Maycon Santos
f3214527ea
Use info log-level for firewall manager discover ( #2045 )
...
* Use info log-level for firewall manager discover
* Update client/firewall/create_linux.go
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com>
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com>
2024-05-24 13:03:19 +02:00
Maycon Santos
69048bfd34
Revert "Accept any XDG_ environment variable to determine desktop ( #2037 )" ( #2042 )
...
This reverts commit 67e2185964
2024-05-23 23:15:02 +02:00
Maycon Santos
29a2d93873
Log global lock acquisition per user ( #2039 )
2024-05-23 17:09:58 +02:00
Maycon Santos
6b01b0020e
Enhance firewall manager checks to detect unsupported iptables ( #2038 )
...
Our nftables firewall manager may cause issues when rules are created using older iptable versions
2024-05-23 16:09:51 +02:00
Maycon Santos
9d3db68805
Return the proper error when a peer is deleted ( #2035 )
...
this fixes an issue causing peers to keep retrying the connection after a peer is removed from the management system
2024-05-23 14:59:09 +02:00
Maycon Santos
2e315311e0
Fix the initial daemon retry interval ( #2036 )
2024-05-23 14:52:52 +02:00
Maycon Santos
67e2185964
Accept any XDG_ environment variable to determine desktop ( #2037 )
2024-05-23 12:34:19 +02:00
Maycon Santos
89149dc6f4
Increase the status checks timeout ( #2033 )
...
Some systems might respond with a small delay depending on various factors. Increasing the timeout to reduce the number of false-positive reports
2024-05-23 10:54:01 +02:00
Matthew R Kasun
5a1f8f13a2
use the next available port for wireguard ( #2024 )
...
check if WgPort is available, if not find the next free port
2024-05-22 18:42:56 +02:00
Viktor Liu
e71059d245
Add dummy ipv6 to macos interface ( #2025 )
2024-05-22 12:32:01 +02:00
Maycon Santos
91fa2e20a0
Store location information in peer event meta ( #1994 )
2024-05-22 12:31:16 +02:00
Zoltan Papp
61034aaf4d
Gracefully conn worker shutdown ( #2022 )
...
Because the connWorker are operating with the e.peerConns list we must ensure all workers exited before we modify the content of the e.peerConns list.
If we do not do that the engine will start new connWorkers for the exists ones, and they start connection for the same peers in parallel.
2024-05-22 11:15:29 +02:00
Maycon Santos
b8717b8956
Update the GUI status when daemon unavailable ( #2012 )
...
in case we got no status we mark the GUI app as disconnected
2024-05-21 15:45:49 +02:00
pascal-fischer
50201d63c2
Increase garbage collection on ios ( #1981 )
2024-05-17 15:58:29 +02:00
pascal-fischer
d11b39282b
Enable namserver deactivation if unresponsive on iOS ( #1982 )
2024-05-17 12:59:46 +02:00
Viktor Liu
bd58eea8ea
Refactor network monitor to wait for stop ( #1992 )
2024-05-17 09:43:18 +02:00
Bethuel Mmbaga
a5811a2d7d
Implement experimental PostgreSQL store ( #1939 )
...
* migrate sqlite store to
generic sql store
* fix conflicts
* init postgres store
* Add postgres store tests
* Refactor postgres store engine name
* fix tests
* Run postgres store tests on linux only
* fix tests
* Refactor
* cascade policy rules on policy deletion
* fix tests
* run postgres cases in new db
* close store connection after tests
* refactor
* using testcontainers
* sync go sum
* remove postgres service
* remove store cleanup
* go mod tidy
* remove env
* use postgres as engine and initialize test store with testcontainer
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-05-16 19:28:37 +03:00
Bethuel Mmbaga
a680f80ed9
Add installer support for Synology ( #1984 )
...
* add installer support for the synology
* skip ui installation for Synology
* Fix conflicts
2024-05-15 19:03:49 +03:00
Thorleif Jacobsen
10fbdc2c4a
CentOS installations might have "apt" as "annotation processing tool", fixed so it checks for apt-get ( #1955 )
2024-05-15 16:33:12 +02:00
Viktor Liu
1444fbe104
Don't cancel proxy ctx on conn close ( #1986 )
2024-05-15 09:10:57 +02:00
Maycon Santos
650bca7ca8
Fix lost root zone handler ( #1975 )
...
When there is a connection issue with the
root zone upstream we remove it from the
dns mux, and we need to add it again
2024-05-13 18:11:08 +02:00
Ishan Arora
570e28d227
Fix typo in systemd .service files ( #1972 )
2024-05-13 11:40:57 +02:00
pascal-fischer
272ade07a8
Add route selection to iOS ( #1944 )
2024-05-10 10:47:16 +02:00
Bethuel Mmbaga
263abe4862
Fix windows route exec path ( #1946 )
...
