Quentin McGaw
d41081f4b3
fix(server/portforward): use port and ports for both single port and multiple ports forwarded
2026-07-29 05:28:30 +00:00
Michael Bisbjerg
5fbe277f9c
fix(openvpn): bundle provider CA certificates in one block ( #3258 )
2026-07-29 05:28:28 +00:00
Quentin McGaw
c5b20a3b06
fix(firewall/iptables): shared mutex for both iptables and ip6tables
2026-07-29 05:28:27 +00:00
Quentin McGaw
f9a86f48aa
fix(updater): only uses DoH to cloudflare+google
...
- prevent dns plaintext manipulation both the periodic update and when running in cli mode
- possibly higher reliability on poor connections versus UDP
- drop `-dns` flag in update command
- for now no configuration allowed since it makes everything rather complex
2026-07-29 05:24:03 +00:00
Quentin McGaw
3a39236fa8
fix(expressvpn): remove pakistan server
2026-07-29 05:24:01 +00:00
github-actions[bot]
998ae46e97
feat(airvpn): update servers data ( #3186 )
2026-07-29 05:23:59 +00:00
Dennis Nienhuis
c4e65f8cc7
fix(expressvpn): fix missing characters in CA string ( #3192 )
2026-07-29 05:23:57 +00:00
Dennis Nienhuis
a20795df9e
fix(expressvpn): add new CA3 certificate to fix TLS handshake failure ( #3184 )
2026-07-29 05:22:40 +00:00
Quentin McGaw
78929cd6e1
fix(openvpn/extract): restrict custom openvpn config protocol to tcp or udp internally
...
- Fix #3179
- I believe specifying tcp4, tcp6 or tcp-client does not change anything versus tcp + remote ip address
- I believe specifying udp4 or udp6 does not change anything versus tcp + remote ip address
- Simplify firewall code to not account for tcp-client etc.
2026-07-29 05:22:38 +00:00
Quentin McGaw
75c2404179
fix(privado): allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp
2026-07-29 05:22:36 +00:00
Quentin McGaw
bcbc8c41f2
fix(privado): allow OpenVPN TCP protocol
2026-07-29 05:22:34 +00:00
Quentin McGaw
3da0c21c82
fix(mod): probe searches for features built-in the kernel
2026-07-29 05:22:32 +00:00
Quentin McGaw
009b8e45b7
fix(privado): update servers data using JSON API
...
- Fixes #3159
- Fixes #2118
- Fixes #2657
2026-07-29 05:22:29 +00:00
Quentin McGaw
05dc21ed61
fix(all): increase global http client timeout to 35s and precise lower timeouts where needed
...
- Fix DNS blocklists slow downloads, fix #3102
- Leave 35s timeout for updaters
- Set timeouts to 1s for local calls
- Set timeouts to 5s for LAN VPN calls and small external calls
- Set timeouts to 10s external VPN API calls
2026-07-29 05:22:27 +00:00
Quentin McGaw
270dce9acb
fix(dns): skip blocking if block lists download fails
2026-07-29 05:22:25 +00:00
Quentin McGaw
23cf3231f0
fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails
2026-07-29 05:16:23 +00:00
Quentin McGaw
7f22fb3276
fix(protonvpn): support port 51820 for UDP OpenVPN
2026-02-11 14:13:34 +00:00
Quentin McGaw
6909a0c123
fix(healthcheck): prevent race condition and fix #3096 ( #3123 )
2026-02-11 14:12:20 +00:00
Chris Duck
50744852c5
fix(protonvpn): update OpenVPN settings ( #3120 )
2026-02-11 14:11:57 +00:00
Quentin McGaw
09e52bc685
fix(httpproxy): remove info log when no Proxy-Authorization header is present
2026-02-11 14:11:46 +00:00
Quentin McGaw
857fe425ec
fix(wireguard): fix detection of kernelspace wireguard
2026-02-11 14:11:36 +00:00
Quentin McGaw
a10349e378
fix(slickvpn): add missing servers found online
2025-12-24 20:29:05 +00:00
Marcin Łapaj
983330266a
fix(purevpn/updater): parse country and city from hostname and merges with ip address information ( #2991 )
2025-12-24 05:02:57 +01:00
Jeremy Lin
6eb511fb2a
fix(publicip/api/cloudflare): add Referer header ( #3058 )
2025-12-24 04:52:25 +01:00
Quentin McGaw
666f55767b
hotfix(autoheal): monitor health errors asynchronously with other setup steps
...
