3 Commits

Author	SHA1	Message	Date
KKRainbow	2db655bd6d	fix: refresh ACL groups and enable TCP_NODELAY for WebSocket (#2118) ... * fix: refresh ACL groups and enable TCP_NODELAY for WebSocket * add remove_peers to remove list of peer id in ospf route * fix secure tunnel for unreliable udp tunnel * fix(web-client): timeout secure tunnel handshake * fix(web-server): tolerate delayed secure hello * fix quic endpoint panic * fix replay check	2026-04-19 10:37:39 +08:00
Luna Yao	a879dd1b14	chore: update Rust to 2024 edition (#2066)	2026-04-10 00:22:12 +08:00
KKRainbow	ecd1ea6f8c	feat(web): implement secure core-web tunnel with Noise protocol (#1976) ... Implement end-to-end encryption for core-web connections using the Noise protocol framework with the following changes: Client-side (easytier/src/web_client/): - Add security.rs module with Noise handshake implementation - Add upgrade_client_tunnel() for client-side handshake - Add Noise frame encryption/decryption via TunnelFilter - Integrate GetFeature RPC for capability negotiation - Support secure_mode option to enforce encrypted connections - Handle graceful fallback for backward compatibility Server-side (easytier-web/): - Accept Noise handshake in client_manager - Expose encryption support via GetFeature RPC The implementation uses Noise_NN_25519_ChaChaPoly_SHA256 pattern for encryption without authentication. Provides backward compatibility with automatic fallback to plaintext connections.	2026-03-10 08:48:08 +08:00