Alawn/shadowsocks-libev
1
0
Fork 0
mirror of https://github.com/shadowsocks/shadowsocks-libev.git synced 2026-10-21 06:23:52 +00:00
Code Releases Activity
2,354 Commits 82 Branches 86 Tags
4bbbe212eb65e356be97a11bb98dbebb2e7923fc
Commit Graph
2354 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Aven 4bbbe212eb Add support of nftables firewall 
The change is to support the 'fail2ban' feature. Instead of
blocking IPs by server itself, server just add malicious IPs
to specified sets of nftables. So admin can configure rules
to deal with those IPs.

Notes: cap_net_admin capability is required.

Example configuration:
 # nft add table ip fail2ban
 # nft add chain ip fail2ban input { type filter hook input priority 0 \; }
 # nft add set ip fail2ban badips { type ipv4_addr \; flags dynamic, timeout \; timeout 1h \; }
 # nft add rule ip fail2ban input ip saddr @badips drop
 # ss-server -c config.json --nftables-sets badips
 2021-07-01 12:05:39 +08:00
Max Lv d1171f44d0 Revert ""DynamicUser=true" makes "/etc/init.d/shadowsocks-libev start" fail." 
This reverts commit ca4caabac6.
 2021-05-13 12:33:57 +08:00
lixingcong ed23402637 Fix memory leak in manager 2021-05-12 16:13:10 +08:00
abner_bob ca4caabac6 "DynamicUser=true" makes "/etc/init.d/shadowsocks-libev start" fail. 2021-05-12 16:12:56 +08:00
dependabot[bot] 16867e1c73 Bump docker/setup-qemu-action from 1 to 1.1.0 
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 1 to 1.1.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v1...v1.1.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-12 16:12:11 +08:00
dependabot[bot] 3b3ba96210 Bump actions/checkout from 2 to 2.3.4 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 2.3.4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v2.3.4)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-12 16:11:53 +08:00
dependabot[bot] a4a8fc1e04 Bump docker/login-action from 1 to 1.9.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 1.9.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v1.9.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-12 16:11:44 +08:00
dependabot[bot] ada0bae70a Bump docker/build-push-action from 2 to 2.4.0 
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 2 to 2.4.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v2...v2.4.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-12 16:11:28 +08:00
dependabot[bot] da3aa4d6b9 Bump docker/setup-buildx-action from 1 to 1.3.0 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1 to 1.3.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...v1.3.0)

Signed-off-by: dependabot[bot] <support@github.com>
 2021-05-12 16:10:37 +08:00
Maxim Shpak 6329526199 Run systemd service after network is available (unit file fix) 
There is a race condition between shadowsocks-libev.service and
systemd-resolved.service after reboot/on boot. The shadowsocks
service tries to start before the dns service is started properly
and fails showing the corresponding errors in the logs.
 2021-03-31 07:39:59 +08:00
lixingcong e04b73d1b6 Fix memory leak 2021-03-17 09:54:43 +08:00
Fabrice Fontaine 7e5922aa44 configure.ac: use pkg-config to find netfilter_conntrack 
Use pkg-config to retrieve the dependencies of netfilter_conntrack
and avoid the following build failure when building statically:

configure:13096: /data/buildroot-test/instance-1/output-1/host/bin/x86_64-linux-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -Os   -static -I/data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/include -DPCRE_STATIC -pthread -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -static -L/data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/lib conftest.c -lnetfilter_conntrack -lnfnetlink -lev  -lcares -lsodium -lmbedcrypto -lpcre  >&5
/data/buildroot-test/instance-1/output-1/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-buildroot-linux-uclibc/8.3.0/../../../../x86_64-buildroot-linux-uclibc/bin/ld: /data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/lib/libnetfilter_conntrack.a(api.o): in function `nfct_fill_hdr.constprop.4':
api.c:(.text+0x3f): undefined reference to `mnl_nlmsg_put_header'

