13 Commits
Author SHA1 Message Date
Jaime Pillora c408126df1 Harden the 1.12 release changes (#614) 2026-08-09 00:24:53 +10:00
Jaime PilloraandClaude Fable 5 e588d2163e 1.12: reliability & security pass (#609)
Reliability, security, and observability across client/server/tunnel:
keepalive ping timeouts, TCP half-close propagation, dial-before-accept,
graceful SIGTERM shutdown, UDP flow-cap sweep, pre-auth WS size cap,
SOCKS ACL enforcement + live authfile reload, exact legacy-fingerprint
match, --auth validation, session/failed-login logs, #608 panic fix,
goreleaser multi-arch Docker images, and a two-stage release pipeline
(draft + versioned images at tag time; latest promoted on publish).

Full detail: 1.12-changes.md, the PR (34 commits), and
https://jpillora.com/chisel-112-ux-review

Co-Authored-By: Claude Fable 5 <[email protected]>
2026-07-18 01:10:50 +10:00
Jaime PilloraandClaude Opus 4.6 44310b6566 Enforce auth ACL on tunnel channels
Previously, authfile ACL restrictions were only checked during the
initial config handshake. This adds ACL enforcement at the tunnel
layer when processing SSH channel requests, ensuring that each
outbound connection is validated against the user's allowed addresses.

Co-Authored-By: Claude Opus 4.6 <[email protected]>
2026-03-09 20:47:37 +11:00
Jaime Pillora 59e5362e6b Bump to Go 1.22. Add .rpm .deb and .akp to releases. Fix bad version comparison. 2024-08-05 15:50:20 +10:00
invist 4f58a395f6 Update version.go (#288) 2022-10-31 15:54:57 +11:00
BigSullyandbar ed6adb98bc Respond to /health and /version by request path rather than by the whole url string (#328)
Co-authored-by: bar <[email protected]>
2022-10-31 15:53:36 +11:00
Jaime Pillora c410372d0a display client ip in verbose server logs (closes #233) 2021-01-14 03:39:38 +11:00
Jaime Pillora 6ddc09d281 document udp, log client connection failures, expose more settings via env-vars 2020-11-17 04:53:43 +11:00
Jaime Pillora 798ec04a6b fix stdio "cannot listen", fix udp goroutine leak 2020-08-29 01:27:08 +10:00
Jaime Pillora 4f33489f62 fix multiple getters panic 2020-08-22 22:29:13 +10:00
Jaime Pillora e3abdc607e udp listener cleanup, add early port listen checks 2020-07-23 01:26:47 +10:00
Jaime Pillora edad853073 improved teardown and logging 2020-07-19 04:46:49 +10:00
Jaime Pillora 53e72fe2ba add udp support, massive refactor and more (see below)
* split out share/ package into multiple subpackages
* added share/compat.go to keep backward compatibility(ish)
* moved shared tunnelling logic from client/server packages into share/tunnel/
* added remote protocol "<host>:<port>/<protocol>", currently supporting tcp and udp
* added an end-to-end test suite
* added TODO e2e tests as contribution targets
* added deep context integration for improved cleanup and cancellation
2020-07-18 11:05:53 +10:00