Changelog for yggdrasil-go-0.5.8-1.12.i586.rpm :

* Tue Aug 13 2024 dead_mozayAATTopensuse.org- Update to version 0.5.8:
* Link state tracking tweaks and improved shutdown
* Multicast module state tweaks
* Remove `waitForTUNUp` from TUN
* Fixed wait for TUN to come up (#1157)
* Tue Aug 06 2024 dead_mozayAATTopensuse.org- Update to version 0.5.7:
* Improve link and handshake errors
* Implement websocket (ws:// and wss://) links (#1152)
* TUN vectorised reads/writes (#1145)
* Various clean-ups
* Allow multiple connections to the same link-local address
* Fri May 31 2024 dead_mozayAATTopensuse.org- Update to version 0.5.6:
* Measure RTT, report in `getPeers` (#1143)
* Fix interval check when sending multicast beacons
* Update more GHA actions due to deprecations
* Minor Fixes (#1107)
* update ironwood and other dependencies
* fix incorrect pool use
* update ironwood (updates bloom dependency)
* Sun Jan 28 2024 dead_mozayAATTopensuse.org- Update to version 0.5.5:
* Release: Yggdrasil 0.5.5
* Fix panic in `getPeers` on abstract UNIX socket names
* Adjust default backoff max to just over 1 hour, add `?maxbackoff=` peer option (#1124)
* Update dependencies
* Update ironwood to `ddd1fa6`
* Improve `getPeers` sorting
* Update behaviour in QUIC listener handler
* Validate public key lengths on `debug_` API endpoints (fixes #1113)
* Fix `PPROFLISTEN`
* Tue Nov 28 2023 dead_mozayAATTopensuse.org- Update to version 0.5.4:
* update ironwood dependency, should fix bloom filter encoding crash
* Mon Nov 27 2023 dead_mozayAATTopensuse.org- Update to version 0.5.3:
* Tweak logging
* Fix `-normaliseconf` when using `PrivateKeyPath`
* Don\'t use 0-RTT for QUIC
* update ironwood dependency
* Cap link backoff at roughly 4.5 hours
* Tweak backoff success handling
* update ironwood, fixed data race from buffered pathfinder traffic
* Wed Nov 08 2023 dead_mozayAATTopensuse.org- Update to version 0.5.2:
* Add `-publickey` command line switch (#1096)
* Don\'t panic when connect returns `nil` (fixes #1086) (#1089)
* Add `sockstls://` (#1090)
* Report errors during handshake stage (#1091)
* Improve TUN setup logging (#1093) (#1095)
* update ironwood dependency
* Don\'t panic at startup when duplicate peers are configured
* Don\'t import `LDFLAGS` from the environment
* Sun Oct 29 2023 dead_mozayAATTopensuse.org- Update to version 0.5.1:
* clean up some debug API output
* update ironwood dependency, add a debug API call for lookups
* Fixes logger, adds some log messages.
* Remove DHT from `yggdrasilctl` help text (fixes #1069)
* Fix `RetryPeersNow`, move startup logging, don\'t set TUN address if not available
* Remove unnecessary pprof log line
* Restore `removePeer` method
* Allow `PPROFLISTEN` on all builds
* mobile: add support for `Listen` in config (#1063)
* Add output for threadcount and key generation time to cmd/genkey
* Fix panic in mobile `GetPeersJSON`
* Don\'t tightloop when a listener can no longer accept connections
* Don\'t require TLS client certificate
* Version 0.5 RC1 release notes
* Don\'t send a TLS ALPN name
* Fix panic on invalid handshake length
* Revert Wireguard TUN upgrade (needs work for vectorised reads)
* Multicast passwords
* Remove TLS root validation
* Add unit test for password auth
* Add authenticated handshake, support for passwords
* Fix more codefactor suggestions
* Fix codefactor suggestion
* Fix mobile unit test
* Don\'t set BBR for TCP peerings
* Only set mobile memory limit on supported Go versions
* Fix build tags for `setupFD`
* Fix missing `setupFD` stubs
* Use Go 1.21 in CI, update minimum version to Go 1.20, lint fixes, update `quic-go`
* Fix negotiating priority on connection
* Fail to start if no configuration provided
* Revise multicast format to include protocol version, discriminator for TLS roots
* Remove debug lines
* Keepalives are needed to stop the connection inactivity timeout
* QUIC interface support
* Tweak link handshake
* Fix private key setup when certificate not specified
* Take interface in `tun.New`
* Define interface for RWCs
* Switch back to using an actor to manage link state, and slighty randomize the delay between multicast announcements. This seems to fix the issue with duplicate connections (and breaks a livelock in the multicast code where both nodes keep closing the listen side of their connection, but that\'s kind of a hack, we need a better solution)
* cmd/yggdrasil: do not log timestamps to syslog
* Update `contrib/mobile` for the latest iOS build
* Improve link setup locking and guards
* Fix race condition between incoming and outgoing connection setup
* try to cheer up the linter again
* cheer up the linter
* reduce allocations (also pulls in updated ironwood to do the same)
* Tweak lock behaviour
* Tweak link state locking, add comments, listener priority, other fixes
* Fix incoming connection handlers
* Discriminate multicast peers more loosely
* Use regular mutex instead (less type assertions)
* Use `sync.Map` instead of link actor
* Fix con urrent map accesses
* Fix `-autoconf`
* `yggdrasilctl` tweaks
* Fix Windows build
* Add missing path notify and bloom transform
* Fix unit test
* Link refactoring, admin socket changes
* update ironwood dependency (it should build now...)
