github/sower
4
0
Fork 0
mirror of https://github.com/wweir/sower.git synced 2026-10-19 16:14:33 +00:00
Code Issues Releases Wiki Activity

Commit Graph

  • 0593934066 docs(plans): record the rollout that was actually verified master wweir 2026-10-13 07:01:54 +08:00
  • 93ffaec848 docs: fold the review findings into the plans v1.7.7 wweir 2026-10-13 06:58:40 +08:00
  • 116d16b98b refactor(sower): guard the dial exits instead of the routing entry wweir 2026-10-13 06:58:40 +08:00
  • 7b2a203cf3 fix(sower): answer refused proxy requests instead of closing silently v1.7.6 wweir 2026-10-12 20:16:43 +08:00
  • 8db5288365 fix(sower): resolve the self-target check through the upstream resolvers v1.7.5 wweir 2026-10-12 20:11:34 +08:00
  • 2de08e62e4 fix(sower): guard the direct dial path against self-targeting too v1.7.4 wweir 2026-10-12 19:35:38 +08:00
  • b688b93fbc fix(sower): refuse a proxy dial that resolves into this client's own listener wweir 2026-10-12 19:30:56 +08:00
  • 6e22cf42a2 docs(plans): record the recursion driver and the v1.7.3 rollout wweir 2026-10-12 19:18:53 +08:00
  • 06c357cd04 fix(sowerd): keep the SIGUSR1 heap dump off the Windows build v1.7.3 wweir 2026-10-12 19:13:36 +08:00
  • 3c869cd32d fix(sowerd): give the service a soft heap ceiling on every install path v1.7.2 wweir 2026-10-12 17:58:08 +08:00
  • 28c4f9e8ca fix(sowerd): bound the connection resources a burst can pin wweir 2026-10-12 17:55:45 +08:00
  • bf66914b94 docs(plans): drop a site-routing bullet filed under the wrong header wweir 2026-10-12 16:43:08 +08:00
  • dab041b9f6 docs(sowerd): keep the site-route authority rule in one place wweir 2026-10-12 16:09:19 +08:00
  • b42b2738e7 test(sowerd): stop the authority checks from passing for the wrong reason wweir 2026-10-12 16:09:19 +08:00
  • 80dfa072e9 fix(ci): build the release binaries before copying packaging files in v1.7.1 wweir 2026-10-12 15:58:09 +08:00
  • d15ba70100 feat(sowerd): let a site route present the client's authority to its upstream v1.7.0 wweir 2026-10-12 14:35:41 +08:00
  • d14ee7cbfa test(sowerd): add the positive control for transport auth dispatch wweir 2026-10-12 11:06:28 +08:00
  • a6c76b01db test(install): pin the embedded example against renderDefaultConfig wweir 2026-10-12 10:56:55 +08:00
  • 0b27a34f3e fix(install): generate the client password instead of the placeholder wweir 2026-10-12 10:44:47 +08:00
  • 2894a15510 docs(security): state what the transport password does and does not gate wweir 2026-10-12 10:35:33 +08:00
  • 8a3670d50e feat(sowerd): add an optional HTTP Basic gate for site routes wweir 2026-10-10 16:41:09 +08:00
  • 8e5fd3e805 test(install): cover install.sh end to end from make test v1.6.2 wweir 2026-10-10 14:57:10 +08:00
  • d6617ef101 fix(install): preview the commands --dry-run actually runs wweir 2026-10-10 14:57:07 +08:00
  • 3d2c940428 docs(plans): correct the fake-site fallback claim in the site routing plan wweir 2026-10-10 14:57:03 +08:00
  • 512515db9b docs: trim the completed plans and record the sowerd rejected directions wweir 2026-10-10 14:57:00 +08:00
  • ea243feb00 docs(architecture): drop the duplicated custom certificate SAN note wweir 2026-10-10 14:56:52 +08:00
  • 2988505770 fix(config): keep the checked-in sowerd example in sync with the embedded one wweir 2026-10-10 14:56:49 +08:00
  • f37e5fa758 feat(install): add a one-shot installer for systemd, procd and launchd v1.6.1 wweir 2026-09-18 22:53:12 +08:00
  • d0031e4106 fix(sower): keep the soft heap limit above the live rule heap wweir 2026-09-18 22:37:03 +08:00
  • 44b7eefe91 ci(release): copy every matrix service file from .github v1.6.0 wweir 2026-09-18 18:16:00 +08:00
  • 5dc57bc234 docs: security model for the sowerd edge; document the unknown-SNI cert fallback wweir 2026-09-18 18:04:44 +08:00
