astelm/telemt
1
0
Fork 0
mirror of https://github.com/telemt/telemt.git synced 2026-09-05 18:16:06 +03:00
Code Issues Packages Projects Releases Wiki Activity
1,850 Commits 2 Branches 109 Tags
8b2b88f30ca0971e889c2589adb247a24e3dca6b
Commit Graph

722 Commits

Author SHA1 Message Date
Alexey 8b2b88f30c Session Residence + Ownership 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 18:44:17 +03:00
Alexey 016ad247a4 Pending Bytes&Items in Carrier Lanes 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 18:40:06 +03:00
Alexey 75b2aae009 Lane Open Modes 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 18:36:43 +03:00
Alexey 01cb219482 StreamCompletion + Carrier Lines tuning 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 18:35:50 +03:00
Alexey f180057973 Carriers Auto-negotiation Aggressiveness 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 18:33:56 +03:00
Alexey 923c79796a Bounded Debugging + Websocket Carriers + Carriers Negotiation 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-26 17:00:20 +03:00
Alexey d2edd90479 WEB: websocket + websocket-lanes as Carrier 2026-08-26 09:16:06 +03:00
Alexey e774bc8c9a WEB Debug + Trace 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-25 12:59:41 +03:00
Alexey 0779cd0901 Compat Bootstrap Literal for iOS 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 22:07:20 +03:00
Alexey 1a18f2452f Fixed routing across endpoint refresh 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 20:43:22 +03:00
Alexey 3188c8e417 WEB + Apple iOS Fallback Cache fixed 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 18:05:12 +03:00
Alexey 1bd85535f4 WEB Handshake OPEN -> DATA Misuse fixed 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 17:09:45 +03:00
Alexey ebed2ff050 Update tests.rs 2026-08-23 14:46:09 +03:00
Alexey 4fe3eae1f0 Fix Windows WEB carrier empty-cookie compatibility 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 13:39:38 +03:00
Alexey 840b6f563a Rustfmt 2026-08-23 10:56:00 +03:00
Alexey 030466603f WEB Carrier behavior aligned w/ reference 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 10:22:13 +03:00
Alexey 90c0d65e1b WEB Carrier: https-lanes 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-08-23 09:04:53 +03:00
Alexey 1029703c2c WEB 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
Co-Authored-By: John Preston <17900494+john-preston@users.noreply.github.com>
 2026-08-23 03:12:53 +03:00
Alexey fb47ad149c Rustfmt 2026-08-22 16:31:49 +03:00
Alexey 7f4b87bea4 Redesign runtime w/ include-aware config + Module Split + Listener Lifecycle + Atomic Reload 2026-08-22 16:13:25 +03:00
Alexey 189e10800a Hardened listener reload + config persistence + SYN Limit startup safety 2026-08-22 13:45:57 +03:00
Alexey 32ff9e16c1 Merge pull request #878 from l0nelynx/feat/config-api-server-listeners 
feat(api): allow GET/PATCH of server.listeners via config API
 2026-08-22 10:09:17 +03:00
Alexey c488970569 Merge pull request #877 from anton-vinogradov/fix/synlimit-default-burst 
fix(synlimit): raise default synlimit_burst from 1 to 24
 2026-08-12 21:26:16 +03:00
Alexey 25e76a3afb Merge pull request #884 from vgrebenschikov/feature/synlimit-pf-support 
Add PF synlimit backend
 2026-08-12 21:17:40 +03:00
Alexey 064cd0da61 Merge branch 'flow/3.5.0' into flow-bulk-mss 2026-08-12 21:05:14 +03:00
Alexey 7289621458 Update listeners.rs 2026-08-12 21:03:51 +03:00
Dmitry 723da8c34c Merge remote-tracking branch 'upstream/main' into feat/config-api-server-listeners 2026-07-20 11:57:05 +00:00
Vladimir Grebenshchikov e2eec67a33 Add PF synlimit backend 
Implement synlimit = "pf" for PF-based firewalls using per-listener source tracking rules in a Telemt-owned anchor.

