Commit Graph

Select branches

Hide Pull Requests

bot/update-servers-list-1772653494

bot/update-servers-list-1777610243

ci-runs

conntrack

copilot/investigate-issue-3416

dependabot/github_actions/DavidAnson/markdownlint-cli2-action-24

dependabot/github_actions/actions/checkout-7

dependabot/go_modules/github.com/amnezia-vpn/amneziawg-go-0.2.19

dependabot/go_modules/github.com/mdlayher/netlink-1.11.2

dependabot/go_modules/golang.org/x/net-0.56.0

dependabot/go_modules/golang.org/x/sys-0.46.0

dns-plain-output-retricted

expressvpn-updater-website

issue-3408

loops

master

nftables

openvpn-2.4

ovpn

port-forwarding-loop-debug

protonvpn-more-servers

stash

v3.40

v3.41

v4-storage-vpn-type-both

wireguard-route-replace

#100

#1005

#1007

#101

#1016

#1026

#1033

#1040

#1042

#1047

#1052

#1057

#1058

#1067

#1073

#1098

#1114

#1120

#1132

#114

#1145

#115

#116

#1169

#117

#1173

#119

#1191

#1193

#1198

#1210

#1231

#124

#1248

#126

#1264

#1268

#1275

#1276

#1291

#130

#1332

#1337

#1346

#1348

#1352

#1368

#1369

#1373

#1378

#1380

#1383

#1390

#1393

#1413

#1414

#1423

#1424

#1427

#1436

#1437

#1438

#144

#1449

#1471

#1474

#1476

#1483

#1484

#1493

#1505

#1509

#1539

#1543

#1549

#1557

#1560

#1561

#1567

#1571

#1575

#1585

#1596

#1598

#161

#1616

#1622

#1633

#1634

#1636

#1637

#1641

#1649

#1658

#167

#1678

#1679

#168

#1681

#1682

#1684

#1685

#1689

#169

#1722

#1726

#1729

#1732

#174

#1741

#1742

#1780

#1786

#1787

#1788

#1789

#180

#1800

#1806

#182

#183

#1830

#1836

#1836

#184

#1844

#1845

#1847

#1848

#185

#1853

#1857

#1858

#1860

#1861

#1868

#1871

#1874

#189

#1890

#1890

#1897

#1898

#1907

#1912

#1922

#193

#1935

#1936

#1937

#1938

#1946

#1947

#195

#1950

#1953

#1965

#1969

#1973

#1975

#1980

#1981

#1982

#1984

#1985

#1992

#1993

#1995

#1998

#2002

#2012

#2016

#2025

#2033

#2039

#2040

#2046

#205

#2052

#2062

#2070

#2075

#208

#2081

#2089

#2091

#2091

#2094

#2101

#2102

#2105

#2109

#2126

#2138

#2139

#2146

#2151

#2159

#2160

#2167

#2174

#2178

#2182

#2185

#220

#2203

#2204

#2207

#2208

#2214

#2216

#2218

#222

#2221

#2249

#2253

#2254

#226

#2265

#2266

#2269

#227

#2272

#2273

#2279

#228

#2285

#2308

#2309

#2310

#2316

#2319

#232

#2324

#2345

#2352

#237

#2378

#2383

#239

#2390

#2392

#2398

#2399

#240

#2400

#2401

#2404

#241

#2411

#2416

#2418

#2419

#242

#2420

#2423

#2428

#2432

#2434

#2437

#2440

#2444

#2460

#2465

#2466

#2478

#2479

#248

#2490

#2499

#2502

#2512

#2513

#2518

#2523

#2526

#2529

#253

#2537

#2537

#2542

#2549

#255

#2550

#2557

#2564

#257

#2573

#2574

#2575

#2577

#2578

#258

#2586

#2588

#259

#260

#2600

#2601

#2611

#2611

#2612

#2619

#262

#2622

#2624

#2629

#2632

#2636

#2636

#264

#2644

#2648

#2652

#2663

#267

#268

#2683

#2687

#2688

#269

#2700

#2700

#2733

#2734

#2739

#2740

#2756

#2767

#2768

#277

#2770

#2773

#2775

#2778

#2789

#2792

#2808

#282

#2821

#2835

#2838

#2851

#2863

#2864

#2877

#2878

#288

#2880

#2881

#2883

#2884

#2885

#2885

#2888

#2901

#2918

#2923

#2928

#2929

#293

#2930

#2931