  • b2b344e948 feat(sowerd): answer TLS handshake for non-whitelisted SNI wweir 2026-09-18 17:35:55 +08:00
  • 5c15453dc6 fix(sowerd): log the routing context of proxy upstream failures wweir 2026-09-16 15:36:03 +08:00
  • c4129c06ef docs: describe fake-site HTTP reverse proxy and forwarding headers wweir 2026-08-28 13:37:14 +08:00
  • 8dad77b778 feat(sowerd): reverse-proxy HTTP fake-site fallback with edge headers wweir 2026-08-28 13:37:05 +08:00
  • bfad951fb0 docs: reflect hand-maintained shadcn-style UI without bits-ui wweir 2026-08-20 18:15:23 +08:00
  • f0cfd6941d refactor(web): hand-maintain shadcn-style UI components, drop bits-ui wweir 2026-08-20 18:15:19 +08:00
  • 879c83f0fa feat(sowerd): support path-prefix routing within site routes wweir 2026-08-13 08:39:59 +08:00
  • b16325b413 fix: correct three regressions from the hardening pass wweir 2026-08-12 17:43:24 +08:00
  • f3894ef110 docs: reflect cert whitelist, probe handshake, frame checksum, DHCP validation wweir 2026-08-12 17:34:37 +08:00
  • f89ca0425a fix(web): cancel restart polling on destroy, surface dead SSE, harden rules races wweir 2026-08-12 17:31:35 +08:00
  • 3ea411e5fd fix(transport,pkg): authenticate full sower frame, validate DHCP offers, harden handshakes wweir 2026-08-12 17:26:26 +08:00
  • 3286851fdf fix(install,config): lock down installed config, atomic binary copy, reject socks5 password, parse bare ipv6 wweir 2026-08-12 17:23:14 +08:00
  • 0ad94ba31c fix(sowerd): whitelist autocert issuance, bound probe handshake, fix fake site target wweir 2026-08-12 17:19:31 +08:00
  • 4c19815319 fix(sower,admin): keep CONNECT tunnel head, bound SOCKS5 handshake, harden admin config and login wweir 2026-08-12 17:15:54 +08:00
  • 30e80ab510 fix(router): bound degrade retry to snapshot, gate internal PTR on selected upstream wweir 2026-08-12 17:08:32 +08:00
  • 1e64542adb style: gofmt fixes for legacy build tag and test alignment wweir 2026-08-12 16:19:48 +08:00
  • a0f627621b fix(router,admin): trust full-length ECS only, gate PTR on selected upstream, harden hostname cache wweir 2026-08-12 14:53:13 +08:00
  • 203729299e docs(config): document dns.reverse in example config, clarify totals test wweir 2026-08-11 23:35:15 +08:00
  • 0f7e395ab3 fix(admin): decorate SSE totals hostnames, resolve concurrently, expose dns.reverse override wweir 2026-08-11 22:19:57 +08:00
  • dda120c8ca feat(admin): show client hostnames via reverse DNS in traffic console wweir 2026-08-11 22:02:57 +08:00
  • 2e839fe9f3 test(router): cover ECS stripping on the TCP exchange path wweir 2026-08-11 21:46:54 +08:00
  • 5a57267512 feat(router): attribute DNS stats via EDNS client subnet, strip ECS upstream wweir 2026-08-11 21:34:11 +08:00
  • 83675fe607 fix(router): reject multi-char ip6.arpa nibbles in reverse-name parse wweir 2026-08-11 21:06:18 +08:00
  • b4d92703ce feat(router): answer internal PTR lookups locally, keep external DNS unexposed wweir 2026-08-11 21:02:41 +08:00
  • 683b1da33f fix(admin): decouple rule feedback from list reload, unify rule styling wweir 2026-08-11 19:10:36 +08:00
  • f3b59f7444 fix(admin): show concrete success feedback after rule mutations wweir 2026-08-11 18:57:33 +08:00
  • 1e4487193c ci(release): build per-arch matrix with aggregated release job wweir 2026-08-11 14:32:45 +08:00
  • c86937820a fix(admin): bound error alert to recent window, keep UTF-8-safe details wweir 2026-08-11 10:29:10 +08:00
  • cfddf76eb3 feat(admin): surface proxy-side errors and stale data in overview wweir 2026-08-11 09:24:53 +08:00
  • 0bd6e433a3 fix(admin): bound SSE writes and reset page filters on leave wweir 2026-08-11 08:35:14 +08:00
  • 548a45559f chore(deps): deferlog v2.1.5, admin password b64 prefix wweir 2026-08-11 08:20:44 +08:00
  • e526a73469 fix(sower): redact remote password from config load-failure log wweir 2026-08-11 08:07:34 +08:00
