Commit Graph

1842 Commits

Author SHA1 Message Date
Alexey 1a269d12dd Bump -> 3.5.3
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-26 15:57:37 +03:00
Alexey 4e5bccd2c7 Update deps + Docs for Webosckets in WEB-Modus 2026-08-26 09:56:18 +03:00
Alexey d2edd90479 WEB: websocket + websocket-lanes as Carrier 2026-08-26 09:16:06 +03:00
Alexey 8e577ec5ca DE and RU WEB debug documentation synchronized 2026-08-25 13:14:19 +03:00
Alexey 8c3a402594 Docs for WEB Debug
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-25 13:04:50 +03:00
Alexey e774bc8c9a WEB Debug + Trace
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-25 12:59:41 +03:00
Alexey 0779cd0901 Compat Bootstrap Literal for iOS
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 22:07:20 +03:00
Alexey 1a18f2452f Fixed routing across endpoint refresh
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 20:43:22 +03:00
Alexey 3188c8e417 WEB + Apple iOS Fallback Cache fixed
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 18:05:12 +03:00
Alexey 1bd85535f4 WEB Handshake OPEN -> DATA Misuse fixed
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 17:09:45 +03:00
Alexey b6b9a18f3d Merge pull request #901 from telemt/flow-web-empty-cookie
Fix Windows WEB carrier empty-cookie compatibility
3.5.2
2026-08-23 14:56:04 +03:00
Alexey ebed2ff050 Update tests.rs 2026-08-23 14:46:09 +03:00
Alexey c00663d83a Bump -> 3.5.2 2026-08-23 14:45:21 +03:00
Alexey 4fe3eae1f0 Fix Windows WEB carrier empty-cookie compatibility
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 13:39:38 +03:00
Alexey de2501eab4 Merge pull request #900 from telemt/flow/3.5.1
Flow/3.5.1
3.5.1
2026-08-23 11:09:02 +03:00
Alexey 80519da83e Merge pull request #899 from telemt/flow-web-handshake
Flow web handshake
2026-08-23 11:01:29 +03:00
Alexey 840b6f563a Rustfmt 2026-08-23 10:56:00 +03:00
Alexey 596149cab8 Docs for aligned carriers 2026-08-23 10:54:42 +03:00
Alexey 030466603f WEB Carrier behavior aligned w/ reference
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 10:22:13 +03:00
Alexey 1afe456c09 Merge pull request #898 from telemt/flow-web
MTProxy WEB: https + https-lanes
2026-08-23 09:12:30 +03:00
Alexey e2b7c5c731 Docs for https-lanes
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 09:06:00 +03:00
Alexey 90c0d65e1b WEB Carrier: https-lanes
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 09:04:53 +03:00
Alexey 79ad4cb541 Docs for WEB
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-08-23 03:32:40 +03:00
Alexey 1029703c2c WEB
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
Co-Authored-By: John Preston <17900494+john-preston@users.noreply.github.com>
2026-08-23 03:12:53 +03:00
Alexey 8dbd24b11b Merge pull request #897 from telemt/bump
Bump -> 3.5.0
3.5.0
2026-08-22 16:39:13 +03:00
Alexey 0b1cba1042 Bump -> 3.5.0 2026-08-22 16:38:41 +03:00
Alexey ca3063005c Merge pull request #896 from telemt/flow/3.5.0
Flow/3.5.0
2026-08-22 16:36:48 +03:00
Alexey fb47ad149c Rustfmt 2026-08-22 16:31:49 +03:00
Alexey bb0d3ba927 Manifest Revision + Listener Reload Semantics + MSS/SYN-limit Safety 2026-08-22 16:20:55 +03:00
Alexey 7f4b87bea4 Redesign runtime w/ include-aware config + Module Split + Listener Lifecycle + Atomic Reload 2026-08-22 16:13:25 +03:00
Alexey f9910fb29e Manifest Revision + Include Ownership + Atomic Reload Reservation in Docs 2026-08-22 13:50:34 +03:00
Alexey 189e10800a Hardened listener reload + config persistence + SYN Limit startup safety 2026-08-22 13:45:57 +03:00
Alexey 96d467a400 Merge pull request #895 from telemt/flow-api-patch-server-listeners
Allow PATCH/GET of server.listeners via config API
2026-08-22 10:10:34 +03:00
Alexey 32ff9e16c1 Merge pull request #878 from l0nelynx/feat/config-api-server-listeners
feat(api): allow GET/PATCH of server.listeners via config API
2026-08-22 10:09:17 +03:00
Alexey 5e70455ca2 Merge pull request #891 from telemt/flow-synlimit-mss-24
Raised synlimit_burst -> 24 by default
2026-08-12 21:27:11 +03:00
Alexey c488970569 Merge pull request #877 from anton-vinogradov/fix/synlimit-default-burst
fix(synlimit): raise default synlimit_burst from 1 to 24
2026-08-12 21:26:16 +03:00
Alexey 08127f318d Merge pull request #890 from telemt/flow-pf
BSD PF-backend for Synlimit
2026-08-12 21:25:13 +03:00
Alexey 25e76a3afb Merge pull request #884 from vgrebenschikov/feature/synlimit-pf-support
Add PF synlimit backend
2026-08-12 21:17:40 +03:00
Alexey 3668190100 Merge pull request #889 from telemt/flow-bulk-mss
Fragmentation only for first TLS-F
2026-08-12 21:05:42 +03:00
Alexey 064cd0da61 Merge branch 'flow/3.5.0' into flow-bulk-mss 2026-08-12 21:05:14 +03:00
Alexey 7289621458 Update listeners.rs 2026-08-12 21:03:51 +03:00
Dmitry 723da8c34c Merge remote-tracking branch 'upstream/main' into feat/config-api-server-listeners 2026-07-20 11:57:05 +00:00
Vladimir Grebenshchikov e2eec67a33 Add PF synlimit backend
Implement synlimit = "pf" for PF-based firewalls using per-listener source tracking rules in a Telemt-owned anchor.

PF evaluates max-src-conn-rate through source tracking when creating
tates for completed TCP connections. Telemt installs a rate-limited pass
rule followed by a reject fallback rule in the listener anchor:

  - under-limit new connections create PF state and pass;
  - over-limit new connections fall through to block return-rst;
  - access resumes automatically when the source rate drops below the configured window.

Keep Linux iptables/nftables behavior unchanged.
PF maps synlimit_hitcount / synlimit_seconds to max-src-conn-rate and intentionally has
no direct equivalent for Linux-only burst/hashlimit knobs.
2026-07-20 09:43:46 +02:00
Alexey d851200e47 Merge pull request #883 from telemt/flow/3.4.25
Flow/3.4.25
3.4.25
2026-07-20 10:36:20 +03:00
Alexey a5216d77fb Rustfmt 2026-07-19 18:41:23 +03:00
Alexey 5b5cd952c8 Bump -> 3.4.25 2026-07-19 18:36:04 +03:00
Alexey a40578b278 Merge pull request #882 from telemt/flow-runtime-reload
In-Runtime Reload
2026-07-19 17:26:43 +03:00
Alexey bd99493622 Merge pull request #881 from astronaut808/feature/handshake-stage-accounting
add handshake failure stage accounting
2026-07-19 17:20:28 +03:00
Alexey d862deebb2 Fix handshake stage attribution and bound counters
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-07-19 17:20:18 +03:00
Alexey 0d869d716c Merge branch 'flow-runtime-reload' into feature/handshake-stage-accounting 2026-07-19 17:18:18 +03:00