Alexey
86573be493
Event-driven Wakeup for ME Admission-gate
2026-05-08 13:34:41 +03:00
Alexey
658a565cb3
Merge pull request #770 from konstpic/feat/user-source-deny-list
...
feat(access): add per-user source IP deny list checks
2026-05-07 11:56:54 +03:00
Alexey
29fabcb199
Merge pull request #772 from agrofx1/user_check
...
Add root switch or login check
2026-05-07 11:53:50 +03:00
Alexey
efdf3bcc1b
Fix root detection by checking UID
2026-05-07 11:53:29 +03:00
Agrofx
66c37ad6fd
Merge branch 'flow' into user_check
2026-05-07 10:30:57 +03:00
Agrofx
0fcf67ca34
Update install.sh
...
Co-authored-by: Dimasssss <Dimasssss2000@gmail.com >
2026-05-07 10:30:47 +03:00
Agrofx
df14762a12
Add root switch or login check
2026-05-07 06:27:51 +03:00
Alexey
4995e83236
Config Strict and Validator
2026-05-06 20:38:55 +03:00
Alexey
e0f251ad82
TLS Domains masking fixes
2026-05-06 20:29:24 +03:00
Konstantin Pichugin
b605b1ba7c
docs(access): document user_source_deny usage and API path
...
Add config examples and behavior notes for access.user_source_deny, and clarify that it is configured through config.toml rather than dedicated user API request fields.
2026-05-06 19:17:06 +03:00
Konstantin Pichugin
b859fb95c3
feat(access): add per-user source IP deny list checks
...
Add access.user_source_deny and enforce it in TLS and MTProto handshake paths after successful authentication to fail closed for blocked source IPs.
2026-05-06 19:11:18 +03:00
Alexey
8c303ab2b6
Merge pull request #765 from Misha20062006/patch-2
...
Correct saving instructions in QUICK_START_GUIDE.ru.md
2026-05-06 17:13:49 +03:00
Misha20062006
f70c2936c7
Correct saving instructions in QUICK_START_GUIDE.ru.md
...
Updated instructions for saving changes in the guide.
2026-05-06 00:07:14 +03:00
Alexey
d67c37afd7
Merge pull request #762 from astronaut808/feature/tls-front-profile-health
...
Add TLS Front Profile Health metrics
2026-05-05 15:23:01 +03:00
astronaut808
9f9ca9f270
Add TLS front profile health metrics
2026-05-03 18:07:24 +05:00
Alexey
cdd2239047
Merge pull request #758 from mammuthus/feature/metrics-bad-class-export-dashboard
...
Add class-based error metrics and dashboard panels
2026-05-02 00:46:53 +03:00
Alexey
9ee341a94f
Merge pull request #757 from Dimasssss/docs
...
Update CONFIG_PARAMS
2026-05-02 00:36:46 +03:00
mamuthus
a7a2f4ab27
Adjust General metrics dashboard layout
2026-05-01 19:19:00 +00:00
mamuthus
9dae14aa66
Add class-based error metrics and dashboard panels
2026-05-01 18:26:32 +00:00
Dimasssss
f76c847c44
Update CONFIG_PARAMS.en.md
2026-05-01 21:10:34 +03:00
Dimasssss
1aaa9c0bc6
Update CONFIG_PARAMS.ru.md
2026-05-01 21:09:38 +03:00
Alexey
e50026e776
Update README.md
2026-04-30 19:41:40 +03:00
Alexey
7106f38fae
Update Cargo.lock
2026-04-30 11:38:33 +03:00
Alexey
2a694470d5
Update Cargo.toml
2026-04-30 11:37:18 +03:00
Alexey
b98cd37211
TLS Full Certificate Budget Bookkeeping + Hot-path Cleanup and Timeout Invariants + IP-Tracker refactoring + Shard TLS Full-Cert Budget: merge pull request #753 from telemt/flow
...
