858 commits

Author	SHA1	Message	Date
Daniel Haimanot	35cebf538e	chore: address clippy warnings	2026-04-22 09:47:55 -07:00
Zhang Jingqiang	2d87670934	g3proxy: fix egress path setting from http header	2026-03-26 07:28:00 +08:00
Nanak Singh	d196f19f06	Implemented listen_transparent in sni_proxy	2026-02-26 18:24:55 +08:00
Zhang Jingqiang	c5f42bbde1	move tls & quic parser code to g3-codec	2026-02-13 00:35:08 +08:00
Zhang Jingqiang	f7ffe83e8c	add g3-codec for low level protocol encoding/decoding	2026-02-13 00:35:08 +08:00
Zhang Jingqiang	f5600d6d94	g3proxy: ldap extended response OID is optional	2026-02-06 23:00:22 +08:00
Zhang Jingqiang	4a97072987	g3proxy: introduce a cache layer for remote user passwords	2026-02-05 21:02:03 +08:00
Zhang Jingqiang	7dcf3974a8	support lua55 but still default to lua54	2026-02-04 07:00:20 +08:00
Zhang Jingqiang	49e35a45f6	g3proxy: respect idle timeout in ldap pool	2026-02-04 07:00:20 +08:00
Zhang Jingqiang	d49fbed7f2	g3proxy: fix ldap testcase	2026-02-02 22:56:08 +08:00
Zhang Jingqiang	9522860c0d	g3proxy: add ldap user group	2026-02-02 22:56:08 +08:00
Zhang Jingqiang	79fe3c899f	g3proxy: use Drop method to decrease alive stats	2026-01-18 08:31:42 +08:00
Zhang Jingqiang	1e9f800307	g3proxy: enable facts auth on tcp_stream & tls_stream server	2026-01-18 08:31:42 +08:00
Zhang Jingqiang	d02e990e01	support set tcp max segment size in listen config	2026-01-14 09:36:39 +08:00
Zhang Jingqiang	279ec2e5d4	update package build files	2026-01-10 21:48:51 +08:00
Zhang Jingqiang	737d30e079	g3proxy: add testcase for sni_proxy facts auth	2026-01-07 07:06:32 +08:00
Zhang Jingqiang	a509870673	g3proxy: support facts user auth in sni_proxy server	2026-01-07 07:06:32 +08:00
Zhang Jingqiang	ab94035032	g3proxy: support facts user auth in tcp_tproxy server	2026-01-07 07:06:32 +08:00
Zhang Jingqiang	ff428ba1a8	g3proxy: support more types of user group	2026-01-03 11:43:42 +08:00
Zhang Jingqiang	65f35885da	update packages	2026-01-02 07:34:16 +08:00
Zhang Jingqiang	0f285d58f1	bump MSRV to 1.90	2025-12-26 22:53:05 +08:00
Zhang Jingqiang	6a46ac79c5	g3proxy: fetch error logger from escaper udp io types	2025-12-22 06:22:37 +08:00
Zhang Jingqiang	b5b6eea14d	g3proxy: allow to bind to foreign address when connect	2025-12-20 20:14:35 +08:00
Zhang Jingqiang	49d04e03e7	use ArcStr instead of Arc<str>	2025-12-15 07:26:59 +08:00
Zhang Jingqiang	a54e489a68	update to capnp 0.23	2025-10-29 09:13:50 +08:00
Zhang Jingqiang	26d8a090ff	g3proxy: use less allocation when publish data to escaper	2025-10-28 10:11:14 +08:00
Zhang Jingqiang	a784d24656	update to use capnp 0.22	2025-10-28 10:11:14 +08:00
Zhang Jingqiang	1859548e72	display real used openssl variant name	2025-10-27 22:12:46 +08:00
Zhang Jingqiang	56a43723b4	g3proxy: use jump hash in username params resolve ip selection	2025-10-21 13:47:35 +08:00
Zhang Jingqiang	dfc6852395	g3proxy: allow to resolve consistently when using username params	2025-10-15 18:56:58 +08:00
Zhang Jingqiang	401fcaf82c	update packages	2025-10-09 22:04:09 +08:00
Zhang Jingqiang	ae06c81a4a	minor style fix	2025-09-25 17:59:10 +08:00
Daniel Haimanot	db42fd6f80	g3proxy: set default missed ticked behavior to delay	2025-09-12 23:06:28 -07:00
Daniel Haimanot	2ba7b2e3ae	g3proxy: use acquire/release for h2 task stat ... g3proxy: set idle_count to 0	2025-09-12 23:06:28 -07:00
Daniel Haimanot	3755701fee	g3proxy: h2 idle tasks shutdown	2025-09-12 23:06:28 -07:00
Zhang Jingqiang	3aec882e3a	g3proxy: futhur simplify username params code	2025-09-11 13:22:55 +08:00
Zhang Jingqiang	0c983bc045	g3proxy: allow to use many egress path selection rules	2025-09-11 09:10:56 +08:00
Zhang Jingqiang	cca4427cb5	style change for username_params_to_escaper	2025-09-11 09:10:56 +08:00
