9f51debc82
fix: template white spaces
2022-11-16 17:32:49 +08:00
4ed811a931
fix: add windows specific ssh-config
2022-11-16 17:16:46 +08:00
1fe4878264
TUN-6937: Bump golang.org/x/* packages to new release tags
2022-11-14 17:25:11 +00:00
85b44695f0
TUN-6941: Reduce log level to debug when failing to proxy ICMP reply
2022-11-14 11:22:38 +00:00
6a1dad0ce2
ZTC-234: macOS tests
2022-11-11 19:43:26 +00:00
2baea15387
ZTC-234: Replace ICMP funnels when ingress connection changes
...
Origintunneld has been observed to continue sending reply packets to the first incoming connection it received, even if a newer connection is observed to be sending the requests.
OTD uses the funnel library from cloudflared, which is why the changes are here.
In theory, cloudflared has the same type of bug where a ping session switching between quic connections will continue sending replies to the first connection. This bug has not been tested or confirmed though, but this PR will fix if it exists.
2022-11-11 19:43:26 +00:00
a1d88a6cdd
TUN-6927: Refactor validate access configuration to allow empty audTags only
2022-11-09 12:28:58 +00:00
515ad7cbee
TUN-6917: Bump go to 1.19.3
2022-11-07 09:19:19 -08:00
1b5313cc28
Issue #574 : Better ssh config for short-lived cert ( #763 )
...
This PR is made using suggestion from #574 . The pros for this config is that it will work both Windows and Linux (tested), as well as in VSCode, which normally can't be done with the current generated ssh config (refers to #734 )
2022-11-02 10:44:34 +00:00
dde83d5a7c
TUN-6898: Refactor addPortIfMissing
2022-10-28 15:48:10 +01:00
e14238224d
TUN-6898: Fix bug handling IPv6 based ingresses with missing port
2022-10-28 12:47:59 +01:00
66d1f27507
Release 2022.10.3
2022-10-26 10:40:17 +01:00
e6c9ec0b39
TUN-6871: Add default feature to cloudflared to support EOF on QUIC connections
2022-10-24 13:14:47 +01:00
c3c050aa79
TUN-6867: Clear spans right after they are serialized to avoid returning duplicate spans
2022-10-19 16:20:40 +01:00
b1de2a74fa
TUN-6876: Fix flaky TestTraceICMPRouterEcho by taking account request span can return before reply
2022-10-19 15:01:24 +01:00
4d32a64f98
Release 2022.10.2
2022-10-19 09:42:04 +01:00
11f4d10174
TUN-6868: Return left padded tracing ID when tracing identity is converted to string
2022-10-18 21:31:54 +01:00
60a12fcb27
TUN-6864: Don't reuse port in quic unit tests
2022-10-18 20:29:59 +00:00
442af9ee38
TUN-6869: Fix Makefile complaining about missing GO packages
...
cloudflared's Makefile uses `shell go env GOOS` to determine the
LOCAL_OS regardless of it being provided. We therefore need pinned_go as
a dependency to run docker-generate-versions.
2022-10-18 13:49:19 +01:00
2e895c3a4f
Release 2022.10.1
2022-10-18 11:45:22 +01:00
e9d07e35c7
TUN-6861: Trace ICMP on Windows
2022-10-18 09:57:19 +01:00
2d5234e021
TUN-6858: Trace ICMP reply
2022-10-18 09:51:57 +01:00
b6bd8c1f5e
TUN-6604: Trace icmp echo request on Linux and Darwin
2022-10-17 20:01:05 +01:00
495f9fb8bd
TUN-6856: Refactor to lay foundation for tracing ICMP
...
Remove send and return methods from Funnel interface. Users of Funnel can provide their own send and return methods without wrapper to comply with the interface.
