Commit graph

150 commits

Author SHA1 Message Date
Sergey Prokhorov
5fd6971f4e
Version bump: 0.6.1
Because of tls1.3 fixes
2019-08-13 18:05:39 +02:00
Sergey Prokhorov
0c2aa335ca
Add interactive installer script 2019-08-13 18:05:38 +02:00
Sergey Prokhorov
5e601bce3e Make it really look like TLSv1.3
By providing key_share and upported_versions extensions in ServerHello
2019-08-13 15:25:31 +02:00
Sergey Prokhorov
c33811c50c
Version bump 0.6.0 2019-08-13 00:46:00 +02:00
Sergey Prokhorov
fbe8cb593f
Allow any in tls_allowed_domains. 2019-08-13 00:45:29 +02:00
Sergey Prokhorov
237f9f1d25
Limit TLS record size to 2^14
See rfc8446#section-5.1
2019-08-12 19:02:37 +02:00
Sergey Prokhorov
7677fe1150
Add 'listener' to protocol_error metric 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
e28e21a77f
Fix decoding of packets split to multiple TLS frames. Fixes gh-16 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
e0c07667c4
Make it possible to restrict connections by TLS SNI domains 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
35c8f0dafe
Fix start.sh handling of -a key 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
40b1d8da0a
Dead code removed 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
263b199848
Fix infinite loop 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
30e8eca8cc
Print proxy links based on a set of enabled protocols on start 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
418709208c
Cosmetic changes: README, docker, dialyzer fixes 2019-08-12 19:02:37 +02:00
Sergey Prokhorov
0a1604d4be
Fake TLS protocol
* pretends being TLS1.3 + http2
* mtp_handler state-machine refactored
2019-08-12 19:00:28 +02:00
Sergey Prokhorov
c711054bf2
Add support for IPv6 clients. gh-11 2019-08-08 02:45:16 +02:00
Sergey Prokhorov
42eb63f29b
README fixed and updated 2019-08-08 00:42:41 +02:00
Sergey Prokhorov
d5d8b0d98e
Use alpine 3.9 for docker. Fixes #15
See https://github.com/erlang/docker-erlang-otp/issues/235
2019-08-07 22:36:23 +02:00
Sergey Prokhorov
2371703207
Fix bug in mtp_codec
Buffer was not saved if crypto codec returns `incomplete`
2019-07-26 18:37:17 +02:00
Sergey Prokhorov
6bc13bec85
Fix broken tests (padding) 2019-07-26 17:03:54 +02:00
Sergey Prokhorov
ddc04d678d
Revert mtp_full padding changes 2019-07-25 16:06:44 +02:00
Sergey Prokhorov
1429cfe267
Refactor codecs
* Get rid of per-codec internal read buffer
2019-07-25 13:17:37 +02:00
Sergey Prokhorov
6590a56e7c
Use erlang_psq from hex.pm 2019-06-09 20:12:14 +02:00
Sergey Prokhorov
e419845a1c
"maintainers" .app.src field removed 2019-06-09 19:59:49 +02:00
Sergey Prokhorov
e559b4619e
Version bump to 0.5.0 2019-06-09 19:47:42 +02:00
Sergey Prokhorov
a9701a3a4b
Merge branch 'master' into multiplexing 2019-06-08 22:43:22 +02:00
Sergey Prokhorov
69d5a18e38
Update IP lookup service address 2019-06-08 22:40:55 +02:00
Сергей Прохоров
223258439a
Fix handle_cast return value 2019-05-26 03:59:28 +02:00
Сергей Прохоров
9b8f382bc6
mtp_obfuscated: specify some binary part sizes 2019-05-26 03:47:57 +02:00
Сергей Прохоров
24ef827705
Add another replay attack protection: filter error replies from downstream 2019-05-26 03:47:15 +02:00
Сергей Прохоров
6768b7ba99
Minor mtp_metric optimizations 2019-05-26 01:24:49 +02:00
Сергей Прохоров
e66778ed7c
Make downstream backpressure tunable 2019-05-22 02:33:16 +02:00
Сергей Прохоров
e2308a6e57
Use "hut" for logger abstraction 2019-05-22 00:08:32 +02:00
Сергей Прохоров
c8d8edfb27
Replace fully-qualified call to local 2019-05-21 18:03:25 +02:00
Сергей Прохоров
31cec780e4
Add Erlang 22 to travis 2019-05-21 18:03:06 +02:00
Сергей Прохоров
c8804a16bb
Make sure stored "session fingerprint" is not referring larger binary 2019-05-20 20:49:31 +02:00
Сергей Прохоров
6a88feb97b
README updated to reflect replay attack changes 2019-05-20 03:35:05 +02:00
Сергей Прохоров
0f4d180a06
Replay attack mitigation
Storage of recently used 1st packets added. Connections with the same
1st packet are disallowed
2019-05-20 03:14:32 +02:00
Сергей Прохоров
07d397ce93
tests: fix bug in common test reset code 2019-05-10 17:35:05 +02:00
Сергей Прохоров
977109d05a
Add special helpers for live config_change 2019-05-09 17:18:29 +02:00
Сергей Прохоров
f1070dfee2
Handle "max packet size" errors; fix related bug in abridged codec 2019-04-30 23:50:09 +02:00
Сергей Прохоров
90feb07cdf
Fix httpd "eaddrinuse" in tests 2019-04-02 00:02:10 +02:00
Сергей Прохоров
d8aec8155f
Add some statefull property-based integration tests 2019-03-13 02:12:21 +01:00
Сергей Прохоров
66f074655b
Separate metrics for different backpressure types; test tweaks 2019-03-08 00:44:35 +01:00
Сергей Прохоров
efafd37ca9
Tune socket receive buffer sizes to fix false positive backpressure 2019-03-08 00:27:21 +01:00
Сергей Прохоров
23ef74a551
Add downstream backpressure tests 2019-03-07 02:34:10 +01:00
Сергей Прохоров
e9471b25c2
tests: Make it possible to block until metric value will match predicate 2019-03-07 02:33:31 +01:00
Сергей Прохоров
9a735bf928
Make it possible to change logick of test server RPC handling 2019-03-07 02:32:22 +01:00
Сергей Прохоров
a3a21ecd37
Make it possible to configure upstream healthchecks 2019-03-07 02:30:02 +01:00
Сергей Прохоров
321cfd69fb
Add some more metric-based asserts to CT 2019-03-05 01:52:40 +01:00