36787d9cf7
TUN-4153: Revert best-effort HTTP2 usage when talking to origins
...
This commit reverts part of 1cf6ae37eb
2021-03-31 08:25:59 +01:00
5afa3251dd
TUN-4150: Only show the connector table in 'tunnel info' if there are connectors. Don't show rows with zero connections.
2021-03-30 20:13:00 +00:00
8ca0d86c85
TUN-3863: Consolidate header handling logic in the connection package; move headers definitions from h2mux to packages that manage them; cleanup header conversions
...
All header transformation code from h2mux has been consolidated in the connection package since it's used by both h2mux and http2 logic.
Exported headers used by proxying between edge and cloudflared so then can be shared by tunnel service on the edge.
Moved access-related headers to corresponding packages that have the code that sets/uses these headers.
Removed tunnel hostname tracking from h2mux since it wasn't used by anything. We will continue to set the tunnel hostname header from the edge for backward compatibilty, but it's no longer used by cloudflared.
Move bastion-related logic into carrier package, untangled dependencies between carrier, origin, and websocket packages.
2021-03-29 21:57:56 +00:00
ebf5292bf9
TUN-4146: Unhide and document grace-period
2021-03-29 16:29:18 -05:00
f9062ab473
TUN-4141: Better error messages for tunnel info subcommand.
2021-03-26 14:45:35 -05:00
d14f3b39a7
Release 2021.3.5
2021-03-26 18:50:54 +00:00
fd0529748a
Publish change log for 2021.3.5
2021-03-26 18:27:45 +00:00
9d3a7bd08e
TUN-4125: Change component tests to run in CI with its own dedicated resources
2021-03-26 11:41:56 +00:00
1cf6ae37eb
TUN-3896: http-service and tunnelstore client use http2 transport.
...
- If origin services are http2 and https is the service url, http2
transport is preferred.
- The tunnelstore client is now upgraded to use http2.
2021-03-26 10:31:40 +00:00
66da530ba3
Release 2021.3.4
2021-03-25 18:39:55 -05:00
e9167f7f58
Release 2021.3.3
2021-03-25 12:41:25 -05:00
4494a27fab
Update changelog 2021.3.3
2021-03-25 11:51:12 -05:00
63833b07dd
AUTH-3455: Generate short-lived ssh cert per hostname
2021-03-25 10:38:43 -05:00
da4d0b2bae
TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future.
2021-03-24 10:53:29 -05:00
027168c23a
TUN-4123: Don't capture output in reconnect componet test
2021-03-24 14:14:47 +00:00
50435546c5
TUN-4118: Don't overwrite existing file with tunnel credentials. For ad-hoc tunnels, this means tunnel won't start if there's a file in the way.
2021-03-24 08:26:22 -05:00
9018ee5d5e
TUN-4116: Ingore credentials-file setting in configuration file during tunnel create and delete opeations.
...
This change has two parts:
1. Update to newer version of the urfave/cli fork that correctly sets flag value along the context hierarchy while respecting config file overide behavior of the most specific instance of the flag.
