Rivoreo Source Code Repositories
src.rivoreo.one / net / rncn-node / 1832aeb3872126c0398892963e2ec6dc8fdd03bb
  1. 1832aeb Don't import the route for 100.64.0.0/10 from OSPF by WHR · 9 weeks ago
  2. 23f4f4d Allow multiple failover URLs be specified for the 'cidr' directive of the WAN routes list by WHR · 9 weeks ago
  3. 87a5c94 Declare some variables as 'local' by WHR · 9 weeks ago
  4. de4eb10 Retry wget(1) for the root route file on some exit status, in rncn-wan-routes-updater.sh by WHR · 9 weeks ago
  5. 2aa8310 Correct some command substitution escaping issues by WHR · 10 weeks ago
  6. 38070a3 Use wget(1) options '--retry-on-host-error' and '--retry-on-http-error' in rncn-wan-routes-updater.sh if possible by WHR · 10 weeks ago
  7. 21ee565 Fix the wait command that inserted by the previous commit always fail by WHR · 3 months ago
  8. 56d5d97 Wait at least 0.2 s after notifying peer to update OpenVPN configuration and before applying the new OpenVPN configuration locally by WHR · 3 months ago
  9. f9984da For some services, automatically restart after SIGPIPE or other signal by WHR · 3 months ago
  10. c5e7b83 Don't ignore SIGPIPE in most services by WHR · 3 months ago
  11. b25d40b Install server programs of SSH-based services into '/etc/ssh/services' directory instead by WHR · 3 months ago
  12. 2d70b2c Correct the Base64 alphabet that used in SSH known hosts by WHR · 3 months ago
  13. 0a17905 Support sending ping statistics result to a configured metrics server via SSH by WHR · 3 months ago
  14. a02c172 Recognize domain names in function 'append_line_to_ssh_known_hosts_file' by WHR · 3 months ago
  15. 85dcbcb Make 'ssh_add_known_host' function returning successful status after adding the key to known hosts list by WHR · 3 months ago
  16. 226f6d1 Add option 'ping-restart 600' for OpenVPN configuration that don't have a known bind port by WHR · 3 months ago
  17. bac9c7e Merge 'ssh_add_known_host' function implementation into a shared script by WHR · 3 months ago
  18. 9e96248 Invalidate current remote endpoint of a WireGuard link after successfully requesting the peer to change port by WHR · 3 months ago
  19. e222aab Add 'monitor.verbose' configuration directive by WHR · 3 months ago
  20. d4648ea Suppress message from openvpn(8) for generating a secret key if generation was successful by WHR · 3 months ago
  21. f9c5bd9 sshwgcfg: defer setting the new port until the SSH session fully ends by WHR · 3 months ago
  22. 5e9e690 Remove 'FwMark' directive from generated WireGuard configuration by WHR · 3 months ago
  23. bd599ab Warn about the dynamic bind port configuration for WireGuard by WHR · 3 months ago
  24. fc3905c sshovpncfg: correctly check SSH server session process of OpenSSH 9.8 and later by WHR · 3 months ago
  25. c631df0 Revert commit 113cc70356e76eb2ff2b7dcea03bd9886910b13c, as it breaks the most basic purpose of wireguard-periodic-rebind-port service, which is periodic changing the ephemeral port at a reasonable interval by WHR · 3 months ago
  26. 0476ea7 Fix function 'write_ifupdown_cloned_interfaces' creating static configuration for non-precloning OpenVPN interfaces if any precloning interface is configured on the node by WHR · 3 months ago
  27. 698141c Don't check presence of '/etc/openvpn/<interface>.{up|down}.sh' files for existent OpenVPN configuration, as they will be missing if 'preclone' is enabled by WHR · 3 months ago
  28. a7afa18 Correct permission mode of identity file 'id_ecdsa_ovpncfg' on startup of openvpn-periodic-rebind-port.sh and openvpn-periodic-regenkey.sh by WHR · 3 months ago
  29. c7d1df0 Make OpenVPN reconfiguration lock cover 'systemctl kill' command by WHR · 3 months ago
  30. a291b37 Default a shorter ping duration and wait for link status monitor by WHR · 3 months ago
  31. 60c18a8 Warn about unknown directives when loading configuration file by WHR · 3 months ago
  32. 0fbe5dc Correct the sed(1) command that filters SSH known hosts file by WHR · 3 months ago
