Alexey
d100941426
Merge pull request #702 from astronaut808/security-tls-front-fidelity
...
Improve FakeTLS server-flight fidelity using captured TLS profiles
2026-04-16 16:13:23 +03:00
uncle Sam
3bff4fbfcd
Merge branch 'main' into security-tls-front-fidelity
2026-04-15 19:45:35 +05:00
astronaut808
f5b5ea3bbf
Improve FakeTLS server-flight fidelity and macOS portability
2026-04-15 19:35:09 +05:00
Alexey
f36f2eae24
Evaluating hard-idle timeout after read timeout
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 15:20:38 +03:00
Alexey
497ec6aa84
Small frames as idle activity
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 13:38:30 +03:00
Alexey
21ca1014ae
Drafting Traffic Control
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 13:14:45 +03:00
Alexey
902a4e83cf
Specific scopes for Connectivity by #699 and #700
2026-04-15 01:56:49 +03:00
Alexey
696316f919
Rustfmt
2026-04-15 01:39:47 +03:00
Alexey
d7a0319696
Server.Listeners + Upstream V4/V6
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-15 01:32:49 +03:00
Alexey
3fefcdd11f
Fix for beobachten path by #664
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-14 20:09:31 +03:00
Alexey
57dca639f0
Gray Action for API by #630
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-14 19:19:06 +03:00
Alexey
13f86062f4
BINDTODEVICE for Direct Upstreams by #683
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-14 18:32:06 +03:00
Alexey
30fab00bfd
Merge branch 'flow' into fix/windows-run-inner-issue-690
2026-04-14 18:01:18 +03:00
Vladislav Yaroslavlev
abff2fd7fe
fix(maestro): restore Windows build (missing run_inner)
...
The full runtime entry was gated with #[cfg(unix)] while run() still called
run_inner() on non-Unix targets, causing E0425 on Windows (issue #690 ).
Extract shared pipeline into run_telemt_core with a post-bind hook for Unix
privilege dropping; provide cfg-split run_inner wrappers.
Fixes https://github.com/telemt/telemt/issues/690
Made-with: Cursor
2026-04-13 00:21:19 +03:00
Alexey
0b580eccd3
Merge pull request #693 from telemt/flow-timeouts
...
Configureable mask timeouts
2026-04-12 19:51:59 +03:00
Batmaev
26c40092f3
rm hardcoded mask timeouts
2026-04-12 10:46:18 +03:00
Alexey
16c7a63fbc
Fix test for single-endpoint DC
2026-04-12 10:38:22 +03:00
Alexey
69a73d5fec
Merge pull request #647 from miniusercoder/flow
...
fix(me): stabilize single-endpoint DC writer recovery and floor behavior
2026-04-12 10:19:25 +03:00
sintanial
ddeda8d914
feat: add configurable RST-on-close mode for client sockets
...
Add `rst_on_close` config option (off/errors/always) to control
SO_LINGER(0) behaviour on accepted TCP connections.
- `off` (default): normal FIN on all closes, no behaviour change.
- `errors`: SO_LINGER(0) set on accept, cleared after successful
handshake auth. Pre-handshake failures (scanners, DPI probes,
timeouts) send RST instead of FIN, eliminating FIN-WAIT-1 and
orphan socket accumulation. Authenticated relay sessions still
close gracefully with FIN.
- `always`: SO_LINGER(0) on accept, never cleared — all closes
send RST regardless of handshake outcome.
