Alexey
|
1cbde70a14
|
Add per-listener SYN limiter for Netfilter control
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 23:58:48 +03:00 |
|
Alexey
|
26cd4734de
|
Update tls.rs
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 23:29:10 +03:00 |
|
Alexey
|
52a1b66ad7
|
Syntactic key shares for TLS-F
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 23:13:21 +03:00 |
|
Alexey
|
b43c683615
|
Rustfmt
|
2026-06-11 19:59:48 +03:00 |
|
Alexey
|
e41470fb4c
|
Update fetcher.rs
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 19:52:23 +03:00 |
|
Alexey
|
09dc0cb76c
|
Update handshake_security_tests.rs
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 19:44:39 +03:00 |
|
Alexey
|
c36eb81808
|
Fix for TLS-F, ALPN и SNI/ALPN helpers
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 19:17:06 +03:00 |
|
Alexey
|
0f8aca56d9
|
Fix fallback test record iterator lifetime
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 17:56:21 +03:00 |
|
Alexey
|
4e66933a35
|
Fix TLS masking test ClientHello fixtures and tail write ordering
|
2026-06-11 17:51:05 +03:00 |
|
Alexey
|
7cf00db242
|
Update client_masking_budget_security_tests.rs
|
2026-06-11 17:32:26 +03:00 |
|
Alexey
|
8bc1ac06d6
|
Update client_masking_budget_security_tests.rs
|
2026-06-11 17:31:23 +03:00 |
|
Alexey
|
59cfcf05d3
|
Update client_masking_blackhat_campaign_tests.rs
|
2026-06-11 17:23:35 +03:00 |
|
Alexey
|
fcbedf66ea
|
Update client_masking_blackhat_campaign_tests.rs
|
2026-06-11 17:21:54 +03:00 |
|
Alexey
|
f5c402d9fc
|
Update metrics.rs
|
2026-06-11 16:43:24 +03:00 |
|
Alexey
|
1edd63bfb1
|
Rustfmt + Bump
|
2026-06-11 16:36:33 +03:00 |
|
Alexey
|
a808dc2815
|
Fix TLS fetch test constants scope
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 16:34:58 +03:00 |
|
Alexey
|
6dc9f8c27a
|
Replay-safe TLS-F ServerHello profile consistency
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 16:11:41 +03:00 |
|
Alexey
|
409b0ef5ee
|
Expose TLS Fetcher Profile Quality for ServerHello fidelity
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 14:53:21 +03:00 |
|
Alexey
|
3d0560d583
|
Select ServerHello key share from TLS Fetcher Profile
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 14:43:03 +03:00 |
|
Alexey
|
62af515504
|
Generate Valid X25519MLKEM768 ServerHello key shares
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 14:14:09 +03:00 |
|
Alexey
|
eba55e755d
|
Preserve TLS-F Origin Record Choreography
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 13:51:58 +03:00 |
|
Alexey
|
c4b58ad374
|
Hardened TLS-F ServerHello selection
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 13:07:40 +03:00 |
|
Alexey
|
db7ff8737c
|
Add dynamic SNI mask target mode
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-11 10:36:37 +03:00 |
|
Alexey
|
cd2bb9c8cd
|
Alles muss man selber machen
Co-Authored-By: Mikhail I. Izmestev <355023+izmmisha@users.noreply.github.com>
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
Co-Authored-By: Dietmar Schreiber <376736+dginorg@users.noreply.github.com>
|
2026-06-11 10:13:17 +03:00 |
|
Mirotin Artem
|
ff7a12d5f8
|
fix(api): GET /v1/config returns only editable sections; tolerate commented TOML headers; doc fixes
|
2026-06-09 12:13:32 +03:00 |
|
Mirotin Artem
|
d7e16f5b26
|
feat(api): config-edit endpoints PATCH/GET /v1/config
|
2026-06-09 12:03:28 +03:00 |
|
Mirotin Artem
|
e39aaeb5c5
|
feat(config): classify_config_changes (hot vs restart) via overlay_hot_fields
|
2026-06-09 12:03:10 +03:00 |
|
Mirotin Artem
|
1628a7d822
|
feat(api): generic config section writer + array-table bounds
|
2026-06-09 12:03:01 +03:00 |
|
Alexey
|
9bbdf796d8
|
Rustfmt
|
2026-06-06 12:17:19 +03:00 |
|
Alexey
|
27a5f5a4ec
|
MSS Tuning with config
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-06 12:11:05 +03:00 |
|
Alexey
|
7d543aeb67
|
Fixes for Adversarial Timing Profile Latency-flake by #761
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-05 12:59:50 +03:00 |
|
Alexey
|
89a885c25f
|
Reset Interface Cache in Masking timing test
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-05 12:51:54 +03:00 |
|
Alexey
|
54e40fd073
|
Fixes for Load mask shape security test
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-05 12:43:30 +03:00 |
|
Alexey
|
34b48325fd
|
JA3+JA4 Pitfall in API + Beobachten
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-02 08:17:56 +03:00 |
|
Alexey
|
462215b53c
|
Dual-stack fixes for Upstreams by #798
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
|
2026-06-01 19:50:26 +03:00 |
|
Alexey
|
2264980926
|
User Disabler in API by #814 + Consistent Listeners in API by #800
|
2026-05-31 11:17:18 +03:00 |
|
Alexey
|
3d0d575b94
|
Normalize rlimit type on 32-bit targets in Conntrack Control #815
|
2026-05-30 18:13:54 +03:00 |
|
Aleksei K
|
a77aedfd7a
|
Atomically claim pressure eviction budget in MR
|
2026-05-29 13:17:47 +03:00 |
|
Aleksei K
|
2a0fcd6e35
|
Align ServerHello cipher and opaque ALPN behavior in TLS-F
|
2026-05-28 16:11:25 +03:00 |
|
Alexey
|
31da0a1356
|
Fixes for Disable Colors
|
2026-05-26 12:20:28 +03:00 |
|
Alexey
|
d4adf0ef9a
|
ME: Bound writer queue waits under backpressure
|
2026-05-25 00:28:29 +03:00 |
|
Alexey
|
dc8951eae8
|
Reduce MR + ME Routing hot-path contention
|
2026-05-22 20:19:09 +03:00 |
|
Alexey
|
77a7f89075
|
Reuse ME reader scratch buffer across read loop iterations
|
2026-05-22 19:56:38 +03:00 |
|
Alexey
|
9abaf9006c
|
Prioritize Cancellation in MP select paths
|
2026-05-22 16:47:54 +03:00 |
|
Alexey
|
885258b85e
|
Prioritize Relay Flow Cancellation over Buffered Writes
|
2026-05-21 20:35:25 +03:00 |
|
Alexey
|
98c985091c
|
Decomposing hot-path modules into focused submodules
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com>
|
2026-05-21 18:03:55 +03:00 |
|
Alexey
|
c02c7fbe43
|
Reducing hot-path allocs + duplicate telemetry touchs
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com>
|
2026-05-20 17:07:54 +03:00 |
|
Alexey
|
8379b48f69
|
Fix hot-path replay bounds and ME control allocations
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com>
|
2026-05-20 14:05:22 +03:00 |
|
Alexey
|
70d02910b7
|
Fixes for SILENT-mode by #792
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com>
|
2026-05-20 10:54:37 +03:00 |
|
Alexey
|
422d97a385
|
Update load.rs
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com>
|
2026-05-20 10:33:18 +03:00 |
|