  33. b4022c6 sshovpncfg: fix compatibility issue with OpenSSH 9.8 and later by WHR · 3 months ago
  34. aa74d3c Send signal to main unit process only, when using 'systemctl kill' by WHR · 3 months ago
  35. 943ef0c Explicitly add link scope route after assigning IP address on tunneling interfaces if required by WHR · 3 months ago
  36. 8094244 Merge branch '主要' of 'ssh://192.168.128.134/var/public-repos/net/rncn-node' into '主要' by WHR · 3 months ago
  37. 2ca1747 Optionally install flush-auxiliary-fibs.service by WHR · 3 months ago
  38. 1870b3d Support configuring a tun interface to be created and configured in ifupdown before use with OpenVPN by WHR · 3 months ago
  39. 2d3ea73 Suppress variables and values printed by sysctl(8) when applying /etc/sysctl.conf by WHR · 3 months ago
  40. 7dfd4d8 Use a per-configuration lock when updating OpenVPN configuration or secret key by WHR · 3 months ago
  41. f0c655c Prefer 'off' and 'on' for boolean values by WHR · 3 months ago
  42. b825bda Decide when to regenerate OpenVPN static key based on amount of data that transmitted over the tunnel, in addition to amount of time the current key has been in use; set 'ConnectTimeout' and 'ServerAliveInterval' options for changing peer's OpenVPN configuration over SSH by WHR · 3 months ago
  43. f3149d9 Make ping payload size and interval configurable by WHR · 3 months ago
  44. c4707ad Don't bind to the default port of OpenVPN if bind address or port isn't specified for an OpenVPN-based peer by WHR · 3 months ago
  45. 27bdeb4 Remove unused '#RNCN#PeerSSHPort' pattern from src/wireguard-periodic-rebind-port.sh by WHR · 3 months ago
  46. 0d616f5 Set a default MTU for OpenVPN interface if UDP is used as the transport-layer protocol by WHR · 3 months ago
  47. a3583cf Support openvpn-periodic-rebind-port and openvpn-periodic-regenkey services by WHR · 3 months ago
  48. 5e4b4d0 Support OpenVPN as an alternative tunneling protocol by WHR · 3 months ago
  49. 25ab04a Also install and enable ip6tables service if 'ospf_for_ipv6' is turned on by WHR · 3 months ago
  50. 3c0819a Don't install 'wireguard-tools' package, sshwgcfg, or any WireGuard configuration file, if WireGuard isn't enabled on the node by WHR · 3 months ago
  51. 5a3cb68 Make wireguard.private_key configuration directive optional by WHR · 3 months ago
  52. bc12a08 Revert commit caacc956003107e940c9a9ee970f16ed0f5606e4 by WHR · 3 months ago
  53. ba94a0d Revert commit 19d4a704cec6ebfde727f149ff26bd44972f15b5 by WHR · 3 months ago
  54. 4e1450f Create WireGuard configuration file for WireGuard interface only by WHR · 3 months ago
  55. 5306730 sshwgcfg: return failure status if specified peer wasn't found for set-remote-port subcommand, and use exit status 3 for incorrect command usage by WHR · 6 months ago
  56. caacc95 ip6tables: always install service and mangle rules regardless of ipv6_default_router by JohnnySun · 7 months ago
  57. d9ed79c Shorten periodic rebind interval from 1-32h to 2-12h (avg ~7h) by JohnnySun · 7 months ago
  58. 19d4a70 Resolve PROGRAM_DIR to absolute path to fix systemd unit ExecStart paths by JohnnySun · 7 months ago
  59. 113cc70 Implement state-machine based WireGuard dynamic port rebinding with handshake-guided bootstrap and automatic fallback by JohnnySun · 7 months ago
  60. 992841b The generated '#RNCN#RemotePeerName' value in WireGuard configuration file should have 'rncn-' prefix by WHR · 7 months ago
  61. 5b9e3fd Unconditionally install package 'bsdextrautils' by WHR · 8 months ago
  62. e5aa50e Automatically add SSH host public key of the peer for wireguard-periodic-rebind-port; support alternative SSH port number by WHR · 9 months ago
  63. cc750de Fix some configuration sections being missed when parsing the configuration file by WHR · 1 year ago
  64. 6d7b9ad Don't import routes with target prefix length less than or equal to 1 from OSPF by WHR · 1 year, 1 month ago