#2932

#2933

#2934

#2935

#2936

#2937

#2938

#2939

#2940

#2944

#2954

#2955

#2956

#2957

#2958

#2959

#2964

#2968

#2969

#297

#2970

#2973

#2975

#2976

#2977

#2980

#2984

#2988

#2991

#2999

#300

#3001

#3010

#3014

#302

#3028

#3036

#3037

#3038

#3041

#305

#3054

#3058

#3071

#308

#3087

#3090

#3091

#3095

#3099

#3106

#3107

#3109

#3114

#3120

#3123

#3127

#3128

#3129

#3129

#3133

#3149

#3150

#3154

#3157

#3157

#3158

#3158

#3161

#3164

#3164

#3165

#3165

#3174

#3175

#3184

#3185

#3186

#3189

#3192

#3197

#3198

#3199

#32

#3200

#3208

#3211

#3212

#3213

#3214

#3223

#3223

#3225

#3226

#3227

#3240

#3245

#3246

#3251

#3255

#3258

#3259

#3264

#3273

#3274

#3277

#3298

#3301

#3307

#3308

#3327

#3333

#3336

#3338

#3339

#3339

#3340

#3341

#3345

#3346

#3347

#3348

#335

#3350

#3353

#3361

#3362

#3372

#3372

#3379

#3379

#338

#3380

#3380

#3381

#3381

#3386

#3386

#3388

#3388

#3389

#339

#3390

#3393

#3393

#3399

#3400

#3406

#3407

#3409

#3410

#3415

#3421

#3421

#3424

#3425

#3425

#344

#347

#354

#364

#365

#367

#369

#380

#383

#384

#387

#393

#394

#401

#402

#412

#413

#414

#415

#417

#419

#427

#428

#43

#431

#434

#437

#44

#441

#449

#45

#450

#451

#452

#453

#455

#46

#463

#475

#489

#499

#501

#51

#513

#528

#529

#543

#55

#558

#565

#57

#574

#575

#577

#578

#58

#583

#584

#587

#591

#606

#621

#623

#63

#635

#64

#664

#668

#678

#69

#7

#70

#705

#71

#722

#742

#742

#743

#743

#744

#744

#756

#762

#769

#8

#801

#806

#807

#812

#83

#832

#84

#848

#85

#870

#893

#897

#908

#914

#914

#915

#923

#926

#938

#942

#943

#95

#96

#961

#97

#977

#978

#978

#979

#98

#980

#981

#99

v1.0

v2

v2.0.0

v3.0.0

v3.0.1

v3.1.0

v3.10.0

v3.10.1

v3.10.2

v3.10.3

v3.10.4

v3.11.0

v3.11.1

v3.11.2

v3.12.0

v3.12.1

v3.12.2

v3.13.0

v3.13.1

v3.14.0

v3.15.0

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.19.1

v3.2.0

v3.2.0-rc1

v3.2.0-rc2

v3.20.0

v3.21.0

v3.21.1

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.27.1

v3.27.2

v3.28.0

v3.28.1

v3.28.2

v3.29.0

v3.3.0

v3.30.0

v3.30.1

v3.31.0

v3.31.1

v3.32.0

v3.33.0

v3.34.0

v3.34.1

v3.34.2

v3.34.3

v3.35.0

v3.36.0

v3.37.0

v3.37.1

v3.38.0

v3.38.1

v3.39.0

v3.39.1

v3.4.0

v3.40.0

v3.40.1

v3.40.2

v3.40.3

v3.40.4

v3.41.0

v3.41.1

v3.41.2

v3.41.3

v3.5.0

v3.5.1

v3.6.0

v3.7.0

v3.8.0

v3.8.1

v3.9.0

Mono Color

• 625a63e7c2 fix(firewall): flush conntrack table after enabling firewall at container start - prevent leaks for connections made the first ~10 milliseconds when Gluetun starts - seems critical, but in practice this very rarely happen and it very hard to reproduce Quentin McGaw 2026-02-21 19:39:22 +00:00
• 0c3e5d94d8 change!(server): auth is now required for all routes (#2980) Quentin McGaw 2026-02-20 18:10:53 +01:00
• d586793169 fix(all): increase global http client timeout to 35s and precise lower timeouts where needed - Fix DNS blocklists slow downloads, fix #3102 - Leave 35s timeout for updaters - Set timeouts to 1s for local calls - Set timeouts to 5s for LAN VPN calls and small external calls - Set timeouts to 10s external VPN API calls Quentin McGaw 2026-02-20 16:40:51 +00:00