- May resolve #3021
- no need to wait for dns, port forwarding etc. to setup to monitor health errors
2025-12-24 02:58:42 +00:00
Quentin McGaw
0a0bb4cf71
hotfix(healthcheck): only fallback to plain dns if icmp is not permitted on the very first try
2025-12-24 02:58:42 +00:00
Quentin McGaw
2b0719225d
fix(purevpn): update openvpn configuration
...
- Credits to @mlapaj
- Taken and verified from #2991
2025-12-23 17:34:25 +00:00
Quentin McGaw
c97bd1bb7c
fix(publicip/api/ip2location): rename countries to match standard country names
2025-12-23 17:34:25 +00:00
Quentin McGaw
10a7c75aa6
feat(publicip/api): query all fetchers in parallel and pick most popular result
2025-12-23 17:34:25 +00:00
Quentin McGaw
617f1b764f
chore(storage): ignore persisted servers data with a timestamp in the future
...
- force users to set a timestamp as the current one if manually editing servers.json which they should not do anyway
- favor future servers data updates through a container image pull to override older user-defined data
2025-12-23 15:38:17 +00:00
Quentin McGaw
600f2ab643
chore(storage): fix comment for ServersAreEqual
2025-12-23 15:36:08 +00:00
Quentin McGaw
7052d5490b
hotfix(pia): revert port changes
...
- This reverts commit fd6e5e4e90 .
- Port changes are more involved and require cipher, auth and certificate changes as well
2025-12-23 14:02:47 +00:00
Quentin McGaw
6a5a836cb6
feat(pia): update servers data
2025-12-23 13:51:34 +00:00
Quentin McGaw
a649b0adc1
hotfix(slickvpn): remove unused code
2025-12-23 13:45:41 +00:00
Quentin McGaw
beaa8b5589
fix(slickvpn/updater): only keep 11 servers
...
- this reverts most of commit e806fe02db .
2025-12-23 03:03:47 +00:00
Quentin McGaw
e806fe02db
fix(slickvpn/updater): update existing hostnames from servers.json
...
- SlickVPN location website is now total garbage which cannot be parsed
2025-12-23 02:50:15 +00:00
Quentin McGaw
92237658c3
chore(wevpn): removed since it is now decomissioned
2025-12-23 02:12:02 +00:00
Quentin McGaw
e627504fb5
fix(vpnunlimited/updater): remove no longer valid hosts
2025-12-23 02:02:26 +00:00
Quentin McGaw
cc1c253bad
feat(vpnsecure): update servers data
2025-12-23 01:59:34 +00:00
Quentin McGaw
c27dac10fe
fix(vpnsecure/updater): allow region and city to be set to N/A
2025-12-23 01:59:23 +00:00
Quentin McGaw
7d1e2eb226
feat(torguard): servers data update
2025-12-23 01:54:48 +00:00
Quentin McGaw
5b5aa5e014
feat(surfshark): update servers data
2025-12-23 01:54:15 +00:00
Quentin McGaw
9ee3ed754d
chore(cyberghost/updater): do not log warnings for "no such host"
2025-12-23 01:51:59 +00:00
Quentin McGaw
0ca466fbd5
feat(cyberghost): update servers data
2025-12-23 01:51:11 +00:00
Quentin McGaw
1c1d271967
fix(dns): retry on next period the blocklists update after a failed update
...
- Fix #3053
2025-12-23 01:40:29 +00:00
Quentin McGaw
cc89b35b63
chore(pia): add test to ensure default ports are within ports from their API
2025-12-22 23:24:13 +00:00
Quentin McGaw
fd6e5e4e90
fix(pia): update default openvpn ports and possible ports to choose
...
- Fix #3046
2025-12-22 22:47:17 +00:00
Quentin McGaw
2d00f3fe25
hotfix(server/auth): case sensitivity for HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
2025-12-05 17:03:42 +00:00
Quentin McGaw
56db5a83c0
chore(healthcheck): log one error per line on failure for readability
2025-12-05 17:03:04 +00:00
Quentin McGaw
c25c9f6f0e
feat(healthcheck/icmp): use the same id and increasing sequence number
...
- easier debug logs flow
- MAY cost less conntrack-ed slots on the VPN server
- resets id and sequence to 1 when reconnecting VPN
- resets id and sequence to 1 after 5 minutes
- resets id and sequence to 1 if sequence is complete (65535)
2025-11-26 13:41:55 +00:00