Move packet router to ingress package to avoid circular dependency
2022-10-17 19:48:35 +01:00
225c344ceb
TUN-6855: Add DatagramV2Type for IP packet with trace and tracing spans
2022-10-17 19:45:01 +01:00
61007dd2dd
TUN-6860: Send access configuration keys to the edge
2022-10-16 17:10:09 +00:00
b01006fe46
TUN-6853: Reuse source port when connecting to the edge for quic connections
2022-10-13 11:50:44 +01:00
872cb003a4
Fix log message ( #591 )
...
printing `seconds` is superfluous since time.Duration already adds the `s` suffix
Invalid log message would be
```
Retrying connection in up to 1s seconds
```
Co-authored-by: João Oliveirinha <joliveirinha@cloudflare.com>
2022-10-12 11:55:41 +01:00
2aca844570
drop usage of cat when sed is invoked to generate the manpage
2022-10-12 11:46:45 +01:00
90e5255a0d
fix link
2022-10-12 11:46:18 +01:00
4aead129ed
update-build-readme
2022-10-12 11:46:18 +01:00
9904929b83
Fix typo in help text for `cloudflared tunnel route lb`
2022-10-12 11:45:13 +01:00
c280d62fe5
Label correct container
...
Previous PR added label to the build container, not the final container.
2022-10-12 11:44:03 +01:00
40ea6a5080
TUN-6829: Allow user of datagramsession to control logging level of errors
2022-10-11 18:49:02 +00:00
4642316167
TUN-6823: Update github release message to pull from KV
...
By running the github release message step after all of the binaries are built, the KV will be populated with all of the binary checksums to inject into the release message.
2022-10-11 15:43:06 +00:00
d0c10b34dd
RTG-2276 Update qtls and go mod tidy
2022-10-11 02:08:19 +00:00
f4ae8d1446
Add post-quantum flag to quick tunnel
...
Github #773
2022-10-05 01:33:17 +02:00
e89bceca5e
TUN-6825: Fix cloudflared:version images require arch hyphens
...
Once we introduced multi arch docker images, pinning cloudflared
versions required suffixing -(arm64/amd64) to the cloudflared:version
image tag. This change should fix that by adding specific versions to
the cloudflare docker build cycle
2022-10-04 15:48:58 +00:00
6be36fa2c5
TUN-6806: Add ingress rule number to log when filtering due to middlware handler
2022-10-03 09:49:24 +00:00
f81d35447e
Release 2022.10.0
2022-10-03 09:55:15 +01:00
49438f30f5
TUN-6813: Only proxy ICMP packets when warp-routing is enabled
2022-09-30 19:08:12 +01:00
eacc8c648d
TUN-6812: Drop IP packets if ICMP proxy is not initialized
2022-09-30 14:10:32 +00:00
5b30925773
TUN-6755: Remove unused publish functions
...
We no longer need the functions that publish deb and rpm to the old
pkg.cloudflare.com backed since we now send them to R2.
2022-09-30 10:28:28 +01:00
d7fb18be22
TUN-6810: Add component test for post-quantum
2022-09-29 09:22:43 -07:00
cbf8c71fab
TUN-6716: Document limitation of Windows ICMP proxy
2022-09-29 14:51:53 +01:00
870193c064
TUN-6811: Ping group range should be parsed as int32
2022-09-29 12:59:38 +01:00
fdddd86380
TUN-6715: Provide suggestion to add cloudflared to ping_group_range if it failed to open ICMP socket
2022-09-28 17:30:13 +01:00
b3e26420c0
TUN-6801: Add punycode alternatives for ingress rules
2022-09-26 17:59:45 +00:00
be0305ec58
TUN-6741: ICMP proxy tries to listen on specific IPv4 & IPv6 when possible
...
If it cannot determine the correct interface IP, it will fallback to all interfaces.
This commit also introduces the icmpv4-src and icmpv6-src flags
2022-09-26 11:37:08 +01:00
3449ea35f2
TUN-6791: Calculate ICMPv6 checksum
2022-09-22 15:18:53 +00:00
Bexanderthebex
Devin Carr
João Oliveirinha
Joel May
n0k0m3
cthuang
Sudarsan Reddy
Robin Brämer
Sven Höxter
Samuel Rhea
Jamie Nguyen
Nigel Armstrong
Bas Westerbaan