MHSanaei 082d7ac091 fix(xray): block private-range egress in per-peer AmneziaWG IPv6 outbounds ...

The per-peer IPv6 freedom outbounds the panel injects for AmneziaWG
clients were built with empty settings and their routing rule sits
ahead of the template's private-range block, so a peer's IPv6 traffic
skipped both layers and could reach fc00::/7 hosts on the panel's
network.

Each per-peer outbound now carries the same private-range finalRules
block every other freedom outbound gets.

2026-11-01 10:03:17 +01:00

..

controller

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

entity

feat(hosts): give a host a pool of SNIs, random per config or shared (#6923)

2026-10-24 21:05:42 +02:00

global

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

job

fix(ldap): keep expired and over-quota clients off on directory sync

2026-11-01 00:44:05 +01:00

locale

fix(i18n): publish the translation bundle only once it is complete

2026-10-31 09:11:54 +00:00

middleware

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

network

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

runtime

fix(api): cap the client traffic list a master pushes by entry count

2026-10-31 14:25:21 +01:00

service

fix(xray): block private-range egress in per-peer AmneziaWG IPv6 outbounds

2026-11-01 10:03:17 +01:00

session

fix(web): start a fresh session at login

2026-10-31 09:05:28 +00:00

translation

feat(tls): cipher suite presets and a uTLS fingerprint warning

2026-10-25 15:54:48 +01:00

websocket

fix(tuic): client speed display and certificate button layout (#6723)

2026-10-05 19:46:46 +02:00

assets_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

cadence_test.go

Add remote routing URL support (#6168)

2026-08-18 16:02:11 +02:00

node_contract_test.go

fix(node): drop a swept inbound's bookkeeping from the node runtime

2026-10-31 09:28:39 +00:00

routes_contract_test.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00

schedule_test.go

fix(settings): accept five-field crontab for report and LDAP schedules

2026-10-11 20:37:04 +02:00

web_mtls_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_mtls.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

web_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_sublink_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web_tuic_shutdown_test.go

fix(web): install the share-link provider before the panel serves (#6914)

2026-10-24 05:50:46 +02:00

web.go

fix(web): bound the panel's open connections and share asset gzip

2026-11-01 01:01:38 +01:00