network

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

runtime

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00

service

fix(sub): treat external subscription providers as untrusted input

2026-10-31 08:53:27 +00:00

session

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

routes_contract_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

feat(amneziawg): add opt-in Linux kernel datapath (#6877)

2026-10-25 13:24:50 +01:00