a4b70405b8
Add adversarial tests module for client security testing
2026-03-20 16:47:26 +04:00
3afc3e1775
Changed version
2026-03-20 16:46:09 +04:00
512bee6a8d
Add security tests for middle relay idle policy and enhance stats tracking
...
- Introduced a new test module for middle relay idle policy security tests, covering various scenarios including soft mark, hard close, and grace periods.
- Implemented functions to create crypto readers and encrypt data for testing.
- Enhanced the Stats struct to include counters for relay idle soft marks, hard closes, pressure evictions, and protocol desync closes.
- Added corresponding increment and retrieval methods for the new stats fields.
2026-03-20 16:43:50 +04:00
66867d3f5b
Merge branch 'main' into feat/shadowsocks-upstream
...
# Conflicts:
# Cargo.lock
# src/api/runtime_stats.rs
2026-03-20 15:22:36 +03:00
db36945293
Fix typo in systemd service metadata
2026-03-20 12:00:41 +00:00
5c5fdcb124
Updated cargo
2026-03-20 15:03:42 +04:00
0ded366199
Changed version
2026-03-20 14:29:45 +04:00
84a34cea3d
Merge latest upstream/main into test/main-into-flow-sec
2026-03-20 14:26:49 +04:00
7dc3c3666d
Merge upstream/main into test/main-into-flow-sec
2026-03-20 14:20:20 +04:00
dd07fa9453
Merge pull request #505 from telemt/flow-me
...
Teardown Monitoring in API and Metrics
2026-03-20 12:59:39 +03:00
bb1a372ac4
Merge branch 'main' into flow-me
2026-03-20 12:59:32 +03:00
6661401a34
Merge pull request #506 from telemt/about-releases
...
Update README.md
2026-03-20 12:59:09 +03:00
cd65fb432b
Update README.md
2026-03-20 12:58:55 +03:00
caf0717789
Merge branch 'main' into flow-me
2026-03-20 12:57:27 +03:00
4a610d83a3
Update Cargo.toml
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:56:13 +03:00
aba4205dcc
Teardown Monitoring in Metrics
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:46:35 +03:00
ef9b7b1492
Teardown Monitoring in API
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:45:53 +03:00
d112f15b90
ME Writers Anti-stuck + Quarantine fixes + ME Writers Advanced Cleanup + Authoritative Teardown + Orphan Watchdog + Force-Close Safery Policy: merge pull request #504 from telemt/flow-me
...
ME Writers Anti-stuck + Quarantine fixes + ME Writers Advanced Cleanup + Authoritative Teardown + Orphan Watchdog + Force-Close Safery Policy
2026-03-20 12:41:45 +03:00
b55b264345
Merge branch 'main' into flow-me
2026-03-20 12:20:51 +03:00
f61d25ebe0
Authoritative Teardown + Orphan Watchdog + Force-Close Safery Policy
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:11:47 +03:00
ed4d1167dd
ME Writers Advanced Cleanup
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 12:09:23 +03:00
dc6948cf39
Merge pull request #502 from telemt/about-releases
...
Update README.md
2026-03-20 11:25:19 +03:00
4f11aa0772
Update README.md
2026-03-20 11:25:07 +03:00
6ea8ba25c4
Refactor OpenBSD build workflow for clarity
2026-03-20 02:27:21 +04:00
e40361b171
Cargo.toml + Cargo.lock
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-20 00:45:04 +03:00
1c6c73beda
ME Writers Anti-stuck and Quarantine fixes
...
Co-Authored-By: Nook Scheel <nook@live.ru >
2026-03-20 00:41:40 +03:00
3f3bf5bbd2
Update build-openbsd.yml
2026-03-20 01:27:11 +04:00
ec793f3065
Added cargo.toml
2026-03-20 01:06:00 +04:00
e83d366518
Fixed issues with an action
2026-03-20 00:58:11 +04:00
5a4209fe00
Changed version
2026-03-20 00:53:32 +04:00
e7daf51193
Added runner for Openbsd
2026-03-20 00:43:05 +04:00
754e4db8a9
Add security tests for pool writer and pool refill functionality
2026-03-20 00:07:41 +04:00
7416829e89
Merge remote-tracking branch 'upstream/main' into test/main-into-flow-sec
...
