971360d5e0
TUN-8238: Refactor proxy logging
...
Propagates the logger context into further locations to help provide more context for certain errors. For instance, upstream and downstream copying errors will properly have the assigned flow id attached and destination address.
2024-02-16 20:12:24 +00:00
76badfa01b
TUN-8236: Add write timeout to quic and tcp connections
...
## Summary
To prevent bad eyeballs and severs to be able to exhaust the quic
control flows we are adding the possibility of having a timeout
for a write operation to be acknowledged. This will prevent hanging
connections from exhausting the quic control flows, creating a DDoS.
2024-02-15 17:54:52 +00:00
56aeb6be65
TUN-8224: Fix safety of TCP stream logging, separate connect and ack log messages
2024-02-09 09:56:56 -06:00
a9aa48d7a1
Release 2024.2.0
2024-02-08 10:20:02 +00:00
638203f9f1
TUN-8224: Count and collect metrics on stream connect successes/errors
2024-02-07 14:38:21 +00:00
98e043d17d
Release 2024.1.5
2024-01-25 16:29:22 +00:00
3ad4b732d4
TUN-8176: Support ARM platforms that don't have an FPU or have it enabled in kernel
2024-01-22 16:35:59 +00:00
9c1f5c33a8
TUN-8158: Bring back commit e653741885 and fixes infinite loop on linux when the socket is closed
2024-01-22 13:46:33 +00:00
f75503bf3c
Release 2024.1.4
2024-01-19 19:42:57 +00:00
2c38487a54
Revert "TUN-8158: Add logging to confirm when ICMP reply is returned to the edge"
...
This reverts commit e653741885
2024-01-19 19:37:28 +00:00
ae0b261e56
Release 2024.1.3
2024-01-16 15:58:24 +00:00
e653741885
TUN-8158: Add logging to confirm when ICMP reply is returned to the edge
2024-01-16 15:56:24 +00:00
e5ae80ab86
TUN-8161: Fix broken ARM build for armv6
...
During the recent changes to the build pipeline, the implicit GOARM env variable changed from
6 to 7.
This means we need to explicitly define the GOARM to v6.
2024-01-16 09:58:39 +00:00
ba2edca352
Release 2024.1.2
2024-01-11 16:24:27 +00:00
c8ffdae859
TUN-8146: Fix Makefile targets should not be run in parallel and install-go script was missing shebang
2024-01-11 15:36:15 +00:00
8fc8c17522
TUN-8146: Fix export path for install-go command
...
This should fix homebrew-core to use the correct go tool chain
2024-01-11 12:38:28 +00:00
8d9aab5217
TUN-8140: Remove homebrew scripts
...
## Summary
We have decided to no longer push cloudflared to cloudflare homebrew, and use
the automation from homebrew-core to update cloudflared on their repository.
Therefore, the scripts for homebrew and makefile targets are no longer necessary.
2024-01-11 11:34:33 +00:00
25f91fec10
TUN-8147: Disable ECN usage due to bugs in detecting if supported
2024-01-11 10:35:25 +00:00
c7b2cce131
Release 2024.1.1
2024-01-10 12:14:10 +00:00
3e5c2959db
TUN-8134: Revert installed prefix to /usr
2024-01-10 11:43:55 +00:00
37ec2d4830
TUN-8134: Install cloudflare go as part of make install
...
To build cloudflared from source, one will need a go tool chain that
supports post quantum curves
2024-01-10 10:23:43 +00:00
ecd101d485
TUN-8130: Install go tool chain in /tmp on build agents
2024-01-09 22:50:05 +00:00
cf5be91d2d
TUN-8129: Use the same build command between branch and release builds
2024-01-09 17:07:49 +00:00
28685a5055
TUN-8130: Fix path to install go for mac build
2024-01-09 12:33:41 +00:00
e23d928829
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 18:16:06 +00:00
159fcb44ce
Release 2024.1.0
2024-01-03 17:25:47 +00:00
8e69f41833
TUN-7934: Update quic-go to a version that queues datagrams for better throughput and drops large datagram
...
Remove TestUnregisterUdpSession
2024-01-03 13:01:01 +00:00
fbe357b1e6
fix checkInPingGroup bugs
...