* update ironwood dependency
* Update mobile bindings
* update to bugfixed ironwood, fix broken core test, add getPaths handler to admin socket
* Update to Arceliar/ironwoodAATT14d951a
* update admin functions and fix core tests
* fix core tests and run gofmt on src
* comment out some unused ipv6rwc code
* update ironwood replace, update ipv6rwc to work (may need updates later if interface changes)
* Update ironwood replace
* New handshake, use `softcrdt` upstream
* Fix lint error properly this time
* Deduplicate some logic
* Try all addresses when connecting to a DNS name
* Mon Nov 21 2022 dead_mozayAATTopensuse.org- Update to version 0.4.7:
* Reduce allocations in `encrypted` package (update to Arceliar/ironwoodAATTec61cea)
* Less aggressive key ratcheting (update to Arceliar/ironwoodAATTbf5f12a)
* Fix race conditions (update to Arceliar/ironwoodAATT2c0740b)
* Update to Arceliar/ironwoodAATT846a97f5e5bb7b4002638c1c33790707a7060e8f
* Fix crash
* Redial failed connections if possible (#983)
* Make TLS certs never expire (#977)
* Fix #975 by not exporting `uint8`
* Added two new methods to `mobile` package (#974)
* Fix bug in admin socket where requests fail unless `\"arguments\":{}` is specified in the JSON
* Priority support (#964)
* Fix panic in `GetPeers` that may happen mid-link setup
* Don\'t start multicast module if all `Beacon` and `Listen` are disabled
* Varying connection check strictness based on scope
* Don\'t reject multiple genuine links from the same host
* Always allow link-local peerings again
* Fix reporting name for TCP
* Use `SO_REUSEADDR` instead of `SO_REUSEPORT` on Linux
* Tweak logging for connections
* Don\'t log `duplicate connection attempt`
* Fix `InterfacePeers`
* Thu Oct 27 2022 dead_mozayAATTopensuse.org- Update to version 0.4.6:
* No changelog.
* Wed Oct 19 2022 dead_mozayAATTopensuse.org- Update to version 0.4.5:
* Improve shutdown behaviour (fixes #891)
* Fix setting nodeinfo (closes #954)
* Tidy up
* Tweaks to `yggdrasilctl`
* Don\'t allow configuring the same peer more than once
* Silence `already connected to this node`
* Reimplement AddPeer and RemovePeer for admin socket (#951)
* Fix sending arguments to the admin socket in `yggdrasilctl`
* Update to Arceliar/ironwoodAATTed4b6d4
* Lint tweaks
* Use deadline for link handshake (#949)
* Add quote marks to `InterfacePeers` comment
* Rename `tuntap` package to `tun`
* Allow setting default config path and `AdminListen` at compile time
* Silence error when reconnecting to already connected peer
* Remove packaging from main CI run
* Admin socket and `yggdrasilctl` improvements
* Link refactor (#941)
* Load listen addresses
* Extend `getSessions` admin call to include uptime/TX/RX
* Length not capacity
* Tidy up a bit, make sure to copy the private key at startup
* Refactor TUN setup (isolated config)
* Refactor admin socket setup (isolated config)
* Refactor multicast setup (isolated config, etc)
* Move `Core._applyOption`
* Admin socket and `yggdrasilctl` refactoring (#939)
* Fix panic in `tcp.init` for incorrectly formatted listen addresses
* Delete unused param (#935)
* Fix Android multicast crash (#930)
* No longer use `ioutil` which is deprecated
* Fri Jul 08 2022 dead_mozayAATTopensuse.org- Update to version 0.4.4:
* ICMPv6 \"Packet Too Big\" payload size has been increased, which should fix Path MTU Discovery (PMTUD) when two nodes have different IfMTU values configured.
