Commit Graph
232 Commits
Author SHA1 Message Date
Your Name 9af3023a37 dsa 2025-12-08 01:41:08 +03:00
Domingo Dirutigliano 16f96aa6f6 using brotli 1.2 from pypi, fixed tests to py 3.14, removed from experimental pyproxy 2025-11-11 23:30:48 +01:00
Domingo Dirutigliano 49c6c14fe5 upgrade to py3.14 and fedora 43 2025-10-13 15:38:38 +02:00
Domingo Dirutigliano f554ac558a additional fixes to socket binding 2025-10-01 15:37:20 +02:00
Minei3oat 88f4f54b55 Allow binding to UNIX domain socket
UNIX domain sockets are the recommended configuration for proxying with Nginx:
https://uvicorn.dev/deployment/#running-behind-nginx
2025-10-01 01:49:28 +02:00
Domingo Dirutigliano 2362eb8045 password hashing customized and also set already hashed by run.py 2025-09-29 14:33:12 +02:00
Domingo Dirutigliano aeb97062e2 bind firegex also on ipv6 by default 2025-09-29 13:15:09 +02:00
Domingo Dirutigliano 402be8c021 new crypto system for passwords, removed bcrypt 2025-09-29 12:53:05 +02:00
Domingo Dirutigliano 2798cd4f2a Merge pull request #25 from Minei3oat/bcrypt
Restrict bcrypt version to <5
2025-09-29 00:03:27 +02:00
Minei3oat 907c85d85d Add Content-Type=plain/text for metrics endpoint
Without the content type, prometheus will reject the metrics if no `fallback_scrape_protocol` is specified.

https://prometheus.io/docs/prometheus/3.0/migration/#scrape-protocols
https://prometheus.io/docs/instrumenting/exposition_formats/#text-based-format
2025-09-28 21:09:25 +02:00
Minei3oat 709de42ef2 Restrict bcrypt version to <5
Starting with version 5.0.0, bcrypt will throw a ValueError if the input is more than 72 bytes.
passlib's `hash` processes the input such that more than 72 bytes are passed to bcrypt, independently of the input length.
As a result, the backend of firegex breaks when calculating the hash in `set_psw`.
2025-09-28 20:43:46 +02:00
Domingo Dirutigliano 89b234e670 Pointed to a specific brotli version on google repo due to a tmp rollback 2025-09-15 10:19:31 +02:00
Domingo Dirutigliano 8d78c5df6a using brotli version from google (merged from domysh/brotli) 2025-09-04 17:29:39 +02:00
Domingo Dirutigliano 760529e37a firegex custom host and better port config managment 2025-08-17 16:23:49 +02:00
Domingo Dirutigliano b49c42f06f fixed: packet size of mnl including packet size it-self (was causing crash sometime) and frontend updates 2025-07-28 15:45:22 +02:00
Domingo Dirutigliano d7f6eb7524 using name and id as pk for PyFilter when updating stats 2025-06-13 13:33:13 +02:00
Domingo Dirutigliano ac1b2c9f76 removed constraint to prothijack 2025-05-05 19:11:21 +02:00
Domingo Dirutigliano a109ee8067 websocket fix + starting firegex as root if capsh fails 2025-04-12 22:15:08 +02:00
Domingo Dirutigliano ed85aa5430 changing prio on nf chains 2025-04-12 21:44:02 +02:00
Domingo Dirutigliano 129a262704 RST docs + connection error on test 2025-04-12 20:34:45 +02:00
Domingo Dirutigliano d0b2c67554 Revert "using also bridge table on network hooking"
This reverts commit 33b22a174c.
2025-04-12 20:32:52 +02:00
Domingo Dirutigliano 33b22a174c using also bridge table on network hooking 2025-04-12 16:51:42 +02:00
Domingo Dirutigliano c0a475a92f using RST flag for closing connection 2025-04-12 12:50:22 +02:00
Domingo Dirutigliano d4b2b6c72d niceness on firegex process 2025-03-26 22:25:09 +01:00
Domingo Dirutigliano 8ddd8b44f2 pyhton and c related fixes on empty filters and mangling 2025-03-24 11:55:51 +01:00
Domingo Dirutigliano 81fb48c97c minor code change 2025-03-23 11:04:30 +01:00
Domingo Dirutigliano 25d71c4b94 README: update 2025-03-09 23:52:34 +01:00
Domingo Dirutigliano 73c40d2f5d data handler improves, written test for nfproxy, new option on parsing fail 2025-03-09 22:14:34 +01:00
Domingo Dirutigliano 8a271da839 fixed mangle 2025-03-07 22:14:03 +01:00
Domingo Dirutigliano 9eb7d5461f added checks and changed prio 2025-03-07 18:16:23 +01:00
Domingo Dirutigliano eda44f12ff Merge pull request #19 from Pwnzer0tt1/tmp-meta-branch
Taken edits from main removing edits of regexfilter.cpp
2025-03-05 10:06:23 +01:00
Domingo Dirutigliano 5a523817cc Update regexfilter.cpp 2025-03-05 10:04:28 +01:00
Domingo Dirutigliano 6e07933b37 Merge pull request #18 from Minei3oat/fix_metrics
Fix metrics & add tests
2025-03-05 09:58:21 +01:00
Domingo Dirutigliano c90d817ad4 cli command with proxy simulation 2025-03-04 15:51:46 +01:00
Domingo Dirutigliano fde3ee57a5 crash and unexpected behaviours fix 2025-03-03 23:55:24 +01:00
Domingo Dirutigliano 072745cc06 code push 2025-03-03 20:25:36 +01:00
Domingo Dirutigliano 8ae533e8f7 push: code changes x2 2025-02-28 21:14:09 +01:00
Domingo Dirutigliano 6a11dd0d16 push: code changes 2025-02-25 23:53:04 +01:00
Domingo Dirutigliano 7cc005dfb2 TCP packet used in matching fixed 2025-02-25 11:18:30 +01:00
Minei3oat 26a2428512 Fix metrics endpoint 2025-02-25 00:59:58 +01:00
Domingo Dirutigliano 8652f40235 nfproxy module writing: written part of the firegex lib, frontend refactored and improved, c++ improves 2025-02-20 19:51:28 +01:00
Domingo Dirutigliano e5973947e6 test on settings API added + improves on nfproxy code including fail-open 2025-02-18 23:49:53 +01:00
Domingo Dirutigliano 5ef38df66a regex checked by hyperscan directly with error messages 2025-02-18 21:20:19 +01:00
Domingo Dirutigliano 59652fc697 optional nfqueue fail-open option 2025-02-18 17:36:15 +01:00
Domingo Dirutigliano ece058d533 firewall fix, preparing for minor release 2025-02-18 14:37:11 +01:00
Domingo Dirutigliano 5a1e1bc225 less copy and less lock 2025-02-17 13:07:06 +01:00
Domingo Dirutigliano 7f7e3353ec User-Space thread balancing + refactoring 2025-02-16 16:33:34 +01:00
Domingo Dirutigliano 63e7f73139 Re-structuring on new model 2025-02-14 01:04:29 +01:00
Domingo Dirutigliano 2fb77a348f removed fastapi_socketio + general improves 2025-02-12 01:16:10 +01:00
Domingo Dirutigliano f3ba6dc716 more RESTful APIs 2025-02-11 19:11:30 +01:00