chungthuang
34a876e4e7
TUN-8243: Collect metrics on the number of QUIC frames sent/received
...
This commit also removed the server metrics that is no longer used
2024-02-19 10:09:14 +00:00
Devin Carr
971360d5e0
TUN-8238: Refactor proxy logging
...
Propagates the logger context into further locations to help provide more context for certain errors. For instance, upstream and downstream copying errors will properly have the assigned flow id attached and destination address.
2024-02-16 20:12:24 +00:00
João "Pisco" Fernandes
76badfa01b
TUN-8236: Add write timeout to quic and tcp connections
...
## Summary
To prevent bad eyeballs and severs to be able to exhaust the quic
control flows we are adding the possibility of having a timeout
for a write operation to be acknowledged. This will prevent hanging
connections from exhausting the quic control flows, creating a DDoS.
2024-02-15 17:54:52 +00:00
Igor Postelnik
56aeb6be65
TUN-8224: Fix safety of TCP stream logging, separate connect and ack log messages
2024-02-09 09:56:56 -06:00
chungthuang
a9aa48d7a1
Release 2024.2.0
2024-02-08 10:20:02 +00:00
chungthuang
638203f9f1
TUN-8224: Count and collect metrics on stream connect successes/errors
2024-02-07 14:38:21 +00:00
chungthuang
98e043d17d
Release 2024.1.5
2024-01-25 16:29:22 +00:00
João Oliveirinha
3ad4b732d4
TUN-8176: Support ARM platforms that don't have an FPU or have it enabled in kernel
2024-01-22 16:35:59 +00:00
chungthuang
9c1f5c33a8
TUN-8158: Bring back commit e653741885
and fixes infinite loop on linux when the socket is closed
2024-01-22 13:46:33 +00:00
chungthuang
f75503bf3c
Release 2024.1.4
2024-01-19 19:42:57 +00:00
chungthuang
2c38487a54
Revert "TUN-8158: Add logging to confirm when ICMP reply is returned to the edge"
...
This reverts commit e653741885
.
2024-01-19 19:37:28 +00:00
chungthuang
ae0b261e56
Release 2024.1.3
2024-01-16 15:58:24 +00:00
chungthuang
e653741885
TUN-8158: Add logging to confirm when ICMP reply is returned to the edge
2024-01-16 15:56:24 +00:00
João Oliveirinha
e5ae80ab86
TUN-8161: Fix broken ARM build for armv6
...
During the recent changes to the build pipeline, the implicit GOARM env variable changed from
6 to 7.
This means we need to explicitly define the GOARM to v6.
2024-01-16 09:58:39 +00:00
chungthuang
ba2edca352
Release 2024.1.2
2024-01-11 16:24:27 +00:00
Chung-Ting
c8ffdae859
TUN-8146: Fix Makefile targets should not be run in parallel and install-go script was missing shebang
2024-01-11 15:36:15 +00:00
Chung-Ting
8fc8c17522
TUN-8146: Fix export path for install-go command
...
This should fix homebrew-core to use the correct go tool chain
2024-01-11 12:38:28 +00:00
João "Pisco" Fernandes
8d9aab5217
TUN-8140: Remove homebrew scripts
...
## Summary
We have decided to no longer push cloudflared to cloudflare homebrew, and use
the automation from homebrew-core to update cloudflared on their repository.
Therefore, the scripts for homebrew and makefile targets are no longer necessary.
2024-01-11 11:34:33 +00:00
João Oliveirinha
25f91fec10
TUN-8147: Disable ECN usage due to bugs in detecting if supported
2024-01-11 10:35:25 +00:00
chungthuang
c7b2cce131
Release 2024.1.1
2024-01-10 12:14:10 +00:00
chungthuang
3e5c2959db
TUN-8134: Revert installed prefix to /usr
2024-01-10 11:43:55 +00:00
chungthuang
37ec2d4830
TUN-8134: Install cloudflare go as part of make install
...
To build cloudflared from source, one will need a go tool chain that
supports post quantum curves
2024-01-10 10:23:43 +00:00
chungthuang
ecd101d485
TUN-8130: Install go tool chain in /tmp on build agents
2024-01-09 22:50:05 +00:00
chungthuang
cf5be91d2d
TUN-8129: Use the same build command between branch and release builds
2024-01-09 17:07:49 +00:00
chungthuang
28685a5055
TUN-8130: Fix path to install go for mac build
2024-01-09 12:33:41 +00:00
chungthuang
e23d928829
TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED
2024-01-08 18:16:06 +00:00
chungthuang
159fcb44ce
Release 2024.1.0
2024-01-03 17:25:47 +00:00
chungthuang
8e69f41833
TUN-7934: Update quic-go to a version that queues datagrams for better throughput and drops large datagram
...
