Commit Graph

Select branches

Hide Pull Requests

bot/update-servers-list-1772653494

bot/update-servers-list-1777610243

ci-runs

conntrack

dependabot/github_actions/actions/checkout-7

dependabot/go_modules/github.com/mdlayher/netlink-1.11.2

dependabot/go_modules/low-importance-1cf4f36981

dns-plain-output-retricted

loops

master

nftables

openvpn-2.4

ovpn

port-forwarding-loop-debug

protonvpn-more-servers

restrictednet

stash

v3.40

v3.41

v4-storage-vpn-type-both

wireguard-route-replace

#100

#1005

#1007

#101

#1016

#1026

#1033

#1040

#1042

#1047

#1052

#1057

#1058

#1067

#1073

#1098

#1114

#1120

#1132

#114

#1145

#115

#116

#1169

#117

#1173

#119

#1191

#1193

#1198

#1210

#1231

#124

#1248

#126

#1264

#1268

#1275

#1276

#1291

#130

#1332

#1337

#1346

#1348

#1352

#1368

#1369

#1373

#1378

#1380

#1383

#1390

#1393

#1413

#1414

#1423

#1424

#1427

#1436

#1437

#1438

#144

#1449

#1471

#1474

#1476

#1483

#1484

#1493

#1505

#1509

#1539

#1543

#1549

#1557

#1560

#1561

#1567

#1571

#1575

#1585

#1596

#1598

#161

#1616

#1622

#1633

#1634

#1636

#1637

#1641

#1649

#1658

#167

#1678

#1679

#168

#1681

#1682

#1684

#1685

#1689

#169

#1722

#1726

#1729

#1732

#174

#1741

#1742

#1780

#1786

#1787

#1788

#1789

#180

#1800

#1806

#182

#183

#1830

#1836

#1836

#184

#1844

#1845

#1847

#1848

#185

#1853

#1857

#1858

#1860

#1861

#1868

#1871

#1874

#189

#1890

#1890

#1897

#1898

#1907

#1912

#1922

#193

#1935

#1936

#1937

#1938

#1946

#1947

#195

#1950

#1953

#1965

#1969

#1973

#1975

#1980

#1981

#1982

#1984

#1985

#1992

#1993

#1995

#1998

#2002

#2012

#2016

#2025

#2033

#2039

#2040

#2046

#205

#2052

#2062

#2070

#2075

#208

#2081

#2089

#2091

#2091

#2094

#2101

#2102

#2105

#2109

#2126

#2138

#2139

#2146

#2151

#2159

#2160

#2167

#2174

#2178

#2182

#2185

#220

#2203

#2204

#2207

#2208

#2214

#2216

#2218

#222

#2221

#2249

#2253

#2254

#226

#2265

#2266

#2269

#227

#2272

#2273

#2279

#228

#2285

#2308

#2309

#2310

#2316

#2319

#232

#2324

#2345

#2352

#237

#2378

#2383

#239

#2390

#2392

#2398

#2399

#240

#2400

#2401

#2404

#241

#2411

#2416

#2418

#2419

#242

#2420

#2423

#2428

#2432

#2434

#2437

#2440

#2444

#2460

#2465

#2466

#2478

#2479

#248

#2490

#2499

#2502

#2512

#2513

#2518

#2523

#2526

#2529

#253

#2537

#2537

#2542

#2549

#255

#2550

#2557

#2564

#257

#2573

#2574

#2575

#2575

#2577

#2578

#258

#2586

#2588

#259

#260

#2600

#2601

#2611

#2611

#2612

#2619

#262

#2622

#2624

#2629

#2632

#2636

#2636

#264

#2644

#2648

#2652

#2663

#267

#268

#2683

#2687

#2688

#269

#2700

#2700

#2733

#2734

#2739

#2740

#2756

#2767

#2768

#277

#2770

#2773

#2775

#2778

#2789

#2792

#2808

#282

#2821

#2835

#2838

#2851

#2863

#2864

#2877

#2878

#288

#2880

#2881

#2883

#2884

#2885

#2885

#2888

#2901

#2918

#2923

#2928

#2929

#293

#2930

#2931

#2932

#2933

#2934

#2935

#2936

#2937

#2938

#2939

#2940

#2944

#2954

#2955

#2956

#2957

#2958