* Enable release workflow on PR and upload binaries
add GetSystem32Command to validate if a command is in the path
it will fall back to the full system32, assuming the OS driver is C
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-05-09 13:48:15 +02:00
Krzysztof Nazarewski
ceee421a05
unify Config generation, loading and updating ( #1586 )
...
* config.go: pull unified Config.apply() out of createNewConfig() and update()
as a bonus it ensures returned Config object doesn't have any configuration
values missing
2024-05-08 18:58:31 +02:00
pascal-fischer
0a75da6fb7
Remove GetNetworkMap stacktrace( #1941 )
2024-05-07 19:19:30 +02:00
Viktor Liu
920877964f
Monitor network changes and restart engine on detection ( #1904 )
2024-05-07 18:50:34 +02:00
pascal-fischer
2e0047daea
Improve Sync performance ( #1901 )
2024-05-07 14:30:03 +02:00
Bethuel Mmbaga
ce0718fcb5
Migrate blob net ip fields to json serializer ( #1906 )
...
* serialize net.IP as json
* migrate net ip field from blob to json
* run net ip migration
* remove duplicate index
* Refactor
* Add tests
* fix tests
* migrate null blob values
2024-05-07 14:01:45 +03:00
Zoltan Papp
c590518e0c
Feature/exit node Android ( #1916 )
...
Support exit node on Android.
With the protect socket function, we mark every connection that should be used out of VPN.
2024-05-07 12:28:30 +02:00
Carlos Hernandez
f309b120cd
Retry reading routing table (bsd) ( #1914 )
...
* Retry reading routing table (bsd)
Similar to #1817 , BSD base OSes will return "cannot allocate memory"
errors when routing table is expanding.
2024-05-07 09:51:43 +02:00
Maycon Santos
7357a9954c
Fix a panic when management is behind an invalid proxy ( #1930 )
...
- Add a new error on gRPC client that doesn't pass the incorrect status from the gRPC client
- Try login only if we have a server public key
2024-05-06 18:04:32 +02:00
Zoltan Papp
13b63eebc1
Remove comments from iptables commands ( #1928 )
2024-05-06 17:12:34 +02:00
Zoltan Papp
735ed7ab34
Fix resolv.conf repairer logic ( #1931 )
...
Stop the file repairer before doing the restore
2024-05-06 17:01:00 +02:00
Carlos Hernandez
961d9198ef
Fix removeAllowedIP ( #1913 )
...
Current implementation of removeAllowedIP recreates the wg iface,
killing all open ports and connections. This is due to that "lines" is
the complete output of `get` from wg-usp and not the specific interface
which changes should be applied to.
2024-05-06 15:33:08 +02:00
Misha Bragin
df4ca01848
Return system serial on a peer HTTP API call ( #1929 )
2024-05-06 14:49:03 +02:00
Viktor Liu
4e7c17756c
Refactor Route IDs ( #1891 )
2024-05-06 14:47:49 +02:00
Viktor Liu
6a4935139d
Ignore cloned routes on bsd ( #1915 )
2024-05-02 23:12:59 +02:00
pascal-fischer
35dd991776
Fix best route selection ( #1903 )
...
* fix route comparison to current selected route + adding tests
* add comment and debug log
* adjust log message
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-05-02 11:51:03 +02:00
Maycon Santos
3598418206
Update the check interval for new geo db and change log level ( #1908 )
...
Update log level to trace and update the check db interval from 60s to 300s
2024-04-30 17:54:29 +02:00
Viktor Liu
e435e39158
Fix route selection IDs ( #1890 )
2024-04-29 18:43:14 +02:00
Maycon Santos
fd26e989e3
Check if channel exist before sending network map ( #1894 )
...
Check for connection channel before calculating and sending the network map
2024-04-29 18:31:52 +02:00
Viktor Liu
4424162bce
Add client debug features ( #1884 )
...
* Add status anonymization
* Add OS/arch to the status command
* Use human-friendly last-update status messages
* Add debug bundle command to collect (anonymized) logs
* Add debug log level command
* And debug for a certain time span command
2024-04-26 17:20:10 +02:00
Viktor Liu
54b045d9ca
Replaces powershell with the route command and cache route lookups on windows ( #1880 )
2024-04-26 16:37:27 +02:00
Bethuel Mmbaga
71c6437bab
add content type before writing header ( #1887 )
2024-04-25 21:20:24 +02:00
pascal-fischer
7b254cb966
add methods to manage rosenpass settings for iOS ( #1879 )
2024-04-23 19:26:03 +02:00
pascal-fischer
8f3a0f2c38
Add retry to IdP cache lookup ( #1882 )
2024-04-23 19:23:43 +02:00
pascal-fischer
1f33e2e003
Support exit nodes on iOS ( #1878 )
2024-04-23 19:12:16 +02:00
pascal-fischer
1e6addaa65
Add account locks to getAccountWithAuthorizationClaims method ( #1847 )
2024-04-23 19:09:58 +02:00
Viktor Liu
f51dc13f8c
Add route selection functionality for CLI and GUI ( #1865 )
2024-04-23 14:42:53 +02:00
