Alexey
9412f089c0
Restore active IP observability for users without unique-IP limits
2026-04-25 15:49:28 +03:00
Alexey
37c916056a
Rustfmt
2026-04-25 14:35:35 +03:00
Alexey
2f2fe9d5d3
Bound relay queues by bytes
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-25 13:54:20 +03:00
Alexey
1df668144c
Bounded ME Route fairness and IP-Cleanup-Backlog
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-25 13:09:10 +03:00
Alexey
f25bb17b86
Merge branch 'flow' into api/patch-user-null-removal
2026-04-25 12:28:48 +03:00
Alexey
27b5d576c0
Bound hot-path pressure in ME Relay + Handshake
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-25 12:16:26 +03:00
Alexey
e78592ef9b
Avoid IP tracking when unique-IP limits are disabled and cap beobachten memory
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Signed-off-by: Alexey <247128645+axkurcom@users.noreply.github.com >
2026-04-25 12:00:46 +03:00
Mirotin Artem
4ed87d1946
feat(api): support null-removal in PATCH /v1/users/{user}
...
PatchUserRequest now uses Patch<T> for the five removable fields
(user_ad_tag, max_tcp_conns, expiration_rfc3339, data_quota_bytes,
max_unique_ips). Sending JSON null drops the entry from the
corresponding access HashMap; sending 0 is preserved as a literal
limit; omitted fields stay untouched. The handler synchronises the
in-memory ip_tracker on both set and remove of max_unique_ips. A
helper parse_patch_expiration mirrors parse_optional_expiration for
the new three-state field. Runtime semantics are unchanged.
2026-04-25 00:49:34 +03:00
Mirotin Artem
635bea4de4
feat(api): add Patch<T> enum for JSON merge-patch semantics
...
Introduce a three-state Patch<T> (Unchanged / Remove / Set) and a
serde helper patch_field that distinguishes an omitted JSON field
from an explicit null. Wired up next as the field type for the
removable settings on PATCH /v1/users/{user}.
2026-04-25 00:49:34 +03:00
Alexey
033ebf5038
Relays Tests Fixes
2026-04-24 15:51:19 +03:00
Alexey
8960fad8cd
Сlassified Bad Connections and Handshake Failures in API
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-24 10:56:30 +03:00
Alexey
493f5c9680
ALPN in TLS Fetcher
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-23 22:22:05 +03:00
Alexey
67357310f7
TLS 1.2/1.3 Correctness + Full ServerHello + Rustfmt
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-23 21:29:18 +03:00
Alexey
8684378030
Human-readable Peer Close Classification
2026-04-21 15:46:18 +03:00
Alexey
db8d333ed6
Noisy-network peer Close Errors Classification
2026-04-21 15:35:11 +03:00
Alexey
4ce6b14bd8
Rustfmt
2026-04-21 13:31:24 +03:00
Alexey
db114f09c3
Sync tests with code
2026-04-21 13:30:11 +03:00
Alexey
09310ff284
Unlimited mask_relay_max_bytes
2026-04-21 11:30:58 +03:00
Alexey
1e5b84c0ed
Fairshare Disabled semantics fix
2026-04-21 11:21:58 +03:00
Alexey
926e3aa987
Fairness Regression fixes
2026-04-21 01:11:43 +03:00
Alexey
9cb49bc024
Fix in Fairness tests
2026-04-19 19:03:45 +03:00
lie-must-die
dd27206104
Implement test for unknown SNI reject policy
...
Add test for unknown SNI rejection policy emitting TLS alert.
2026-04-19 12:44:39 +03:00
lie-must-die
f11c7880e6
Enhance unknown SNI action handling in handshake
...
Updated handling of unknown SNI actions in TLS handshake process. Added support for RejectHandshake action and adjusted delay application logic.
2026-04-19 12:43:54 +03:00
lie-must-die
5b07ffae7c
Implement test for unknown_sni_action in ProxyConfig
...
Added test case for unknown_sni_action configuration.
2026-04-19 12:42:52 +03:00
lie-must-die
7bbed133ee
Add RejectHandshake variant for TLS configuration
...
Added a new variant 'RejectHandshake' to handle TLS handshake rejection with a specific alert.
2026-04-19 12:40:10 +03:00
Alexey
f1bf95a7de
Merge pull request #718 from astronaut808/fix/me-downstream-retry
...
Improve ME downstream retries for queued fairness backlog
2026-04-18 14:03:37 +03:00
Alexey
a54f9ba719
Merge branch 'flow' into feature/configurable-proxy-confi-urls
2026-04-18 11:16:38 +03:00
astronaut808
2d5cd9c8e1
Improve ME downstream retries for queued fairness backlog
2026-04-18 02:40:32 +05:00
Alexey
37b6f7b985
Weighted Fairness + 3-Leveled Pressure Model
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-18 00:37:04 +03:00
Alexey
50e9e5cf32
Active Ring and DRR Hardening
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-18 00:34:35 +03:00
Alexey
d72cfd6bc4
Merge branch 'flow' into feature/configurable-proxy-confi-urls
2026-04-17 19:44:46 +03:00
Dmitry Zarva
fa3566a9cb
- fix: fmt issues
2026-04-17 16:20:16 +00:00
Alexey
bde30eaf05
Update emulator.rs
2026-04-17 19:20:06 +03:00
Alexey
b447f60a72
Rustfmt + Bump
2026-04-17 19:08:57 +03:00
Alexey
093faed0c2
Conntrack Control for Docker
2026-04-17 19:06:18 +03:00
Alexey
3ca3e8ff0e
Docker Health-Check
2026-04-17 16:36:15 +03:00
Dmitry Zarva
2a168b2600
feat: make URLS to obtain proxy_secret, getProxyConfig, getProxyConfigV6 files optionally configurable
2026-04-17 13:04:46 +00:00
Alexey
6e3b4a1ce5
ServerHello fixes
2026-04-17 15:11:36 +03:00
Alexey
947ef2beb7
Fixes in TLS-F
2026-04-17 12:38:22 +03:00
Alexey
191ca35076
Update scheduler.rs
2026-04-17 11:20:58 +03:00
Alexey
44485a545e
Fixes for unused imports
2026-04-17 11:06:42 +03:00
Alexey
17a966b822
Rustfmt
2026-04-17 10:48:01 +03:00
Alexey
073eacbb37
PROXY Protocol V2 UNKNOWN/LOCAL misuse fixes for TLS-Fetcher by #713
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-17 10:43:49 +03:00
Alexey
5c99cd8eb7
Backpressure-driven Fairness
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-17 10:33:37 +03:00
Alexey
d100941426
Merge pull request #702 from astronaut808/security-tls-front-fidelity
...
Improve FakeTLS server-flight fidelity using captured TLS profiles
2026-04-16 16:13:23 +03:00
uncle Sam
3bff4fbfcd
Merge branch 'main' into security-tls-front-fidelity
2026-04-15 19:45:35 +05:00
astronaut808
f5b5ea3bbf
Improve FakeTLS server-flight fidelity and macOS portability
2026-04-15 19:35:09 +05:00
Alexey
f36f2eae24
Evaluating hard-idle timeout after read timeout
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 15:20:38 +03:00
Alexey
497ec6aa84
Small frames as idle activity
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 13:38:30 +03:00
Alexey
21ca1014ae
Drafting Traffic Control
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 13:14:45 +03:00