#2959

#2964

#2968

#2969

#297

#2970

#2973

#2975

#2976

#2977

#2980

#2984

#2988

#2991

#2999

#300

#3001

#3010

#3014

#302

#3028

#3036

#3037

#3038

#3041

#305

#3054

#3058

#3071

#308

#3087

#3090

#3091

#3095

#3099

#3099

#3106

#3107

#3109

#3114

#3120

#3123

#3127

#3128

#3129

#3129

#3133

#3149

#3150

#3154

#3157

#3157

#3158

#3158

#3161

#3164

#3164

#3165

#3165

#3174

#3175

#3184

#3185

#3186

#3189

#3192

#3197

#3198

#3199

#32

#3200

#3208

#3211

#3212

#3213

#3214

#3223

#3223

#3225

#3226

#3227

#3240

#3245

#3246

#3251

#3255

#3258

#3259

#3264

#3273

#3274

#3277

#3298

#3301

#3307

#3308

#3327

#3333

#3336

#3338

#3339

#3339

#3340

#3341

#3345

#3346

#3346

#3347

#3348

#335

#3350

#3353

#3361

#3361

#3362

#3372

#3372

#338

#339

#344

#347

#354

#364

#365

#367

#369

#380

#383

#384

#387

#393

#394

#401

#402

#412

#413

#414

#415

#417

#419

#427

#428

#43

#431

#434

#437

#44

#441

#449

#45

#450

#451

#452

#453

#455

#46

#463

#475

#489

#499

#501

#51

#513

#528

#529

#543

#55

#558

#565

#57

#574

#575

#577

#578

#58

#583

#584

#587

#591

#606

#621

#623

#63

#635

#64

#664

#668

#678

#69

#7

#70

#705

#71

#722

#742

#742

#743

#743

#744

#744

#756

#762

#769

#8

#801

#806

#807

#812

#83

#832

#84

#848

#85

#870

#893

#897

#908

#914

#914

#915

#923

#926

#938

#942

#943

#95

#96

#961

#97

#977

#978

#978

#979

#98

#980

#981

#99

v1.0

v2

v2.0.0

v3.0.0

v3.0.1

v3.1.0

v3.10.0

v3.10.1

v3.10.2

v3.10.3

v3.10.4

v3.11.0

v3.11.1

v3.11.2

v3.12.0

v3.12.1

v3.12.2

v3.13.0

v3.13.1

v3.14.0

v3.15.0

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.19.1

v3.2.0

v3.2.0-rc1

v3.2.0-rc2

v3.20.0

v3.21.0

v3.21.1

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.27.1

v3.27.2

v3.28.0

v3.28.1

v3.28.2

v3.29.0

v3.3.0

v3.30.0

v3.30.1

v3.31.0

v3.31.1

v3.32.0

v3.33.0

v3.34.0

v3.34.1

v3.34.2

v3.34.3

v3.35.0

v3.36.0

v3.37.0

v3.37.1

v3.38.0

v3.38.1

v3.39.0

v3.39.1

v3.4.0

v3.40.0

v3.40.1

v3.40.2

v3.40.3

v3.40.4

v3.41.0

v3.41.1

v3.5.0

v3.5.1

v3.6.0

v3.7.0

v3.8.0

v3.8.1

v3.9.0

Mono Color

• e7b25a0d5e chore(mod): simplify code and add more kernel config constants Quentin McGaw 2026-03-02 23:20:47 +00:00
• 11cd62f6b1 feat(ci): periodic workflow to update the maintainers servers list with pull requests (#3010) shwoop 2026-03-03 01:32:05 +01:00
• eb9f1b4e36 Revert mod changes Quentin McGaw 2026-03-02 23:19:53 +00:00
• a62220d7b6 give up on kernel modules checks Quentin McGaw 2026-03-02 23:17:08 +00:00
• ed26957a1a fix(privado): allow additional OpenVPN ports 443, 8080 and 8443 for both tcp and udp Quentin McGaw 2026-03-01 11:59:03 +00:00
• 54b55c594f fix(privado): allow OpenVPN TCP protocol Quentin McGaw 2026-03-01 11:58:16 +00:00
• cd9ba54b37 wip nftables Quentin McGaw 2026-02-28 22:38:52 +00:00
• 781e74f77a chore: merge iptables SetIPv4AllPolicies and SetIPv6AllPolicies together Quentin McGaw 2026-02-28 15:25:15 +00:00
• fa0941a529 add nftables to dev container Quentin McGaw 2026-02-28 15:24:37 +00:00
