chore(sync): keep upstream source up-to-date #145
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
⏳ dae-wing (origin/main) is currently out-of-sync to dae (origin/main); changes are proposed by @dae-prow-robot in actions - https://github.com/daeuniverse/dae-wing/actions/runs/8589046299
#494 - fix: shoot ipv6 icmp redirects
PR: daeuniverse/dae#494
Context:
In the commits of v0.5-v0.6, lan_egress was removed, resulting in icmpv6 redirect packets not being dropped, which forces some users (旁路由用户) to use MASQUERADE.
This PR fixed it.
#493 - feat: support to maintain udp conn state
PR: daeuniverse/dae#493
Context:
In the past, the eBPF program did not track UDP connections, which resulted in us needing to explicitly add the UDP listen port to the whitelist in routing, which was inelegant.
In this PR, we introduced bpf_timer to maintain the connection state of UDP to solve this problem.
By default, the UDP connection timeout is 300s.
Notice: Kernel version
>= 5.15
is required to use bpf_timer, thus the requirement for wan proxy is increased.#495 - fix: cannot use must in bracket in fallback
PR: daeuniverse/dae#495
Context:
The above two cases should be equivalent, but one of them panics by mistake. This PR fixes this problem.
#496 - fix: Don't enable net.ipv6.conf.all.forwarding
PR: daeuniverse/dae#496
Context:
undefined
#500 - docs(readme): remove unnecessary lines
PR: daeuniverse/dae#500