• c5eacac644 chore(pmtud/tcp): remove unused TCP flags Quentin McGaw 2026-02-20 16:25:14 +00:00
• 7fbf2cbee3 hotfix(pmtud/tcp): return an error if no MSS destination server worked Quentin McGaw 2026-02-20 16:25:02 +00:00
• 1dee183a70 chore(pmtud/tcp): silently discard IPv6 network unreachable errors Quentin McGaw 2026-02-20 16:24:25 +00:00
• c66d8bed00 hotfix(pmtud/tcp): fix code for IPv6 destinations Quentin McGaw 2026-02-20 16:23:40 +00:00
• 73b3e2c88a chore(pmtud/tcp): remove unused test code Quentin McGaw 2026-02-20 15:18:15 +00:00
• ea87c0a2aa hotfix(pmtud): lower min MTU to MSS-matching-MTU minus 100 in case MSS is very small Quentin McGaw 2026-02-19 22:39:24 +00:00
• 2192874de8 hotfix(pmtud/icmp): ignore non echo messages instead of returning an error Quentin McGaw 2026-02-19 18:05:48 +00:00
• 007c5159f4 hotfix(pmtud): increase TCP margin from 150 to 300 compared to ICMP found MTU Quentin McGaw 2026-02-19 17:24:06 +00:00
• c6b211ef9b feat(pmtud/tcp): support mixed IPv4 and IPv6 TCP servers - Add default cloudflare and google tls ipv6 servers to default tcp servers - update integration test to try against both ipv4 and ipv6 servers Quentin McGaw 2026-02-19 17:11:16 +00:00
• 1c43a045d1 hotfix(pmtud/tcp): fix timeout apply per network call, not globally Quentin McGaw 2026-02-19 17:02:14 +00:00
• 56b9e108be chore(pmtud/tcp): add :53 TCP servers to the default list Quentin McGaw 2026-02-19 16:46:48 +00:00
• 67b66bba9e hotfix(pmtud/icmp): set IPv6 dont fragment options just in case Quentin McGaw 2026-02-19 16:32:33 +00:00
• 8d86470905 feat(pmtud/tcp): use the TCP server with highest MSS to run MTU tests Quentin McGaw 2026-02-19 14:03:46 +00:00
• fb85ae79d1 chore(pmtud/tcp): move test helpers in helpers_test.go Quentin McGaw 2026-02-19 13:07:15 +00:00
• 783616f61d chore(pmtud/tcp): close connections with an RST packet on context cancelation Quentin McGaw 2026-02-19 12:22:42 +00:00
• bc79901f1e chore(pmtud/tcp): restrict temp firewall rules to source ip and source port Quentin McGaw 2026-02-18 22:26:57 +00:00
• 1c56189abc hotfix(pmtud/tcp): fix rare race condition Quentin McGaw 2026-02-18 19:07:31 +00:00
• 224618337c hotfix(pmtud/tcp): respect MSS from server into account Quentin McGaw 2026-02-18 18:32:10 +00:00
• 183d351b58 chore(pmtud/icmp): do not use net.ErrClosed when inappropriate Quentin McGaw 2026-02-17 21:44:30 +00:00
• 04d7cef294 hotfix(pmtud/tcp): block kernel from racing to send RST packets - this makes PMTUD TCP reliable - this only works on kernels with the mark module - on kernels without the mark module, the icmp pmtud mtu found is used Quentin McGaw 2026-02-17 19:33:51 +00:00
• 5f903d1fbf chore(pmtud): remove calls to syscall in favor of unix and windows - syscall is deprecated and is not kept up-to-date - each OS is inherently different hence the syscall being deprecated Quentin McGaw 2026-02-17 16:19:45 +00:00
• d43eb1658f chore(firewall): support TCP flags for future changes Quentin McGaw 2026-02-17 14:15:15 +00:00
• 36dfd5b631 hotfix(pmtud): do not try every address for ICMP PMTUD Quentin McGaw 2026-02-16 20:46:28 +00:00
• f81b8342d6 hotfix(pmtud/tcp): temporary test fix Quentin McGaw 2026-02-16 20:44:00 +00:00