• e87d915f15 chore(firewall/iptables): modprobe and cache support for xt_mark and nf_tables Quentin McGaw 2026-02-26 12:28:09 +00:00
• 594b1db98b Require xt_CONNMARK and define its kernel config values Quentin McGaw 2026-02-28 15:13:23 +00:00
• ec24ffdfd8 hotfix(firewall): save and restore behavior fixed - restore if IPv4 set all policies fails - fix deadlock when using iptables custom rules - fix setting ipv6 rules when running runMixedIptablesInstruction Quentin McGaw 2026-02-28 14:37:58 +00:00
• bfc8136bc9 Fourth fallback, use DROP temporarily instead of REJECT Quentin McGaw 2026-02-27 12:17:12 +00:00
• 1fd4cc511a Fix kernel module names Quentin McGaw 2026-02-27 12:16:54 +00:00
• b9d49e0661 Chore(deps): Bump github.com/breml/rootcerts from 0.3.3 to 0.3.4 (#3128) dependabot[bot] 2026-02-27 02:16:31 +01:00
• af0bc3e224 allow custom chain name targets Quentin McGaw 2026-02-26 23:18:44 +00:00
• 302f1f11f7 only use kernel modules error as context to an actual error, not as a requirement since some systems don't show what they support reliably Quentin McGaw 2026-02-26 20:49:28 +00:00
• f654dece66 Reject output public ip traffic for 1s as another fallback Quentin McGaw 2026-02-26 18:04:23 +00:00
• a37354426b Fallback to accepting only NEW output public traffic if conntrack netlink isn't supported Quentin McGaw 2026-02-26 15:53:07 +00:00
• dfac2b2f1a Flush conntrack on every firewall enabling Quentin McGaw 2026-02-25 22:08:23 +00:00
• 6467f3b4ad Flush using AF_UNSPEC and netfilter package Quentin McGaw 2026-02-25 22:03:01 +00:00
• 2bb4deccd5 feat(firewall): atomic iptables operations - all operations rollback on failure - disabling the firewall means rolling back to its state before enabling it - aligns with nftables atomicity feature Quentin McGaw 2026-02-26 22:58:52 +00:00
• 0d0c0fb143 feat(dns): update block files after DNS server is up for a faster bootup Quentin McGaw 2026-02-26 18:40:19 +00:00
• 885e491bb7 chore(dns): clarify "ready" dns message when DNS server is up and being used Quentin McGaw 2026-02-26 18:39:56 +00:00
• e75ae21dcd fix(mod): probe searches for features built-in the kernel Quentin McGaw 2026-02-26 16:24:30 +00:00
• 4b8dc8ded7 fix(privado): update servers data using JSON API - Fixes #3159 - Fixes #2118 - Fixes #2657 Quentin McGaw 2026-02-25 16:02:52 +00:00
• 0eeee5c496 chore(pmtud): clarify debug logs and fix log error message Quentin McGaw 2026-02-25 04:07:27 +00:00
• d21953f62e chore(firewall): split apart iptables specific code in internal/firewall/iptables Quentin McGaw 2026-02-25 03:45:17 +00:00
• 034f8f6331 hotfix(netlink): specify IP family for conntrack calls and make conntrack failure a warning Quentin McGaw 2026-02-25 02:40:44 +00:00
• 01487b5caf feat(protonvpn): add suggestions on some port forwarding errors Quentin McGaw 2026-02-23 21:19:08 +00:00
• 625a63e7c2 fix(firewall): flush conntrack table after enabling firewall at container start - prevent leaks for connections made the first ~10 milliseconds when Gluetun starts - seems critical, but in practice this very rarely happen and it very hard to reproduce Quentin McGaw 2026-02-21 19:39:22 +00:00