* A crash has been fixed when handling debug packet responses.
* yggdrasilctl getSelf should now report coordinates correctly again.
* Thu Nov 04 2021 dead_mozayAATTopensuse.org- Update to version 0.4.2:
* Revert Wireguard update
* Use `network-online.target` instead of `network.target` for systemd service unit
* Update dependencies
* Fix panic in `address.GetKey()` (fixes #860)
* Update CI to use Go 1.17, produce Apple Silicon builds (closes #844)
* Use newer Xcode image for macOS builds in CircleCI
* better way to empty ipv6rwc buffer
* fix race from mutex that wasn\'t held long enough
* gofmt to add new build comments
* Align struct elements to byte boundaries: reduce memory footprint. (#834)
* Check tun.config is not equal to nil before usage (#830)
* Rename protohandler attributes
* Align and reorder code for lesser diff
* Organize code in \"src/core/proto.go\"
* Add type core.AddHandlerFunc
* Revert \"Add IPReadWriteCloser interface\"
* Add IPReadWriteCloser interface
* Split yggdrasilctl code into separate functions (refactoring) (#815)
* Set SNI by default if the peering URI contains a DNS name
* Allow specifying TLS SNI with ?sni= in peering URI
* Allow yggdrasil bind to ports <1024
* Preallocate memory when deriving address from key
* fix core tests
* fix debug rpcs and cleanup core.Close/core.Stop
* Revert \"Add LocalAddr to complete net.PacketConn interface\"
* Add LocalAddr to complete net.PacketConn interface
* have the core wrap and export the underlying PacketConn, move IPv6 ReadWriteCloser wrapper logic to a separate package
* Sun Jul 04 2021 dead-mozayAATTopensuse.org- Update to version 0.4.0:
* Revert \"Merge pull request #796 from Chaz6/update-systemd-files\"
* make sure genconf exits, clean up some commented out code
* Update binary path in systemd service files to match the website.
* changelog revisions
* add first draft of changelog
* disable SIGHUP handling for now
* listen for SIGHUP, restart node (reload config file, listen for stdin again, etc) if we receive one
* Fix core_test.go
* multicast configuration changes
* attempt to convert old multicast listen regexps into new struct format
* change multicast config format
* move GenerateConfig to defaults, to adjust dependency ordering, needed for stuff later
* make socks connect to tls listeners, TODO make that configurable
* remove string from multicast announcement format
* make failed sends a debug log, instead of error
* Remove doc folder, out of date
* Update config comments
* use TLS for multicast peers, fix TLS listener type in log output
* when using tls, if no pinned key is set, pin the key from the cert. require that cert keys match a pinned key
* update ironwood, only store 1 packet in the pre-session buffer
* fix core_test.go and a race in setting/using mtu
* skip multicast packets sent from our own key
* Update build script for Android/iOS
* update ironwood, fixes bug where sessions could become stuck after a node restarts
* don\'t return an error if the source address is wrong, since this happens very frequently for link-local traffic
* add remote URI to GetPeers (fallback to net.Conn.RemoteAddr().String() if the uri is unknown)
* fix nodeinfo and debug admin functions, this is ugly / a hack, but it works i guess...
