aboutsummaryrefslogtreecommitdiff
path: root/net/shadowsocks-libev/files/shadowsocks-libev.init
Commit message (Collapse)AuthorAge
* shadowsocks-libev: ACL supportKirill Fertikov2023-04-23
| | | | | | | Link: https://github.com/openwrt/packages/pull/20647 Signed-off-by: Kirill Fertikov <kirill.fertikov@gmail.com> [indentation fix] Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: ss-rules: nft rule cleanup on reloadYousong Zhou2022-08-11
| | | | | | | | | Remove nft rules file generated by ss-rules if ss-rules was or should be turned off for by configuration. Use "fw4 restart" instead of "fw4 reload" to force the runtime rule reloading Ref: https://github.com/openwrt/packages/pull/17937#issuecomment-1207357037 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: fix compat issue with newer version of ucodeYousong Zhou2022-04-28
| | | | | | Link: https://github.com/openwrt/packages/issues/18393 Reported-by: Huangbin Zhan <zhanhb88@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: add nft_tcp_extra/nft_udp_extra optionsZhong Jianxin2022-03-07
| | | | | | | | | | | | | | | | | To add extra statement to tcp/udp forward rule, example: ``` config ss_rules 'ss_rules' ... option nft_tcp_extra 'tcp dport { 80, 443 }' # tcp only forward connections with dport 80 or 443 option nft_udp_extra 'udp dport { 53 }' # udp only forward connections with dport 53 ``` This somewhat restores the old ipt_args functionality. Signed-off-by: Zhong Jianxin <azuwis@gmail.com> Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com> (Amend README.md a bit)
* shadowsocks-libev: convert to using nftYousong Zhou2022-03-01
| | | | | | | | | | | | | | | It will be mostly implemented with ucode templates installed at /usr/share/ss-rules and called from init script. The generated nftables rules will be stored at /etc/nftables.d/ Incompatible changes were introduced as described in the README.md file - Netfilter ipset was replaced with nftables sets - UCI options ipt_args and dst_forward_recentrst of section ss_rules are now deprecated. The former does not apply to nftables. The later not yet implemented with nftables. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: support ss-server option local_{ipv4,ipv6}_addressYousong Zhou2020-08-03
| | | | | | | | | | | | | | | | At the moment ss-server seems to be the only component using these two options. It also accepts "local_address" of either ip4 or ip6 address, but the meaning is different from that of ss-local, ss-tunnel etc. where it is for listen bind With this commit, we start deprecation process of uci option "bind_address". The name was replaced with "local_addr" in upstream project commit 5fa98a66 ("Fix #1911") and available as json config option "local_address". This upstream change was released in 3.2.0 Link: https://github.com/shadowsocks/shadowsocks-libev/commit/4a42da641b6e0039497998614e84c94205939c24 Link: https://github.com/openwrt/packages/issues/12931 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: move plugin options to server sectionYousong Zhou2019-05-09
| | | | | | | | | | | | | | Plugin options are properties of shadowsocks deployment as a whole, including both server and each client components. Multiple client instances accessing the same server will need to share the same plugin settings With this change, plugin options will need to specified to "server" and "ss-server" section, not to each component section. Fixes: c19e949 ("shadowsocks-libev: add plugin options support") Reference: https://github.com/openwrt/packages/issues/8903#issuecomment-489674137 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: add plugin options supportYousong Zhou2019-05-06
| | | | | Reference: https://github.com/openwrt/packages/issues/8903 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: move --no-delay into json config fileYousong Zhou2019-02-19
| | | | | | | It was introduced in 3.1.0 as a command line argument and was part of the json config since 3.1.1 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: use jshn.sh for making json configYousong Zhou2019-02-19
| | | | | | As suggested by Jeffery To in openwrt/packages#8233 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: flush ipv6 ss-rules on service stopYousong Zhou2019-02-16
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: ss-rules: fix flushing ipv6 rulesYousong Zhou2019-02-12
| | | | | | "-6" has to be the first argument Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: flush ss rules on entryYousong Zhou2019-02-11
| | | | | | Fixes issue reported in openwrt/luci#2527 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: ss-rules: add ipv6 supportYousong Zhou2019-01-21
| | | | | | | | | | | | | | | It will require support from ip6tables-mod-nat. The added functionality will be skipped otherwise. For $o_dst_bypass6_, include only address blocks in link [1] whose "Globally Reachable" field are explicitly "False" Closes openwrt/packages#7508 [1] IANA IPv6 Special-Purpose Address Registry, https://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: remove unnecessary curly bracesYousong Zhou2018-02-02