PF evaluates max-src-conn-rate through source tracking when creating
tates for completed TCP connections. Telemt installs a rate-limited pass
rule followed by a reject fallback rule in the listener anchor:

  - under-limit new connections create PF state and pass;
  - over-limit new connections fall through to block return-rst;
  - access resumes automatically when the source rate drops below the configured window.

Keep Linux iptables/nftables behavior unchanged.
PF maps synlimit_hitcount / synlimit_seconds to max-src-conn-rate and intentionally has
no direct equivalent for Linux-only burst/hashlimit knobs.
 2026-07-20 09:43:46 +02:00
Alexey a5216d77fb Rustfmt 2026-07-19 18:41:23 +03:00
Alexey 4679bdcfd5 Atomic Maestro Sessions + Shutdown gate 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-19 16:10:42 +03:00
Alexey fabd98ce89 Cfg Test for handle_bad_client 2026-07-18 14:31:43 +03:00
Alexey c6f40e3717 Harden Maestro reload lifecycle and readiness barriers 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-18 14:27:24 +03:00
Alexey 61ec46c2db Merge pull request #871 from xaer981/fix/client-mss-bulk 
fix(server): client_mss_bulk — fragment only ServerHello, keep bulk MSS from start
 2026-07-18 14:02:03 +03:00
Alexey 991d5b2c38 Maestro: add in-process runtime generation reload 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-17 23:56:00 +03:00
l0nelynx 9248076572 style: rustfmt config_edit test helper chain 2026-07-17 22:49:18 +03:00
l0nelynx f1d08c4ae6 feat(api): allow PATCH/GET of server.listeners via config API 
Add a nested field-level allowlist under [server] so listeners can be managed remotely without exposing server.api auth_header or other bind-identity fields.
 2026-07-16 22:44:42 +03:00
Anton Vinogradov f770756cba fix(synlimit): raise default synlimit_burst from 1 to 24 
The generic-path SYN limiter default of burst=1 admits only one new
connection per source IP, then refills at 48/minute (0.8/s). Telegram
clients open several connections at once on startup/reconnect, so the
extra SYNs are rejected with TCP RST until a token accrues — clients
intermittently fail to connect until the app is restarted.

The iOS fast-path (meta length 64) does not match real-world traffic
behind carrier NAT/NAT64 (SYNs arrive as 60 bytes), so the generic path
governs all clients, iPhone included. Raise its default burst to 24 —
the value already used by the iOS path — so a legitimate startup fan-out
passes. Steady-state rate (48/minute) is unchanged, preserving the
anti-TSPU posture.

Updates the default constant, the default-assertion test, and the EN/RU/DE
CONFIG_PARAMS docs.
 2026-07-16 13:04:23 +03:00
Alexey 73afeccae1 Rustfmt 2026-07-13 12:20:24 +03:00
Yaroslav Petrovskikh cd38e8ca80 chore: fix rustfmt import order 2026-07-13 11:27:24 +03:00
Yaroslav Petrovskikh 5e9d99bb4d fix(server): fragment only the initial FakeTLS response 2026-07-13 11:26:48 +03:00
Alexey 8c65cd868c Enable expanded AES key schedule zeroization 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-11 21:43:01 +03:00
Alexey ea296bbdc8 Replace per-session pool trimming with pressure hysteresis 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-11 21:36:01 +03:00
Alexey fb042f826e Optimize crypto and Fake-TLS buffer residency 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-11 21:22:17 +03:00
Alexey 96425f15c8 Bound Direct relay buffers with an adaptive global memory envelope 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-11 20:56:54 +03:00
Alexey d4c4980e5a Bound ME writer queues by resident payload bytes 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-11 18:43:42 +03:00
Alexey 893ce0cf36 Hold C2ME byte permits through ME writer completion 
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
 2026-07-10 16:35:39 +03:00
Alexey b8be805aed Rustfmt 2026-07-06 20:12:36 +03:00
Alexey a1ebd44cee Update load_basic_tests.rs 2026-07-05 19:58:37 +03:00
Alexey 25d02a8e0e Update traffic_limiter.rs 2026-07-04 15:45:51 +03:00
Alexey 3375017460 Add the new key to the hot-reload snapshot type 2026-07-04 13:11:08 +03:00