- Must check for the *effective* GID.
- Must allow range from 0 to 4294967294 in current kernels.
2023-12-24 14:04:55 -03:00
00cd7c333c
TUN-8072: Need to set GOCACHE in mac go installation script
2023-12-20 05:28:13 +00:00
86b50eda15
TUN-8072: Add script to download cloudflare go for Mac build agents
2023-12-19 22:36:48 +00:00
652df22831
AUTH-5682 Org token flow in Access logins should pass CF_AppSession cookie
...
- Refactor HandleRedirects function and add unit tests
- Move signal test to its own file because of OS specific instructions
2023-12-18 09:42:33 -06:00
1776d3d335
Add environment variables for TCP tunnel hostname / destination / URL.
2023-12-15 16:02:36 -08:00
33baad35b8
TUN-8066: Define scripts to build on Windows agents
2023-12-15 23:21:42 +00:00
12dd91ada1
TUN-8052: Update go to 1.21.5
...
Also update golang.org/x/net and google.golang.org/grpc to fix vulnerabilities,
although cloudflared is using them in a way that is not exposed to those risks
2023-12-15 12:17:21 +00:00
b901d73d9b
configuration.go: fix developerPortal link ( #960 )
2023-12-14 16:34:00 +00:00
61a16538a1
Use CLI context when running tunnel ( #597 )
...
When embedding the tunnel command inside another CLI, it
became difficult to test shutdown behavior due to this leaking
tunnel. By using the command context, we're able to shutdown
gracefully.
2023-12-14 16:33:41 +00:00
9e1f4c2bca
Remove extraneous `period` from Path Environment Variable ( #1009 )
2023-12-14 16:32:48 +00:00
f51be82729
use os.Executable to discover the path to cloudflared ( #1040 )
2023-12-14 16:32:31 +00:00
fd5d8260bb
cmd/cloudflared/updater: fix dropped error ( #1055 )
2023-12-14 16:31:47 +00:00
f2c4fdb0ae
Fix nil pointer dereference segfault when passing "null" config json to cloudflared tunnel ingress validate ( #1070 )
2023-12-14 16:29:40 +00:00
a4a84bb27e
tunnelrpc/pogs: fix dropped test errors ( #1106 )
2023-12-14 16:29:16 +00:00
4ddc8d758b
TUN-7970: Default to enable post quantum encryption for quic transport
2023-12-07 11:37:46 +00:00
8068cdebb6
TUN-8006: Update quic-go to latest upstream
2023-12-04 17:09:40 +00:00
45236a1f7d
VULN-44842 Add a flag that allows users to not send the Access JWT to stdout
2023-11-16 11:45:37 -06:00
e0a55f9c0e
TUN-7965: Remove legacy incident status page check
2023-11-13 17:10:59 -08:00
c1d8c5e960
Release 2023.10.0
2023-10-31 09:11:23 +00:00
7ae1d4668e
TUN-7864: Document cloudflared versions support
2023-10-06 11:30:59 -07:00
adb7d40084
CUSTESC-33731: Make rule match test report rule in 0-index base
...
This changes guarantees that the coommand to report rule matches when
testing local config reports the rule number using the 0-based indexing.
This is to be consistent with the 0-based indexing on the log lines when
proxying requests.
2023-10-03 12:18:49 +01:00
541c63d737
TUN-7824: Fix usage of systemctl status to detect which services are installed
...
## Summary
To determine which services were installed, cloudflared, was using the command
`systemctl status` this command gives an error if the service is installed
but isn't running, which makes the `uninstall services` command report wrongly
the services not installed. Therefore, this commit adapts it to use the
`systemctl list-units` command combined with a grep to find which services are
installed and need to be removed.
2023-09-22 15:35:55 +01:00
f1d6f0c0be
TUN-7787: cloudflared only list ip routes targeted for cfd_tunnel
2023-09-20 16:05:50 +00:00
Devin Carr
João "Pisco" Fernandes
Igor Postelnik
chungthuang
João Oliveirinha
Cristian Rodríguez
James Royal
Shak Saleemi
Honahuku
Kyle Carberry
TMKnight
Alex Vanderpot
Lars Lehtonen
Sam Cook
Sudarsan Reddy