sagit
da7bef88f1
fix: harden panel updates and nftables deployment ( #551 )
...
Fix panel update deployment discovery and rollback safety, add nftables compatibility and atomic replacement, and restore reproducible frontend CI installs.
2026-09-01 15:37:33 +08:00
sagit
5041c722c9
fix: harden license lifecycle ( #547 )
2026-08-13 09:25:05 +08:00
sagit
c56798e991
fix: accept existing license machine binding ( #546 )
2026-08-12 14:12:46 +08:00
sagit
40e96f3592
fix: preserve active per-IP traffic limiters ( #545 )
2026-08-12 11:31:03 +08:00
sagit
0e24b53a5b
fix: preserve license state across panel upgrades ( #544 )
2026-08-11 17:04:20 +08:00
sagit
a8fd01d4d8
fix(node): allow IPv6-only addresses ( #537 )
2026-08-03 11:05:04 +08:00
sagit
cbe2fc492e
feat(monitor): show backup tunnel latencies ( #535 )
...
Closes #508
2026-08-03 10:15:22 +08:00
sagit
e112d81697
fix: bound and configure tunnel quality probes ( #533 )
...
Closes #528 and #532 .
2026-07-31 15:37:26 +08:00
sagit
11a27d3c67
feat: add per-rule traffic reset ( #526 )
...
Reset only the selected forwarding rule's displayed upload/download usage without affecting user totals, tunnel quotas, historical statistics, nftables baselines, or running services.
Closes #523
2026-07-10 17:05:20 +08:00
sagitchu
f98be845d3
fix: skip agent protocol updates for nftables nodes
2026-07-02 10:26:10 +08:00
sagitchu
777db8767f
fix nftables recovery and diagnostics
2026-06-30 17:07:50 +08:00
sagit
82f6047506
fix(forward): split proxy protocol directions
...
Closes #520
2026-06-21 21:03:47 +08:00
sagitchu
3ce320da5a
fix(nftables): harden traffic accounting edges
2026-06-07 11:55:59 +08:00
sagitchu
7ab0db29ae
fix(nftables): clean counter state on forward delete
2026-06-07 11:55:59 +08:00
sagitchu
006ea97200
feat(nftables): ingest traffic counters
2026-06-07 11:55:59 +08:00
sagitchu
e569aedd3e
feat(nftables): calculate traffic deltas
2026-06-07 11:55:59 +08:00
sagitchu
35080aea2d
feat(flow): expose forward owner metadata
2026-06-07 11:55:59 +08:00
sagitchu
85e588ffe9
feat(nftables): persist counter state
2026-06-07 11:55:59 +08:00
sagitchu
03524f4a65
feat(nftables): collect counters over ssh
2026-06-07 11:55:59 +08:00
sagitchu
9e69e020ab
feat(nftables): parse traffic counters
2026-06-07 11:55:59 +08:00
sagitchu
14bbd3907d
feat(nftables): render traffic counters
2026-06-07 11:55:59 +08:00
sagitchu
a599f383f5
feat: add nftables forwarding mode
2026-06-01 19:47:26 +08:00
sagitchu
8b64542c94
fix(handler): allow admin access to sensitive configs
2026-05-17 23:07:37 +08:00
sagitchu
7008717a49
fix(ws): serialize websocket writes in realtime server
2026-05-17 21:48:37 +08:00
sagitchu
b2454e86c9
fix: allow monitor realtime websocket access
2026-05-15 23:37:08 +08:00
sagitchu
312c9a9c5c
fix: harden panel self-upgrade
2026-05-15 23:16:14 +08:00
sagitchu
fd3ecc38ef
fix: allow public config fallback for cached login
2026-05-14 18:45:12 +08:00
sagitchu
abf13bdac9
fix: close remaining security remediation gaps
2026-05-14 11:10:06 +08:00
sagitchu
f0facf6703
fix: block sensitive config writes
2026-05-14 10:37:29 +08:00
sagitchu
583a3834f9
fix: expire websocket admin sessions
2026-05-14 01:24:03 +08:00
sagitchu
106a30bf9d
fix: tighten websocket auth and client cache handling
2026-05-14 00:24:56 +08:00
sagitchu
465815cf34
fix: harden auth, config access, and backups
2026-05-13 23:53:06 +08:00
sagitchu
25dfb84324
fix: panel self-upgrade helper not recreating containers
...
- Add --force-recreate --remove-orphans to docker compose up so helper
actually replaces running containers with newly pulled images
- Add upgrade.log file for post-mortem debugging when helper fails
- Add pre-flight validation for docker-compose.yml and .env
- Fix "立即升级" button permanently disabled by relaxing the disabled
condition so auto-check on click can fire
2026-05-07 19:51:18 +08:00
sagit
4ebd6703fe
fix: harden proxy protocol rollout safety ( #494 )
2026-05-07 16:37:51 +08:00
sagit
5ebd4c2a91
feat: add panel self-upgrade workflow ( #492 )
2026-05-06 17:58:01 +08:00
sagitchu
cdcdfd8ff0
fix: use custom probe targets for diagnostics
...
Move custom probe target controls into the tunnel advanced settings and reuse the configured target in tunnel diagnosis output.
2026-05-02 14:23:51 +08:00
sagitchu
13764b4615
fix: reject malformed probe target updates
2026-05-02 00:12:41 +08:00
sagitchu
4c882d907b
fix: preserve probe targets on legacy updates
2026-05-02 00:08:24 +08:00
sagitchu
6033e39466
fix: preserve probe targets in backups
2026-05-02 00:02:23 +08:00
sagitchu
869d726b7a
fix: preserve type one quality probe owner
2026-05-01 23:32:00 +08:00
sagitchu
55a931510b
feat: use probe target for tunnel quality checks
2026-05-01 23:28:26 +08:00
sagitchu
a259dd83b2
fix: load probe target with tunnel record
2026-05-01 23:24:48 +08:00
sagitchu
cc0b8de2e1
feat: use probe target for best exit scoring
2026-05-01 23:20:50 +08:00
sagitchu
58ef260755
fix: migrate legacy tunnel probe target columns
2026-05-01 23:15:21 +08:00
sagitchu
521fe79b15
fix: validate tunnel probe target before cleanup
2026-05-01 23:10:47 +08:00
sagitchu
90012725cc
feat: persist tunnel probe targets
2026-05-01 22:58:47 +08:00
sagitchu
615d9e67eb
fix: validate probe target host shape
2026-05-01 22:53:37 +08:00
sagitchu
a131b70613
fix: reject probe target scheme prefixes
2026-05-01 22:49:34 +08:00
sagitchu
cbed4eab23
feat: add tunnel probe target normalization
2026-05-01 22:45:58 +08:00
sagitchu
e5acc49186
feat: show current best exit state
2026-05-01 13:30:46 +08:00