45 Commits

Author	SHA1	Message	Date
Sijie.Sun	8cdb27d43d	add stats metrics (#1207) ... support new cli command `easytier-cli stats` It's useful to find out which components are consuming bandwidth.	2025-08-09 00:06:35 +08:00
Sijie.Sun	2ec88da823	cli for port forward and tcp whitelist (#1165)	2025-07-29 09:30:47 +08:00
Sijie.Sun	8e7a8de5e5	Implement ACL (#1140) ... 1. get acl stats ``` ./easytier-cli acl stats AclStats: Global: CacheHits: 4 CacheMaxSize: 10000 CacheSize: 5 DefaultAllows: 3 InboundPacketsAllowed: 2 InboundPacketsTotal: 2 OutboundPacketsAllowed: 7 OutboundPacketsTotal: 7 PacketsAllowed: 9 PacketsTotal: 9 RuleMatches: 2 ConnTrack: [src: 10.14.11.1:57444, dst: 10.14.11.2:1000, proto: Tcp, state: New, pkts: 1, bytes: 60, created: 2025-07-24 10:13:39 +08:00, last_seen: 2025-07-24 10:13:39 +08:00] Rules: [name: 'tcp_whitelist', prio: 1000, action: Allow, enabled: true, proto: Tcp, ports: ["1000"], src_ports: [], src_ips: [], dst_ips: [], stateful: true, rate: 0, burst: 0] [pkts: 2, bytes: 120] ``` 2. use tcp/udp whitelist to block unexpected traffic. `sudo ./easytier-core -d --tcp-whitelist 1000` 3. use complete acl ability with config file: ``` [[acl.acl_v1.chains]] name = "inbound_whitelist" chain_type = 1 description = "Auto-generated inbound whitelist from CLI" enabled = true default_action = 2 [[acl.acl_v1.chains.rules]] name = "tcp_whitelist" description = "Auto-generated TCP whitelist rule" priority = 1000 enabled = true protocol = 1 ports = ["1000"] source_ips = [] destination_ips = [] source_ports = [] action = 1 rate_limit = 0 burst_limit = 0 stateful = true ```	2025-07-24 22:13:45 +08:00
Sijie.Sun	4f53fccd25	fix bugs (#1138) ... 1. avoid dns query hangs the thread 2. avoid deadloop when stun query failed because of no ipv4 addr. 3. make quic input error non-fatal. 4. remove ring tunnel from connection map to avoid mem leak. 5. limit listener retry count.	2025-07-21 23:18:38 +08:00
Sijie.Sun	7f3a9c021c	close peer conn if remote addr is from virtual network (#1123)	2025-07-18 03:29:48 +08:00
liusen373	0427b48d75	Allows to modify Easytier's mapped listener at runtime via RPC (#1107) ... * Add proto definition * Implement and register the corresponding rpc service * Parse command line parameters and call remote rpc service --------- Co-authored-by: Sijie.Sun <sunsijie@buaa.edu.cn>	2025-07-17 20:37:05 +08:00
DavHau	d0cfc49806	Add support for IPv6 within VPN (#1061) ... * add flake.nix with nix based dev shell * add support for IPv6 * update thunk --------- Co-authored-by: sijie.sun <sijie.sun@smartx.com>	2025-07-04 23:43:30 +08:00
韩嘉乐	01e491ec07	support ohos (#974) ... * support ohos --------- Co-authored-by: FrankHan <2777926911@qq.com>	2025-07-02 09:44:45 +08:00
Sijie.Sun	40b5fe9a54	support quic proxy (#993) ... QUIC proxy works like kcp proxy, it can proxy TCP streams and transfer data with QUIC. QUIC has better congestion algorithm (BBR) for network with both high loss rate and high bandwidth. QUIC proxy can be enabled by passing `--enable-quic-proxy` to easytier in the client side. The proxy status can be viewed by `easytier-cli proxy`.	2025-06-15 19:43:45 +08:00
Sijie.Sun	25dcdc652a	support mapping subnet proxy (#978) ... - **support mapping subproxy network cidr** - **add command line option for proxy network mapping** - **fix Instance leak in tests.	2025-06-14 11:42:45 +08:00
Kiva	ec56c0bc45	feat: allow using --proxy-forward-by-system together with --enable-exit-node (#957)	2025-06-07 22:27:57 +08:00
Mg Pig	20a6025075	Added RPC portal whitelist function, allowing only local access by default to enhance security (#929)	2025-06-07 22:05:47 +08:00
Sijie.Sun	83d1ecc4da	bump version to v2.3.0 (#859) ... also some improvements: 1. add magic dns option in gui. 2. allow icmp proxy fail on android 3. when no_tun is enabled, android do not start vpn service Co-authored-by: Your Name <you@example.com>	2025-05-18 16:45:39 +08:00
Sijie.Sun	28fe6257be	magic dns (#813) ... This patch implements: 1. A dns server that handles .et.net. zone in local and forward all other queries to system dns server. 2. A dns server instance which is a singleton in one machine, using one specific tcp port to be exclusive with each other. this instance is responsible for config system dns and run the dns server to handle dns queries. 3. A dns client instance that all easytier instance will run one, this instance will try to connect to dns server instance, and update the dns record in the dns server instance. this pr only implements the system config for windows. linux & mac will do later.	2025-05-16 09:24:24 +08:00
Sijie.Sun	72be46e8fa	allow tcp port forward use kcp (#838)	2025-05-11 00:48:34 +08:00
