feb51cbf57
Fix RustCrypto zeroize feature wiring
2026-07-12 09:27:15 +03:00
8c65cd868c
Enable expanded AES key schedule zeroization
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 21:43:01 +03:00
ea296bbdc8
Replace per-session pool trimming with pressure hysteresis
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 21:36:01 +03:00
fb042f826e
Optimize crypto and Fake-TLS buffer residency
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 21:22:17 +03:00
96425f15c8
Bound Direct relay buffers with an adaptive global memory envelope
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 20:56:54 +03:00
d4c4980e5a
Bound ME writer queues by resident payload bytes
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 18:43:42 +03:00
893ce0cf36
Hold C2ME byte permits through ME writer completion
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-10 16:35:39 +03:00
2ac93c6d49
Update Cargo.lock
2026-07-10 11:47:09 +03:00
a51e58009b
Update Cargo.toml
2026-07-10 11:46:33 +03:00
d523406c0a
Merge pull request #869 from telemt/flow
...
Regression coverage + Synlimit netfilter rules per-target + CidrRateLimitKey with IpNetwork + Telemt-Referenz der Konfigurationsparameter
2026-07-10 11:39:22 +03:00
5b3ad0096b
Create CONFIG_PARAMS.de.md
2026-07-09 22:42:07 +03:00
b587fdbf94
Update CONFIG_PARAMS.ru.md
2026-07-08 20:52:26 +03:00
77a45e509a
Update CONFIG_PARAMS.en.md
2026-07-07 22:46:03 +03:00
b8be805aed
Rustfmt
2026-07-06 20:12:36 +03:00
a1ebd44cee
Update load_basic_tests.rs
2026-07-05 19:58:37 +03:00
25d02a8e0e
Update traffic_limiter.rs
2026-07-04 15:45:51 +03:00
3375017460
Add the new key to the hot-reload snapshot type
2026-07-04 13:11:08 +03:00
25e0abae8a
Validate duplicate normalized auto-templates
2026-07-04 12:35:22 +03:00
50538d234e
CidrRateLimitKey with IpNetwork parsing and serialization added
2026-07-04 10:54:55 +03:00
e3a7be6786
Update CONTRIBUTING.md
2026-07-03 23:39:46 +03:00
3fc2877205
Reset ports configuration in merge docker-compose file: merge pull request #866 from dvrass/patch-1
...
Reset ports configuration in merge docker-compose file
2026-07-03 23:34:04 +03:00
cd1dc2f4c9
Update docker-compose.host-netfilter.yml
2026-07-03 23:32:30 +03:00
451227da60
Namespace synlimit netfilter rules per target set
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-01 01:47:14 +03:00
f55d8479e3
Reset ports configuration in merge docker-compose file
...
Reset ports configuration in docker-compose file for network_mode:host
2026-06-30 13:23:56 +03:00
81ae483201
Add regression coverage for ME routing, D2C padding, synlimit, and MSS bulk validation
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-30 13:13:11 +03:00
ed1895d6df
Merge pull request #865 from telemt/flow
...
Secure + VersionD Outbound Paddings Fix
2026-06-29 17:37:13 +03:00
88d161a5e9
Bump -> 3.4.22
2026-06-29 16:38:09 +03:00
a0ac108807
Secure + VersionD Outbound Paddings Fix
2026-06-29 13:56:16 +03:00
809352fac5
Merge pull request #864 from telemt/flow
...
Restore ME writer source IP for initial proxy request binding
2026-06-29 12:51:04 +03:00
22627b498d
Bump -> 3.4.21
2026-06-29 12:44:03 +03:00
b9c5c71dbc
Restore ME writer source IP for initial proxy request binding
2026-06-29 12:37:31 +03:00
7aee991416
Synlimit V2 + Split config loader helpers into modules + Restore ME D2C queue-drain flushing: merge pull request #863 from telemt/flow
...
Synlimit V2 + Split config loader helpers into modules + Restore ME D2C queue-drain flushing
2026-06-29 11:44:29 +03:00
9a9fd3f55d
Update d2c.rs
2026-06-29 11:37:30 +03:00
3a5fe31262
Rustfmt
2026-06-29 11:01:36 +03:00
82f63d0d8a
Split config loader helpers into focused modules
2026-06-28 17:25:03 +03:00
fce75163b0
Rustfmt
2026-06-28 15:45:53 +03:00
fe56621a83
Delete synlimit_control.rs
2026-06-28 15:43:26 +03:00
1f2910f5bc
Update crypto_bench.rs
2026-06-28 15:42:53 +03:00
d67e7c5a6f
Update mod.rs
2026-06-28 15:29:54 +03:00
558f352a57
Synlimit V2
2026-06-28 12:53:28 +03:00
1ee9a234d7
Merge pull request #859 from CryZFix/main
...
fixed a docker build bug for CI or docker-compose build variations
2026-06-25 19:24:08 +03:00
2e13f89f6d
fixed a docker build bug for CI or docker-compose build variations
2026-06-25 16:24:42 +04:00
5eaccee68f
Merge pull request #851 from telemt/flow
...
Advanced Relay Mode + Hardened KDF-Tuple + Updated secure padding expectations for VersionD + Shared MTProto framing and ME address + Fix config API corrupting nested sub-tables on save + Harden masking fallback and frame readers after flow sync + MSS Raising after handshake to cut pps + Bugfixes
2026-06-24 01:08:13 +03:00
f56895feac
Bump -> 3.4.19
2026-06-24 00:53:01 +03:00
87c82c2a63
Add bounded file logging rotation and retention #832
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-24 00:16:02 +03:00
7e5a1841b1
Skip netfilter cleanup without CAP_NET_ADMIN by #845
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-24 00:11:11 +03:00
e994ddea00
Accept advertised logging flags in CLI by #848
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-23 23:20:12 +03:00
5e5c82a0ad
Merge pull request #837 from absolute-Idee/fix/issue-821
...
Update Dockerfile (issue#821)
2026-06-23 12:35:47 +03:00
840713a359
Merge pull request #847 from AndreyOsipuk/feat/client-mss-relay
...
feat(server): client_mss_bulk — fragment only the handshake, restore MSS for bulk data (cuts pps)
2026-06-20 22:10:04 +03:00
50b67a93d6
feat(server): client_mss_bulk — raise MSS after handshake to cut pps
...
client_mss (e.g. "tspu", MSS=92) fragments the whole connection to evade
DPI on the ServerHello, but it also fragments bulk payload, multiplying
outgoing packets-per-second ~10x. On hosts whose abuse detection counts
pps (not bandwidth) this trips packet-flood limits.
Add an optional [server].client_mss_bulk: keep the low client_mss for the
handshake (ServerHello stays fragmented => DPI bypass intact), then raise
the client socket MSS to client_mss_bulk once the connection enters the
post-handshake (bulk transfer) phase, so bulk data uses normal-size
segments and pps drops back to normal. Same preset/int grammar as
client_mss. Opt-in: when unset, the handshake MSS is kept for the whole
connection (unchanged behavior).
Linux-only (setsockopt TCP_MAXSEG via raw fd, mirroring TCP_USER_TIMEOUT);
no-op on other unix. Documented in CONFIG_PARAMS.{en,ru}.
2026-06-19 11:11:01 +03:00
Alexey