- c0e3d8b Add plan-review skill for multi-reviewer design review by JohnnySun · 4 weeks ago 主要
- 071d348 Update docs and skills to reflect new EWMA-based metric algorithm by JohnnySun · 4 weeks ago
- caacc95 ip6tables: always install service and mangle rules regardless of ipv6_default_router by JohnnySun · 4 weeks ago
- d9ed79c Shorten periodic rebind interval from 1-32h to 2-12h (avg ~7h) by JohnnySun · 4 weeks ago
- 19d4a70 Resolve PROGRAM_DIR to absolute path to fix systemd unit ExecStart paths by JohnnySun · 4 weeks ago
- 113cc70 Implement state-machine based WireGuard dynamic port rebinding with handshake-guided bootstrap and automatic fallback by JohnnySun · 4 weeks ago
- 992841b The generated '#RNCN#RemotePeerName' value in WireGuard configuration file should have 'rncn-' prefix by WHR · 4 weeks ago
- 5b9e3fd Unconditionally install package 'bsdextrautils' by WHR · 9 weeks ago
- e5aa50e Automatically add SSH host public key of the peer for wireguard-periodic-rebind-port; support alternative SSH port number by WHR · 4 months ago
- cc750de Fix some configuration sections being missed when parsing the configuration file by WHR · 7 months ago
- 6d7b9ad Don't import routes with target prefix length less than or equal to 1 from OSPF by WHR · 7 months ago
- cda2f53 Extend 'ra-list' section into 'advertising-wan-routes-urls' and 'wan-routes-urls' to fetch static routes on WAN without advertising them over OSPF by WHR · 7 months ago
- 30acdec Change ospf_inactivity_time to be a per-peer configuration directive by WHR · 7 months ago
- a3665cc Allow OSPF for IPv6 be omitted for a node by WHR · 8 months ago
- d4aed83 Fix values of configuration directives 'wireguard.use_peer_resolver' and 'wireguard.periodic_rebind_port' didn't get parsed as boolean values by WHR · 8 months ago
- 48e3789 Make OSPF inactivity time configurable by WHR · 8 months ago
- f846a24 Unconditionally mask dhcpcd.service by WHR · 9 months ago
- ddbdc42 Configure 10.0.0.10 DNAT rule in the OUTPUT chain, from rncn-dns service by WHR · 10 months ago
- bc06f70 Don't import a route from the kernel routing table if its metric is higher than 32 by WHR · 12 months ago
- f61bae7 Add a default NAT rule to SNAT DNS packets sent from RNCN node to the private anycast address 10.10.10.10 by WHR · 12 months ago
- adec6ec Add some default iptables rules to ensure outgoing TCP connections to port 25 and 465 are always routed through local WAN interface by WHR · 1 year ago
- 6cf7a0b Reduce wait time in ra-updater to be slightly less than 24 hours, to avoid misunderstanding that the update happens in every 24 hours by WHR · 1 year, 1 month ago
- 7b8f5e0 sshwgcfg: spawn a subshell to set the remote port number a few times after command completion by WHR · 1 year, 1 month ago
- 615ef4d Move source code of sshwgcfg into a separated file by WHR · 1 year, 1 month ago
- 0348b36 Finish dynamic wireguard port support by WHR · 1 year, 1 month ago
- f1910b9 Add incomplete support for dynamic wireguard port by WHR · 1 year, 1 month ago
- c89f70b change ra-updater running period to 24Hours by JohnnySun · 1 year, 1 month ago
- e64bb93 Install package irqbalance by WHR · 1 year, 1 month ago
- 4109a0c add net.core.rps_sock_flow_entries to sysctl by JohnnySun · 1 year, 1 month ago
- 03e63bc Optimize ra-updater by using options '--invert-match' and '--file' to grep(1) by WHR · 1 year, 2 months ago
- 0b26d84 merge external router to ecmp for ospf by JohnnySun · 1 year, 2 months ago
- e422268 Use the fallback name server in ra-updater by WHR · 1 year, 2 months ago
- ce375c2 Use OSPF version 3 for all IP versions by WHR · 1 year, 2 months ago