L-Trump	00d61333d3	allow proxy packets to be forwarded by system kernel	2025-03-08 12:56:49 +08:00
sijie.sun	51e0fac72c	improve user experience ... 1. add config generator to easytier-web 2. add command to show tcp/kcp proxy entries	2025-02-07 23:59:36 +08:00
Sijie.Sun	8b89a037e8	fix tcp incoming failure when kcp proxy is enabled (#601)	2025-02-06 09:08:34 +08:00
Sijie.Sun	55a39491cb	feat/kcp (#580) ... * support proxy tcp stream with kcp to improve experience of tcp over udp * update rust version * make subnet proxy route metrics lower in windows.	2025-01-26 00:41:15 +08:00
Sijie.Sun	1194ee1c2d	fix peer manager stuck when sending large peer rpc (#572)	2025-01-17 06:50:21 +08:00
Sijie.Sun	7ab8cad1af	allow use ipv4 address in any cidr (#404)	2024-10-10 10:28:48 +08:00
Sijie.Sun	37ceb77bf6	nat4-nat4 punch (#388) ... this patch optimize the udp hole punch logic: 1. allow start punch hole before stun test complete. 2. add lock to symmetric punch, avoid conflict between concurrent hole punching task. 3. support punching hole for predictable nat4-nat4. 4. make backoff of retry reasonable	2024-10-06 22:49:18 +08:00
Sijie.Sun	1b03223537	use customized rpc implementation, remove Tarpc & Tonic (#348) ... This patch removes Tarpc & Tonic GRPC and implements a customized rpc framework, which can be used by peer rpc and cli interface. web config server can also use this rpc framework. moreover, rewrite the public server logic, use ospf route to implement public server based networking. this make public server mesh possible.	2024-09-18 21:55:28 +08:00
sijie.sun	ae54a872ce	support socks5 proxy ... usage: --socks5 12345 create an socks5 server on port 12345, can be used by socks5 client to access virtual network.	2024-08-17 13:17:38 +08:00
sijie.sun	4a5e426730	fix android route and peer conn disconn bug ... 1. android correctly add route 2. use mock nic ctx to consume packets	2024-08-06 22:19:30 +08:00
Sijie.Sun	858ade2eee	Android Support (#166) ... 1. Add vpnservice tauri plugin for android. 2. add workflow for android. 3. Easytier Core support android, allow set tun fd.	2024-07-15 00:03:55 +08:00
Sijie.Sun	537f6ecf78	fix smoltcp tcp proxy (#157) ... 1. allow smoltcp proxy with dhcp ip 2. fix smoltcp not work without no tun.	2024-07-07 22:08:50 +08:00
Sijie.Sun	571d4a6e8f	fix bug in dhcp (#152) ... 1. fix dhcp not retry if tun device init failed. 2. forbid dhcp use default ip when no peer.	2024-07-06 14:22:11 +08:00
Sijie.Sun	34f832bbad	make tun dependency optional (#142) ... * remove log crates * remove udp/raw of smoltcp * make tun as optional dependancy, compile for freebsd works	2024-06-11 09:09:32 +08:00
Sijie.Sun	8aa57ebc22	support no tun mode (#141)	2024-06-10 10:27:24 +08:00
Sijie.Sun	df17a7bb68	bugfix before release 11x (#130) ... * use correct i18n hook * fix peer rpc panic make sure server use correct transact id * fix dhcp recreate tun device after ip changed * use upx correctly * compile arm & armv7 * prepare to release v1.1.0	2024-06-03 23:07:44 +08:00
Sijie.Sun	f64f58e2ae	support exit node (#121) ... support exit node, proxy all traffic via one of node NOTE: this patch has not implemented automatically route management.	2024-05-18 20:32:42 +08:00
m1m1sha	0ead308392	Feat/pseudo dhcp (#109) ... * ✨ feat: pseudo dhcp	2024-05-17 23:16:56 +08:00
sijie.sun	fc4e3782bd	tune command line args	2024-05-13 22:13:31 +08:00
sijie.sun	29365c39ed	use latency from peer center for route	2024-05-13 21:18:34 +08:00
Sijie.Sun	72701c9eb3	start tcp proxy after tun device created (#94) ... on win 10, tcp proxy listener created before tun device may not accept conn from tun dev.	2024-05-10 21:40:50 +08:00
Sijie.Sun	e5b537267e	bug fix and improve (#81) ... 1. fix manual connector do not retry if dns resolve failed. 2. allow not creating tun device if no virtual ipv4 is assigned.	2024-05-05 16:18:05 +08:00
sijie.sun	873851e6d0	mips	2024-05-03 17:09:46 +08:00
Sijie.Sun	6595c2837e	fix win multi network (#63)	2024-04-28 23:21:58 +08:00
Sijie.Sun	66b3241be7	fix handshake dead lock, clean old code (#61) ... * fix handshake dead lock * remove old code	2024-04-27 16:27:42 +08:00
Sijie.Sun	096af6aa45	fix tun device on mac (#58)	2024-04-26 21:19:47 +08:00
Sijie.Sun	57c9f11371	adapt tun device to zerocopy (#57)	2024-04-25 23:25:37 +08:00
Sijie.Sun	3467890270	zero copy tunnel (#55) ... make tunnel zero copy, for better performance. remove most of the locks in io path. introduce quic tunnel prepare for encryption	2024-04-24 23:12:46 +08:00
Sijie.Sun	727ef37ae4	add client gui for easytier (#50)	2024-04-06 22:44:30 +08:00
Sijie.Sun	4eb7efe5fc	use workspace, prepare for config server and gui (#48)	2024-04-04 10:33:53 +08:00