• 0c3e5d94d8 change!(server): auth is now required for all routes (#2980) Quentin McGaw 2026-02-20 18:10:53 +01:00
• d586793169 fix(all): increase global http client timeout to 35s and precise lower timeouts where needed - Fix DNS blocklists slow downloads, fix #3102 - Leave 35s timeout for updaters - Set timeouts to 1s for local calls - Set timeouts to 5s for LAN VPN calls and small external calls - Set timeouts to 10s external VPN API calls Quentin McGaw 2026-02-20 16:40:51 +00:00
• c5eacac644 chore(pmtud/tcp): remove unused TCP flags Quentin McGaw 2026-02-20 16:25:14 +00:00
• 7fbf2cbee3 hotfix(pmtud/tcp): return an error if no MSS destination server worked Quentin McGaw 2026-02-20 16:25:02 +00:00
• 1dee183a70 chore(pmtud/tcp): silently discard IPv6 network unreachable errors Quentin McGaw 2026-02-20 16:24:25 +00:00
• c66d8bed00 hotfix(pmtud/tcp): fix code for IPv6 destinations Quentin McGaw 2026-02-20 16:23:40 +00:00
• 73b3e2c88a chore(pmtud/tcp): remove unused test code Quentin McGaw 2026-02-20 15:18:15 +00:00
• ea87c0a2aa hotfix(pmtud): lower min MTU to MSS-matching-MTU minus 100 in case MSS is very small Quentin McGaw 2026-02-19 22:39:24 +00:00
• 2192874de8 hotfix(pmtud/icmp): ignore non echo messages instead of returning an error Quentin McGaw 2026-02-19 18:05:48 +00:00
• 007c5159f4 hotfix(pmtud): increase TCP margin from 150 to 300 compared to ICMP found MTU Quentin McGaw 2026-02-19 17:24:06 +00:00
• c6b211ef9b feat(pmtud/tcp): support mixed IPv4 and IPv6 TCP servers - Add default cloudflare and google tls ipv6 servers to default tcp servers - update integration test to try against both ipv4 and ipv6 servers Quentin McGaw 2026-02-19 17:11:16 +00:00
• 1c43a045d1 hotfix(pmtud/tcp): fix timeout apply per network call, not globally Quentin McGaw 2026-02-19 17:02:14 +00:00
• 56b9e108be chore(pmtud/tcp): add :53 TCP servers to the default list Quentin McGaw 2026-02-19 16:46:48 +00:00
• 67b66bba9e hotfix(pmtud/icmp): set IPv6 dont fragment options just in case Quentin McGaw 2026-02-19 16:32:33 +00:00
• 8d86470905 feat(pmtud/tcp): use the TCP server with highest MSS to run MTU tests Quentin McGaw 2026-02-19 14:03:46 +00:00
• fb85ae79d1 chore(pmtud/tcp): move test helpers in helpers_test.go Quentin McGaw 2026-02-19 13:07:15 +00:00
• 783616f61d chore(pmtud/tcp): close connections with an RST packet on context cancelation Quentin McGaw 2026-02-19 12:22:42 +00:00
• bc79901f1e chore(pmtud/tcp): restrict temp firewall rules to source ip and source port Quentin McGaw 2026-02-18 22:26:57 +00:00
• 1c56189abc hotfix(pmtud/tcp): fix rare race condition Quentin McGaw 2026-02-18 19:07:31 +00:00
• 224618337c hotfix(pmtud/tcp): respect MSS from server into account Quentin McGaw 2026-02-18 18:32:10 +00:00
• 183d351b58 chore(pmtud/icmp): do not use net.ErrClosed when inappropriate Quentin McGaw 2026-02-17 21:44:30 +00:00
• 04d7cef294 hotfix(pmtud/tcp): block kernel from racing to send RST packets - this makes PMTUD TCP reliable - this only works on kernels with the mark module - on kernels without the mark module, the icmp pmtud mtu found is used Quentin McGaw 2026-02-17 19:33:51 +00:00
