aboutsummaryrefslogtreecommitdiff
path: root/net
Commit message (Collapse)AuthorAge
...
* | Merge pull request #21496 from Ansuel/add-mtoolsJosef Schlehofer2023-07-07
|\ \ | | | | | | net-mtools: Add new package to debug multicast setups
| * | net-mtools: Add new package to debug multicast setupsChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add new package to debug multicast setups. This is required to use kselftests script for network testing. net-mtools is used instead of mtools as it does conflicts with another package that is also called mtools. Some additional patch from Vladimir Oltean are added to make the tool works on kernel selftests scripts. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: don't install all module for FULL variantChristian Marangi2023-07-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We currently have a more or less circular dependency with nginx ssl and full variant. FULL variant depends on every nginx module. Every nginx module depends on nginx-ssl. Since nginx-full depends on an nginx module, nginx-ssl is installed as module depends on it and then the installation fails as nginx-full conflicts with nginx-ssl. nginx-full in it's meaning is nginx built with every config selected and it should not have module as dependency. In fact an user should always install them separetly as while other things, local modification to the nginx config file are required to include the just installed module. To fix this circular dependency problem, drop the dependency of every nginx module for FULL variant. Fixes: #21300 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add quic modueTiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | This commit adds support for http/3. This is an experimental version and isn't fully supported because nginx is being built with the regular OpenSSL and the regular one doesn't support quic. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com>
* | | nginx: update to 1.25.1Tiago Gaspar2023-07-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update nginx to 1.25.1. *) Feature: the "http2" directive, which enables HTTP/2 on a per-server basis; the "http2" parameter of the "listen" directive is now deprecated. *) Change: HTTP/2 server push support has been removed. *) Change: the deprecated "ssl" directive is not supported anymore. *) Bugfix: in HTTP/3 when using OpenSSL. Signed-off-by: Tiago Gaspar <tiagogaspar8@gmail.com> [ improve commit title and add nginx changelog ] Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | | nginx: add support for MaxMind GeoIP2 databasesJavier Marcet2023-07-05
| | | | | | | | | | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* | | haproxy: update to v2.8.1Christian Lachner2023-07-05
| | | | | | | | | | | | | | | | | | | | | - Update haproxy PKG_VERSION and PKG_HASH - See changes: http://git.haproxy.org/?p=haproxy-2.8.git;a=shortlog Signed-off-by: Christian Lachner <gladiac@gmail.com>
* | | rclone: Update to 1.63.0Tianling Shen2023-07-04
| | | | | | | | | | | | | | | | | | While at it fixed a typo error of license files variable. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | dnsproxy: Update to 0.51.0Tianling Shen2023-07-03
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | sing-box: update to 1.3.0Van Waholtz2023-07-01
| | | | | | | | | | | | Signed-off-by: Van Waholtz <brvphoenix@gmail.com>
* | | netbird: update to 0.21.7Salem Huang2023-07-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Release notes: https://github.com/netbirdio/netbird/releases/tag/v0.21.2 https://github.com/netbirdio/netbird/releases/tag/v0.21.3 https://github.com/netbirdio/netbird/releases/tag/v0.21.4 https://github.com/netbirdio/netbird/releases/tag/v0.21.5 https://github.com/netbirdio/netbird/releases/tag/v0.21.6 https://github.com/netbirdio/netbird/releases/tag/v0.21.7 2. Update GO_PKG_LDFLAGS, because of https://github.com/netbirdio/netbird/commit/292ee260ad564d1e65199b1cb3430b0cd7ba9646 3. Define the configuration file. Signed-off-by: Salem Huang <solohoh@hotmail.com>
* | | inadyn: update to 2.11.0Robert Högberg2023-07-01
| | | | | | | | | | | | Signed-off-by: Robert Högberg <robert.hogberg@gmail.com>
* | | strongswan: Update to 5.9.11Philip Prindeville2023-06-30
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | adblock: update to 4.1.5-8Dirk Brenken2023-06-30
| | | | | | | | | | | | | | | | | | * adapt adguard_tracking source changes Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | coova-chilli: fix kernel >= 5.17 compileJohn Thomson2023-06-29
| | | | | | | | | | | | Signed-off-by: John Thomson <git@johnthomson.fastmail.com.au>
* | | snort3: update to 3.1.64.0John Audia2023-06-30
|/ / | | | | | | | | | | Upstream bump Signed-off-by: John Audia <therealgraysky@proton.me>
* | netsniff-ng: backport patch fixing wrong args handling with muslChristian Marangi2023-06-29
| | | | | | | | | | | | | | | | Backport a patch from upstream fixing wrong args handling with musl. Before this patch non args must be passed at the end of the command due to a musl limitation. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* | Merge pull request #21410 from pprindeville/isc-dhcp-dont-require-poolsPhilip Prindeville2023-06-27
|\ \ | | | | | | isc-dhcp: don't require subnet pools
| * | isc-dhcp: don't require subnet poolsPhilip Prindeville2023-06-19
| | | | | | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | | knot: update to version 3.2.8Jan Hák2023-06-26
| | | | | | | | | | | | Signed-off-by: Jan Hák <jan.hak@nic.cz>
* | | bind: bump to 9.18.16Noah Meyerhans2023-06-25
| |/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes CVEs: - CVE-2023-2828: The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. - CVE-2023-2911: A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. The complete list of changes is available in the upstream release notes at https://ftp.isc.org/isc/bind9/cur/9.18/doc/arm/html/notes.html#notes-for-bind-9-18-16 Signed-off-by: Noah Meyerhans <frodo@morgul.net>
* | Merge pull request #21366 from zhanhb/haproxyJeffery To2023-06-24
|\ \ | | | | | | haproxy: update to v2.8.0
| * | haproxy: update to v2.8.0Huangbin Zhan2023-06-23