# Conflicts:
# Cargo.toml
# src/api/model.rs
# src/api/runtime_stats.rs
# src/transport/middle_proxy/health.rs
# src/transport/middle_proxy/health_regression_tests.rs
# src/transport/middle_proxy/pool_status.rs
2026-03-19 23:48:40 +04:00
c07b600acb
Integration hardening: reconcile main+flow-sec API drift and restore green suite
2026-03-19 20:24:44 +04:00
7b44496706
Integration test merge: upstream/main into flow-sec security branch (prefer flow-sec on conflicts)
2026-03-19 19:42:04 +04:00
67dc1e8d18
Merge pull request #498 from telemt/bump
...
Update Cargo.toml
2026-03-19 18:25:14 +03:00
ad8ada33c9
Update Cargo.toml
2026-03-19 18:24:01 +03:00
bbb201b433
Instadrain + Hard-remove for long draining-state: merge pull request #497 from telemt/flow-stuck-writer
...
Instadrain + Hard-remove for long draining-state
2026-03-19 18:23:38 +03:00
8d1faece60
Instadrain + Hard-remove for long draining-state
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 17:45:17 +03:00
a603505f90
Merge pull request #492 from temandroid/main
...
fix(docker): expose port 9091 and allow external API access
2026-03-19 17:32:49 +03:00
f8c42c324f
Merge pull request #494 from Dimasssss/patch-1
...
Update install.sh
2026-03-19 17:32:05 +03:00
dd8ef4d996
Merge branch 'main' into feat/shadowsocks-upstream
2026-03-19 17:19:01 +03:00
e6ad9e4c7f
Add security tests for connection limits and handshake integrity
...
- Implement a test to ensure that exceeding the user connection limit does not leak the current connections counter.
- Add tests for direct relay connection refusal and adversarial scenarios to verify proper error handling.
- Introduce fuzz testing for MTProto handshake to ensure robustness against malformed inputs and replay attacks.
- Remove obsolete short TLS probe throttle tests and integrate their functionality into existing security tests.
- Enhance middle relay tests to validate behavior during connection drops and cutovers, ensuring graceful error handling.
- Add a test for half-close scenarios in relay to confirm bidirectional data flow continues as expected.
2026-03-19 17:31:19 +04:00
2a01ca2d6f
Add adversarial tests for client, handshake, masking, and relay modules
...
- Introduced `client_adversarial_tests.rs` to stress test connection limits and IP tracker race conditions.
- Added `handshake_adversarial_tests.rs` for mutational bit-flipping tests and timing neutrality checks.
- Created `masking_adversarial_tests.rs` to validate probing indistinguishability and SSRF prevention.
- Implemented `relay_adversarial_tests.rs` to ensure HOL blocking prevention and data quota enforcement.
- Updated respective modules to include new test paths.
2026-03-19 17:31:19 +04:00
dc3363aa0d
Update install.sh
2026-03-19 16:23:32 +03:00
f655924323
Update health.rs
...
Co-Authored-By: brekotis <93345790+brekotis@users.noreply.github.com >
2026-03-19 16:15:00 +03:00
05c066c676
fix(docker): expose port 9091 and allow external API access
...
Add 9091 port mapping to compose.yml to make the REST API reachable
from outside the container. Previously only port 9090 (metrics) was
published, making the documented curl commands non-functional.
fixes #434
2026-03-19 15:54:01 +03:00
1e000c2e7e
ME Writer stuck-up in draining-state fixes: merge pull request #491 from telemt/flow-stuck-writer
...
ME Writer stuck-up in draining-state fixes
2026-03-19 14:44:43 +03:00
fa17e719f6
Merge pull request #490 from telemt/bump
...
Update Cargo.toml
2026-03-19 14:43:15 +03:00
ae3ced8e7c
Update Cargo.toml
2026-03-19 14:42:59 +03:00
David Osipov