• cdec25da52 feat(pmtud/tcp): generate MTU test data to mimic TLS if possible to avoid being blocked Quentin McGaw 2026-02-16 19:57:12 +00:00
• 201d1041f4 hotfix(pmtud/tcp): send MTU data in first and only ACK packet - less likely to be flagged - correct using TCP fast-open Quentin McGaw 2026-02-16 19:56:14 +00:00
• dc78b4ecce fix(dns): skip blocking if block lists download fails Quentin McGaw 2026-02-16 15:27:07 +00:00
• d75b48d123 chore(dns): update filter block lists without restarting DNS server Quentin McGaw 2026-02-16 15:23:57 +00:00
• e828ea1462 feat(dns): allow parent domains to be exempt from rebinding protection - Specify with *.domain.com in DNS_REBINDING_PROTECTION_EXEMPT_HOSTNAMES - Fix #3135 Quentin McGaw 2026-02-16 14:44:44 +00:00
• be92aa2ac4 Path MTU discovery fixes and improvements (#3109) Quentin McGaw 2026-02-15 01:40:34 +01:00
• 8f1fda7646 fix(healthcheck): corret behavior when HEALTH_RESTART_VPN=off and startup check fails Quentin McGaw 2026-02-11 17:33:14 +00:00
• 8eb990eb66 chore(ci): ignore .golangci.yml file for reviewdog Quentin McGaw 2026-02-11 14:25:09 +00:00
• 7f22fb3276 fix(protonvpn): support port 51820 for UDP OpenVPN v3.41.1 Quentin McGaw 2026-02-09 15:41:02 +00:00
• 6909a0c123 fix(healthcheck): prevent race condition and fix #3096 (#3123) Quentin McGaw 2026-02-07 18:11:04 +01:00
• 3e1f48932a fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION Quentin McGaw 2026-02-07 16:49:15 +00:00
• 50744852c5 fix(protonvpn): update OpenVPN settings (#3120) Chris Duck 2026-02-06 07:18:10 -06:00
• 09e52bc685 fix(httpproxy): remove info log when no Proxy-Authorization header is present Quentin McGaw 2026-01-24 19:39:20 +00:00
• 857fe425ec fix(wireguard): fix detection of kernelspace wireguard Quentin McGaw 2026-01-20 15:40:59 +00:00
• 4698daea16 chore(mullvad): remove openvpn support Quentin McGaw 2026-02-11 00:09:36 +00:00
• db947c17a8 feat(dns): restrict plain DNS output traffic dns-plain-output-retricted Quentin McGaw 2026-02-10 16:19:08 +00:00
• b0a75673bd chore(dev): ensure project compiles on darwin and windows Quentin McGaw 2026-02-09 15:40:45 +00:00
• 5f0c499808 fix(protonvpn): support port 51820 for UDP OpenVPN Quentin McGaw 2026-02-09 15:41:02 +00:00
• bdd69a1fb7 fix(healthcheck): prevent race condition and fix #3096 (#3123) Quentin McGaw 2026-02-07 18:11:04 +01:00
• 1af75bb30c fix(openvpn): only log openvpn version corresponding to OPENVPN_VERSION Quentin McGaw 2026-02-07 16:49:15 +00:00
• 9c1cd7e8b1 fix(protonvpn): update OpenVPN settings (#3120) Chris Duck 2026-02-06 07:18:10 -06:00
• facc6df3be chore(all): replace netlink library for more flexibility (#3107) Quentin McGaw 2026-01-27 10:11:39 +01:00
• e292a4c9be fix(httpproxy): remove info log when no Proxy-Authorization header is present Quentin McGaw 2026-01-24 19:39:20 +00:00
• 9e4dd61c19 feat(ipvanish): update servers data Quentin McGaw 2026-01-24 19:32:21 +00:00
• fe3d4a94d4 chore(all): make code compilable for other platforms than Linux Quentin McGaw 2026-01-24 13:48:15 +00:00
• de38d759a4 feat(vpn): path MTU discovery to find the best MTU (#2586) Quentin McGaw 2026-01-21 18:02:23 +01:00
• fba60af772 fix(wireguard): fix detection of kernelspace wireguard Quentin McGaw 2026-01-20 15:40:59 +00:00
