208 Commits

Author	SHA1	Message	Date
Alexander Bersenev	9ec1e543bd	expose the length of connections as metrics	2019-09-21 23:17:00 +05:00
Alexander Bersenev	fae04ed3c7	do not export proxy links by default	2019-09-20 18:57:37 +05:00
Alexander Bersenev	25685f370c	reword the link desc	2019-09-20 18:10:37 +05:00
Alexander Bersenev	1feb8e5fc7	export proxy links as metrics	2019-09-20 17:52:30 +05:00
Alexander Bersenev	5e488203a2	check for socks mode before importing uvloop	2019-09-20 17:26:30 +05:00
Alexander Bersenev	94fd98a1fb	correct spelling	2019-09-20 17:19:33 +05:00
Alexander Bersenev	4c5b0803fa	add upstream socks proxy consistency checks	2019-09-20 17:17:16 +05:00
Alexander Bersenev	8fa8aabc8e	ability to specify socks user and pass	2019-09-20 16:13:06 +05:00
Alexander Bersenev	f2fbaa923b	refactor upstream proxy handling	2019-09-20 16:06:59 +05:00
Alexander Bersenev	79eaabdd23	move socks handling in the config parsing	2019-09-20 15:40:33 +05:00
Alexander Bersenev	23c7b0d53b	make the socks module optional	2019-09-20 15:38:18 +05:00
pasha-zzz	516600a32d	Add support for upstream SOCKS5 proxy (#143)	2019-09-20 15:28:29 +05:00
Alexander Bersenev	5fcd1c0158	change metrics pushes to pulls	2019-09-19 02:27:57 +05:00
Alexander Bersenev	dc1223fd90	add hanshake_timeout metric	2019-09-18 23:22:06 +05:00
Alexander Bersenev	0d52ae0bc7	rename metrics, add connects_all metric	2019-09-18 23:13:32 +05:00
Alexander Bersenev	2b1469985d	add an ability to export metrics to prometheus	2019-09-18 19:44:19 +05:00
Alexander Bersenev	4784491800	use only half of the digest as a key for used digest	2019-09-13 17:20:32 +05:00
Alexander Bersenev	7a2c6b9825	cast client port to int	2019-09-13 01:19:19 +05:00
Alexander Bersenev	37307a98fb	print replay attackers summary	2019-09-08 14:28:46 +05:00
Alexander Bersenev	02b39168c3	print the possible replay-attackers summary instead of every time	2019-09-08 14:12:06 +05:00
Alexander Bersenev	163e7b7cce	print a message about getting the cert	2019-09-08 03:12:19 +05:00
Alexander Bersenev	1ed13d9efa	get rid from annoying time skew messages, print summary instead	2019-09-08 02:01:23 +05:00
Alexander Bersenev	51c8d68271	disable the first bad packet heuristics if the tls-only mode activated, it has time-based protection instead	2019-09-08 01:09:44 +05:00
Alexander Bersenev	50cd74051f	add a message if uvloop is found	2019-08-30 16:05:08 +05:00
Alexander Bersenev	1d826866d1	print time skew message as one line	2019-08-26 17:00:34 +05:00
Alexander Bersenev	ff6b826e13	do not output canceled errors to get rid from scarry traceback on the proxy termination	2019-08-26 16:51:48 +05:00
Alexander Bersenev	3315ac1df6	add one more param into the undocummented mode of launch	2019-08-26 16:07:35 +05:00
Alexander Bersenev	d34a15bca3	nicer exception printing	2019-08-23 23:55:26 +05:00
Alexander Bersenev	56bfab51d5	necer exception printing	2019-08-23 23:51:53 +05:00
Alexander Bersenev	4f8b1b16db	modify the workaround	2019-08-23 18:12:53 +05:00
Alexander Bersenev	27f5d249a7	add a workaround against the clients who send zero as their itimestamp	2019-08-23 17:19:03 +05:00
Alexander Bersenev	c51f6f85b8	correct the byte in the initial server hello	2019-08-23 05:24:18 +05:00
Alexander Bersenev	44a52bf958	remove the workaround	2019-08-23 02:19:21 +05:00
Alexander Bersenev	8520a26837	ability to disable replay protection	2019-08-23 01:59:53 +05:00
Alexander Bersenev	068996ab36	fix small typo	2019-08-23 01:45:54 +05:00
Alexander Bersenev	4faa96732f	workaround: the fifth telegram server doesn't answer on IPv6	2019-08-23 01:43:44 +05:00
Alexander Bersenev	bee0b3be6b	cache the ip address of mask host	2019-08-23 01:18:24 +05:00
Alexander Bersenev	25d76bee09	do not create the copy of cryptography adapter classes	2019-08-21 16:14:48 +05:00
Alexander Bersenev	04491f8a6a	use hand-made random generator to make randoms more unpredictable	2019-08-20 01:58:19 +05:00
Alexander Bersenev	e081d6b727	generate plausible x25519 public key for server hello also	2019-08-19 21:48:54 +05:00
Alexander Bersenev	ea28a7055a	small readme fixes	2019-08-19 19:16:36 +05:00
Alexander Bersenev	45cb849ca9	change tls status from experimental to new	2019-08-19 18:50:52 +05:00
Alexander Bersenev	e66818326e	generate plausible keys in the key share extension	2019-08-19 17:48:10 +05:00
Alexander Bersenev	4a1bf1ec6a	print warning about default settings on stderr	2019-08-19 04:59:05 +05:00
Alexander Bersenev	854aaa1f24	add flush on print	2019-08-19 04:57:48 +05:00
Alexander Bersenev	5b0ad45cb9	cosmetic fix	2019-08-19 04:56:37 +05:00
Alexander Bersenev	26e00a7409	give some advices about non-secure settings on startup	2019-08-19 04:55:09 +05:00
Alexander Bersenev	ac6d20a897	redesing exception handling logic in handle_bad_client	2019-08-19 04:13:50 +05:00
Alexander Bersenev	06ed40c815	handle unknown ip situation, for example for unix-sockets	2019-08-19 03:44:08 +05:00
Alexander Bersenev	1938c7d3bb	change comment	2019-08-19 03:33:04 +05:00