- 5fa9646 Comment about function 'configure_sshd_pam' by WHR · 1 year, 2 months ago
- f05f0ce Enable automatical restarting of 'sniproxy.service' by WHR · 1 year, 3 months ago
- 308e0f7 Unconfigure pam_limits(8) by WHR · 1 year, 4 months ago
- 55dcadc Don't add duplicated line into /etc/pam.d/sudo by WHR · 1 year, 4 months ago
- 6908fad Don't read non-regular files under /etc/profile.d/ from /etc/profile by WHR · 1 year, 4 months ago
- a295172 Fix resolving peer name from CNAME record in wireguard-peer-resolver.sh by WHR · 1 year, 4 months ago
- d7dc55d Support adding preconfigured interfaces into BIRD OSPF configuration by WHR · 1 year, 6 months ago
- 51b0325 Correct an inverted file descriptor duplication by WHR · 1 year, 6 months ago
- fa39093 Try to install some more basic packages by WHR · 1 year, 6 months ago
- 9bf3896 Handle status of function 'make_sure_nonempty_file_ends_with_new_line' by WHR · 1 year, 6 months ago
- 9c87269 Run rncn-link-status-monitor.sh after all wg-quick up scripts by WHR · 1 year, 6 months ago
- 8374276 Always apply IPv4-specific configurations for WireGuard interfaces by WHR · 1 year, 6 months ago
- 12a75b3 Support configuring GRE and GRE/FOU tunnels as alternative protocols to WireGuard by WHR · 1 year, 6 months ago
- f2a4e90 Restart 'bird' service on any failure in addition to aborting due to signal by WHR · 1 year, 6 months ago
- ab74273 Install a custom version of 'bird.service' workaround stack overflow issue in bird(8) by WHR · 1 year, 6 months ago
- 4a0b1ff add import_from_ospf_filter clip by JohnnySun · 1 year, 6 months ago
- b714483 bind(2) to the local in-tunnel address for pinging the peer over tunnel; make bsdping mandatory, by removing 'pingstat' functions that supporting other ping implementations by WHR · 1 year, 6 months ago
- 893fdd5 Fix an incorrect variable reference in 'rncn-link-status-monitor.sh' by WHR · 1 year, 6 months ago
- 85557cc Add incomplete support for routing reply packets of incoming TCP connections to the same default route interface by WHR · 1 year, 6 months ago
- 46d77de Use per-node configured 'fallback_name_server' for sniproxy(8) resolver by WHR · 1 year, 6 months ago
- 7f35721 No need to write '|| return' in function 'configure_systemd_link' by WHR · 1 year, 6 months ago
- 5efd2d2 rm(1) the target path before ln(1), for safety by WHR · 1 year, 6 months ago
- 42b561f Disable naming interface by MAC address as well as the 'AlternativeNamesPolicy' in systemd.link(5) by WHR · 1 year, 6 months ago
- d44254b Don't try to fetch DNS server configuration if the configuration file already exists during 'install' by WHR · 1 year, 6 months ago
- 0e40994 Add a clip to allow flexible customization of OSPF configuration by WHR · 1 year, 6 months ago
- 42bb738 The stddev value of ping(8) result could be 'nan', recognize it in the regular expression by WHR · 1 year, 6 months ago
- ee84a85 Increase ping packet size in rncn-link-status-monitor.sh by WHR · 1 year, 6 months ago
- 31052a9 Try to rm(1) the old DNS configuration file before writing a new one, in case a non-regular file already exists there by WHR · 1 year, 6 months ago
- 5e80da2 Make DNS server port configurable per node; change configuration file format for the DNS server to allow local overrides for configuration updates by WHR · 1 year, 6 months ago
- ee5ff80 Update bsdping by WHR · 1 year, 6 months ago
- 81986fc Don't configure IP addresses 10.10.10.10 and 10.0.0.10 on boot by WHR · 1 year, 6 months ago
- 67b7c50 Create directory '/var/log/sniproxy' for sniproxy(8) by WHR · 1 year, 6 months ago
- 8553e8d update default dns in sni-proxy by JohnnySun · 1 year, 6 months ago
