mirror of
https://github.com/slackhq/nebula.git
synced 2026-06-28 03:40:49 +00:00
Commit graph
Select branches
Hide pull requests
add-http-pprof
back-at-it
batched-path
better-tun-interface
better-tun-interface-no-offloads
better-tun-interface-no-offloads-batched
better-tun-interface-no-offloads-no-batch
better-tun-interface-offloads2
better-tun-interface-ordering
better-tun-interface-ordering-with-firewall-changes
better-tun-interface2
botched-path
cert-v2-mixed-af-unsafe-nets
cert-v2-reloads-with-relay-stuff
channels
channels-batching
channels-sendmmsg-batching
channels-spicy
channels2
channels_and_minimal_gsogro
claude/nebula-authz-integration-20mlyi
clodracing
cross-stack-relay-overlaps
dependabot/github_actions/Vampire/setup-wsl-7
dependabot/github_actions/actions/checkout-7
dependabot/go_modules/zx2c4-dependencies-dbd6b95108
fips140
firewall-feedback
firewall-forward-table
fix/scalarwrite
fix/tun-writev-use-after-free
github-release-upload
gso-again
interface-hooks
io-uring-gso-gro-offtherails
jay.wren-batch-packets
jay.wren-dns-ctx
jay.wren-handshakes.max_rate
jay.wren-lint
jay.wren-maybe-ipv4-6-fix
jay.wren-stats.pprof
jay.wren-wireguard-tun
jay.wren-wireguard-tun-2
jay.wren-wireguard-tun-3
make-boringcrypto-checklinkname
master
master-1-9-tag
multiport
mutex-debug
nate/pmtud
no-exit
no-exit-jack
no-exit2
prometheus-static-labels
psk
psk-v2
release-1.9
remove-olddead-tunnels
std-udp
std-udp-all-unix-write
stinkier
stinky
synctrace
tun-dnshax
tun-name-template
tun-o-nonblock
tun-readv
update-lh-on-netlink-addr
v6hax
vhost
windows_udp_buffer_setting
wirebuffer-v2
#1
#10
#100
#1002
#1003
#1004
#1006
#1010
#1012
#1013
#1017
#102
#1021
#1022
#1023
#1024
#1026
#1027
#1028
#103
#1030
#1032
#1034
#1035
#1036
#1037
#1038
#1039
#1043
#1044
#1045
#1046
#1047
#1048
#1049
#105
#1053
#1054
#1055
#1057
#1058
#1059
#106
#1063
#1065
#1067
#1069
#107
#1071
#1072
#1075
#1077
#1081
#1083
#1085
#1086
#1087
#1090
#1091
#1092
#1093
#1094
#1098
#1099
#1108
#1109
#1110
#1111
#1112
#1114
#1115
#1116
#1123
#1126
#1127
#1128
#1129
#113
#1132
#1133
#1134
#1135
#1137
#1138
#1139
#114
#1141
#1141
#1146
#1147
#1148
#1150
#1151
#1152
#1153
#1154
#1155
#1156
#1160
#1161
#1162
#1163
#1164
#1166
#1167
#1168
#117
#1171
#1173
#1174
#1176
#1177
#1178
#1179
#1179
#1181
#1184
#1185
#1186
#1188
#119
#1190
#1191
#1194
#1195
#1196
#1197
#1198
#1199
#120
#1200
#1201
#1202
#1203
#1204
#1206
#1208
#121
#1210
#1211
#1212
#1213
#1214
#1214
#1216
#1218
#1219
#122
#1223
#1224
#1226
#1228
#1231
#1233
#1237
#1239
#124
#1242
#1243
#1244
#1245
#1249
#125
#1250
#1251
#1252
#1253
#1256
#1257
#1258
#1259
#1260
#1261
#1262
#1264
#1265
#1266
#1267
#1268
#1270
#1271
#1272
#1273
#1274
#1275
#1275
#1276
#1277
#1278
#1279
#1280
#1281
#1282
#1285
#1289
#1291
#1293
#1294
#1295
#1297
#1298
#1299
#1302
#1303
#1308
#1309
#1310
#1311
