Commit Graph

803 Commits

Author SHA1 Message Date
Alexey 199cc641d5 Unlimited ME client admission 2026-10-22 19:23:57 +03:00
Alexey dd6196a62e Retired Quota State retention from surviving user recreation 2026-10-21 21:06:51 +03:00
Alexey 093932dbac SOCKS: classify mapped ME destinations as IPv4 2026-10-20 00:26:10 +03:00
Alexey 0416de3c27 Retain Policy Freshness after Schedule Activation for Quotas 2026-10-19 23:11:25 +03:00
Alexey 6fdc2a5ba4 Rustfmt 2026-10-19 00:15:27 +03:00
Alexey a99b548aa1 Maestro Reload: preserve admission epoch rejection during activation 2026-10-18 23:37:07 +03:00
Alexey 9738244285 WEB: bounded opt-in wildcard host routing added 2026-10-17 23:42:26 +03:00
Alexey 831cd0f1a7 WEB: share immutable profiles + decoys across exact host lists 2026-10-15 07:05:36 +03:00
Alexey 05a367259a Match IPv4 metrics allowlists on dual-stack listeners #849 2026-10-14 19:47:03 +03:00
Alexey 7ef74e53f5 Update behavior_tests.js 2026-10-12 20:13:41 +03:00
Alexey a8d28e6b37 Fix stalled ME relays by observing child task completion #879 2026-10-11 13:55:01 +03:00
Alexey e35db4741d Fix SOCKS BND family validation against the ME destination 2026-10-10 23:22:39 +03:00
Alexey 77ae1108dc Flush buffered adaptive relay writes when the source stalls 2026-10-09 19:59:03 +03:00
Alexey 7053a7faf6 Fix FreeBSD service runtime ownership and privilege drop #913 2026-10-07 20:38:46 +03:00
Alexey deafa4a6cf WEB: skip registry sweeps before the earliest possible expiry 2026-10-06 22:00:13 +03:00
Alexey 556affc63a ME: Autonomous&Lifecycle-bounded Pool Convergence
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-05 06:02:08 +03:00
Alexey bc1c130f38 WEB: Resolve opt-in decoy hostnames during config preparation #929
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-04 14:32:06 +03:00
Alexey e2f1c3f3a9 Bridge JS semicolon warnings fixed 2026-10-03 20:29:18 +03:00
Alexey 823c6cbc7f Bounded WEB HTTP conveyor with replay-safe streaming downlink added
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-03 16:02:18 +03:00
Alexey 84d5e98c11 ME NAT Discovery Cancellation correctness
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-03 12:36:29 +03:00
Alexey d65efcc479 Fix autonomous ME recovery from Direct fallback
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-02 23:51:14 +03:00
Alexey fca6506449 Configurable HTTP Methods for Bridge Carriers
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-01 23:40:08 +03:00
Alexey 86912e34b2 Сonntrack recovery on absent iptables-nft chains fixes
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-10-01 22:50:50 +03:00
Alexey 6fa8da3c43 Daemon stdio ownership and cover runtime path policies fixed
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-09-30 07:40:01 +03:00
Alexey 53f131e34d Runtime Paths Checks as opt-in #935
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-09-29 19:24:29 +03:00
Alexey 555d0be6d9 Trusted Helper Argv0 for Multi-call Firewall Binaries
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com>
2026-09-28 06:16:27 +03:00
Alexey 38eabc50e3 WEB: Base Path: security + reload coverage fixes&tests 2026-09-26 14:25:24 +03:00
Alexey 5feded2919 WEB: Base Path added 2026-09-26 13:49:28 +03:00
Alexey 326c0ecdb9 Rustfmt 2026-09-25 19:49:36 +03:00
Alexey c12c5c73c1 Conntrack: Firewall reconciliation process-owned&transactional 2026-09-25 19:35:31 +03:00
Alexey 26a574780e CAS Contention in Traffic Bucket bounded 2026-09-25 06:32:01 +03:00
Alexey 08109d53e8 WEB Data Budget: Session effects until after state unlock deferred 2026-09-24 01:02:07 +03:00
Alexey f1107c21d9 Process-wide concurrency + Cancellation ownership fixes 2026-09-23 22:30:51 +03:00
Alexey baa9bfbb01 ME Authority + Quota Resets + WEB Replacement Rollback fixes 2026-09-22 03:01:17 +03:00
Alexey 51e706770c WEB Manager Session + Generation Fence tests 2026-09-21 21:08:34 +03:00
Alexey d706b3f3ba Hardswap Invariants in tests + Quota fixes 2026-09-20 00:28:52 +03:00
Alexey 89dacbd17e TOCTOU and lifecycle races across runtime boundaries fixes 2026-09-19 22:37:22 +03:00
Alexey acad414cc7 Runtime paths symlink preserved + User Admission Registration 2026-09-18 23:11:09 +03:00
Alexey 02f66c542e Descriptor-anchored Secured Filesystem Operations 2026-09-17 22:45:48 +03:00
Alexey 9a683d8b3d Slot Budget + Config Store Atomic Writer fixes + Trusted Command 2026-09-16 22:06:59 +03:00
Alexey 55f3d19ee0 Direct-since-epoch 2026-09-15 20:37:41 +03:00
Alexey 5ec9f85530 User Admission Tests 2026-09-14 20:21:41 +03:00
Alexey 0ac236955a Proxy Shared User Drafts 2026-09-14 20:19:48 +03:00
Alexey b37f1ebdeb TLS Replay Digest In-flight Ownership 2026-09-13 21:56:20 +03:00
Alexey 1ea5f7a1d6 Atomic Lifecycle for Writer Refresh + Hardswap 2026-09-12 20:14:41 +03:00
Alexey 54197e848a Update tests.rs 2026-09-11 20:33:01 +03:00
Alexey 479899240a WEB: websocket-lanes upgrade-fail recovery #925 2026-09-10 23:11:36 +03:00
Alexey 844e41ea34 Races in admission + accounting + publication,+ PID fixed 2026-09-09 22:45:02 +03:00
Alexey 021ad1fe68 WEB Bridge Sideband 2026-09-08 21:29:32 +03:00
Alexey 464bc180e1 Rustfmt 2026-09-07 21:01:56 +03:00