• 9b9b723887 chore(mullvad): add openvpn removal warning Quentin McGaw 2025-12-29 05:28:13 +00:00
• a10349e378 fix(slickvpn): add missing servers found online v3.41.0 Quentin McGaw 2025-12-24 20:28:57 +00:00
• 983330266a fix(purevpn/updater): parse country and city from hostname and merges with ip address information (#2991) Marcin Łapaj 2025-12-24 05:02:57 +01:00
• 6eb511fb2a fix(publicip/api/cloudflare): add Referer header (#3058) Jeremy Lin 2025-12-23 19:52:25 -08:00
• bb4e61f56c fix(purevpn): update openvpn configuration - Credits to @mlapaj - Taken and verified from #2991 v3.40.4 v3.40 Quentin McGaw 2025-12-23 17:13:20 +00:00
• c72971f4c7 fix(slickvpn/updater): only keep 11 servers hardcoded Quentin McGaw 2025-12-23 02:50:15 +00:00
• 05e1fc3b4e fix(vpnunlimited/updater): remove no longer valid hosts Quentin McGaw 2025-12-23 02:02:26 +00:00
• 6ee28c51a6 fix(vpnsecure/updater): allow region and city to be set to N/A Quentin McGaw 2025-12-23 01:59:23 +00:00
• 3f0e48575d fix(dns): retry on next period the blocklists update after a failed update - Fix #3053 Quentin McGaw 2025-12-23 01:40:29 +00:00
• 666f55767b hotfix(autoheal): monitor health errors asynchronously with other setup steps - May resolve #3021 - no need to wait for dns, port forwarding etc. to setup to monitor health errors Quentin McGaw 2025-12-24 02:56:22 +00:00
• 0a0bb4cf71 hotfix(healthcheck): only fallback to plain dns if icmp is not permitted on the very first try Quentin McGaw 2025-12-24 02:57:50 +00:00
• 2b0719225d fix(purevpn): update openvpn configuration - Credits to @mlapaj - Taken and verified from #2991 Quentin McGaw 2025-12-23 17:13:20 +00:00
• c97bd1bb7c fix(publicip/api/ip2location): rename countries to match standard country names Quentin McGaw 2025-12-23 17:04:52 +00:00
• 10a7c75aa6 feat(publicip/api): query all fetchers in parallel and pick most popular result Quentin McGaw 2025-12-23 16:23:22 +00:00
• 617f1b764f chore(storage): ignore persisted servers data with a timestamp in the future - force users to set a timestamp as the current one if manually editing servers.json which they should not do anyway - favor future servers data updates through a container image pull to override older user-defined data Quentin McGaw 2025-12-23 15:38:17 +00:00
• 600f2ab643 chore(storage): fix comment for ServersAreEqual Quentin McGaw 2025-12-23 15:36:08 +00:00
• 7052d5490b hotfix(pia): revert port changes - This reverts commit fd6e5e4e90. - Port changes are more involved and require cipher, auth and certificate changes as well Quentin McGaw 2025-12-23 13:57:40 +00:00
• 6a5a836cb6 feat(pia): update servers data Quentin McGaw 2025-12-23 13:51:34 +00:00
• a649b0adc1 hotfix(slickvpn): remove unused code Quentin McGaw 2025-12-23 13:45:41 +00:00
• beaa8b5589 fix(slickvpn/updater): only keep 11 servers - this reverts most of commit e806fe02db. Quentin McGaw 2025-12-23 03:03:47 +00:00
• e806fe02db fix(slickvpn/updater): update existing hostnames from servers.json - SlickVPN location website is now total garbage which cannot be parsed Quentin McGaw 2025-12-23 02:50:15 +00:00
• 92237658c3 chore(wevpn): removed since it is now decomissioned Quentin McGaw 2025-12-23 02:12:02 +00:00