  • d983885739 fix(admin): harden chart pin and screen-reader announcements wweir 2026-08-11 08:07:26 +08:00
  • 249c3ae63f fix(config): send remote password verbatim to upstream proxy wweir 2026-08-11 00:17:47 +08:00
  • 961c7e2e72 fix(admin): show live current values in chart legends wweir 2026-08-11 00:17:42 +08:00
  • 1dc5f50818 fix(ci): build web assets before running go vet and test wweir 2026-08-10 16:35:06 +08:00
  • 53d4271813 chore: stop tracking web dist build artifacts wweir 2026-08-10 16:29:31 +08:00
  • 112bd84bc2 chore: ignore cross-compiled binaries wweir 2026-08-10 16:18:12 +08:00
  • 033a070db6 feat(admin): temporary password fallback with login hint and password masking wweir 2026-08-10 16:17:57 +08:00
  • 52f9205e6a refactor(config): drop YAML support, keep TOML only wweir 2026-08-10 16:17:11 +08:00
  • 6ec5d44d7c fix(sower): handle CONNECT in http proxy handler wweir 2026-08-10 12:12:32 +08:00
  • 265f7e14ba docs: detail admin config console whitelist and in-place restart wweir 2026-08-09 23:26:37 +08:00
  • 4c3d4e399e ci: checkout before setup-go to enable module cache wweir 2026-08-09 21:34:08 +08:00
  • b77925d22e chore(deps): update go, web and CI dependencies wweir 2026-08-09 21:31:15 +08:00
  • ffc631adaa fix(ci): install bun before building web assets wweir 2026-08-09 21:19:07 +08:00
  • 9ef545b189 docs: complete admin configuration and plan status updates wweir 2026-08-09 21:18:40 +08:00
  • 8e9cd6f940 chore: ignore agent working data wweir 2026-08-09 19:21:02 +08:00
  • 49710d9151 docs: sync admin console docs with implemented behavior wweir 2026-08-09 19:21:02 +08:00
  • f9c61eddb3 build(web): rebuild frontend dist assets wweir 2026-08-09 19:21:02 +08:00
  • fbfca95111 feat(web): rule stats, config editing, restart, and navigation polish wweir 2026-08-09 19:21:02 +08:00
  • 0f67081022 feat(admin): rule hit stats, config console, restart, and session persistence wweir 2026-08-09 19:20:26 +08:00
  • 0aed36f698 feat(router): report matched rule text for hit tracking wweir 2026-08-09 19:02:18 +08:00
  • 759794e897 fix(router): drop empty rules parsed from empty TOML arrays wweir 2026-08-09 18:56:45 +08:00
  • edb665f34c build(web): rebuild frontend dist assets wweir 2026-08-07 15:51:25 +08:00
  • 0bb3603740 feat(web): show blocked domains in traffic page wweir 2026-08-07 15:51:20 +08:00
  • 23a51750a7 test(admin): cover per-domain block counting wweir 2026-08-07 15:51:13 +08:00
  • a8ae275c88 feat(admin): track per-domain block counts wweir 2026-08-07 15:51:08 +08:00
  • a14ff9ad6b build(web): rebuild frontend dist assets wweir 2026-08-07 12:02:35 +08:00
  • 9104370d52 docs: sync architecture and admin console plan wweir 2026-08-07 12:02:31 +08:00
  • defea58ac2 perf: batch byte accounting and bound gateway memory wweir 2026-08-07 12:02:26 +08:00
  • 60ac21f230 feat(router): guard DNS upstream refresh with generation wweir 2026-08-07 12:02:21 +08:00
  • 94c7105187 feat(admin): persist rule changes and add config/traffic console wweir 2026-08-07 12:02:15 +08:00
  • 6023537319 feat(admin): test a domain's rule matches and route decision wweir 2026-08-06 22:42:31 +08:00
  • 9b74f80cfe feat(admin): cumulative traffic totals for domains and clients wweir 2026-08-06 22:34:55 +08:00
  • 92221c2ac6 feat(admin): show each domain's most recent client IP wweir 2026-08-06 22:20:56 +08:00
  • 7211ce9300 fix(admin): keep client chips stable under the client filter wweir 2026-08-06 22:10:18 +08:00
  • 54f6f61e78 fix(admin): review fixes for the SSE migration wweir 2026-08-06 21:33:48 +08:00
  • 64a1b55e99 feat(admin): replace polling with Server-Sent Events wweir 2026-08-06 20:11:10 +08:00
  • fbc0d54893 feat(admin): track and filter traffic by client IP wweir 2026-08-06 19:54:43 +08:00