Alexey
326c0ecdb9
Rustfmt
2026-09-25 19:49:36 +03:00
Alexey
26a574780e
CAS Contention in Traffic Bucket bounded
2026-09-25 06:32:01 +03:00
Alexey
f1107c21d9
Process-wide concurrency + Cancellation ownership fixes
2026-09-23 22:30:51 +03:00
Alexey
51e706770c
WEB Manager Session + Generation Fence tests
2026-09-21 21:08:34 +03:00
Alexey
d706b3f3ba
Hardswap Invariants in tests + Quota fixes
2026-09-20 00:28:52 +03:00
Alexey
89dacbd17e
TOCTOU and lifecycle races across runtime boundaries fixes
2026-09-19 22:37:22 +03:00
Alexey
acad414cc7
Runtime paths symlink preserved + User Admission Registration
2026-09-18 23:11:09 +03:00
Alexey
02f66c542e
Descriptor-anchored Secured Filesystem Operations
2026-09-17 22:45:48 +03:00
Alexey
9a683d8b3d
Slot Budget + Config Store Atomic Writer fixes + Trusted Command
2026-09-16 22:06:59 +03:00
Alexey
55f3d19ee0
Direct-since-epoch
2026-09-15 20:37:41 +03:00
Alexey
5ec9f85530
User Admission Tests
2026-09-14 20:21:41 +03:00
Alexey
0ac236955a
Proxy Shared User Drafts
2026-09-14 20:19:48 +03:00
Alexey
b37f1ebdeb
TLS Replay Digest In-flight Ownership
2026-09-13 21:56:20 +03:00
Alexey
844e41ea34
Races in admission + accounting + publication,+ PID fixed
2026-09-09 22:45:02 +03:00
Alexey
66f2b8889f
Split oversized runtime modules + Async tests hardened
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-08-30 09:39:33 +03:00
Alexey
281f63f940
Runtime Ownership hardened
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-08-30 08:38:03 +03:00
Alexey
840b6f563a
Rustfmt
2026-08-23 10:56:00 +03:00
Alexey
1029703c2c
WEB
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
Co-Authored-By: John Preston <17900494+john-preston@users.noreply.github.com >
2026-08-23 03:12:53 +03:00
Alexey
fb47ad149c
Rustfmt
2026-08-22 16:31:49 +03:00
Alexey
7f4b87bea4
Redesign runtime w/ include-aware config + Module Split + Listener Lifecycle + Atomic Reload
2026-08-22 16:13:25 +03:00
Alexey
189e10800a
Hardened listener reload + config persistence + SYN Limit startup safety
2026-08-22 13:45:57 +03:00
Alexey
064cd0da61
Merge branch 'flow/3.5.0' into flow-bulk-mss
2026-08-12 21:05:14 +03:00
Alexey
fabd98ce89
Cfg Test for handle_bad_client
2026-07-18 14:31:43 +03:00
Alexey
61ec46c2db
Merge pull request #871 from xaer981/fix/client-mss-bulk
...
fix(server): client_mss_bulk — fragment only ServerHello, keep bulk MSS from start
2026-07-18 14:02:03 +03:00
Alexey
991d5b2c38
Maestro: add in-process runtime generation reload
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-17 23:56:00 +03:00
Alexey
73afeccae1
Rustfmt
2026-07-13 12:20:24 +03:00
Yaroslav Petrovskikh
5e9d99bb4d
fix(server): fragment only the initial FakeTLS response
2026-07-13 11:26:48 +03:00
Alexey
ea296bbdc8
Replace per-session pool trimming with pressure hysteresis
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 21:36:01 +03:00
Alexey
96425f15c8
Bound Direct relay buffers with an adaptive global memory envelope
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-11 20:56:54 +03:00
Alexey
893ce0cf36
Hold C2ME byte permits through ME writer completion
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-07-10 16:35:39 +03:00
Alexey
b8be805aed
Rustfmt
2026-07-06 20:12:36 +03:00
Alexey
25d02a8e0e
Update traffic_limiter.rs
2026-07-04 15:45:51 +03:00
Alexey
81ae483201
Add regression coverage for ME routing, D2C padding, synlimit, and MSS bulk validation
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-30 13:13:11 +03:00
Alexey
9a9fd3f55d
Update d2c.rs
2026-06-29 11:37:30 +03:00
Alexey
f56895feac
Bump -> 3.4.19
2026-06-24 00:53:01 +03:00
Alexey
840713a359
Merge pull request #847 from AndreyOsipuk/feat/client-mss-relay
...
feat(server): client_mss_bulk — fragment only the handshake, restore MSS for bulk data (cuts pps)
2026-06-20 22:10:04 +03:00
Andrey Osipuk
50b67a93d6
feat(server): client_mss_bulk — raise MSS after handshake to cut pps
...
client_mss (e.g. "tspu", MSS=92) fragments the whole connection to evade
DPI on the ServerHello, but it also fragments bulk payload, multiplying
outgoing packets-per-second ~10x. On hosts whose abuse detection counts
pps (not bandwidth) this trips packet-flood limits.
Add an optional [server].client_mss_bulk: keep the low client_mss for the
handshake (ServerHello stays fragmented => DPI bypass intact), then raise
the client socket MSS to client_mss_bulk once the connection enters the
post-handshake (bulk transfer) phase, so bulk data uses normal-size
segments and pps drops back to normal. Same preset/int grammar as
client_mss. Opt-in: when unset, the handshake MSS is kept for the whole
connection (unchanged behavior).
Linux-only (setsockopt TCP_MAXSEG via raw fd, mirroring TCP_USER_TIMEOUT);
no-op on other unix. Documented in CONFIG_PARAMS.{en,ru}.
2026-06-19 11:11:01 +03:00
Alexey
72800e4aa7
Harden masking fallback and frame readers after flow sync
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-17 21:48:57 +03:00
Alexey
37d0184a0b
Implement shared MTProto framing and ME address role separation
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-15 08:50:08 +03:00
Alexey
04b8d8365c
Account for full-word paddings in roundtrip tests
2026-06-14 19:38:54 +03:00
Alexey
b153782597
More efficient Relay Mode
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-13 23:22:50 +03:00
Alexey
b43c683615
Rustfmt
2026-06-11 19:59:48 +03:00
Alexey
09dc0cb76c
Update handshake_security_tests.rs
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-11 19:44:39 +03:00
Alexey
c36eb81808
Fix for TLS-F, ALPN и SNI/ALPN helpers
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-11 19:17:06 +03:00
Alexey
0f8aca56d9
Fix fallback test record iterator lifetime
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-06-11 17:56:21 +03:00
Alexey
4e66933a35
Fix TLS masking test ClientHello fixtures and tail write ordering
2026-06-11 17:51:05 +03:00
Alexey
7cf00db242
Update client_masking_budget_security_tests.rs
2026-06-11 17:32:26 +03:00
Alexey
8bc1ac06d6
Update client_masking_budget_security_tests.rs
2026-06-11 17:31:23 +03:00
Alexey
59cfcf05d3
Update client_masking_blackhat_campaign_tests.rs
2026-06-11 17:23:35 +03:00
Alexey
fcbedf66ea
Update client_masking_blackhat_campaign_tests.rs
2026-06-11 17:21:54 +03:00