onin	c1a1b54d2c	Fixed Clippy warnings	2025-09-09 11:42:18 +08:00
onin	84e925c2aa	Trailing semicolon	2025-09-09 11:42:18 +08:00
onin	0d7087c50f	Please check self.task_notes.override_next_proxy().is_some() first.	2025-09-09 11:42:18 +08:00
onin	5e997d8102	Please check self.task_notes.override_next_proxy().is_some() first.	2025-09-09 11:42:18 +08:00
onin	ea2f004434	Please use {msg} inside the format string or you will see a clippy warning.	2025-09-09 11:42:18 +08:00
onin	742e66adaf	escape: inline peer selection in connect_via_peer for proxy_http/https/socks5/socks5s; remove ... tcp_connect_to - proxy_http, proxy_socks5: connect_via_peer now selects override/next proxy internally and returns TcpStream; tcp_new_connection calls it directly. - proxy_https, proxy_socks5s: same refactor, but connect_via_peer returns (UpstreamAddr, TcpStream) so tcp_new_connection can preserve peer info for TLS SNI/logging. - Remove redundant tcp_connect_to functions and update call sites. - Minor cleanup: use SocketAddr::new consistently. - cargo check passes.	2025-09-09 11:42:18 +08:00
onin	600127b68f	restored mod.rs	2025-09-09 11:42:18 +08:00
onin	1b6bf68029	nuked references to global_label in username_params.rs and username_params_to_escaper.rs	2025-09-09 11:42:18 +08:00
onin	8c11d5b4cd	username-params: gate mapping + no default override; HTTP 400 on unresolved mapping; dedup; docs/tests ... - Behavior: do not override when username has no recognized keys; fall back to escaper proxy_addr. - HTTP error: username-derived NXDOMAIN returns 400 Bad Request with “Proxy targeting didn't find a match” (CONNECT and Forward); other failures keep existing mappings (e.g., 530). - Config/compute: allow empty separator; rename suffix_for_host → to_fqdn; add username_has_known_key(..); keep global_label for compatibility but stop using it. - Server config: use UsernameParamsToEscaperConfig directly; call UsernameParamsToEscaperConfig::parse(..). - Integration: HTTP writer gates mapping with username_has_known_key(..); 400 on invalid params; no override otherwise. SOCKS negotiation gates similarly; uses Option<UpstreamAddr>; standard error on invalid params. - Escapers: divert_tcp ignores per-connection override (internal/transparent); remove unnecessary clones; dedup connect logic via local connect_via_peer(..) helpers (no cross-module macro). - Logging: restore SOCKS log_client_shutdown() parity with HTTP connect. - Docs/examples: EN/ZH guides note “no recognized keys → use proxy_addr”; remove global_label from examples. - Tests: update for to_fqdn; remove “no params → global” test; adjust unknown-keys case; fix duplicate #[test]. - Cleanup: remove unused imports and small style nits.	2025-09-09 11:42:18 +08:00
onin	6269cbe517	fix(g3proxy): redact raw username in debug; use contains() ... - Replace raw username_original with original_len in g3proxy/src/serve/username_params.rs. - Keep all other diagnostics unchanged; no runtime behavior change. - Addresses CodeQL warning: Cleartext logging of sensitive information.	2025-09-09 11:42:18 +08:00
onin	6598112796	fix(g3proxy): redact raw username in debug; use contains() ... - Replace raw username_original with original_len in g3proxy/src/serve/username_params.rs. - Keep all other diagnostics unchanged; no runtime behavior change. - Addresses CodeQL warning: Cleartext logging of sensitive information.	2025-09-09 11:42:18 +08:00
onin	9139bdc292	fix(g3proxy): redact raw username in debug; use contains() ... - Replace raw username_original with original_len in g3proxy/src/serve/username_params.rs. - Keep all other diagnostics unchanged; no runtime behavior change. - Addresses CodeQL warning: Cleartext logging of sensitive information.	2025-09-09 11:42:18 +08:00