f81b8342d6
hotfix(pmtud/tcp): temporary test fix
2026-02-16 23:54:38 +00:00
cdec25da52
feat(pmtud/tcp): generate MTU test data to mimic TLS if possible to avoid being blocked
2026-02-16 19:57:12 +00:00
201d1041f4
hotfix(pmtud/tcp): send MTU data in first and only ACK packet
...
- less likely to be flagged
- correct using TCP fast-open
2026-02-16 19:56:14 +00:00
dc78b4ecce
fix(dns): skip blocking if block lists download fails
2026-02-16 15:27:07 +00:00
d75b48d123
chore(dns): update filter block lists without restarting DNS server
2026-02-16 15:23:57 +00:00
e828ea1462
feat(dns): allow parent domains to be exempt from rebinding protection
...
- Specify with `*.domain.com` in DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES
- Fix #3135
2026-02-16 14:45:09 +00:00
be92aa2ac4
Path MTU discovery fixes and improvements ( #3109 )
...
- Existing option `WIREGUARD_MTU` , if set, disables PMTUD and is used
- New option `PMTUD_ICMP_ADDRESSES=1.1.1.1,8.8.8.8` and `PMTUD_TCP_ADDRESSES=1.1.1.1:443,8.8.8.8:443`
- ICMP PMTUD now targets external-by-default IP addresses
- New TCP PMTUD (binary search only) as a second MTU confirmation and fallback mechanism.
- Force set TCP MSS to MTU - IP header - TCP base header - "magic 20 bytes" 🎆
- Fix #3108
2026-02-14 19:40:34 -05:00
8f1fda7646
fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails
2026-02-11 17:33:14 +00:00
8eb990eb66
chore(ci): ignore .golangci.yml file for reviewdog
2026-02-11 14:25:28 +00:00
4698daea16
chore(mullvad): remove openvpn support
2026-02-11 00:09:36 +00:00
b0a75673bd
chore(dev): ensure project compiles on darwin and windows
2026-02-09 15:41:52 +00:00
5f0c499808
fix(protonvpn): support port 51820 for UDP OpenVPN
2026-02-09 15:41:52 +00:00
bdd69a1fb7
fix(healthcheck): prevent race condition and fix #3096 ( #3123 )
2026-02-07 18:11:04 +01:00
1af75bb30c
fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION
2026-02-07 16:49:21 +00:00
9c1cd7e8b1
fix(protonvpn): update OpenVPN settings ( #3120 )
2026-02-06 14:18:10 +01:00
facc6df3be
chore(all): replace netlink library for more flexibility ( #3107 )
2026-01-27 01:11:39 -08:00
e292a4c9be
fix(httpproxy): remove info log when no Proxy-Authorization header is present
2026-01-24 19:39:20 +00:00
9e4dd61c19
feat(ipvanish): update servers data
2026-01-24 19:32:21 +00:00
fe3d4a94d4
chore(all): make code compilable for other platforms than Linux
2026-01-24 17:56:10 +00:00
de38d759a4
feat(vpn): path MTU discovery to find the best MTU ( #2586 )
2026-01-21 09:02:23 -08:00
fba60af772
fix(wireguard): fix detection of kernelspace wireguard
2026-01-20 21:39:30 +00:00
9b9b723887
chore(mullvad): add openvpn removal warning
2025-12-29 05:28:13 +00:00
a10349e378
fix(slickvpn): add missing servers found online
2025-12-24 20:29:05 +00:00
983330266a
fix(purevpn/updater): parse country and city from hostname and merges with ip address information ( #2991 )
2025-12-24 05:02:57 +01:00
6eb511fb2a
fix(publicip/api/cloudflare): add Referer header ( #3058 )
2025-12-24 04:52:25 +01:00
666f55767b
hotfix(autoheal): monitor health errors asynchronously with other setup steps
...
- May resolve #3021
- no need to wait for dns, port forwarding etc. to setup to monitor health errors
2025-12-24 02:58:42 +00:00
0a0bb4cf71
hotfix(healthcheck): only fallback to plain dns if icmp is not permitted on the very first try
2025-12-24 02:58:42 +00:00
2b0719225d
fix(purevpn): update openvpn configuration
...
- Credits to @mlapaj
- Taken and verified from #2991
2025-12-23 17:34:25 +00:00
c97bd1bb7c
fix(publicip/api/ip2location): rename countries to match standard country names
2025-12-23 17:34:25 +00:00
10a7c75aa6
feat(publicip/api): query all fetchers in parallel and pick most popular result
2025-12-23 17:34:25 +00:00
617f1b764f
chore(storage): ignore persisted servers data with a timestamp in the future
...
- force users to set a timestamp as the current one if manually editing servers.json which they should not do anyway
- favor future servers data updates through a container image pull to override older user-defined data
2025-12-23 15:38:17 +00:00
600f2ab643
chore(storage): fix comment for ServersAreEqual
2025-12-23 15:36:08 +00:00
7052d5490b
hotfix(pia): revert port changes
...
- This reverts commit fd6e5e4e90
2025-12-23 14:02:47 +00:00
6a5a836cb6
feat(pia): update servers data
2025-12-23 13:51:34 +00:00
a649b0adc1
hotfix(slickvpn): remove unused code
2025-12-23 13:45:41 +00:00
beaa8b5589
fix(slickvpn/updater): only keep 11 servers
...
- this reverts most of commit e806fe02db
2025-12-23 03:03:47 +00:00
e806fe02db
fix(slickvpn/updater): update existing hostnames from servers.json
...
- SlickVPN location website is now total garbage which cannot be parsed
2025-12-23 02:50:15 +00:00
92237658c3
chore(wevpn): removed since it is now decomissioned
2025-12-23 02:12:02 +00:00
e627504fb5
fix(vpnunlimited/updater): remove no longer valid hosts
2025-12-23 02:02:26 +00:00
cc1c253bad
feat(vpnsecure): update servers data
2025-12-23 01:59:34 +00:00
c27dac10fe
fix(vpnsecure/updater): allow region and city to be set to N/A
2025-12-23 01:59:23 +00:00
7d1e2eb226
feat(torguard): servers data update
2025-12-23 01:54:48 +00:00
5b5aa5e014
feat(surfshark): update servers data
2025-12-23 01:54:15 +00:00
9ee3ed754d
chore(cyberghost/updater): do not log warnings for "no such host"
2025-12-23 01:51:59 +00:00
0ca466fbd5
feat(cyberghost): update servers data
2025-12-23 01:51:11 +00:00
1c1d271967
fix(dns): retry on next period the blocklists update after a failed update
...
- Fix #3053
2025-12-23 01:40:29 +00:00
cc89b35b63
chore(pia): add test to ensure default ports are within ports from their API
2025-12-22 23:24:13 +00:00
fd6e5e4e90
fix(pia): update default openvpn ports and possible ports to choose
...
- Fix #3046
2025-12-22 22:47:17 +00:00
d702ed4122
fix(dns): dns over tls re-uses TCP connections
...
- Bump dns to v2.0.0-rc10
- DNS over HTTPs not affected since it did re-use connections already
2025-12-22 21:09:22 +00:00
2d00f3fe25
hotfix(server/auth): case sensitivity for HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE
2025-12-05 17:03:42 +00:00
Quentin McGaw