2026-04-10 05:01:38 +03:00
Alexey
4a77335ba9
Round-bounded Retries + Bounded Retry-Round Constant
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-07 19:19:40 +03:00
miniusercoder
185e0081d7
fix(pool): improve endpoint handling during single endpoint outages
2026-04-07 18:57:22 +03:00
Alexey
ba29b66c4c
Merge branch 'flow' of https://github.com/telemt/telemt into flow
2026-04-07 18:42:10 +03:00
Alexey
e8cf97095f
QueueFall Bounded Retry on Data-route
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-07 18:41:59 +03:00
Alexey
59c2476650
Merge branch 'flow' into feature/metrics-build-info
2026-04-07 18:34:51 +03:00
Alexey
3b717c75da
Memory Hard-bounds + Handshake Budget in Metrics + No mutable in hotpath ConnRegistry
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-07 18:18:47 +03:00
miniusercoder
b6a30c1b51
refactor: cargo fmt fixes
2026-04-07 13:52:35 +03:00
Ivan
bc3ad02a20
tls_front/emulator: hash compact cert info payload before TLS emulation
2026-04-07 11:31:12 +04:00
miniusercoder
2b8159a65e
fix(pool): enhance reconnect logic for single-endpoint data centers
2026-04-06 21:06:53 +03:00
miniusercoder
86be0d53fe
fix(me-pool): resolve 0-writer blackouts with zero-allocation constraints
...
- Converts adaptive floor logic from proactive idle drops to reactive
global capacity constraints, fixing sudden drops to 0 active writers.
- Implements `base_req` override gateway via `can_open_writer_for_contour`,
retaining critical connections for starved datacenters during bursts.
- Applies zero-allocation performance optimization via direct inner lock iter,
avoiding `HashSet` generation and deep `RwLock` checks in writer validation paths.
- Scrubs now-dead variables/evaluations (`adaptive_idle_since`,
`adaptive_recover_until`) to fulfill strict memory & hot-path constraints.
2026-04-06 20:27:17 +03:00
Alexey
14674bd4e6
Update relay.rs
2026-04-06 19:01:12 +03:00
Alexey
a36c7b3f66
Update handshake_security_tests.rs
2026-04-06 17:45:45 +03:00
Alexey
d848e4a729
Fixes for test + Rustfmt
2026-04-06 16:12:46 +03:00
Alexey
8d865a980c
MRU Search + Runtime user snapshot + Ordered candidate auth + Sticky hints + Overload Budgets
2026-04-06 15:04:15 +03:00
Alexey
13dc1f70bf
Accept as unknown_sni_action
2026-04-06 12:03:06 +03:00
Alexey
fa4e2000a8
Privileges fix
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-06 11:10:41 +03:00
Alexey
5f5582865e
Rustfmt
2026-04-05 17:23:40 +03:00
Alexey
1f54e4a203
Logging fixes with --syslog
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-05 17:21:47 +03:00
Alexey
977ee53b72
Config Fallback + Working Directory Setup
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-05 14:40:17 +03:00
Alexey
8fe6fcb7eb
ME2DC Fast for unstoppable init
2026-04-05 13:10:35 +03:00
Alexey
7f0057acd7
Conntrack Control Method
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-04-04 11:28:32 +03:00
mammuthus
9b64d2ee17
style(metrics): apply rustfmt for build_info additions
2026-04-03 07:49:37 +00:00
David Osipov
6ea867ce36
Phase 2 implemented with additional guards
2026-04-03 02:08:59 +04:00
mammuthus
873618ce53
metrics: export telemt_build_info version metric
2026-04-02 18:14:50 +00:00
David Osipov
a9f695623d
Implementation plan + Phase 1 finished
2026-04-02 20:08:47 +04:00
Alexey
3df274caa6
Rustfmt
2026-03-31 19:42:07 +03:00
Alexey
780546a680
Memory Consumption in Stats and Metrics
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-31 19:37:29 +03:00
Alexey
729ffa0fcd
Shrink Session Vec
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-31 19:29:47 +03:00
Alexey
e594d6f079
Buffer Pool Trim
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-31 19:22:36 +03:00
Alexey
ecd6a19246
Cleanup Methods for Memory Consistency
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-31 18:40:04 +03:00
Alexey
2dc81ad0e0
API Consistency fixes
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-31 13:03:05 +03:00