• 5f903d1fbf chore(pmtud): remove calls to syscall in favor of unix and windows - syscall is deprecated and is not kept up-to-date - each OS is inherently different hence the syscall being deprecated Quentin McGaw 2026-02-17 16:19:45 +00:00
• d43eb1658f chore(firewall): support TCP flags for future changes Quentin McGaw 2026-02-17 14:15:15 +00:00
• 36dfd5b631 hotfix(pmtud): do not try every address for ICMP PMTUD Quentin McGaw 2026-02-16 20:46:28 +00:00
• f81b8342d6 hotfix(pmtud/tcp): temporary test fix Quentin McGaw 2026-02-16 20:44:00 +00:00
• cdec25da52 feat(pmtud/tcp): generate MTU test data to mimic TLS if possible to avoid being blocked Quentin McGaw 2026-02-16 19:57:12 +00:00
• 201d1041f4 hotfix(pmtud/tcp): send MTU data in first and only ACK packet - less likely to be flagged - correct using TCP fast-open Quentin McGaw 2026-02-16 19:56:14 +00:00
• dc78b4ecce fix(dns): skip blocking if block lists download fails Quentin McGaw 2026-02-16 15:27:07 +00:00
• d75b48d123 chore(dns): update filter block lists without restarting DNS server Quentin McGaw 2026-02-16 15:23:57 +00:00
• e828ea1462 feat(dns): allow parent domains to be exempt from rebinding protection - Specify with *.domain.com in DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES - Fix #3135 Quentin McGaw 2026-02-16 14:44:44 +00:00
• be92aa2ac4 Path MTU discovery fixes and improvements (#3109) Quentin McGaw 2026-02-15 01:40:34 +01:00
• 8f1fda7646 fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails Quentin McGaw 2026-02-11 17:33:14 +00:00
• 8eb990eb66 chore(ci): ignore .golangci.yml file for reviewdog Quentin McGaw 2026-02-11 14:25:09 +00:00
• 7f22fb3276 fix(protonvpn): support port 51820 for UDP OpenVPN v3.41.1 v3.41 Quentin McGaw 2026-02-09 15:41:02 +00:00
• 6909a0c123 fix(healthcheck): prevent race condition and fix #3096 (#3123) Quentin McGaw 2026-02-07 18:11:04 +01:00
• 3e1f48932a fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION Quentin McGaw 2026-02-07 16:49:15 +00:00
• 50744852c5 fix(protonvpn): update OpenVPN settings (#3120) Chris Duck 2026-02-06 07:18:10 -06:00
• 09e52bc685 fix(httpproxy): remove info log when no Proxy-Authorization header is present Quentin McGaw 2026-01-24 19:39:20 +00:00
• 857fe425ec fix(wireguard): fix detection of kernelspace wireguard Quentin McGaw 2026-01-20 15:40:59 +00:00
• 4698daea16 chore(mullvad): remove openvpn support Quentin McGaw 2026-02-11 00:09:36 +00:00
• db947c17a8 feat(dns): restrict plain DNS output traffic dns-plain-output-retricted Quentin McGaw 2026-02-10 16:19:08 +00:00
• b0a75673bd chore(dev): ensure project compiles on darwin and windows Quentin McGaw 2026-02-09 15:40:45 +00:00
• 5f0c499808 fix(protonvpn): support port 51820 for UDP OpenVPN Quentin McGaw 2026-02-09 15:41:02 +00:00
• bdd69a1fb7 fix(healthcheck): prevent race condition and fix #3096 (#3123) Quentin McGaw 2026-02-07 18:11:04 +01:00
• 1af75bb30c fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION Quentin McGaw 2026-02-07 16:49:15 +00:00