- c47cd7a Don't replace '/etc/sniproxy.conf' again if it has already being replaced with the custom version by WHR · 1 year, 6 months ago
- 0394332 Add option '--inet4-only' to wget(1) command lines in rncn-ra-updater.sh by WHR · 1 year, 6 months ago
- 26add95 Don't reference nonexisting table 'https_hosts' in 'sniproxy.conf' by WHR · 1 year, 6 months ago
- 6feec0a Enable sniproxy service on 'enable-services' by WHR · 1 year, 6 months ago
- 16aca56 Fix missing configuration loading of 'run_sniproxy' by WHR · 1 year, 6 months ago
- 428a75f Add TCP MSS clamping rule in ip6tables by WHR · 1 year, 6 months ago
- 0b42732 add 10.100.253.0/23 to protocol direct in bird config by Johnny Sun · 1 year, 6 months ago
- 2a7d0f2 Ignore error for nonexisting /etc/ssh/ssh_known_hosts by WHR · 1 year, 6 months ago
- fc893d2 rm(1) /etc/systemd/system/ip6tables.service before trying to write it by WHR · 1 year, 6 months ago
- d1ebf97 Write configured SSH host keys of other nodes into /etc/ssh/ssh_known_hosts by WHR · 1 year, 6 months ago
- edcf019 Correct reversed order of peer examples in example configuration file by WHR · 1 year, 6 months ago
- 92822d5 Install ip6tables service and rules as appropriate by WHR · 1 year, 6 months ago
- e4489b3 Don't try to enable service 'rncn-dns-updater' if 'dns_config_update_url' isn't set by WHR · 1 year, 6 months ago
- 6e78e05 Avoid installing package 'libc-devtools' that may be recommended by 'libc6-dev' by WHR · 1 year, 6 months ago
- 22498eb Merge duplicated code by WHR · 1 year, 6 months ago
- c0c94de Optionally install and configure sniproxy(8) by WHR · 1 year, 7 months ago
- 221c150 Don't try to install git, since the program didn't have a strong dependency to it, and in usual cases it would already have installed when this script runs by WHR · 1 year, 7 months ago
- 95bf562 Make configuration directive 'ipv6_default_router' optional by WHR · 1 year, 7 months ago
- fc8976b Install noinet6.so for disabling IPv6 support for dynamically linked programs by WHR · 1 year, 7 months ago
- 0dea142 Correct directive name 'wireguard.private_key' in example configuration by WHR · 1 year, 7 months ago
- 8b064e8 Check presence of BSD ping source code when initializing node state by WHR · 1 year, 7 months ago
- d820fdd Fix wireguard-peer-resolver.sh took host(1) output '<address> has no {A|AAAA} record' as address by WHR · 1 year, 7 months ago
- f0c9a71 Enable 'RemainAfterExit' in no-vm-drop-caches.service by WHR · 1 year, 7 months ago
- 2893f2f Add optinal wireguard-periodic-rebind-port service by WHR · 1 year, 7 months ago
- 535568a Explicitly disable ICMP redirect messages on WireGuard interfaces by WHR · 1 year, 7 months ago
- f8df105 Make monitor pinging timings configurable, and add minimal wait time to monitor pinging cycle by WHR · 1 year, 7 months ago
- 0c2e3fc No longer need to write multiple servers into /etc/resolv.conf, because using output DNAT worked much better by WHR · 1 year, 7 months ago
- 597fc5b Use DEFAULT_FALLBACK_NAME_SERVER as a fallback value for fallback_name_server by WHR · 1 year, 7 months ago
- 1994bc9 Correct indentation of wireguard-peer-resolver.sh by WHR · 1 year, 7 months ago
- 71ceed8 Install dpkg-dev to provide dpkg-architecture(1) by WHR · 1 year, 7 months ago
- 8f8db13 Load configuration for subcommand 'enable-services' by WHR · 1 year, 7 months ago
- 21bb70c Revert commit 14f697cbd72e7d4e5f7a48db17831f68ed5404b3 by WHR · 1 year, 7 months ago
- f0acf2f Optionally install wireguard-peer-resolver by WHR · 1 year, 7 months ago
- f54e98d Update bsdping by WHR · 1 year, 7 months ago