MHSanaei 6d90dcfe0c fix(tuic): bound what unauthenticated connections cost ...

Anyone reaching a TUIC port could start QUIC handshakes without ever
reading a reply, each holding state and goroutines, and an unauthenticated
connection got a handler goroutine per stream it opened. Both grew until
the panel ran out of memory.

The listener now counts connections from their first packet until they
authenticate or close: past 64 they must answer a stateless Retry, and
past 1024 in total or 32 per verified source (IPv4 address or IPv6 /64)
they are refused. Before authenticating, a connection may start at most
16 handlers per stream kind; further streams are reset.

2026-10-31 15:03:21 +01:00

..

auth_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

auth.go

fix(tuic): bound one client's connections and UDP relays

2026-10-31 14:59:20 +01:00

manager_live_traffic_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

manager_shutdown_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

manager_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

manager.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

pending_conns_test.go

fix(tuic): bound what unauthenticated connections cost

2026-10-31 15:03:21 +01:00

pending_conns.go

fix(tuic): bound what unauthenticated connections cost

2026-10-31 15:03:21 +01:00

protocol_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

protocol.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

relay_gate_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

relay_gate.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

relay_logging_test.go

fix(tuic): accept the server's STOP_SENDING when tests close uni streams

2026-10-03 15:48:05 +02:00

relay_recovery_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

relay_shutdown_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

revocation_snapshot_test.go

feat(tuic): implement native in-process Go TUIC v5 server (#6577)

2026-10-03 02:56:02 +02:00

server_settings_test.go

fix(tuic): bound the timeout settings at a day

2026-10-31 14:53:20 +01:00

server_test.go

fix(tests): stabilize local network fixtures

2026-10-25 11:44:58 +01:00

server.go

fix(tuic): bound what unauthenticated connections cost

2026-10-31 15:03:21 +01:00

socks_bridge_test.go

fix(tests): stabilize local network fixtures

2026-10-25 11:44:58 +01:00

socks_bridge.go

fix(tuic): bound one client's connections and UDP relays

2026-10-31 14:59:20 +01:00

stream_udp_lifecycle_test.go

fix(tuic): bound one client's connections and UDP relays

2026-10-31 14:59:20 +01:00

types_test.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

types.go

fix(xray): bound what the in-process config loader is asked to expand

2026-10-31 08:43:30 +00:00

udp_associations.go

fix(tuic): bound one client's connections and UDP relays

2026-10-31 14:59:20 +01:00

udp_pending_test.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00

udp_pending.go

fix(tuic): preserve client identity for Xray user routing (#6875)

2026-10-24 06:20:39 +02:00