Niklas Rehfeld
7d4afd4ae0
Add Http2Origin option to force HTTP/2 origin connections
...
If `http2Origin` is set, it will set `ForceAttemptHTTP2` in the transport config of the `OriginService`.
2022-06-01 12:57:29 +12:00
João Oliveirinha
fa2234d639
TUN-6185: Fix tcpOverWSOriginService not using original scheme for String representation
2022-05-06 18:47:03 +01:00
Devin Carr
e2a8302bbc
TUN-5869: Add configuration endpoint in metrics server
2022-03-22 08:11:59 -07:00
Devin Carr
c2a32de35f
TUN-5737: Support https protocol over unix socket origin
2022-03-03 15:25:23 +00:00
cthuang
d68ff390ca
TUN-5698: Make ingress rules and warp routing dynamically configurable
2022-02-16 09:38:28 +00:00
Sudarsan Reddy
d678584d89
TUN-4655: ingress.StreamBasedProxy.EstablishConnection takes dest input
...
This change extracts the need for EstablishConnection to know about a
request's entire context. It also removes the concern of populating the
http.Response from EstablishConnection's responsibilities.
2021-07-07 15:58:04 +01:00
Igor Postelnik
3ad99b241c
TUN-4168: Transparently proxy websocket connections using stdlib HTTP client instead of gorilla/websocket; move websocket client code into carrier package since it's only used by access subcommands now ( #345 ).
2021-04-07 16:25:46 +00:00
Nuno Diegues
36787d9cf7
TUN-4153: Revert best-effort HTTP2 usage when talking to origins
...
This commit reverts part of 1cf6ae37eb
.
2021-03-31 08:25:59 +01:00
Sudarsan Reddy
1cf6ae37eb
TUN-3896: http-service and tunnelstore client use http2 transport.
...
- If origin services are http2 and https is the service url, http2
transport is preferred.
- The tunnelstore client is now upgraded to use http2.
2021-03-26 10:31:40 +00:00
Igor Postelnik
da4d0b2bae
TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future.
2021-03-24 10:53:29 -05:00
Lee Valentine
206523344f
TUN-4017: Add support for using cloudflared as a full socks proxy.
...
To use cloudflared as a socks proxy, add an ingress on the server
side with your desired rules. Rules are matched in the order they
are added. If there are no rules, it is an implicit allow. If
there are rules, but no rule matches match, the connection is denied.
ingress:
- hostname: socks.example.com
service: socks-proxy
originRequest:
ipRules:
- prefix: 1.1.1.1/24
ports: [80, 443]
allow: true
- prefix: 0.0.0.0/0
allow: false
On the client, run using tcp mode:
cloudflared access tcp --hostname socks.example.com --url 127.0.0.1:8080
Set your socks proxy as 127.0.0.1:8080 and you will now be proxying
all connections to the remote machine.
2021-03-10 21:26:12 +00:00
cthuang
ab4dda5427
TUN-3868: Refactor singleTCPService and bridgeService to tcpOverWSService and rawTCPService
2021-02-23 14:19:47 +00:00
cthuang
5943808746
TUN-3889: Move host header override logic to httpService
2021-02-23 14:19:47 +00:00
Sudarsan Reddy
b4700a52e3
TUN-3725: Warp-routing is independent of ingress
...
- Changed warp-routing configuration to its own yaml.
- Ingress Rules host matching is indepedent of warp-routing.
2021-02-23 14:19:47 +00:00
Sudarsan Reddy
368066a966
TUN-3615: added support to proxy tcp streams
...
added ingress.DefaultStreamHandler and a basic test for tcp stream proxy
moved websocket.Stream to ingress
cloudflared no longer picks tcpstream host from header
2021-02-23 14:19:47 +00:00
cthuang
e2262085e5
TUN-3617: Separate service from client, and implement different client for http vs. tcp origins
...
- extracted ResponseWriter from proxyConnection
- added bastion tests over websocket
- removed HTTPResp()
- added some docstrings
- Renamed some ingress clients as proxies
- renamed instances of client to proxy in connection and origin
- Stream no longer takes a context and logger.Service
2021-02-23 14:19:44 +00:00
Areg Harutyunyan
870f5fa907
TUN-3470: Replace in-house logger calls with zerolog
2020-12-23 14:15:17 -06:00
Adam Chalmers
23f2a04ed7
TUN-3562: Fix panic when using bastion mode ingress rule
2020-11-20 11:20:39 -06:00
Adam Chalmers
7613410855
TUN-3548, TUN-3547: Bastion mode can be specified as a service, doesn't
...
require URL.
2020-11-16 20:04:36 +00:00
Adam Chalmers
6159cb536f
TUN-3546: Fix panic in tlsconfig.LoadOriginCA
2020-11-14 20:03:29 -06:00
cthuang
543169c893
TUN-3490: Make sure OriginClient implementation doesn't write after Proxy return
2020-11-11 15:21:00 +00:00
cthuang
5974fb4cfd
TUN-3500: Integrate replace h2mux by http2 work with multiple origin support
2020-11-11 15:20:57 +00:00
cthuang
61c814bd79
TUN-3506: OriginService needs to set request host and scheme for websocket requests
2020-11-05 16:34:02 +00:00
cthuang
b00bfe8e0b
TUN-3505: Response body for status code origin returns EOF on Read
2020-11-05 14:47:46 +00:00
Adam Chalmers
bc015995d8
TUN-3484: OriginService that responds with configured HTTP status
2020-11-04 21:28:33 +00:00
Adam Chalmers
d01770107e
TUN-3492: Refactor OriginService, shrink its interface
2020-11-04 21:28:33 +00:00
Adam Chalmers
e933ef9e1a
TUN-2640: Users can configure per-origin config. Unify single-rule CLI
...
flow with multi-rule config file code.
2020-10-30 07:42:20 -05:00