MHSanaei f988e9677f fix(amneziawg): cap port-forward relays and UDP sessions ...

A forwarded port accepts unauthenticated traffic, and every TCP
connection and every new UDP source got its own relay with a goroutine
and a buffer, with no limit, so anyone reaching the port could exhaust
the panel's memory. Live TCP relays and UDP sessions are now capped at
2048 each across all forwards; past that a connection is closed and a
datagram from a new source is dropped, while open flows keep going.

2026-10-31 15:18:43 +01:00

..

bench_test.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

client_device_test.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

client_device.go

fix(amneziawg): bound what a handshake allocates and the tunnel MTU

2026-10-31 14:50:18 +01:00

device_test.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

device.go

fix(amneziawg): bound what a handshake allocates and the tunnel MTU

2026-10-31 14:50:18 +01:00

diagnostics_test.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

diagnostics.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

dns_family_test.go

fix(amneziawg): stop AAAA fallback on v4-only tunnels and expose I2–I5 (#6611)

2026-09-26 22:01:04 +02:00

dns.go

fix(amneziawg): stop AAAA fallback on v4-only tunnels and expose I2–I5 (#6611)

2026-09-26 22:01:04 +02:00

egress_domain_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

egress_port_test.go

fix(amneziawg): keep the fallback egress port below the panel's reserved ports

2026-10-24 12:23:24 +02:00

egress.go

fix(amneziawg): keep a port forward accepting after a failed accept

2026-10-31 15:06:34 +01:00

forwarder_test.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

forwarder.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

identity.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

main_test.go

chore(amneziawgnet): bind test sockets to loopback

2026-10-03 00:00:36 +02:00

manager_test.go

fix(amneziawg): drop a removed client's flows before its address is reused

2026-10-31 15:10:32 +01:00

manager.go

fix(amneziawg): drop a removed client's flows before its address is reused

2026-10-31 15:10:32 +01:00

netstack_test.go

perf(amneziawg): return gVisor's pooled buffers on the embedded data path

2026-09-04 14:56:54 +02:00

netstack.go

fix(amneziawg): drop a removed client's flows before its address is reused

2026-10-31 15:10:32 +01:00

outbound_manager_test.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

outbound_manager.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

pinned_bind_test.go

chore(amneziawgnet): bind test sockets to loopback

2026-10-03 00:00:36 +02:00

pinned_bind.go

chore(amneziawgnet): bind test sockets to loopback

2026-10-03 00:00:36 +02:00

portfwd_test.go

fix(amneziawg): cap port-forward relays and UDP sessions

2026-10-31 15:18:43 +01:00

portfwd_udp.go

fix(amneziawg): cap port-forward relays and UDP sessions

2026-10-31 15:18:43 +01:00

portfwd.go

fix(amneziawg): cap port-forward relays and UDP sessions

2026-10-31 15:18:43 +01:00

relay_e2e_test.go

fix(amneziawg): take a forwarded TCP connection's source from the request

2026-10-31 15:05:12 +01:00

relay_test.go

fix(amneziawg): bound the SOCKS5 UDP associate exchange

2026-09-13 23:29:40 +02:00

relay.go

fix(amneziawg): drop a removed client's flows before its address is reused

2026-10-31 15:10:32 +01:00

resolving_bind_test.go

fix(amneziawg): let the wrapped bind build peer endpoints

2026-09-27 16:14:45 +02:00

resolving_bind.go

fix(amneziawg): let the wrapped bind build peer endpoints

2026-09-27 16:14:45 +02:00

socks_bridge_test.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

socks_bridge.go

fix(amneziawg): fall back to a free egress port when 64900 is refused

2026-09-27 16:09:54 +02:00

socks_config_test.go

fix(amneziawg): wrap the relay port window instead of refusing ids past it (#6539)

2026-09-15 10:07:14 +03:00

socks_config.go

fix(amneziawg): wrap the relay port window instead of refusing ids past it (#6539)

2026-09-15 10:07:14 +03:00

udp_mtu_concurrent_test.go

fix(amneziawg): respect tunnel MTU when writing UDP replies (#6780)

2026-10-12 03:11:09 +02:00

udp_mtu_test.go

fix(amneziawg): respect tunnel MTU when writing UDP replies (#6780)

2026-10-12 03:11:09 +02:00

udp_mtu_v6_test.go

fix(amneziawg): respect tunnel MTU when writing UDP replies (#6780)

2026-10-12 03:11:09 +02:00

udp_test.go

chore(amneziawgnet): bind test sockets to loopback

2026-10-03 00:00:36 +02:00

udp.go

fix(amneziawg): respect tunnel MTU when writing UDP replies (#6780)

2026-10-12 03:11:09 +02:00

v6alias_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

v6alias.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00