11a27d3c67
feat: add per-rule traffic reset ( #526 )
...
Reset only the selected forwarding rule's displayed upload/download usage without affecting user totals, tunnel quotas, historical statistics, nftables baselines, or running services.
Closes #523
2026-07-10 17:05:20 +08:00
f98be845d3
fix: skip agent protocol updates for nftables nodes
2026-07-02 10:26:10 +08:00
777db8767f
fix nftables recovery and diagnostics
2026-06-30 17:07:50 +08:00
82f6047506
fix(forward): split proxy protocol directions
...
Closes #520
2026-06-21 21:03:47 +08:00
3ce320da5a
fix(nftables): harden traffic accounting edges
2026-06-07 11:55:59 +08:00
006ea97200
feat(nftables): ingest traffic counters
2026-06-07 11:55:59 +08:00
e569aedd3e
feat(nftables): calculate traffic deltas
2026-06-07 11:55:59 +08:00
a599f383f5
feat: add nftables forwarding mode
2026-06-01 19:47:26 +08:00
8b64542c94
fix(handler): allow admin access to sensitive configs
2026-05-17 23:07:37 +08:00
312c9a9c5c
fix: harden panel self-upgrade
2026-05-15 23:16:14 +08:00
fd3ecc38ef
fix: allow public config fallback for cached login
2026-05-14 18:45:12 +08:00
f0facf6703
fix: block sensitive config writes
2026-05-14 10:37:29 +08:00
465815cf34
fix: harden auth, config access, and backups
2026-05-13 23:53:06 +08:00
25dfb84324
fix: panel self-upgrade helper not recreating containers
...
- Add --force-recreate --remove-orphans to docker compose up so helper
actually replaces running containers with newly pulled images
- Add upgrade.log file for post-mortem debugging when helper fails
- Add pre-flight validation for docker-compose.yml and .env
- Fix "立即升级" button permanently disabled by relaxing the disabled
condition so auto-check on click can fire
2026-05-07 19:51:18 +08:00
5ebd4c2a91
feat: add panel self-upgrade workflow ( #492 )
2026-05-06 17:58:01 +08:00
cdcdfd8ff0
fix: use custom probe targets for diagnostics
...
Move custom probe target controls into the tunnel advanced settings and reuse the configured target in tunnel diagnosis output.
2026-05-02 14:23:51 +08:00
13764b4615
fix: reject malformed probe target updates
2026-05-02 00:12:41 +08:00
4c882d907b
fix: preserve probe targets on legacy updates
2026-05-02 00:08:24 +08:00
869d726b7a
fix: preserve type one quality probe owner
2026-05-01 23:32:00 +08:00
55a931510b
feat: use probe target for tunnel quality checks
2026-05-01 23:28:26 +08:00
a259dd83b2
fix: load probe target with tunnel record
2026-05-01 23:24:48 +08:00
cc0b8de2e1
feat: use probe target for best exit scoring
2026-05-01 23:20:50 +08:00
521fe79b15
fix: validate tunnel probe target before cleanup
2026-05-01 23:10:47 +08:00
90012725cc
feat: persist tunnel probe targets
2026-05-01 22:58:47 +08:00
615d9e67eb
fix: validate probe target host shape
2026-05-01 22:53:37 +08:00
a131b70613
fix: reject probe target scheme prefixes
2026-05-01 22:49:34 +08:00
cbed4eab23
feat: add tunnel probe target normalization
2026-05-01 22:45:58 +08:00
e5acc49186
feat: show current best exit state
2026-05-01 13:30:46 +08:00
3f3159aafd
Add best exit selection ( #486 )
...
* docs: add best exit selection design
* feat: add best exit selection
2026-05-01 08:12:17 +08:00
3c0e833cfc
fix: reduce runtime sync disruptions ( #484 )
2026-04-30 14:36:26 +08:00
023be27287
feat: add monitoring retention controls
2026-04-28 11:41:07 +08:00
3373e5ade9
fix: preserve shared limiters with per-IP rules
2026-04-28 00:18:32 +08:00
46394388b1
feat: sync per-IP runtime limiters
2026-04-27 22:32:35 +08:00
dec337d46b
fix: enforce per-IP speed update permissions
2026-04-27 22:26:34 +08:00
9e8d27d98e
feat: expose per-IP forward limit fields
2026-04-27 22:20:26 +08:00
a2000e4d98
fix: preserve per-IP forward limits during rollback
2026-04-27 22:16:38 +08:00
2b76a9f0be
feat: persist per-IP forward limits
2026-04-27 22:07:04 +08:00
2ca3849917
fix: apply proxy protocol and max connection settings
2026-04-27 10:54:25 +08:00
58d2e89147
fix: reduce reconnect redeploy and metrics load ( #476 )
...
* fix: reduce reconnect redeploy and metrics load
Throttle node-online redeploy retries and lower the agent metric cadence so brief reconnect churn no longer fans out into repeated runtime syncs and backend connection pressure.
* docs: add follow-up implementation design notes
Document the planned flow upload batching work and the local remote-address toggle so the next changesets can implement them against an agreed design.
2026-04-26 23:35:35 +08:00
87a1a34ad5
refactor: batch flow upload processing ( #474 )
...
* test: cover flow upload batch semantics
* refactor: batch flow upload persistence
* refactor: batch flow upload processing
* test: harden flow upload batch regression coverage
2026-04-26 20:45:48 +08:00
799bb66fe5
feat: add local remote address toggle ( #472 )
2026-04-26 16:30:05 +08:00
3f374df724
fix: 保留用户/规则高级设置并增强节点运行时恢复 ( #468 )
...
* fix: 用户编辑时 maxConn 字段未正确回填
- User 接口添加 maxConn 类型定义
- handleEdit 中回填 maxConn 值
- normalizeUserItem 添加 maxConn 字段处理
解决编辑用户时最大连接数显示为 0 的问题
* fix: 保留转发设置并增强节点运行时恢复
2026-04-25 18:12:13 +08:00
c259645227
feat: implement user and forward max connection limit ( #461 )
...
* docs: add implementation plan for max conn limit
* feat: add CLimiters support for websocket reporter
* feat: add max_conn field to user and forward models
* feat: implement max conn limiter dispatching
* feat: add maxConn to user and forward CRUD API
* feat: add max conn UI to user management and forward rules
* fix: load MaxConn in get forward record and add e2e contract test for max conn limit
2026-04-23 17:35:39 +08:00
bdc2c4ecbb
fix(backend): dynamically start/stop tunnel quality prober based on config
2026-04-23 14:14:24 +08:00
a070d0f4d3
fix(backend): allow setting reserved ip addresses as target
...
Only forbid internal networks (loopback and private ips), removing restrictions on reserved addresses like multicast or unspecified.
2026-04-22 19:00:21 +08:00
eecdd62d3a
perf(backend): optimize kcp tunnel parameters for high throughput and low latency
2026-04-22 16:29:02 +08:00
e6d3b847bb
fix(backend): properly identify and clean up orphaned tunnel_%d services
2026-04-22 16:18:57 +08:00
0b49cd720f
fix(backend): use proper protocol for chain hop diagnosis and tcp for external targets
2026-04-22 14:02:59 +08:00
4f488ae7ef
fix(backend): properly implement tunnel_%d cleanup that was lost during revert
2026-04-22 11:32:49 +08:00
efaf920e51
fix: ensure rollbackTunnelRuntime includes tunnel_%d in cleanup
2026-04-22 09:51:35 +08:00
sagit