cf7337eddf
Update utils.c
2 years ago
d61d09aa0c
Detect kernel support for MPTCP at runtime
2 years ago
8bcffa54b5
fix check for return value of open when redirecting to null device
3 years ago
4bbbe212eb
Add support of nftables firewall
The change is to support the 'fail2ban' feature. Instead of
blocking IPs by server itself, server just add malicious IPs
to specified sets of nftables. So admin can configure rules
to deal with those IPs.
Notes: cap_net_admin capability is required.
Example configuration:
# nft add table ip fail2ban
# nft add chain ip fail2ban input { type filter hook input priority 0 \; }
# nft add set ip fail2ban badips { type ipv4_addr \; flags dynamic, timeout \; timeout 1h \; }
# nft add rule ip fail2ban input ip saddr @badips drop
# ss-server -c config.json --nftables-sets badips
3 years ago
36d9993bbf
Add --tcp-incoming-rcvbuf and --tcp-outgoing-rcvbuf which allow precise control over TCP receive buffers.
4 years ago
5617841694
Add --tcp-incoming-sndbuf and --tcp-outgoing-sndbuf which allow precise control over TCP send buffers.
- This is very useful in advanced scenarios such as ss-redir or chaining of servers using TPROXY
to avoid bufferbloat-like performance degradation due to default large buffers of OS.
4 years ago
78784507f1
add `tcp_tproxy` option, use tproxy instead of redirect (tcp)
4 years ago
af722a4b92
Fix a tiny memory leak
5 years ago
03fb8c9f74
Revert "Add option '--long-idle' for server"
This reverts commit b4cda9dd42
5 years ago
b4cda9dd42
Add option '--long-idle' for server
Restore the default behavior handling timeout, make an option to enable
long idle connections.
Previously discussion:
https://github.com/shadowsocks/shadowsocks-libev/pull/2421
https://github.com/shadowsocks/shadowsocks-libev/issues/2427
5 years ago
64b97cd9a3
Clean up
5 years ago
f0205e7f13
Refine the helper function
5 years ago
7bd382042b
bump copyright year
6 years ago
333e98dc86
Redirect standard fd to /dev/null by default
6 years ago
85b190372b
Fix the ss_free macros
6 years ago
782311ad2b
Refine ss_align interfaces
6 years ago
fbb311ed06
Use _aligned_free for MinGW
6 years ago
4fb34de463
Use _aligned_malloc instead
6 years ago
ba930dcca7
Fix a compiler warning
6 years ago
d7fe31eae7
Refine ss_align for MinGW32
6 years ago
e5d8476afe
Update docs
6 years ago
1c1570b28c
Ensure 16-byte alignment. Fix #2233
6 years ago
569570cfa9
Fix #2215
6 years ago
dd5e954ab4
Clean up
6 years ago
95c1dba176
Update utils.c
6 years ago
d88345fa46
Fix of PATH_MAX for GNU/Hurd
Memory of userconf in src/utils.c:get_default_conf() only gets allocated
once, and will not be freed. It's used as static buffer.
This can avoid using PATH_MAX, which actually doesn't exist on certain
platforms.
Info:
- https://www.gnu.org/software/hurd/community/gsoc/project_ideas/maxpath.html
- https://www.gnu.org/software/hurd/hurd/porting/guidelines.html#PATH_MAX_tt_MAX_PATH_tt_MAXPATHL
7 years ago
8fd83e2686
Use chacha20-ietf as a default cipher instead of rc4-md5 ( #2080 )
* Use chacha20-ietf as a default cipher instead of rc4-md5
* Update tunnel.c
* Update utils.c
* Update ss-local.asciidoc
* Update ss-local.asciidoc
* Update tunnel.c
* Update ss-tunnel.asciidoc
* Update ss-manager.asciidoc
* Update ss-redir.asciidoc
* Update shadowsocks-libev.asciidoc
* Update aead.c
* Update local.c
* Update server.c
* Update utils.c
7 years ago
2ed8791dab
Re-add support for MinGW
7 years ago
eb501b70c7
Oops.. Remove useless code.
7 years ago
2a3d3bc13c
Remove pointless optimization in get_default_conf()
7 years ago
3c3c50b4f8
Search XDG_CONFIG_HOME for user-specific config
7 years ago
85a64ae836
Bump version
7 years ago
cc1bb4cf62
format with .uncrustify.cfg ( #1759 )
* format with .uncrustify.cfg
format with .uncrustify.cfg
* format with .uncrustify.cfg
* format with .uncrustify.cfg exclude json.* base64.* uthash.h
* format with .uncrustify.cfg exclude json.* base64.* uthash.h
7 years ago
b721c0fa6d
Update docs for TCP_NODELAY
7 years ago
0e74ea509c
Refine the CLI help text. #1547
7 years ago
490b9cbcdc
Fix #1430
8 years ago
1af0625d01
Fix a building issue
8 years ago
71ff3cff1d
Fix #1306
8 years ago
fda287d76f
Add tcp-fast-open support for ss-redir
8 years ago
bf23fb6ec4
Fix a memory leak
8 years ago
de0cebb62e
Fix a building issue
8 years ago
5b122d4f8c
Fix #1306
8 years ago
8a40e538f8
Add tcp-fast-open support for ss-redir
8 years ago
d434cd20ec
Fix a memory leak
8 years ago
ef0402eb10
Add `--key` option to set key directly ( #1207 )
8 years ago
894eae567c
Refine ciphers
8 years ago
6e0c257bce
Fix help message
8 years ago
7b290f30d6
Make SO_REUSEPORT disabled by default
8 years ago
78cf5348f0
Update documents
8 years ago
4ebe5aeb12
Add SIP004 (AEAD) support
8 years ago
starter48
Maxim Galaganov
Gilles Depeyrot
Aven
Not Sure
zfl9
ideal
Max Lv
lixingcong
Chinsyo
Simon Shi
sxyoxygen
Roger Shimizu
Yegor Ievlev
Linus Yang
ksqsf
星野ハジメ
Max Witten
lqs