wweir b16325b413 fix: correct three regressions from the hardening pass ...

- Config override validation now accepts bracketed IPv6 remote addresses
  ([2001:db8::1]:8443): the host part is checked as an IP literal before
  falling back to hostname rules, so a valid IPv6 remote no longer fails
  validation.
- Directory fake sites serve local relays even when serve_ip is a
  concrete non-loopback address: the local check now recognizes any
  address bound to a local interface, not just loopback, so fallback
  traffic is not wrongly 307-redirected to https.
- The config view's restart handler ignores failures after the component
  is destroyed, so a late 401 from the in-flight restart request can no
  longer trigger a global logout from a dead page.
- The login throttle bounds its failure map (purges expired entries when
  full) so rotating source IPs cannot grow it without bound.

2026-08-12 17:43:24 +08:00

..

auth.go

fix: correct three regressions from the hardening pass

2026-08-12 17:43:24 +08:00

config.go

fix: correct three regressions from the hardening pass

2026-08-12 17:43:24 +08:00

counting.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

eviction.go

feat(admin): track per-domain block counts

2026-08-07 15:51:08 +08:00

hostname_test.go

fix(router,admin): trust full-length ECS only, gate PTR on selected upstream, harden hostname cache

2026-08-12 14:53:13 +08:00

hostname.go

fix(router,admin): trust full-length ECS only, gate PTR on selected upstream, harden hostname cache

2026-08-12 14:53:13 +08:00

memory_bench_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

password_test.go

feat(admin): temporary password fallback with login hint and password masking

2026-08-10 16:17:57 +08:00

relay_bench_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

rules.go

feat(admin): rule hit stats, config console, restart, and session persistence

2026-08-09 19:20:26 +08:00

server_test.go

fix: correct three regressions from the hardening pass

2026-08-12 17:43:24 +08:00

server.go

fix(sower,admin): keep CONNECT tunnel head, bound SOCKS5 handshake, harden admin config and login

2026-08-12 17:15:54 +08:00

snapshot.go

feat(admin): surface proxy-side errors and stale data in overview

2026-08-11 09:24:53 +08:00

state_test.go

feat(admin): rule hit stats, config console, restart, and session persistence

2026-08-09 19:20:26 +08:00

state.go

fix(admin): decorate SSE totals hostnames, resolve concurrently, expose dns.reverse override

2026-08-11 22:19:57 +08:00

stats_bench_test.go

perf: batch byte accounting and bound gateway memory

2026-08-07 12:02:26 +08:00

stats_test.go

fix(admin): bound error alert to recent window, keep UTF-8-safe details

2026-08-11 10:29:10 +08:00

stats.go

feat(admin): show client hostnames via reverse DNS in traffic console

2026-08-11 22:02:57 +08:00

totals_hostname_test.go

docs(config): document dns.reverse in example config, clarify totals test

2026-08-11 23:35:15 +08:00

traffic.go

fix(router,admin): trust full-length ECS only, gate PTR on selected upstream, harden hostname cache

2026-08-12 14:53:13 +08:00