#1316
#1318
#1319
#1320
#1321
#1323
#1324
#1326
#1329
#133
#1330
#1331
#1332
#1337
#1337
#1338
#1339
#1340
#1341
#1342
#1343
#1344
#1345
#1346
#1347
#1350
#1351
#1353
#1356
#1357
#1357
#1358
#1358
#1359
#1361
#1362
#1363
#1364
#1365
#1369
#1370
#1371
#1372
#1373
#1374
#1375
#1376
#1378
#138
#1381
#1382
#1383
#1384
#1386
#1389
#139
#1390
#1390
#1391
#1392
#1393
#1394
#1395
#1399
#1400
#1401
#1403
#1404
#1405
#1406
#1407
#1408
#1409
#141
#1410
#1412
#1413
#1414
#1415
#1416
#1416
#1417
#1419
#1421
#1422
#1423
#1426
#1427
#1428
#1431
#1432
#1433
#1434
#1435
#1437
#1438
#1441
#1442
#1443
#1444
#1448
#1449
#1450
#1451
#1453
#1457
#1457
#1459
#146
#1463
#1464
#1465
#1465
#1466
#1467
#1468
#1469
#1470
#1471
#1472
#1473
#1476
#1477
#1478
#1481
#1482
#1483
#1487
#1487
#1488
#149
#1491
#1492
#1493
#1494
#1495
#1496
#1496
#1497
#1498
#1499
#15
#150
#1501
#1502
#1503
#1503
#1505
#1506
#1507
#1508
#1509
#151
#1510
#1512
#1513
#1514
#1515
#1516
#1518
#1520
#1521
#1522
#1523
#1524
#1525
#1526
#1527
#1527
#153
#1530
#1531
#1532
#1533
#1534
#1535
#1536
#1537
#1538
#1539
#1541
#1544
#1547
#1549
#155
#1550
#1552
#1555
#1556
#1557
#1558
#1559
#1560
#1561
#1566
#1568
#1569
#1570
#1571
#1572
#1572
#1573
#1575
#1577
#1577
#1580
#1581
#1582
#1583
#1584
#1586
#1587
#1588
#1589
#1591
#1592
#1593
#1596
#1596
#1598
#1599
#1599
#16
#1601
#1602
#1603
#1604
#1608
#1609
#1610
#1612
#1615
#1617
#1618
#1619
#1619
#1621
#1622
#1623
#1624
#1625
#1626
#1627
#1628
#1629
#163
#1632
#1634
#1635
#1638
#1640
#1641
#1642
#1643
#1643
#1644
#1645
#1649
#165
#1650
#1651
#1652
#1653
#1654
#1655
#1656
#1657
#1658
#1659
#166
#1660
#1661
#1663
#1664
#1665
#1665
#1666
#1667
#1668
#1669
#167
#1670
#1671
#1672
#1673
#1674
#1675
#1676
#1677
#1678
#1679
#1680
#1681
#1682
#1683
#1684
#1685
#1686
#1687
#1688
#1689
#1690
#1691
#1692
#1693
#1694
#1695
#1696
#1696
#1697
#1698
#1699
#17
#170
#1700
#1701
#1702
#1703
#1703
#1704
#1704
#1705
#1706
#1706
#1707
#1708
#1709
#1710
#1711
#1712
#1713
#1714
#1715
#1716
#1717
#1718
#1719
#1720
#1720
#1721
#1722
#1722
#1723
#1723
#1724
#1725
#1726
#1727
#1727
#1728
#1729
#1729
#1730
#1731
#1731
#1732
#1733
#1734
#1737
#1737
#1738
#1738
#1739
#1739
#1741
#1741
#1742
#1743
#1747
#1747
#1749
#1749
#1750
#1751
#1752
#1753
#1754
#1755
#1756
#1758
#1760
#1761
#1761
#1763
#1764
#1765
#1766
#1767
#1768
#1769
#177
#1770
#1770
#1771
#1771
#1772
#1773
#1773
#179
#181
#183
#184
#186
#187
#188
#189
#191
#192
#195
#196
#197
#198
#2
#200
#202
#205
#209
#21
#210
#211
#213
#215
#216
#217
#219
#22
#220
#225
#23
#230
#231
#233
#234
#236
#239
#240
#244
#245
#246
#247
#248
#249
#252
#253
#255
#257
#258
#260
#261
#262
#263
#264
#265
#266
#267
#268
#269
#270
#272
#275
#277
#279
#28
#284
#285
#287
#288
#289
#29
#292
#293
#296
#297
#299
#3
#30
#302
#303
#305
#31
#310
#312
#317
#320
#321
#323
#324
#325
#329
#330
#331