  65. cda2f53 Extend 'ra-list' section into 'advertising-wan-routes-urls' and 'wan-routes-urls' to fetch static routes on WAN without advertising them over OSPF by WHR · 1 year, 1 month ago
  66. 30acdec Change ospf_inactivity_time to be a per-peer configuration directive by WHR · 1 year, 1 month ago
  67. a3665cc Allow OSPF for IPv6 be omitted for a node by WHR · 1 year, 1 month ago
  68. d4aed83 Fix values of configuration directives 'wireguard.use_peer_resolver' and 'wireguard.periodic_rebind_port' didn't get parsed as boolean values by WHR · 1 year, 1 month ago
  69. 48e3789 Make OSPF inactivity time configurable by WHR · 1 year, 1 month ago
  70. f846a24 Unconditionally mask dhcpcd.service by WHR · 1 year, 2 months ago
  71. ddbdc42 Configure 10.0.0.10 DNAT rule in the OUTPUT chain, from rncn-dns service by WHR · 1 year, 4 months ago
  72. bc06f70 Don't import a route from the kernel routing table if its metric is higher than 32 by WHR · 1 year, 5 months ago
  73. f61bae7 Add a default NAT rule to SNAT DNS packets sent from RNCN node to the private anycast address 10.10.10.10 by WHR · 1 year, 6 months ago
  74. adec6ec Add some default iptables rules to ensure outgoing TCP connections to port 25 and 465 are always routed through local WAN interface by WHR · 1 year, 6 months ago
  75. 6cf7a0b Reduce wait time in ra-updater to be slightly less than 24 hours, to avoid misunderstanding that the update happens in every 24 hours by WHR · 1 year, 7 months ago
  76. 7b8f5e0 sshwgcfg: spawn a subshell to set the remote port number a few times after command completion by WHR · 1 year, 7 months ago
  77. 615ef4d Move source code of sshwgcfg into a separated file by WHR · 1 year, 7 months ago
  78. 0348b36 Finish dynamic wireguard port support by WHR · 1 year, 7 months ago
  79. f1910b9 Add incomplete support for dynamic wireguard port by WHR · 1 year, 7 months ago
  80. c89f70b change ra-updater running period to 24Hours by JohnnySun · 1 year, 7 months ago
  81. e64bb93 Install package irqbalance by WHR · 1 year, 7 months ago
  82. 4109a0c add net.core.rps_sock_flow_entries to sysctl by JohnnySun · 1 year, 7 months ago
  83. 03e63bc Optimize ra-updater by using options '--invert-match' and '--file' to grep(1) by WHR · 1 year, 7 months ago
  84. 0b26d84 merge external router to ecmp for ospf by JohnnySun · 1 year, 7 months ago
  85. e422268 Use the fallback name server in ra-updater by WHR · 1 year, 8 months ago
  86. ce375c2 Use OSPF version 3 for all IP versions by WHR · 1 year, 8 months ago
  87. 5fa9646 Comment about function 'configure_sshd_pam' by WHR · 1 year, 8 months ago
  88. f05f0ce Enable automatical restarting of 'sniproxy.service' by WHR · 1 year, 9 months ago
  89. 308e0f7 Unconfigure pam_limits(8) by WHR · 1 year, 9 months ago
  90. 55dcadc Don't add duplicated line into /etc/pam.d/sudo by WHR · 1 year, 9 months ago
  91. 6908fad Don't read non-regular files under /etc/profile.d/ from /etc/profile by WHR · 1 year, 9 months ago
  92. a295172 Fix resolving peer name from CNAME record in wireguard-peer-resolver.sh by WHR · 1 year, 10 months ago
  93. d7dc55d Support adding preconfigured interfaces into BIRD OSPF configuration by WHR · 1 year, 11 months ago
  94. 51b0325 Correct an inverted file descriptor duplication by WHR · 1 year, 11 months ago
  95. fa39093 Try to install some more basic packages by WHR · 1 year, 11 months ago
  96. 9bf3896 Handle status of function 'make_sure_nonempty_file_ends_with_new_line' by WHR · 1 year, 11 months ago
  97. 9c87269 Run rncn-link-status-monitor.sh after all wg-quick up scripts by WHR · 1 year, 11 months ago
  98. 8374276 Always apply IPv4-specific configurations for WireGuard interfaces by WHR · 1 year, 11 months ago
  99. 12a75b3 Support configuring GRE and GRE/FOU tunnels as alternative protocols to WireGuard by WHR · 1 year, 11 months ago
  100. f2a4e90 Restart 'bird' service on any failure in addition to aborting due to signal by WHR · 1 year, 11 months ago