Skip to content

Commit

Permalink
v1.2.0 (slackhq#215)
Browse files Browse the repository at this point in the history
Add descriptions for all commits since v1.1.0
  • Loading branch information
wadey authored Apr 8, 2020
1 parent 4f6313e commit fb252db
Showing 1 changed file with 66 additions and 9 deletions.
75 changes: 66 additions & 9 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,20 +7,76 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

## [1.2.0] - 2020-04-08

### Added

- Add `logging.timestamp_format` config option. The primary purpose of this
change is to allow logging timestamps with millisecond precision. (#187)

- Support `unsafe_routes` on Windows. (#184)

- Add `lighthouse.remote_allow_list` to filter which subnets we will use to
handshake with other hosts. See the example config for more details. (#217)

- Add `lighthouse.local_allow_list` to filter which local IP addresses and/or
interfaces we advertise to the lighthouses. See the example config for more
details. (#217)

- Wireshark dissector plugin. Add this file in `dist/wireshark` to your
Wireshark plugins folder to see Nebula packet headers decoded. (#216)

- systemd unit for Arch, so it can be built entirely from this repo. (#216)

### Changed

- Added a delay to punching via lighthouse signal to deal with race conditions in some linux conntrack implementations.
- Added a delay to punching via lighthouse signal to deal with race conditions
in some linux conntrack implementations. (#210)

See deprecated, this also adds a new `punchy.delay` option that defaults to `1s`.

- Validate all `lighthouse.hosts` and `static_host_map` VPN IPs are in the
subnet defined in our cert. Exit with a fatal error if they are not in our
subnet, as this is an invalid configuration (we will not have the proper
routes set up to communicate with these hosts). (#170)

- Use absolute paths to system binaries on macOS and Windows. (#191)

- Add configuration options for `handshakes`. This includes options to tweak
`try_interval`, `retries` and `wait_rotation`. See example config for
descriptions. (#179)

- Allow `-config` file to not end in `.yaml` or `yml`. Useful when using
`-test` and automated tools like Ansible that create temporary files without
suffixes. (#189)

- The config test mode, `-test`, is now more thorough and catches more parsing
issues. (#177)

- Various documentation and example fixes. (#196)

- Improved log messages. (#181, #200)

- Dependencies updated. (#188)

See deprecated, this also adds a new `punchy.delay` option that defaults to `1s`


### Deprecated

- `punchy`, `punch_back` configuration options have been collapsed under the now top level `punchy` config directive.
- `punchy`, `punch_back` configuration options have been collapsed under the
now top level `punchy` config directive. (#210)

`punchy.punch` - This is the old `punchy` option. Should we perform NAT hole
punching (default false)?

`punchy.respond` - This is the old `punch_back` option. Should we respond to
hole punching by hole punching back (default false)?

### Fixed

- Reduce memory allocations when not using `unsafe_routes`. (#198)

- Ignore packets from self to self. (#192)

`punchy.punch` - This is the old `punchy` option. Should we perform NAT hole punching (default false)?

`punchy.respond` - This is the old `punch_back` option, Should we respond to hole punching by hole punching back (default false)?
- MTU fixed for `unsafe_routes`. (#209)

## [1.1.0] - 2020-01-17

Expand Down Expand Up @@ -62,6 +118,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

- Initial public release.

[Unreleased]: https://github.com/slackhq/nebula/compare/v1.1.0...HEAD
[Unreleased]: https://github.com/slackhq/nebula/compare/v1.2.0...HEAD
[1.2.0]: https://github.com/slackhq/nebula/releases/tag/v1.2.0
[1.1.0]: https://github.com/slackhq/nebula/releases/tag/v1.1.0
[1.0.0]: https://github.com/slackhq/nebula/releases/tag/v1.0.0

0 comments on commit fb252db

Please sign in to comment.