• e627504fb5 fix(vpnunlimited/updater): remove no longer valid hosts Quentin McGaw 2025-12-23 02:02:26 +00:00
• cc1c253bad feat(vpnsecure): update servers data Quentin McGaw 2025-12-23 01:59:34 +00:00
• c27dac10fe fix(vpnsecure/updater): allow region and city to be set to N/A Quentin McGaw 2025-12-23 01:59:23 +00:00
• 7d1e2eb226 feat(torguard): servers data update Quentin McGaw 2025-12-23 01:54:48 +00:00
• 5b5aa5e014 feat(surfshark): update servers data Quentin McGaw 2025-12-23 01:54:15 +00:00
• 9ee3ed754d chore(cyberghost/updater): do not log warnings for "no such host" Quentin McGaw 2025-12-23 01:51:59 +00:00
• 0ca466fbd5 feat(cyberghost): update servers data Quentin McGaw 2025-12-23 01:50:29 +00:00
• 1c1d271967 fix(dns): retry on next period the blocklists update after a failed update - Fix #3053 Quentin McGaw 2025-12-23 01:40:29 +00:00
• cc89b35b63 chore(pia): add test to ensure default ports are within ports from their API Quentin McGaw 2025-12-22 23:24:13 +00:00
• fd6e5e4e90 fix(pia): update default openvpn ports and possible ports to choose - Fix #3046 Quentin McGaw 2025-12-22 22:47:17 +00:00
• d702ed4122 fix(dns): dns over tls re-uses TCP connections - Bump dns to v2.0.0-rc10 - DNS over HTTPs not affected since it did re-use connections already Quentin McGaw 2025-12-22 21:09:22 +00:00
• 2d00f3fe25 hotfix(server/auth): case sensitivity for HTTP_CONTROL_SERVER_AUTH_DEFAULT_ROLE Quentin McGaw 2025-12-05 17:03:42 +00:00
• 56db5a83c0 chore(healthcheck): log one error per line on failure for readability Quentin McGaw 2025-12-05 17:03:04 +00:00
• f5206375c0 docs(readme): add star history graph because it's fun Quentin McGaw 2025-11-26 14:08:46 +00:00
• c25c9f6f0e feat(healthcheck/icmp): use the same id and increasing sequence number - easier debug logs flow - MAY cost less conntrack-ed slots on the VPN server - resets id and sequence to 1 when reconnecting VPN - resets id and sequence to 1 after 5 minutes - resets id and sequence to 1 if sequence is complete (65535) Quentin McGaw 2025-11-26 13:38:53 +00:00
• 08a7aae5f1 chore(ci): use qdm12/log library to have timed logs for tests Quentin McGaw 2025-11-26 12:44:39 +00:00
• 57d8eb03c5 Chore(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#2999) dependabot[bot] 2025-11-26 00:29:02 +01:00
• 2b55161fbb Chore(deps): Bump actions/checkout from 5 to 6 (#3001) dependabot[bot] 2025-11-26 00:27:44 +01:00
• c4f2a224d4 change(dns): log filtered requests at the debug level Quentin McGaw 2025-11-25 16:50:17 +00:00
• 8bb0cc324b fix(dns): prevent dns restart crash if DOT=off and DNS_KEEP_NAMESERVER=off Quentin McGaw 2025-11-24 16:45:53 +00:00
• cba6070300 fix(dns): prevent dns restart crash if DOT=off and DNS_KEEP_NAMESERVER=off Quentin McGaw 2025-11-24 16:43:24 +00:00
• 2afa988174 hotfix(dns): resolve .site and .network domain names as non-local Quentin McGaw 2025-11-23 21:39:49 +00:00
• a35c994bc8 feat(port-forwarding): add {{VPN_INTERFACE}} template variable Quentin McGaw 2025-11-22 23:32:26 +00:00
• 0fad44fb68 chore(vpn): do not restart VPN if startup check fails and HEALTH_RESTART_VPN=off - Note you still should not set HEALTH_RESTART_VPN=off this is for debugging only Quentin McGaw 2025-11-22 15:21:40 +00:00