mirror of https://github.com/outbackdingo/firezone.git synced 2026-01-28 02:18:50 +00:00

Files

Thomas Eizinger 271c480357 fix(connlib): don't attempt to encrypt too large packets (#7263 )

When encrypting packets, we need to reserve a buffer within which
boringtun will encrypt the IP packet. Unfortunately, `boringtun` panics
if that buffer is not big enough which essentially brings all of
`connlib` down.

Really, we should never see a packet that is too large and ideally, we
enforce this at compile-time by creating different variants of
`IpPacket` that are sized accordingly. That is a large refactoring so
until then, we simply discard them instead of panicking.

---------

Signed-off-by: Thomas Eizinger <thomas@eizinger.io>
Co-authored-by: Jamil <jamilbk@users.noreply.github.com>

2024-11-05 04:17:21 +00:00

clients

build(deps): Bump thiserror from 1.0.64 to 1.0.68 in /rust (#7260 )

2024-11-04 19:06:15 +00:00

model

fix(connlib): large upstream dns message (#7183 )

2024-10-30 04:02:14 +00:00

snownet

fix(connlib): don't attempt to encrypt too large packets (#7263 )

2024-11-05 04:17:21 +00:00

tunnel

fix(connlib): large upstream dns message (#7183 )

2024-10-30 04:02:14 +00:00

.gitignore

android: update connlib dependency and integration (#1752 )

2023-07-17 18:50:39 +00:00

README.md

chore(docs): Remove outdated rust/connlib/README.md info (#3099 )

2024-01-03 18:10:52 +00:00

README.md

Connlib

Firezone's connectivity library shared by all clients.

Building Connlib

You shouldn't need to build connlib directly; it's typically built as a dependency of one of the other Firezone components. See READMEs in those directories for relevant instructions.