59d4475743
feat: relay peer end-to-end encryption via Noise IK handshake ( #1960 )
...
Enable encryption for non-direct nodes requiring relay forwarding.
When secure_mode is enabled, peers perform Noise IK handshake to
establish an encrypted PeerSession. Relay packets are encrypted at
the sender and decrypted at the receiver. Intermediate forwarding
nodes cannot read plaintext data.
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: KKRainbow <5665404+KKRainbow@users.noreply.github.com >
2026-03-07 14:47:22 +08:00
KKRainbow and Claude Opus 4.6
22b4c4be2c
fix: guard macos-ne feature with target_os = "macos" in cfg expressions ( #1962 )
...
All 13 occurrences of `any(target_os = "ios", feature = "macos-ne")` are
replaced with `any(target_os = "ios", all(target_os = "macos", feature = "macos-ne"))`.
Previously, enabling `macos-ne` on non-macOS platforms (e.g. `--all-features`
on Linux) would incorrectly compile macOS/mobile-specific code paths, causing
build failures or wrong runtime behavior.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-05 00:06:21 +08:00
KKRainbow
c58140fb47
update rust to 1.93 ( #1865 )
2026-02-04 09:48:43 +08:00
KKRainbow
bf3edbd28f
remove src modified flag from pm hdr ( #1857 )
2026-02-02 16:47:26 +08:00
KKRainbow
21f4a944a7
fix perf degraded because of impact of is_empty() of dashmap ( #1854 )
2026-02-01 08:51:18 +08:00
KKRainbow
9617005136
make udp->ring transmit reliable ( #1851 )
2026-01-31 17:23:45 +08:00
KKRainbow
9e3c9228bb
improve perf of remove_network in foreign net mgr ( #1847 )
2026-01-30 23:04:31 +08:00
KKRainbow
8727221513
call remove_peer instead of remove_network when peer id not match ( #1844 )
2026-01-30 16:01:52 +08:00
KKRainbow
ffe5644ddc
add token bucket limiter on peer conn recv ( #1842 )
...
We should limit peer conn recv to make sure we don't recv too much from peers.
2026-01-29 16:12:26 +08:00
KKRainbow
101f416268
Introduce secure mode (part 1) ( #1808 )
...
Use noise protocol on handshake. Check peer's public key if needed. Also support rekey and replay attack prevention.
E2EE and temporary password will be implemented based on this.
2026-01-25 20:16:51 +08:00
KKRainbow
8343cd5e76
fix config loss when run network ( #1802 )
2026-01-17 00:58:42 +08:00
KKRainbow
005b321f62
allow open rpc port in gui normal mode ( #1795 )
...
* allow open rpc port for gui normal mode
* downgrade dev tool console
2026-01-16 11:12:32 +08:00
KKRainbow
53264f67bf
fix peer establish direct conn with subnet proxy to one of local interface ( #1782 )
...
* fix peer establish direct conn with subnet proxy to one of local interface
* fix peer mgr ref loop
2026-01-15 01:00:32 +08:00
KKRainbow
4e651a72f7
allow loopback src address in listener ( #1730 )
2026-01-01 00:41:56 +08:00
KKRainbow
cb81c0df85
respond packet should not be dropped if request packet is already allowed ( #1725 )
2025-12-31 08:14:39 +08:00
KKRainbow
39b056c87a
bump version to v2.5.0 ( #1715 )
2025-12-28 23:19:30 +08:00
KKRainbow
c19cd1bff3
add tcp hole punching ( #1713 )
...
add tcp hole punching and tcp stun test
2025-12-28 21:35:30 +08:00
KKRainbow
ca9b4c58b1
fix windivert cause stack overflow ( #1711 )
2025-12-27 19:31:42 +08:00
KKRainbow
4341bcba5d
improve faketcp, handle tcp GSO correctly ( #1708 )
...
Current implementation falsely drop GSO-merged tcp packet, and cause unexpected packet loss.
2025-12-26 23:46:17 +08:00
KKRainbow
28cd6da502
Add fake tcp tunnel (experimental) ( #1673 )
...
support faketcp to avoid tcp-over-tcp problem.
linux/macos/windows are supported.
better to be used in internet env, the maximum
performance is majorly limited by windivert/raw socket.
2025-12-25 00:10:32 +08:00
KKRainbow
7aba65ea32
enhance port forward ( #1662 )
2025-12-09 22:16:16 +08:00
KKRainbow
2bc51daa98
fix whitelist cause packets of other protocal dropped ( #1660 )
2025-12-08 21:56:27 +08:00
KKRainbow and Copilot
838b6101b9
Make ospf route more effiencient ( #1512 )
...
Avoid iterate all peer info and conn list when building sync request.
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-08 13:14:47 +08:00