#339
#340
#342
#344
#345
#346
#35
#350
#350
#351
#355
#357
#367
#369
#37
#370
#373
#374
#374
#375
#378
#381
#382
#383
#385
#386
#387
#388
#39
#390
#391
#392
#394
#395
#396
#399
#400
#401
#402
#404
#405
#406
#408
#409
#41
#410
#411
#412
#413
#414
#415
#416
#417
#418
#419
#421
#423
#424
#425
#426
#427
#428
#429
#43
#430
#431
#433
#437
#438
#439
#44
#440
#441
#442
#443
#444
#445
#446
#447
#448
#449
#450
#451
#452
#453
#456
#457
#458
#459
#460
#461
#462
#463
#464
#465
#466
#47
#471
#472
#473
#474
#48
#481
#482
#483
#489
#49
#491
#494
#497
#501
#503
#505
#506
#507
#510
#511
#514
#522
#523
#530
#530
#531
#531
#532
#533
#535
#537
#540
#541
#542
#547
#548
#549
#550
#551
#552
#553
#56
#561
#563
#564
#566
#567
#571
#572
#574
#575
#576
#577
#578
#579
#58
#580
#581
#582
#583
#586
#587
#590
#592
#595
#596
#598
#599
#60
#602
#603
#604
#606
#607
#61
#610
#611
#612
#613
#614
#615
#616
#617
#618
#626
#627
#630
#638
#641
#648
#649
#650
#653
#655
#656
#658
#659
#662
#662
#664
#67
#670
#673
#674
#675
#677
#678
#679
#679
#68
#684
#685
#687
#688
#691
#692
#693
#696
#700
#701
#702
#703
#711
#716
#719
#721
#722
#725
#726
#728
#729
#735
#736
#737
#738
#739
#74
#741
#742
#746
#747
#748
#750
#751
#752
#753
#757
#758
#759
#762
#763
#767
#768
#768
#769
#77
#771
#772
#775
#78
#780
#782
#783
#787
#788
#789
#79
#790
#791
#792
#793
#794
#796
#80
#802
#803
#804
#805
#807
#808
#81
#811
#812
#815
#82
#820
#821
#824
#825
#827
#828
#83
#830
#831
#833
#835
#837
#838
#839
#840
#842
#843
#844
#845
#849
#851
#854
#855
#856
#857
#858
#859
#860
#861
#863
#864
#865
#866
#866
#867
#868
#869
#87
#870
#871
#873
#877
#878
#879
#88
#881
#882
#886
#887
#89
#891
#900
#901
#903
#905
#91
#912
#913
#913
#916
#919
#922
#923
#924
#925
#926
#927
#928
#929
#930
#931
#932
#933
#934
#935
#938
#94
#940
#941
#943
#946
#947
#948
#949
#950
#952
#953
#954
#955
#957
#958
#961
#964
#965
#967
#968
#969
#97
#972
#976
#977
#979
#98
#981
#984
#985
#987
#988
#989
#99
#990
#996
#999
v1.0.0
v1.1.0
v1.10.0
v1.10.1
v1.10.2
v1.10.3
v1.2.0
v1.3.0
v1.4.0
v1.5.0
v1.5.2
v1.6.0
v1.6.1
v1.7.0
v1.7.1
v1.7.2
v1.8.0
v1.8.1
v1.8.2
v1.9.0
v1.9.1
v1.9.2
v1.9.3
v1.9.4
v1.9.5
v1.9.6
v1.9.7
-
6bd5c14cc0Merge
6275cedee5into184cdc8586
John Maguire
2026-06-25 21:50:55 -04:00 -
6275cedee5
HostInfo.remote atomic to fix torn reads on send
John Maguire
2026-06-25 21:45:42 -04:00 -
e281150c8dMerge
fd0b1fb44cinto184cdc8586
Caleb Jasik
2026-06-24 22:54:18 +03:00 -
540f8acafeMerge
2fa4bd9acainto184cdc8586
dependabot[bot]
2026-06-24 14:34:03 -04:00 -
0707af37b9Merge
81afed439einto184cdc8586
Wade Simmons
2026-06-24 14:34:03 -04:00 -
ee3809673dMerge
2df8dec5b0into184cdc8586
Nate Brown
2026-06-24 14:34:03 -04:00 -
5eb2822e9cMerge
9a30c5b6a1into184cdc8586
Jack Doan
2026-06-24 14:34:03 -04:00 -
80d90a772eMerge
6d02aedd67into184cdc8586
randomizedcoder
2026-06-24 14:34:03 -04:00 -