2. Redefine --credentials-file flag so that create and delete subcommand don't use value from the config file.
2021-03-24 08:15:36 -05:00
12447677cf
TUN-4112: Skip testing graceful shutdown with SIGINT on Windows
2021-03-23 21:52:10 +00:00
6106737281
TUN-4082: Test logging when running as a service
2021-03-23 20:14:53 +00:00
8250b67a9f
TUN-4111: Warn the user if both properties "tunnel" and "hostname" are used
2021-03-23 20:14:29 +00:00
db5c6f2556
Release 2021.3.2
2021-03-23 11:08:54 -05:00
9dd7898792
Publish changelog for 2021.3.2
2021-03-23 10:31:46 -05:00
92b3e8311f
TUN-4042: Capture cloudflared output to debug component tests
2021-03-23 13:21:37 +00:00
4a7763e497
TUN-3998: Allow to cleanup the connections of a tunnel limited to a single client
2021-03-23 08:48:54 +00:00
9767ba1853
TUN-4096: Reduce tunnel not connected assertion backoff to address flaky termination tests
2021-03-18 08:28:38 +00:00
2c75326021
AUTH-3394: Ensure scheme on token command
2021-03-17 10:50:03 -05:00
9023daba24
TUN-3715: Apply input source to the correct context
2021-03-17 14:59:39 +00:00
89d0e45d62
TUN-3993: New `cloudflared tunnel info` to obtain details about the active connectors for a tunnel
2021-03-17 14:08:18 +00:00
a34099724e
TUN-4094: Don't read configuration file for access commands
2021-03-16 17:36:46 -05:00
8c5498fad1
TUN-3715: Only read config file once, right before invoking the command
2021-03-16 17:22:13 -05:00
2c746b3361
TUN-4081: Update log severities to use Zerolog's levels
2021-03-16 19:04:49 +00:00
954cd6adca
TUN-4091: Use flaky decorator to rerun reconnect component tests when they fail
2021-03-16 17:10:15 +00:00
8432735867
TUN-4060: Fix Go Vet warnings (new with go 1.16) where t.Fatalf is called from a test goroutine
2021-03-16 16:12:11 +00:00
d67fbbf94f
TUN-4089: Address flakiness in component tests for termination
2021-03-16 11:31:20 +00:00
39901e1d60
Release 2021.3.1
2021-03-15 18:46:26 +00:00
9df60276a9
TUN-4052: Add component tests to assert service mode behavior
2021-03-15 17:45:25 +00:00
6a9ba61242
TUN-4051: Add component-tests to test graceful shutdown
2021-03-15 14:41:32 +00:00
848c44bd0b
Release 2021.3.0
2021-03-15 11:49:44 +00:00
9f84706eae
Publish change log for 2021.3.0
2021-03-15 10:28:11 +00:00
841344f1e7
AUTH-3394: Creates a token per app instead of per path - with fix for
...
free tunnels
2021-03-12 15:49:47 +00:00
25cfbec072
TUN-4050: Add component tests to assert reconnect behavior
2021-03-12 09:29:29 +00:00
f23e33c082
TUN-4049: Add component tests to assert logging behavior when running from terminal
2021-03-12 09:18:15 +00:00
d22b374208
TUN-4066: Set permissions in build agent before 'scp'-ing to machine hosting package repo
2021-03-11 19:02:26 +00:00
d6e867d4d1
TUN-4066: Remove unnecessary chmod during package publish to CF_PKG_HOSTS
2021-03-11 11:43:34 +00:00
a7344435a5
TUN-4062: Read component tests config from yaml file
2021-03-10 21:29:33 +00:00
206523344f
TUN-4017: Add support for using cloudflared as a full socks proxy.
...
To use cloudflared as a socks proxy, add an ingress on the server
side with your desired rules. Rules are matched in the order they
are added. If there are no rules, it is an implicit allow. If
there are rules, but no rule matches match, the connection is denied.
ingress:
- hostname: socks.example.com
service: socks-proxy
originRequest:
ipRules:
- prefix: 1.1.1.1/24
ports: [80, 443]
allow: true
- prefix: 0.0.0.0/0
allow: false
On the client, run using tcp mode:
cloudflared access tcp --hostname socks.example.com --url 127.0.0.1:8080
Set your socks proxy as 127.0.0.1:8080 and you will now be proxying
all connections to the remote machine.
2021-03-10 21:26:12 +00:00
b0e69c4b8a
Revert "AUTH-3394: Creates a token per app instead of per path"
...
This reverts commit 8e340d9598
2021-03-10 13:54:38 -06:00
aa5ebb817a
TUN-4075: Dedup test should not compare order of list
2021-03-10 13:48:59 -06:00
8e340d9598
AUTH-3394: Creates a token per app instead of per path
2021-03-10 17:15:16 +00:00
4296b23087
TUN-4069: Fix regression on support for websocket over proxy
2021-03-09 19:43:10 +00:00
Nuno Diegues
Adam Chalmers
Igor Postelnik
Sudarsan Reddy
Michael Borkenstein
cthuang
Lee Valentine