wg-dynamic, branch masterDynamic configuration daemons for WireGuardhttps://git.zx2c4.com/wg-dynamic/atom/?h=master2019-12-12T13:01:36ZDo remove expired leases from allowedips2019-12-12T13:01:36ZLinus Nordberglinus@nordberg.se2019-12-12T13:01:36Zurn:sha1:20428bc5d6923d1531bf0b2409fe3f9a5538ecd4Use siphash for hashtables2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-08T03:35:50Zurn:sha1:360b9c8c8b4c4364b755dc0935f05e4ba4429cb0Allow /32 and /128 to be omitted in ip= keys2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-11T04:48:49Zurn:sha1:29148632a56939d90fb909b11a8d50a673ddc496radix-trie: fix add() when no poolnodes exist2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-11T03:08:10Zurn:sha1:286d83010e22b1b11f8125f4b4dfe0a33959d93eProperly send and display wg_errno and errmsg2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-11T03:06:21Zurn:sha1:ca0e5670ac989ff3621ba133a455756ee378faf4Change request_ip protocol2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-11T02:58:04Zurn:sha1:f10e95340d9b99942fc594b642c4afcd829beed9
ipv4 and ipv6 keys have been combined into one common key, ip. To
distinguish between multiple IPs in later versions ip=0.0.0.0/32 and
ip=::/128 respectively now mean we want to be assigned a random address
from the server.
Releasing/not wanting an IP is now done by just not listing that IP,
i.e. if we only wanted an (random) ipv4 address the request would look
as follows:
request_ip=1
ip=0.0.0.0/32
Postpone freeing memory for leases until after updating allowedips2019-12-11T05:22:17ZLinus Nordberglinus@nordberg.se2019-12-04T18:27:04Zurn:sha1:61181e66446d5c1c37192c9281aead351cd47d28
Changing struct allowedips_update to hold pointers to addresses
introduced a use after free bug.
Take the opportunity to keep one pointer instead of three.
radix-trie: implement ipp_removepool_v{4,6}2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-03T00:50:04Zurn:sha1:271af935459c446e4b6f4e3549de5b5a31e454fbradix-trie: fix issues related to shadow-/counting2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-12-03T00:41:41Zurn:sha1:7a05c232f8eb66565001022708159127b78f3ce2
Previously it was possible that pools would not be correctly shadowed
and/or the left or right counters were not updated properly. To fix
that, every node now has flags indicating what type of node it is, and
if it's shadowed. Furthermore, We determine if a poolnode needs to be
(un)shadowed by walking the trie now.
remove_node() now also only modifies the left right counters if the
target node was actually found.
radix-trie: fix bug where /64 pools would overflow2019-12-11T05:22:17ZThomas Gschwantnertharre3@gmail.com2019-10-08T23:37:49Zurn:sha1:686f2822295e1972198321caa3e3ccd552d7592d