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: bump to version 3.1.3Yousong Zhou2018-02-02
| | | | | | | | | | | | | Notable changes since 3.1.2 afce1b3 eliminate timered delay between handshake and data stream #1572 539bf6e sni in redir removed and no disable_sni option #1876 1d94442..29ff5d3 udprelay fix (no idea what's the problem...) #1883 Now disable_sni=true is the default. Existing uci configs setting it will be a nop Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: remove option manager_addressYousong Zhou2018-01-04
| | | | | | | | It's an option that is supposed to be fed by ss-manager. It can be in the form of host:port or path to unix dgram socket. Drop it now with the assumption that it has no real user at the moment Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: new option no_delayYousong Zhou2018-01-02
| | | | | | | | | --no-delay is a new cmdline argument introduced in 3.1.0 to NOT turn off TCP_NODELAY socket option, i.e. keeping it's default value without setting it explicitly. This can be potentially useful for interactive traffics Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: minor tweak without functional changeYousong Zhou2017-09-14
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: shorten init script by 2 linesYousong Zhou2017-08-30
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: fix validation of list optionYousong Zhou2017-08-30
| | | | | | | | | | ubox 'list' type is for validating multiple elements separated by tabs/whitespaces in a single value. E.g. The following should not be accepted list src_ip_bypass '1.2.3.4 4.3.2.1' Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: ss-rules: new bool option --dst-forward-recentrstYousong Zhou2017-08-22
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: rewrite ss-rulesYousong Zhou2017-08-20
| | | | | | | | | | | | - New UCI options ifnames, dst_default - UCI options src_ips_xxx now accept cidr as their values - Export ipset names as part of the interface so that it can be depended on and used by other programs - Bypass only remote servers used ss-redir instances, so that it's possible to let other servers to go through existing re-redir instances Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: Update AEAD cipher names.Leong Hui Wong2017-08-19
| | | | Signed-off-by: Leong Hui Wong <wong.leonghui@gmail.com>
* shadowsocks-libev: setting mode with default value tcp_onlyYousong Zhou2017-08-13
| | | | | | | | This is the default value taken by ss-server and ss-redir. After this change ss_rules section can still use those ss-redir instances who do not have mode explicitly specified. Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: support disable_sni for ss_server sectionYousong Zhou2017-08-04
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: add ipv6_first option supportYousong Zhou2017-08-02
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: fix cases where passwords contain dquoteYousong Zhou2017-07-24
| | | | Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: validate bool with default value 0Yousong Zhou2017-07-23
| | | | | | | | | | | | | | | | | | | | | The change is mainly for keeping compatibility with old validate_data before ubox commit ac481cdd999ee84d3f115c33a56397237e95ec64 in Sat Jul 16 14:52:36 2016 +0200. The behaviour change comes with that commit can be seen with the following command line session root@LEDE:/usr/bin# validate_data network interface wan 'disabled:bool:false' network.wan.disabled is unset and defaults to bool false disabled=0; root@LEDE:/usr/bin# root@OpenWrt:/# validate_data network interface lan 'disabled:bool:false' disabled='false'; root@OpenWrt:/# This will cause shadowsocks-libev in current master branch fail on OpenWrt 15.01 though they actually should only use packages from the 15.01 branch... Fixes openwrt/packages#4614 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: rewriteYousong Zhou2017-07-02
| | | | | | | | | | | | | | | | | | - Selecting only a single or subset of all components of shadowsocks-libev is now possible (this is the main motivation behind the rewrite) - Configuring multiple instances of the same component is now also possible - Same option names as with the json config - Unified configuration generation method for each component - Add support for ss-local, ss-tunnel, ss-server - Most data validation is now done with validate_data - USE_PROCD=1 - Update ss-rules with the one from shadowsocks/luci-app-shadowsocks - Add README.md - Set myself as the maintainer Addresses #4435 Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* shadowsocks-libev: bump versionJian Chang2015-07-22
| | | | | | | Fix the multiple UDP source port issue. Allow using different IP and ports for TCP and UDP Signed-off-by: Jian Chang <aa65535@live.com>
* shadowsocks-libev: add packageaa655352015-07-03
Shadowsocks-libev is a lightweight secured socks5 proxy for embedded devices and low end boxes. Signed-off-by: aa65535 <aa65535@live.com>
Powered by cgit, Themed by Ted Yin.