006ea97200
feat(nftables): ingest traffic counters
2026-06-07 11:55:59 +08:00
e569aedd3e
feat(nftables): calculate traffic deltas
2026-06-07 11:55:59 +08:00
35080aea2d
feat(flow): expose forward owner metadata
2026-06-07 11:55:59 +08:00
85e588ffe9
feat(nftables): persist counter state
2026-06-07 11:55:59 +08:00
03524f4a65
feat(nftables): collect counters over ssh
2026-06-07 11:55:59 +08:00
9e69e020ab
feat(nftables): parse traffic counters
2026-06-07 11:55:59 +08:00
14bbd3907d
feat(nftables): render traffic counters
2026-06-07 11:55:59 +08:00
a599f383f5
feat: add nftables forwarding mode
2026-06-01 19:47:26 +08:00
8b64542c94
fix(handler): allow admin access to sensitive configs
2026-05-17 23:07:37 +08:00
7008717a49
fix(ws): serialize websocket writes in realtime server
2026-05-17 21:48:37 +08:00
b2454e86c9
fix: allow monitor realtime websocket access
2026-05-15 23:37:08 +08:00
312c9a9c5c
fix: harden panel self-upgrade
2026-05-15 23:16:14 +08:00
e1324b8c8c
fix: update dependabot vulnerabilities ( #505 )
...
* docs: add dependabot remediation design
* docs: add dependabot remediation plan
* fix: update backend pgx dependency
* fix: update frontend vulnerable dependencies
* fix: update gost quic dependencies
* fix: migrate gost dtls dependency
* fix: sync gost main dependencies
* fix: enable webtransport stream reset partial delivery
* fix: restore backend bcrypt dependency
2026-05-15 00:16:29 +08:00
fd3ecc38ef
fix: allow public config fallback for cached login
2026-05-14 18:45:12 +08:00
abf13bdac9
fix: close remaining security remediation gaps
2026-05-14 11:10:06 +08:00
f0facf6703
fix: block sensitive config writes
2026-05-14 10:37:29 +08:00
583a3834f9
fix: expire websocket admin sessions
2026-05-14 01:24:03 +08:00
106a30bf9d
fix: tighten websocket auth and client cache handling
2026-05-14 00:24:56 +08:00
465815cf34
fix: harden auth, config access, and backups
2026-05-13 23:53:06 +08:00
25dfb84324
fix: panel self-upgrade helper not recreating containers
...
- Add --force-recreate --remove-orphans to docker compose up so helper
actually replaces running containers with newly pulled images
- Add upgrade.log file for post-mortem debugging when helper fails
- Add pre-flight validation for docker-compose.yml and .env
- Fix "立即升级" button permanently disabled by relaxing the disabled
condition so auto-check on click can fire
2026-05-07 19:51:18 +08:00
4ebd6703fe
fix: harden proxy protocol rollout safety ( #494 )
2026-05-07 16:37:51 +08:00
5ebd4c2a91
feat: add panel self-upgrade workflow ( #492 )
2026-05-06 17:58:01 +08:00
cdcdfd8ff0
fix: use custom probe targets for diagnostics
...
Move custom probe target controls into the tunnel advanced settings and reuse the configured target in tunnel diagnosis output.
2026-05-02 14:23:51 +08:00
13764b4615
fix: reject malformed probe target updates
2026-05-02 00:12:41 +08:00
4c882d907b
fix: preserve probe targets on legacy updates
2026-05-02 00:08:24 +08:00
6033e39466
fix: preserve probe targets in backups
2026-05-02 00:02:23 +08:00
869d726b7a
fix: preserve type one quality probe owner
2026-05-01 23:32:00 +08:00
55a931510b
feat: use probe target for tunnel quality checks
2026-05-01 23:28:26 +08:00
a259dd83b2
fix: load probe target with tunnel record
2026-05-01 23:24:48 +08:00
cc0b8de2e1
feat: use probe target for best exit scoring
2026-05-01 23:20:50 +08:00
58ef260755
fix: migrate legacy tunnel probe target columns
2026-05-01 23:15:21 +08:00
521fe79b15
fix: validate tunnel probe target before cleanup
2026-05-01 23:10:47 +08:00
90012725cc
feat: persist tunnel probe targets
2026-05-01 22:58:47 +08:00
615d9e67eb
fix: validate probe target host shape
2026-05-01 22:53:37 +08:00
a131b70613
fix: reject probe target scheme prefixes
2026-05-01 22:49:34 +08:00
cbed4eab23
feat: add tunnel probe target normalization
2026-05-01 22:45:58 +08:00
e5acc49186
feat: show current best exit state
2026-05-01 13:30:46 +08:00
3f3159aafd
Add best exit selection ( #486 )
...
* docs: add best exit selection design
* feat: add best exit selection
2026-05-01 08:12:17 +08:00
3c0e833cfc
fix: reduce runtime sync disruptions ( #484 )
2026-04-30 14:36:26 +08:00
023be27287
feat: add monitoring retention controls
2026-04-28 11:41:07 +08:00
3373e5ade9
fix: preserve shared limiters with per-IP rules
2026-04-28 00:18:32 +08:00
46394388b1
feat: sync per-IP runtime limiters
2026-04-27 22:32:35 +08:00
dec337d46b
fix: enforce per-IP speed update permissions
2026-04-27 22:26:34 +08:00
9e8d27d98e
feat: expose per-IP forward limit fields
2026-04-27 22:20:26 +08:00
a2000e4d98
fix: preserve per-IP forward limits during rollback
2026-04-27 22:16:38 +08:00
2b76a9f0be
feat: persist per-IP forward limits
2026-04-27 22:07:04 +08:00
2ca3849917
fix: apply proxy protocol and max connection settings
2026-04-27 10:54:25 +08:00
58d2e89147
fix: reduce reconnect redeploy and metrics load ( #476 )
...
* fix: reduce reconnect redeploy and metrics load
Throttle node-online redeploy retries and lower the agent metric cadence so brief reconnect churn no longer fans out into repeated runtime syncs and backend connection pressure.
* docs: add follow-up implementation design notes
Document the planned flow upload batching work and the local remote-address toggle so the next changesets can implement them against an agreed design.
2026-04-26 23:35:35 +08:00
87a1a34ad5
refactor: batch flow upload processing ( #474 )
...
* test: cover flow upload batch semantics
* refactor: batch flow upload persistence
* refactor: batch flow upload processing
* test: harden flow upload batch regression coverage
2026-04-26 20:45:48 +08:00
799bb66fe5
feat: add local remote address toggle ( #472 )
2026-04-26 16:30:05 +08:00
sagitchu