dcarrillo
|
49ffcadb0a
|
Fix data races, nil-record panics, scanner SSRF, log date layout, shutdown timeouts, and enable stricter linters (#54)
High (behavioral bugs):
- service.Geo: add RLock on lookups, handle Reload error, keep old DBs on failure
- models.GeoDB.Reload: open new DBs before closing old ones (no reader gap)
- router: guard nil geo records (404 instead of 500) in geo.go, generic.go, dns.go
- router/port_scanner: reject undetermined client IPs (nil->localhost dial)
- internal/httputils: fix access log date layout (02/Jan/2006, not literal Nov)
- server/quic: log.Printf instead of log.Fatal in request handler
Medium:
- server/*: 10s shutdown timeout; SIGTERM drains servers before closing geo DBs
- httputils: Clone() request headers instead of mutating the live map; strings.Builder
- setting/app: handle all os.Stat errors; fix "truster" typos; use errors.New;
remove dead Token field
- cmd: errors.Is for sentinel checks; os.Stderr; log.Fatal instead of panic;
pass http.Handler by value (not pointer-to-interface)
- resolver: validate config at startup (pre-parse RRs, validate IPs); check WriteMsg
errors; Setup returns error
Low:
- .golangci.yaml: enable errcheck, govet, errorlint; fix all resulting findings
- server/tls: explicit TLSConfig{MinVersion: tls.VersionTLS12}
- router/dns: label-exact vhost suffix check, strip port; template.Must
- models: errors.Join instead of %s on []error
- service/geo_test: race-regression test (concurrent lookups during Reload)
- README: Go >= 1.25; fix latent test bug (store.Add->Set in dns_test.go)
|
2026-07-19 12:09:52 +02:00 |
|
dcarrillo
|
e8d3a20781
|
New feature: prometheus metrics endpoint (#46)
|
2025-11-03 18:36:13 +01:00 |
|
dcarrillo
|
00749ae529
|
Add tests for new disable-scan flag
|
2025-09-26 16:07:05 +02:00 |
|
dcarrillo
|
751e5f3885
|
Improve README.md grammar and formatting (#43)
|
2025-07-19 12:39:18 +02:00 |
|
dcarrillo
|
b5fe362183
|
Make geo database usage optional (#39)
|
2025-01-02 20:13:41 +01:00 |
|
dcarrillo
|
789cc6939e
|
Return 404 when the dns domain has any path different than /
|
2024-05-12 19:24:10 +02:00 |
|
dcarrillo
|
b57beded8f
|
chore: Fix typo
|
2024-05-09 20:01:40 +02:00 |
|
dcarrillo
|
c8d6da5ebd
|
Update README.md
|
2024-04-12 19:58:14 +02:00 |
|
dcarrillo
|
d13ea29071
|
New whatismydns feature (#29)
|
2024-04-12 19:26:48 +02:00 |
|
dcarrillo
|
f8e27bef56
|
Add endopoint to check is a given port is open on the client (#22)
|
2023-12-31 12:52:08 +01:00 |
|
dcarrillo
|
c54cf5a456
|
Add upx compression to Dockerfile
|
2023-04-29 18:49:21 +02:00 |
|
dcarrillo
|
84a767ade0
|
chore: Fix README.md typos
|
2023-03-18 21:14:08 +01:00 |
|
dcarrillo
|
19c72f94a5
|
Add experimental support for HTTP/3 (#8)
* Wait for service in integration tests instead of watching for a string
* Add http3 experimental support
|
2023-03-18 21:06:51 +01:00 |
|
dcarrillo
|
88691a5149
|
Update README.md
Add CodeQL badge
|
2022-07-03 11:57:58 +02:00 |
|
dcarrillo
|
7c70abf07f
|
Add feature to get the right client port when using a trusted proxy
|
2022-05-02 17:56:57 +02:00 |
|
dcarrillo
|
9070e9a2c2
|
Use Accept request header instead of user agent to figure out non-browser clients. Funny fact, I borrowed the idea from a fork ('https://github.com/hachmeister/whatismyip/blob/8a3e142cf3ebf54ed3a4b6de2173cc5b13b40e18/router/generic.go#L33')
|
2022-04-30 17:35:12 +02:00 |
|
dcarrillo
|
ab46275990
|
Tidy up the house
|
2022-01-27 13:17:51 +01:00 |
|
dcarrillo
|
ac32dc240f
|
Add release badge to README
|
2021-12-01 13:18:32 +01:00 |
|
dcarrillo
|
2d330a99b7
|
Add CI and go-report badges. Add comments to make golint happy
|
2021-11-30 17:49:02 +01:00 |
|
dcarrillo
|
2807e2afc9
|
Improve client port handling and fix IPv6 client port testing
|
2021-11-21 12:49:13 +01:00 |
|
dcarrillo
|
66f3436371
|
Add github releases
|
2021-11-16 19:10:01 +01:00 |
|
dcarrillo
|
255660374f
|
Update README.md
|
2021-11-11 18:30:50 +01:00 |
|
dcarrillo
|
2fcfa91545
|
first commit
|
2021-11-10 20:06:12 +01:00 |
|