* Add missing icmpv6.go
* Upgrade appveyor runner 2017 -> 2019
* move ICMP PacketTooBig sending into core
* Fix wintun hopefully
* Download wintun on first pass
* Remove -aslr
* Fix version numbers in MSI
* Update MSI build again
* mostly finish migration of IP stuff to core, tuntap is still responsible for ICMP PacketTooBig
* Update build-msi.sh
* Revert \"Build MSIs for Windows using CircleCI (#766)\"
* WIP moving IP-specific checks from tuntap to core
* Update dependencies
* fix logging for socks
* move position of log line on shutdown
* keep a context in the core, use it for listen/dial, cancel it when closing
* use DialContext
* Replace ?ed25519= with ?key= in peering URIs
* fix nBytes check in multicast code
* remove session firewall, this can\'t prevent memory use so it\'s better to just use OS native tools
* remove bashisms for semver
* update ironwood dependency
* Semver version fix
* Use git describe again
* Go back to old semver version for now
* Remove src/core/doc.go
* Include public key in yggdrasilctl getSelf output for v0.4 nodes
* Further tweaks to transition handling
* Don\'t add mutex to config output
* Ensure PublicKey is correct when extracting from old config
* Use git describe output for versions
* Run tests in CI
* Ensure PublicKey option is unused, map old config options
* Remove module package, it didn\'t really give us anything anyway
* Clean up util package
* fix nil pointer when attempting to access node config
* add public keys to multicast, public key pinning to multicast peering
* Fix lint error
* Fix lint errors
* Remove config.NodeState (hot reconfig is no longer supported)
* update dependency (ironwood), fix units in core benchmark
* more cleanup and fix a busyloop when the admin socket is shut down
* cleanup unused code
* possibly fix src/core/core_test.go
* remove metric stuff, there\'s already enough new stuff to test, maybe revisit this in a future release
* cleanup
* add Listen to api and listenURL to tcp
* read metric from urls for listen and peers
* use url.URL in place of string for most internal listen/peer address handling
* add metric to metadata exchange, but currently left at default 0 value
* update ironwood dependency, fix ansible code, go mod tidy
* rename src/yggdrasil to src/core
* remove obsolete crypto package
* rename debug admin socket functions
* cleanup proto admin socket response formats
* tun session protocol traffic cleanup
* add remote debugGetSelf and fix some return type things in the other debug functions
* get debugGetPeers and debugGetDHT working in the admin socket
* WIP adding crawling debug packets
* update ironwood dependency, fix api
* admin socket getpaths
* possibly fix admin socket getnodeinfo
* WIP on nodeinfo admin handler
* Fix getself, gettuntap etc
* Fix admin socket list
* Fix bug
* Use uint64 for MTU for forward-compatibility
* more nodeinfo WIP, still needs admin socket support
* work-in-progress adding nodeinfo
* Refactor admin socket, export request/response structs, remove types package
* allow for multiple traffic types inside the session at the tuntap level, only implement typeSessionTraffic for now
* start a reader to disard traffic if the tun is disabled
* cleanup unused MTU code from tun keystore
* move sessionfirewall into the tuntap. this needs testing. the name is also slightly wrong, since a crypto session can still be set up, packets are just accepted/rejected at the tun/tap level instead
* get minimal admin socket working (introspection only, no ability to add peers etc)
* remove TunnelRouting from config, remove Signing from key names
* remove ckr
* add minimal src/yggdrasil/api.go functions inspect internal state
* set version to an obviously unstable value, fix peer address formatting in the connect/disconnect messages
* remove debug logging
* Respond with ICMPv6 Packet Too Big over network
* Remove reconfiguration on SIGHUP - it didn\'t work reliably anyway
* Remove obsolete switch options
* Fix AllowedPublicKeys
* Metadata/version tweaks
* Remove encryption public key options (they are now derived from ed25519 key conversion in IW), also bump link version number
* update genkeys to new address format
* limit MTU to no more than what the packetconn claims to support
* reduce time keystore mutex is held and (apparently) fix a deadlock
* WIP close the ironwood PacketConn when shutting down
* fix ironwood dependency version
* dependency update
* (broken state) WIP, compiles and passes the netns ping test
* (broken state) more WIP (cleanup)
* (broken state) more tuntap WIP to add out-of-band key lookup
* (broken state) more WIP on tuntap stuff
* (broken state) WIP on tuntap
* (broken state) WIP rewriting core to use ironwood
* (broken state) WIP address migration
* Update Dockerfile
* use source routes in the dht (when available)
* adjust when dht reqs are reset
* simplify switch parent selection and minor source routing improvements
* send dht responses via reverse path (fixes some possible DDoS issues with the old coord approach)
