mirror of https://github.com/outbackdingo/firezone.git synced 2026-01-27 18:18:55 +00:00

Files

Thomas Eizinger 03ac73ac00 fix(gateway): reset DNS resource NAT if proxy IPs change (#10310 )

In #10040, we decided to persist a peer's routing state on the Gateway
across ICE sessions. This routing state also includes the DNS resource
NAT.

Prior to #10104 (which is not released yet), when a Client signs out and
back in, it resets the proxy IP mapping for DNS resources and will start
numbering them again from the front, i.e. starting from 100.96.0.1. With
the state still being preserved on the Gateway, this represents a
problem: We keep existing mappings around if there is still a NAT
session for this proxy IP. However, if the proxy IP is actually for a
different domain, this NAT session is meaningless. In fact, not
replacing the IP is problematic as we will now route packets for the new
proxy IP to the wrong destination.

The persistent DNS resource mapping from #10104 fixes this. In this PR,
we add an additional check to the Gateway where we detect whether the
Client has started to re-assign proxy IPs and if so, we completely reset
the DNS resource NAT state including all existing NAT sessions.

Fixes #10268

2025-09-09 02:08:26 +00:00

bufferpool

build(deps): upgrade to opentelemetry 0.30 (#10239 )

2025-08-21 22:47:39 +00:00

dns-over-tcp

feat(connlib): improve throughput on higher latencies (#10231 )

2025-08-20 23:08:56 +00:00

dns-types

build(deps): bump domain from 0.10.4 to 0.11.0 in /rust (#9274 )

2025-05-28 10:37:16 +00:00

etherparse-ext

refactor(rust): move crates into a more sensical hierarchy (#9066 )

2025-05-12 01:04:17 +00:00

ip-packet

build(deps): bump to Rust 1.89 (#10208 )

2025-08-18 05:04:55 +00:00

l3-tcp

test(connlib): establish real TCP connections in proptests (#9814 )

2025-07-11 15:10:22 +00:00

l4-tcp-dns-server

chore(rust): bump to Rust 1.88 (#9714 )

2025-07-12 06:42:50 +00:00

l4-udp-dns-server

build(rust): upgrade to Rust 1.85 and Edition 2024 (#8240 )

2025-03-19 02:58:55 +00:00

model

feat(connlib): always use candidates in order of priority (#10063 )

2025-08-01 01:57:29 +00:00

phoenix-channel

chore(rust): allow too_many_arguments repo-wide (#10236 )

2025-08-22 13:21:07 +00:00

snownet

feat(connlib): gracefully shutdown connections (#10076 )

2025-09-01 06:30:13 +00:00

socket-factory

chore(rust): fix unused variable warning (#10283 )

2025-09-03 01:17:11 +00:00

tun

refactor(connlib): periodically record queue depths (#10242 )

2025-09-02 02:57:36 +00:00

tunnel

fix(gateway): reset DNS resource NAT if proxy IPs change (#10310 )

2025-09-09 02:08:26 +00:00

.gitignore

android: update connlib dependency and integration (#1752 )

2023-07-17 18:50:39 +00:00

README.md

chore(docs): Remove outdated rust/connlib/README.md info (#3099 )

2024-01-03 18:10:52 +00:00

README.md

Connlib

Firezone's connectivity library shared by all clients.

Building Connlib

You shouldn't need to build connlib directly; it's typically built as a dependency of one of the other Firezone components. See READMEs in those directories for relevant instructions.