TLS Full Certificate Budget Bookkeeping + Hot-path Cleanup and Timeout Invariants + IP-Tracker refactoring + Shard TLS Full-Cert Budget
2026-04-30 11:36:30 +03:00
Alexey
8b62965978
Stabilize unknown-DC symlink race test setup
2026-04-30 11:11:04 +03:00
Alexey
d46bda9880
Preserve synchronous IP cleanup queue contract + Rustfmt
2026-04-30 11:05:18 +03:00
Alexey
c3de07db6a
Shard TLS full-cert budget tracking + Bound user-labeled metrics export cardinality
2026-04-30 11:01:10 +03:00
Alexey
61f9af7ffc
Reduce Lock-free IP-Tracker Cleanup backlog
2026-04-30 10:51:04 +03:00
Alexey
1f90e28871
Cap scanner-sensitive Caches and IP-Tracker Cardinality
2026-04-30 10:43:27 +03:00
Alexey
876b74ebf7
Hot-path Cleanup and Timeout Invariants
2026-04-29 23:16:11 +03:00
Alexey
b34e1d71ae
TLS Full Certificate Budget Bookkeeping
2026-04-29 23:00:25 +03:00
Alexey
b1c947e8e3
Limit only new ip when TimeWindow + Fix WorkingDirectory behavior + Atomically updates with Includes + Expose tls_domains links as domain-link pairs + TLS Fetcher on multiple tls_domains: merge pull request #751 from telemt/flow
...
Limit only new ip when TimeWindow + Fix WorkingDirectory behavior + Atomically updates with Includes + Expose tls_domains links as domain-link pairs + TLS Fetcher on multiple tls_domains
2026-04-29 16:04:36 +03:00
Alexey
cfe01dced2
Bump
...
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-29 15:54:22 +03:00
Alexey
8520955a5f
Update helpers.rs
...
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-29 15:53:27 +03:00
Alexey
065786b839
TLS Fetcher on multiple tls_domains by #750
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-29 11:47:42 +03:00
Alexey
f0e1a6cf1c
Expose tls_domains links as domain-link pairs
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-29 11:34:47 +03:00
Alexey
236bbb4970
Atomically updates with Includes
...
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-28 13:00:13 +03:00
Alexey
8ef5263fce
Fix WorkingDirectory behavior
...
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
Co-Authored-By: mikhailnov <m@mikhailnov.ru >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-28 12:31:21 +03:00
Alexey
893cef22e3
Update README.md
2026-04-27 23:49:47 +03:00
Alexey
bdfa641843
Merge pull request #735 from sanekb/fix_timewindow_same_ip
...
fix: limit only new ip when TimeWindow mode enabled
2026-04-25 19:08:36 +03:00
Alexey
007fc86189
Merge branch 'flow' into fix_timewindow_same_ip
2026-04-25 18:56:27 +03:00
Alexey
10c9bcd97d
Merge pull request #747 from telemt/flow
...
Restore active IP observability for users without unique-IP limits
2026-04-25 18:11:30 +03:00
Alexey
8ab9405dca
Bump
2026-04-25 18:05:22 +03:00
Alexey
9412f089c0
Restore active IP observability for users without unique-IP limits
2026-04-25 15:49:28 +03:00
Alexey
4e57cee9b9
Merge pull request #745 from telemt/flow
...
API PATCH fixes + No IP tracking with disabled unique-IP limits + Bound hot-path pressure in ME Relay and Handshake + Bounded ME Route fairness and IP-Cleanup-Backlog + Bound relay queues by bytes
2026-04-25 14:45:34 +03:00
Alexey
e217371dc8
Bump
2026-04-25 14:36:51 +03:00
sanekb
d567dfe40b
fix: limit only new ip when TimeWindow mode enabled
2026-04-25 14:36:43 +03:00
Alexey
37c916056a
Rustfmt
2026-04-25 14:35:35 +03:00
Alexey
2f2fe9d5d3
Bound relay queues by bytes
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-25 13:54:20 +03:00