daf870488fMerge
31b0840ab4into184cdc8586
_Hierax_Umbra
2026-06-24 14:34:03 -04:00 -
9b1617820eMerge
c55f5765dcinto184cdc8586
Henry Stern
2026-06-24 14:34:03 -04:00 -
ea58c2e618Merge
8fb18c4ac2into184cdc8586
Jack Doan
2026-06-24 14:08:43 -04:00 -
0ee1fcb5b2Merge
e3ab4da54cinto184cdc8586
randomizedcoder
2026-06-24 12:32:40 +00:00 -
2ff4aed05aMerge
0c771ac4a9into184cdc8586
randomizedcoder
2026-06-24 11:14:11 +00:00 -
d9183bd9daMerge
468bddbe59into184cdc8586
randomizedcoder
2026-06-23 22:19:31 -04:00 -
8b681533bdMerge
5637ac8283into184cdc8586
Gabriel Meola
2026-06-24 08:12:14 +08:00 -
a97d2bc990Merge
cc9c66acfbinto184cdc8586
randomizedcoder
2026-06-23 17:20:20 -06:00 -
21ffe35ad1Merge
3d7658fa91into184cdc8586
randomizedcoder
2026-06-24 06:12:35 +08:00 -
5a7282201dMerge
4d5e92b2d7into184cdc8586
dependabot[bot]
2026-06-23 18:22:34 +00:00 -
a75bbce750Merge
7e6419b76binto184cdc8586
dependabot[bot]
2026-06-23 18:22:32 +00:00 -
184cdc8586Add OCI image labels with version info (#1772) master
John Maguire
2026-06-23 14:21:28 -04:00 -
678ba9034b
Add OCI image labels with version info
John Maguire
2026-06-23 13:39:04 -04:00 -
2fa4bd9acaBump golang.zx2c4.com/wireguard/windows dependabot/go_modules/zx2c4-dependencies-dbd6b95108
dependabot[bot]
2026-06-22 19:52:48 +00:00 -
4d5e92b2d7Bump actions/checkout from 6 to 7 dependabot/github_actions/actions/checkout-7
dependabot[bot]
2026-06-22 19:52:41 +00:00 -
81afed439e
Merge remote-tracking branch 'origin/master' into fips140
fips140
Wade Simmons
2026-06-18 12:07:19 -04:00 -
7d3166a19dcleanup ipv6 iputil helpers / skip reject for ICMP error packets and fragments (#1768)
Wade Simmons
2026-06-16 16:51:14 -04:00 -
341144165b
fix fragment checks
Wade Simmons
2026-06-16 16:43:39 -04:00 -
647ef2f745
do send rejects for the initial fragment
Wade Simmons
2026-06-16 16:35:32 -04:00 -
cc35055cd2
skip ICMP reject for ICMP error packets and fragments
Wade Simmons
2026-06-16 15:27:45 -04:00 -
0636ee1dc0Add failing test for prometheus stats double-start panic
Caleb Jasik
2026-06-16 13:31:20 -05:00 -
977e8d50ac
cleanup ipv6 iputil helpers
Wade Simmons
2026-06-16 13:39:39 -04:00 -
fe1c5682f0add IPv6 support to CreateICMPEchoResponse (#1767)
Wade Simmons
2026-06-16 13:16:47 -04:00 -
48dabf6be3
add IPv6 support to CreateICMPEchoResponse
Wade Simmons
2026-06-15 15:58:22 -04:00 -
e4cc80aacaadd IPv6 reject packet generation (#1766)
Wade Simmons
2026-06-16 13:04:21 -04:00 -
16b302c11dRelay log fix (#1765)
Jack Doan
2026-06-16 11:38:34 -05:00 -
ac3b901c10
Merge remote-tracking branch 'origin/master' into reject-ipv6
Wade Simmons
2026-06-16 12:29:32 -04:00 -
ab539f8a3fAdd smoke test for ipv6 (#1764)
Wade Simmons
2026-06-16 12:13:05 -04:00 -
07331bc9d9
ensure CreateRelayResponse gets logged correctly
JackDoan
2026-06-16 10:37:13 -05:00 -
935a509a2f