• 9c1cd7e8b1 fix(protonvpn): update OpenVPN settings (#3120) Chris Duck 2026-02-06 07:18:10 -06:00
• facc6df3be chore(all): replace netlink library for more flexibility (#3107) Quentin McGaw 2026-01-27 10:11:39 +01:00
• e292a4c9be fix(httpproxy): remove info log when no Proxy-Authorization header is present Quentin McGaw 2026-01-24 19:39:20 +00:00
• 9e4dd61c19 feat(ipvanish): update servers data Quentin McGaw 2026-01-24 19:32:21 +00:00
• fe3d4a94d4 chore(all): make code compilable for other platforms than Linux Quentin McGaw 2026-01-24 13:48:15 +00:00
• de38d759a4 feat(vpn): path MTU discovery to find the best MTU (#2586) Quentin McGaw 2026-01-21 18:02:23 +01:00
• fba60af772 fix(wireguard): fix detection of kernelspace wireguard Quentin McGaw 2026-01-20 15:40:59 +00:00
• 9b9b723887 chore(mullvad): add openvpn removal warning Quentin McGaw 2025-12-29 05:28:13 +00:00
• a10349e378 fix(slickvpn): add missing servers found online v3.41.0 Quentin McGaw 2025-12-24 20:28:57 +00:00
• 983330266a fix(purevpn/updater): parse country and city from hostname and merges with ip address information (#2991) Marcin Łapaj 2025-12-24 05:02:57 +01:00
• 6eb511fb2a fix(publicip/api/cloudflare): add Referer header (#3058) Jeremy Lin 2025-12-23 19:52:25 -08:00
• bb4e61f56c fix(purevpn): update openvpn configuration - Credits to @mlapaj - Taken and verified from #2991 v3.40.4 v3.40 Quentin McGaw 2025-12-23 17:13:20 +00:00
• c72971f4c7 fix(slickvpn/updater): only keep 11 servers hardcoded Quentin McGaw 2025-12-23 02:50:15 +00:00
• 05e1fc3b4e fix(vpnunlimited/updater): remove no longer valid hosts Quentin McGaw 2025-12-23 02:02:26 +00:00
• 6ee28c51a6 fix(vpnsecure/updater): allow region and city to be set to N/A Quentin McGaw 2025-12-23 01:59:23 +00:00
• 3f0e48575d fix(dns): retry on next period the blocklists update after a failed update - Fix #3053 Quentin McGaw 2025-12-23 01:40:29 +00:00
• 666f55767b hotfix(autoheal): monitor health errors asynchronously with other setup steps - May resolve #3021 - no need to wait for dns, port forwarding etc. to setup to monitor health errors Quentin McGaw 2025-12-24 02:56:22 +00:00
• 0a0bb4cf71 hotfix(healthcheck): only fallback to plain dns if icmp is not permitted on the very first try Quentin McGaw 2025-12-24 02:57:50 +00:00
• 2b0719225d fix(purevpn): update openvpn configuration - Credits to @mlapaj - Taken and verified from #2991 Quentin McGaw 2025-12-23 17:13:20 +00:00
• c97bd1bb7c fix(publicip/api/ip2location): rename countries to match standard country names Quentin McGaw 2025-12-23 17:04:52 +00:00
• 10a7c75aa6 feat(publicip/api): query all fetchers in parallel and pick most popular result Quentin McGaw 2025-12-23 16:23:22 +00:00
• 617f1b764f chore(storage): ignore persisted servers data with a timestamp in the future - force users to set a timestamp as the current one if manually editing servers.json which they should not do anyway - favor future servers data updates through a container image pull to override older user-defined data Quentin McGaw 2025-12-23 15:38:17 +00:00
• 600f2ab643 chore(storage): fix comment for ServersAreEqual Quentin McGaw 2025-12-23 15:36:08 +00:00