Remove TestUnregisterUdpSession
2024-01-03 13:01:01 +00:00
Cristian Rodríguez
fbe357b1e6
fix checkInPingGroup bugs
...
- Must check for the *effective* GID.
- Must allow range from 0 to 4294967294 in current kernels.
2023-12-24 14:04:55 -03:00
chungthuang
00cd7c333c
TUN-8072: Need to set GOCACHE in mac go installation script
2023-12-20 05:28:13 +00:00
chungthuang
86b50eda15
TUN-8072: Add script to download cloudflare go for Mac build agents
2023-12-19 22:36:48 +00:00
James Royal
652df22831
AUTH-5682 Org token flow in Access logins should pass CF_AppSession cookie
...
- Refactor HandleRedirects function and add unit tests
- Move signal test to its own file because of OS specific instructions
2023-12-18 09:42:33 -06:00
Shak Saleemi
1776d3d335
Add environment variables for TCP tunnel hostname / destination / URL.
2023-12-15 16:02:36 -08:00
Chung-Ting
33baad35b8
TUN-8066: Define scripts to build on Windows agents
2023-12-15 23:21:42 +00:00
Chung-Ting
12dd91ada1
TUN-8052: Update go to 1.21.5
...
Also update golang.org/x/net and google.golang.org/grpc to fix vulnerabilities,
although cloudflared is using them in a way that is not exposed to those risks
2023-12-15 12:17:21 +00:00
Honahuku
b901d73d9b
configuration.go: fix developerPortal link ( #960 )
2023-12-14 16:34:00 +00:00
Kyle Carberry
61a16538a1
Use CLI context when running tunnel ( #597 )
...
When embedding the tunnel command inside another CLI, it
became difficult to test shutdown behavior due to this leaking
tunnel. By using the command context, we're able to shutdown
gracefully.
2023-12-14 16:33:41 +00:00
TMKnight
9e1f4c2bca
Remove extraneous `period` from Path Environment Variable ( #1009 )
2023-12-14 16:32:48 +00:00
Alex Vanderpot
f51be82729
use os.Executable to discover the path to cloudflared ( #1040 )
2023-12-14 16:32:31 +00:00
Lars Lehtonen
fd5d8260bb
cmd/cloudflared/updater: fix dropped error ( #1055 )
2023-12-14 16:31:47 +00:00
Sam Cook
f2c4fdb0ae
Fix nil pointer dereference segfault when passing "null" config json to cloudflared tunnel ingress validate ( #1070 )
2023-12-14 16:29:40 +00:00
Lars Lehtonen
a4a84bb27e
tunnelrpc/pogs: fix dropped test errors ( #1106 )
2023-12-14 16:29:16 +00:00
Chung-Ting
4ddc8d758b
TUN-7970: Default to enable post quantum encryption for quic transport
2023-12-07 11:37:46 +00:00
Chung-Ting
8068cdebb6
TUN-8006: Update quic-go to latest upstream
2023-12-04 17:09:40 +00:00
James Royal
45236a1f7d
VULN-44842 Add a flag that allows users to not send the Access JWT to stdout
2023-11-16 11:45:37 -06:00
Devin Carr
e0a55f9c0e
TUN-7965: Remove legacy incident status page check
2023-11-13 17:10:59 -08:00
Sudarsan Reddy
c1d8c5e960
Release 2023.10.0
2023-10-31 09:11:23 +00:00
Devin Carr
7ae1d4668e
TUN-7864: Document cloudflared versions support
2023-10-06 11:30:59 -07:00
João Oliveirinha
adb7d40084
CUSTESC-33731: Make rule match test report rule in 0-index base
...
This changes guarantees that the coommand to report rule matches when
testing local config reports the rule number using the 0-based indexing.
This is to be consistent with the 0-based indexing on the log lines when
proxying requests.
2023-10-03 12:18:49 +01:00
João "Pisco" Fernandes
541c63d737
TUN-7824: Fix usage of systemctl status to detect which services are installed
...
## Summary
To determine which services were installed, cloudflared, was using the command
`systemctl status` this command gives an error if the service is installed
but isn't running, which makes the `uninstall services` command report wrongly
the services not installed. Therefore, this commit adapts it to use the
`systemctl list-units` command combined with a grep to find which services are
installed and need to be removed.
2023-09-22 15:35:55 +01:00