Fixes:
 - http://autobuild.buildroot.org/results/6cad497a7ab941a0ee3fd7007defc81e30cdcbe0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2021-03-11 12:20:18 +08:00
t0nyt4ng 8e0fe4e6a2 update libsodium url 
libsodium 1.0.16 has been removed to the old release
 2021-03-11 12:19:50 +08:00
Jared Pyzynski 13f472077d Fix "ERROR: [udp] remote_recv_bind: Address already in use" when multiple reuse_port-enabled ss-redir instances are listening on the same address 2021-01-30 07:27:00 +08:00
Roger Shimizu cfe0c2cba0 Fix ftbfs for Hurd since there is no IPV6_TCLASS defined 2021-01-09 14:53:48 -08:00
Not Sure b68157e6f7 Fix typo. 2020-12-23 07:13:14 +08:00
Not Sure 36d9993bbf Add --tcp-incoming-rcvbuf and --tcp-outgoing-rcvbuf which allow precise control over TCP receive buffers. 2020-12-23 07:13:14 +08:00
Not Sure 920dbac0d3 Missing config file parsing logic. 2020-12-23 07:13:14 +08:00
Not Sure 5617841694 Add --tcp-incoming-sndbuf and --tcp-outgoing-sndbuf which allow precise control over TCP send buffers. 
- This is very useful in advanced scenarios such as ss-redir or chaining of servers using TPROXY
  to avoid bufferbloat-like performance degradation due to default large buffers of OS.
 2020-12-23 07:13:14 +08:00
Max Lv aed81a1c2b Create FUNDING.yml 2020-12-13 18:19:43 +08:00
Max Lv 89b5f987d6 Merge pull request #2762 from thesamhurwitz/manager-iface-option 
Fix manager not passing -i option
 2020-10-19 09:54:01 +08:00
SamHurwitz 72db525aac Fix manager not passing -i option 2020-10-17 14:58:31 +05:00
Max Lv b5d6225863 Merge pull request #2759 from morlay/master 
bump workflow actions to docker official provided
 2020-09-30 09:52:51 +08:00
Morlay 53ca5eb2d3 bump workflow actions to docker official provided 2020-09-30 09:30:22 +08:00
Max Lv 8be4f19758 Merge pull request #2753 from JohnTheNerd/password-file 
added support for Docker secrets and password file in the Docker image
 2020-09-21 14:58:04 +08:00
John 2a249b0bac added support for Docker secrets and password file in the Docker image 
this means we no longer have to hardcode the password in the docker-compose file, and can treat the file as configuration rather than a secret.
 2020-09-19 16:10:26 -02:30
Max Lv 8285e5a7de Bump version v3.3.5 2020-09-15 10:30:48 +08:00
babarosaM33 a727596faa jconf: fix memory leak 2020-08-04 21:56:45 +08:00
Max Lv 31dd81649d Merge pull request #2736 from zfl9/master 
Add TPROXY support for TCP (ss-redir)
 2020-07-20 16:24:19 +08:00
zfl9 03df264fcd add tcp_tproxy option, add a sample script in readme.md 2020-07-18 21:09:08 +08:00
zfl9 cde88d4074 add tcp_tproxy option, README.md update 2020-07-18 17:10:37 +08:00
zfl9 6d4a3ad82c add tcp_tproxy option, asciidoc update 2020-07-18 17:08:56 +08:00
zfl9 37cdf8d45a add tcp_tproxy option, completions bash/zsh 2020-07-18 17:00:18 +08:00
zfl9 78784507f1 add tcp_tproxy option, use tproxy instead of redirect (tcp) 2020-07-18 16:23:21 +08:00
Max Lv cab663a6a2 Merge pull request #2733 from DDoSolitary/patch-cygwin-tcp.h-detect 
Fix detection of netinet/tcp.h on Cygwin.
 2020-07-14 09:19:55 +08:00
DDoSolitary 54fa88476c Fix detection of netinet/tcp.h on Cygwin. 2020-07-13 17:45:16 +08:00
Max Lv 1b90919f06 Merge pull request #2730 from billzhong/patch-1 
fix broken anchor
 2020-07-04 12:51:47 +08:00
Bill Zhong 982f1e1d1e fix broken anchor 2020-07-04 00:47:51 -02:30
Max Lv a360b2cc43 Merge pull request #2728 from ipcjs/master 
add snap service
 2020-07-01 09:14:53 +08:00
ipcjs-rog-ubuntu cd6ac18772 add snap service 2020-06-27 04:09:13 +08:00
Max Lv 25be24c01f Align the report format for UDP packet 2020-06-20 06:56:31 +08:00
Max Lv e8ca659cea report suspicious UDP packet for fail2ban 2020-06-20 06:45:37 +08:00
Max Lv 163cd3db60 Merge pull request #2720 from morlay/master 
Fix workflow build to make docker release with tags or edge for master
 2020-06-16 16:08:18 +08:00
Morlay b3762a461a fix workflow build to make docker release with tags or edge for master 2020-06-16 15:27:45 +08:00
Max Lv 99645ffafc Merge pull request #2719 from morlay/master 
added workflow for buildx
 2020-06-16 13:06:16 +08:00
Morlay 1bde4621b9 added workflow for buildx 2020-06-16 11:32:32 +08:00
Max Lv 3ff9d33898 Merge pull request #2698 from DDoSolitary/patch-cmake-mingw 
Fix support for building with CMake and MinGW.
 2020-05-02 15:15:25 +08:00
DDoSolitary 93336adf66 Fix static linking issues on Windows. 2020-05-02 13:36:38 +08:00
DDoSolitary f1f3e9d6ca Fix support for building with CMake and MinGW. 2020-05-02 13:25:11 +08:00
Max Lv 597ceec262 Merge pull request #2697 from hxzh/master 
Add ss-manager read manager_address argurment from config file
 2020-05-02 12:49:02 +08:00