Alawn/shadowsocks-libev
1
0
Fork 0
mirror of https://github.com/shadowsocks/shadowsocks-libev.git synced 2026-10-30 13:13:44 +00:00
Code Releases Activity
2,381 Commits 83 Branches 86 Tags
9c8dddde141e45bcada85348773754e022c5fb9c
Commit Graph
201 Commits
Author SHA1 Message Date
DDoSolitary 05e70d4317 fix c-ares link dep 2022-06-26 06:22:56 +08:00
Aven 4bbbe212eb Add support of nftables firewall 
The change is to support the 'fail2ban' feature. Instead of
blocking IPs by server itself, server just add malicious IPs
to specified sets of nftables. So admin can configure rules
to deal with those IPs.

Notes: cap_net_admin capability is required.

Example configuration:
 # nft add table ip fail2ban
 # nft add chain ip fail2ban input { type filter hook input priority 0 \; }
 # nft add set ip fail2ban badips { type ipv4_addr \; flags dynamic, timeout \; timeout 1h \; }
 # nft add rule ip fail2ban input ip saddr @badips drop
 # ss-server -c config.json --nftables-sets badips
 2021-07-01 12:05:39 +08:00
Fabrice Fontaine 7e5922aa44 configure.ac: use pkg-config to find netfilter_conntrack 
Use pkg-config to retrieve the dependencies of netfilter_conntrack
and avoid the following build failure when building statically:

configure:13096: /data/buildroot-test/instance-1/output-1/host/bin/x86_64-linux-gcc -o conftest -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -Os   -static -I/data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/include -DPCRE_STATIC -pthread -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64  -static -L/data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/lib conftest.c -lnetfilter_conntrack -lnfnetlink -lev  -lcares -lsodium -lmbedcrypto -lpcre  >&5
/data/buildroot-test/instance-1/output-1/host/opt/ext-toolchain/bin/../lib/gcc/x86_64-buildroot-linux-uclibc/8.3.0/../../../../x86_64-buildroot-linux-uclibc/bin/ld: /data/buildroot-test/instance-1/output-1/host/x86_64-buildroot-linux-uclibc/sysroot/usr/lib/libnetfilter_conntrack.a(api.o): in function `nfct_fill_hdr.constprop.4':
api.c:(.text+0x3f): undefined reference to `mnl_nlmsg_put_header'

Fixes:
 - http://autobuild.buildroot.org/results/6cad497a7ab941a0ee3fd7007defc81e30cdcbe0

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2021-03-11 12:20:18 +08:00
Max Lv 8285e5a7de Bump version 2020-09-15 10:30:48 +08:00
Max Lv 72d7d9217c Bump version 2020-01-10 09:48:42 +08:00
Max Lv e2765847cc Bump version 2019-10-31 15:16:05 +08:00
Max Lv 346ab1be47 Bump version 2019-10-12 15:20:52 +08:00
Max Lv 615588bd39 Bump version 2019-08-09 15:17:53 +08:00
Max Lv ffad914ddd Bump version 2019-06-08 08:01:47 +08:00
Max Lv b0c6ba4945 Bump version 2019-03-09 19:07:22 +08:00
Max Lv c9159fc927 Bump version 2019-02-26 12:33:30 +08:00
Fabrice Fontaine 9b4aebc840 configure.ac: fix static build with netfilter_conntrack 
Fixes:
 - http://autobuild.buildroot.org/results/22a28e8fd8182e1c908541dbc5b0ee087c3803e6

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
 2019-01-18 21:10:15 +01:00
Max Lv 545c04182f Bump version 2018-11-28 00:48:15 -08:00
Max Lv c8ea784ded Bump version 2018-11-26 21:04:24 -08:00
Max Lv 2e7d7a60c4 Merge pull request #2228 from sduponch/configure 
configure: Fix --disable-connmarktos option behaviour
 2018-11-21 20:37:29 +08:00
DUPONCHEEL Sébastien 92fabdaba0 configure: Fix --disable-connmarktos option behaviour 
Signed-off-by: DUPONCHEEL Sébastien <sebastien.duponcheel@corp.ovh.com>
 2018-11-21 11:38:02 +01:00
Max Lv b9ed8da571 Bump version 2018-11-07 22:46:20 -08:00
Max Lv 8c98bdecac Bump version 2018-05-28 19:55:12 -07:00
Max Lv 380cb81234 Revert "Create srpm and rpm targets to the Autotools build" 
This reverts commit 395515d1f7.
 2018-05-08 15:26:39 +08:00
Yuxiang Zhu 395515d1f7 Create srpm and rpm targets to the Autotools build 
The new `srpm` target can be handled by Fedora Copr for
automated builds. A `rpm` target is also added for alignment.
 2018-05-04 18:12:49 +08:00
Linus Yang f4c612f832 Support TCP fast open on Windows 2018-03-09 17:46:38 +08:00
Linus Yang 2ed8791dab Re-add support for MinGW 2018-03-08 17:26:11 +08:00
Max Lv 85a64ae836 Bump version 2018-01-15 17:25:03 -08:00
Max Lv cba94db423 Bump version 2017-12-28 21:09:40 -08:00
Max Lv 2cad381036 Refine TFO in redir and server mode 2017-11-26 14:32:26 +08:00
Max Lv 82198aece8 Bump version 2017-11-20 12:22:43 +08:00
Max Lv 10a2d3e3cd Fix #1693 2017-09-19 09:09:58 +08:00
Max Lv 69c41d9752 Bump version 2017-09-14 19:31:13 -07:00
Max Lv 04f419470a Fix #1659 2017-09-07 15:25:43 +08:00
Max Lv ede744ae7c Add c-ares support (#1655) 
* Replace udns with c-ares