* adjust how sessions learn source routes, try to recover faster if coords change (but assume the old path still works until we get a ping through that gives us a new path)
* safer pathfinding behavior
* simplify pathfinder
* WIP very simple insecure proof-of-concept for pathfinding and source routing
* add path information to (protocol) traffic packets as they flow through the network, and a field for a reply path
* WIP rough implementation of the source routed part of hybrid routing, does not work if coord length is too long (>127 hops)
* add (but don\'t use) offset field for (protocol) traffic packets
* Fri Mar 19 2021 dead_mozayAATTopensuse.org- Update to version 0.3.16:
* Fix wireguard dependency
* if the link handler exits early due to an existing connection, then have it return a channel to that connection which closes when the connection is closed, so we can choose to block on that to avoid spamming connection attempts with dial
* remove link.go block on oldIntf if we already have a connection to the same node, this spams connections, so it\'s not a good long-term fix if that\'s where the goroutine leak is
* apparmor: allow yggdrasil to resolve hostnames (#739)
* Return ICMPv6 Destination Unreachable for unknown destinations (#748)
* attempting to debug/fix a possible goroutine leak
* Change DefaultIfName from \"/dev/tun0\" to \"tun0\"
* attempt to keep TCP listener alive if there\'s a temporary error (e.g. too many open files), just pause and retry later
* Don\'t require lint in pipeline
* try to fix some possible races with how peers are added/removed and how they\'re blocked in the switch when they enter a bad state
* remove old switch lookup functions
* remove unused sequence number from switch
* more switch fixes
* fix handling of keepAliveTimer and blocked state in link.go
* fix some issues with the rewritten switch lookup tables
* simplify how blocking is detected and packets are dequeued
* use heap.Fix instead of heap.Remove + heap.Push when updating queues, this is theoretically faster
* get things compiling again
* work-in-progress heap-based queue structure
* work-in-progress faster queue logic
* use a more elaborate precomputed lookup table from the switch
* cleaner way to handle seq/idle checks for the peer
* make sure the peer isn\'t idle before entering drop mode
* have the peer delay setting a max buffer size, in case things have unblocked in the mean time
* simplify routerInterface
* simplify routerInterface
* work-in-progress on more cleanup
* some peer/link cleanup
* correctly set peer.max
* safer check for the queues if we\'re blocked on a send, should work even if we\'re blocked on a link packet send
* less aggresive queue size reduction
* slight change to peer function names/args
* when we detect we\'re blocked, only drop packets often enough to make sure the existing queue\'s size is non-increasing, and always drop the worst packet from a random flow with odds based on the total size of packets queued for that flow
* re-enable a minimum queue size of ~1 big packet
* cleaner startup/shutdown of the link writer\'s worker
* use a dedicated per-stream writer goroutine, send messages to it over a 1-buffered channel, this eliminates most of the false positive blocking that causes drops
* move where the queue size check before dropping would occur
* more work-in-progress, debugging why things are dropping so often
* workarounds to dropping being too aggressive
* it helps to actually run the notifyQueued stuff...
* work-in-progress on buffering overhaul
* update switch blockPeer/unblockPeer logic and dht reset when coords change
* fix some crashes with races during peer setup
* undo remaining trivial change to build
* fix a panic from a doubly closed channel in the simlink
* eliminate most sync.Pool use, gives a safer but slightly slower interface
* more sim work
* work-in-progress on a new sim
* prevent a hypothetical block on link message sending
* fix bug in switch actor\'s cleanRoot, strict nonce handling at the session level, and add separate queues per stream to the packetqueue code
* WIP have peer actors queue packets, temporarily a single simple FIFO queue with head drop
* more work in progress actorizing the remaining parts of the switch
* fix deadlock when running updateTable in the switch
* fix shutdown deadlock
* work in progress actorizing core.peers and replacing switch worker with per-peer switch-generated lookupTable
* refactor switch code so calling lookupTable.lookup does most of the important work
* in the switch, keep a separate set of queues per peer instead of a global queue
* Tue Mar 09 2021 dead_mozayAATTopensuse.org- Update to version 0.3.15:
* Update changelog
* Accept some golint suggestions (#690)
* golangci-lint in CI (#733)
* Revert \"Fix build\"
* Fix build
* README: mention Nix package (#689)
* Set default conf file on FreeBSD to /usr/local/etc/yggdrasil.conf (#717)
* multicast, use the prebuilt interface map when checking active listeners (#707)
* Implement Core.RemovePeer method (#699) (#709)
* tcp ygg-over-ygg debug logging
* Tue Mar 09 2021 Dead Mozay - Initial package