ensure CreateRelayRequest gets logged correctly
JackDoan
2026-06-16 10:22:11 -05:00 -
57418bc59d
cleanup
Wade Simmons
2026-06-16 10:26:01 -04:00 -
a615f247f7
fix ncat listen for ipv6
Wade Simmons
2026-06-16 09:33:20 -04:00 -
501881fdf7
Add smoke test for ipv6
Wade Simmons
2026-06-16 09:27:46 -04:00 -
78a6e3da92
better docs
Wade Simmons
2026-06-15 15:51:15 -04:00 -
cd19f5da29
cleanup, use ICMP error code 13 for ipv4
Wade Simmons
2026-06-15 15:36:56 -04:00 -
63ea9b7299
use ICMPv6 code 1 (administratively prohibited) and cap body at 1000 bytes
Wade Simmons
2026-06-15 15:31:37 -04:00 -
d217644285
add IPv6 reject packet generation (ICMPv6 Destination Unreachable and TCP RST)
Wade Simmons
2026-06-15 15:09:30 -04:00 -
b7d83b0500Bump golang.org/x/net in the golang-x-dependencies group (#1763)
dependabot[bot]
2026-06-15 14:59:19 -04:00 -
10b4eb91aaBump golang.org/x/net in the golang-x-dependencies group
dependabot[bot]
2026-06-15 14:11:44 +00:00 -
ef95b25fa3Bump github.com/gaissmai/bart from 0.27.1 to 0.28.0 (#1743)
dependabot[bot]
2026-06-15 10:09:39 -04:00 -
36b38396afBump the golang-x-dependencies group with 4 updates (#1750)
dependabot[bot]
2026-06-15 10:04:22 -04:00 -
614f48b808Merge
a51683ca73into2e9117da5b
natoopotato
2026-06-14 16:30:48 +12:00 -
a51683ca73
pq: post-quantum PSK handshake (ix_psk2) with pluggable provider
natoopotato
2026-06-14 12:19:39 +12:00 -
8fb18c4ac2Tighten host_query comments to match project style claude/nebula-authz-integration-20mlyi
Claude
2026-06-13 01:52:58 +00:00 -
bccc38f147Add experimental host_query API for local identity lookups
Claude
2026-06-13 01:46:02 +00:00 -
2e9117da5bfix tunnels that could permanently escape connection-manager monitoring (#1752)
Jack Doan
2026-06-10 11:03:23 -05:00 -
a690c904baimprove rejection of malformed handshakes (#1756)
Jack Doan
2026-06-10 09:28:07 -05:00 -
e028e6bf1adisallow negative stats intervals (#1754)
Jack Doan
2026-06-10 09:27:40 -05:00 -
3db406b8acfix a race in RelayState.CopyRelayIps (#1753)
Jack Doan
2026-06-10 09:27:15 -05:00 -
eaad4896c1udp_darwin: don't call the EncReader on a UDP error (#1755)
Jack Doan
2026-06-10 09:26:31 -05:00 -
d42407cf9a
dont need race detector on these extra smoke runs
Wade Simmons
2026-06-10 09:49:09 -04:00 -
ac5a18e56a
use fips140-all in CI tests
Wade Simmons
2026-06-10 09:43:41 -04:00 -
2efdcb0366
fips140-all
Wade Simmons
2026-06-10 09:35:59 -04:00 -
68d7339489
fix: nil pointer dereference in protoAddrToNetAddr
Guzz97
2026-06-10 09:02:52 +03:00 -
e6032f81aacorrectly record window counters for relayed packets in a tunnel (#1751)
Jack Doan
2026-06-09 16:18:59 -05:00 -
92bd785f2b
no mips64le
Wade Simmons
2026-06-09 17:05:34 -04:00 -
0637ec93d0
improve rejection of malformed handshakes
JackDoan
2026-06-09 15:39:01 -05:00 -
25d0efff3f
udp_darwin: don't call the EncReader on a UDP error
JackDoan