* Get IO loop work

* Clean up

* Avoid initializing nameservers each query

* Add ARES_OPT_SERVERS

* Refine resolv_cancel

* Fix a memory leak

* Replace udns.h with ares.h

* Fix all inet_* fucntions

* Clean up

* Enable servers_ports when VERSION_MINOR >= 11

* Avoid ares_inet_XtoX

* Handle multipe nameservers correctly

* Use ares_set_servers for IPv4 and IPv6 mixed list

* Refine c-ares for udprelay

* Refine ares_set_servers()

* Refine the timer based on ares_timeout

* Avoid resolv_cancel

* Fix an issue of null pointer

* Fix another null pointer issue

* Refine the order of resolv_shutdown

* Fix the corrupted ev io
 2017-08-31 09:16:07 +08:00
Max Lv f1dd1354a9 Bump version 2017-07-27 11:22:27 +08:00
Max Lv c11b2c08e4 Bump version 2017-06-27 14:17:53 +08:00
Max Lv bc96aed3b0 Bump version 2017-04-26 15:02:56 +08:00
Max Lv 48f5a3bec8 Bump version 2017-03-21 13:56:13 +08:00
Syrone Wong 1e91b6a1f6 On Linux, warn when we are running low on entropy 
Based on https://github.com/jedisct1/dnscrypt-proxy/commit/a255d2908305739b54dafb01ae0285f6016869ab

Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
 2017-03-19 17:16:19 +08:00
Max Lv b725d575f2 Bump version 2017-03-16 14:21:11 +08:00
Felix Yan 0334e73c2b Use system libbloom on USE_SYSTEM_SHARED_LIB 2017-03-09 12:48:46 +08:00
zhou0 64d9eaf082 remove AC_PROG_LIBTOOL 
with LT_INIT, AC_PROG_LIBTOOL is not needed.
 2017-03-09 12:48:25 +08:00
Sebastien DUPONCHEEL 06c15057e5 ss-server: append --enable-connmarktos option to configure and check for libnetfilter-conntrack dependency if enabled 2017-03-08 13:58:28 +08:00
Max Lv 5b122d4f8c Fix #1306 2017-02-27 13:37:07 +08:00
Max Lv 661429e579 Bump version 2017-02-24 12:16:20 +08:00
Max Lv 44b0eae3ef Fix #1291 2017-02-23 09:35:12 +08:00
Max Lv b655fb2b8f Replace nonce cache with a ping-pong bloom filter (#1282) 
* Add Ping-Pong bloom filter

* Refine bloom filter insertion

* Reduce the error rate to 0.00001

* Avoid alignment issue in murmurhash2

* Fix a memory leak

* Fix build on non-GPU targets

* Detect get_current_dir_name in configure

* Update README.md

* Remove redudant bfree()

* Reduce the memory usage for local client

* Fix #1275

* Refine #1275

* Use IP when bypassing SNI domains

* Also apply replay detector on UDP traffic

* Update deb build script

Now build script is able to auto detect system and choose libraries
necessary to build.

Also update the README accordingly.

* Update build script to enable jessie/stretch etc

Also include a few cleanup that simplified pkg installation from
backports repository.
 2017-02-20 10:29:32 +08:00
Max Lv dddbfd2284 Detect get_current_dir_name in configure 2017-02-17 13:29:44 +08:00
Max Lv 72f6041a7c Add USE_SYSTEM_SHARED_LIB check in configure 2017-02-13 21:32:46 +08:00
Max Lv 46fa5de9e4 Bump version 2017-02-13 09:13:16 +08:00
Max Lv fdb1f190f8 Bump version 2017-02-07 13:30:18 +08:00
Max Lv df595fcb73 Fix #1168 2017-02-02 20:27:06 +08:00
Max Lv 4d25f176b6 Bump version 2017-02-01 19:18:12 +08:00
Max Lv 4ebe5aeb12 Add SIP004 (AEAD) support 2017-01-29 10:10:44 +08:00