2026-06-09 15:22:17 -05:00 -
bbb08c1094
disallow negative stats intervals
JackDoan
2026-06-09 15:15:53 -05:00 -
77c431b7e4
fix a race in RelayState.CopyRelayIps
JackDoan
2026-06-09 15:08:37 -05:00 -
40cf8172e2
fix tunnels that could permanently escape connection-manager monitoring
JackDoan
2026-06-09 15:01:41 -05:00 -
7d087a6d9f
add all fips140 platforms
Wade Simmons
2026-06-09 15:42:05 -04:00 -
67da623e3b
cleanup enforcement
Wade Simmons
2026-06-09 15:33:31 -04:00 -
cdfbc98e05
correctly record window counters for relayed packets in a tunnel
JackDoan
2026-06-09 14:29:21 -05:00 -
060b46f4b3
better names
Wade Simmons
2026-06-09 13:49:55 -04:00 -
69c6132a76
fix the tag
Wade Simmons
2026-06-09 13:27:57 -04:00 -
a383937bde
make the build tag clearer
Wade Simmons
2026-06-09 13:26:36 -04:00 -
3b30526379
boringcrypto cleanup
Wade Simmons
2026-06-09 13:24:59 -04:00 -
cb9547b6a1
remove commented out code
Wade Simmons
2026-06-09 12:28:02 -04:00 -
69a6db705a
cleanup unused test
Wade Simmons
2026-06-09 12:26:42 -04:00 -
9709893009
use testing log
Wade Simmons
2026-06-09 12:26:04 -04:00 -
32db819315
cleanup
Wade Simmons
2026-06-09 12:23:48 -04:00 -
f437c7d372
more cleanup
Wade Simmons
2026-06-09 10:55:57 -04:00 -
d725e53072
makefile cleanup
Wade Simmons
2026-06-09 10:39:09 -04:00 -
06fb503fc3
WIP
Wade Simmons
2026-06-09 10:30:51 -04:00 -
8e2bd75509Bump the golang-x-dependencies group with 4 updates
dependabot[bot]
2026-06-08 19:53:03 +00:00 -
7cd3875934
fix expected for fips140
Wade Simmons
2026-06-08 12:22:25 -04:00 -
90ea6346e9
WIP
Wade Simmons
2026-06-08 11:41:07 -04:00 -
37b752bb23
WIP
Wade Simmons
2026-06-08 09:43:28 -04:00 -
c5b5b7ec9eMerge
448f06a378intob041f306cb
Wade Simmons
2026-06-07 17:07:58 -04:00 -
c55f5765dc
Fix panic in create-tunnel ssh command with -address
Henry Stern
2026-06-07 09:58:29 -03:00 -
b041f306cbBump the golang-x-dependencies group with 3 updates (#1742)
dependabot[bot]
2026-06-03 10:25:27 -04:00 -
c7e035479c
enforce GODEBUG=fips140=only
Wade Simmons
2026-06-02 16:36:58 -04:00 -
31b0840ab4gofmt: fix indentation of nil guard in protoAddrToNetAddr
Spec-Lab
2026-06-03 04:49:41 +09:00 -
85faf1fcf3test: add TestProtoAddrToNetAddr_NilReturnsInvalid for nil guard
Spec-Lab
2026-06-03 04:25:07 +09:00 -
af40b4dd50relay: guard against nil Addr in protoAddrToNetAddr to avoid panic on malformed Control message
Spec-Lab
2026-06-03 04:20:13 +09:00 -
adb01f66a3
make the test match the code
Wade Simmons
2026-06-01 13:48:34 -04:00 -
cf5d73d625
better check
Wade Simmons
2026-06-01 11:24:09 -04:00 -
56a09b7cbb
fix
Wade Simmons
2026-06-01 11:22:39 -04:00 -
1d17c785a8
fixup tests
Wade Simmons
2026-06-01 11:19:12 -04:00 -
7c8a70b0cc
fix smoke boringcrypto and fips140
Wade Simmons
2026-06-01 11:03:15 -04:00 -
c73245ca5c
fix missing import
Wade Simmons
2026-06-01 10:56:10 -04:00