| | | | | | | | | | | | | | | | | | - New major LTS release (https://www.mail-archive.com/haproxy@formilux.org/msg43600.html) Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* | | banip: update 0.8.8-2Dirk Brenken2023-06-24
|/ / | | | | | | | | | | | | | | * process local lists in strict sequential order to prevent possible race conditions * support ranges in the IP search, too * fix some minor search issues Signed-off-by: Dirk Brenken <dev@brenken.org>
* | vsftpd: fix compilation with musl 1.2.4Tianling Shen2023-06-23
| | | | | | | | | | | | | | | | | | musl 1.2.4 deprecated legacy "LFS64" ("large file support") interfaces so just having _GNU_SOURCE defined is not enough anymore. Manually pass -D_LARGEFILE64_SOURCE to allow to keep using LFS64 definitions. Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | dnsdist: Move the configuration to Config.inRemi Gacogne2023-06-22
| | | | | | | | Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | dnsdist: Split in two packages `dnsdist` and `dnsdist-full`Remi Gacogne2023-06-22
| | | | | | | | | | | | | | | | | | | | `dnsdist-full` has all optional features enabled, but is a big package in term of both flash and memory footprint. `dnsdist` only keeps the features that make the most sense on embeded devices, but can also be customised to match the user's needs, up to the point where it matches `dnsdist-full`. Signed-off-by: Remi Gacogne <remi.gacogne@powerdns.com>
* | linuxptp: Update to 4.0Wojciech Dubowik2023-06-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major changes since version 3.1.1: * Officially supports the 2019 version of IEEE 1588 * Improved unicast messaging * Enhanced G.8275.2 profile * More flexible Pulse Per Second (PPS) handling * Virtual clock support * Power profile support * VLAN over bond support. * Parallel Redundancy Protocol (PRP) trailer handling. * Non-privileged read-only monitoring port. * New statistics reporting. [V2] * reset package release * adapt license name to the new format Signed-off-by: Wojciech Dubowik <Wojciech.Dubowik@westermo.com>
* | Merge pull request #21147 from cottsay/openelpJeffery To2023-06-22
|\ \ | | | | | | openelp: Add new package
| * | openelp: Add new packageScott K Logan2023-06-20
| | | | | | | | | | | | | | | | | | | | | | | | OpenELP is an open source EchoLink proxy for Linux and Windows. It aims to be efficient and maintain a small footprint, while still implementing all of the features present in the official EchoLink proxy. Signed-off-by: Scott K Logan <logans@cottsay.net>
* | | cloudflared: Update to 2023.6.1Tianling Shen2023-06-21
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | banip: release 0.8.8-1Dirk Brenken2023-06-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Support MAC-/IPv4/IPv6 ranges in CIDR notation * Support concatenation of local MAC addresses with IPv4/IPv6 addresses, e.g. to enforce dhcp assignments (see readme) * small fixes & cosmetics * update readme Signed-off-by: Dirk Brenken <dev@brenken.org>
* | | Merge pull request #21378 from TDT-AG/pr/20230615-modemmanagerFlorian Eckert2023-06-21
|\ \ \ | | | | | | | | modemmanager: do not cache virtual device events
| * | | modemmanager: if an alias name is used do not check sysfs pathFlorian Eckert2023-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If an alias name is used for the modem, then a check if the device exists in sysfs does not work. To fix this remove the check if the sysfs device exists. The protocoll handler already checks if the modem is responsible for this device on the next line. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
| * | | modemmanager: do not cache virtual device eventsFlorian Eckert2023-06-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On small systems with many virtual devices, the modem manager sometimes could not start because it took too long until all devices for the modem were recognised. This is because all system events that are stored in the file events.cache have to be processed. To speed up the processing, all devices under /sys/devices/virtual are now filtered out so that they do not have to be processed. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* | | | Merge pull request #21411 from stangri/master-https-dns-proxyStan Grishin2023-06-20
|\ \ \ \ | |_|/ / |/| | | https-dns-proxy: update to 2023-05-25-2
| * | | https-dns-proxy: update to 2023-05-25-2Stan Grishin2023-06-20
| | |/ | |/| | | | | | | | | | | | | | | | bugfix: proper mdns object creation bugfix: prevent fw errors by allowing custom interfaces in config Signed-off-by: Stan Grishin <stangri@melmac.ca>
* | | v2ray-geodata: Update to latest versionTianling Shen2023-06-20
| | | | | | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | | xray-core: update to 1.8.3Tianling Shen2023-06-20
|/ / | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | isc-dhcp: force sending unrequested parametersPhilip Prindeville2023-06-19
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | cloudflared: Update to 2023.6.0Tianling Shen2023-06-19
| | | | | | | | Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* | strongswan: make parsing more consistentPhilip Prindeville2023-06-15
| | | | | | | | Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* | krb5: update to 1.21W. Michael Petullo2023-06-15
|/ | | | Signed-off-by: W. Michael Petullo <mike@flyn.org>
* cloudreve: Update to 3.8.0Tianling Shen2023-06-14
| | | | | | | - Fixed packing web frontend assets - Enabled build for riscv64 Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
* nginx: create empty directory for module.d includeChristian Marangi2023-06-12
| | | | | | | | | Fix a bug on installation of nginx-mod-luci where module.d directory is not found and luci.module creation fails. Correctly create empty directory for module.d include for dynamic module loading by placing file in this directory. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* ddns: Prevent clearing of desec.io entriesBaptiste Fouques2023-06-12
| | | | | | | | | | | When using both ipv4 and ipv6 entries on the same host, ddns is clearing A (or AAAA) record depending on the connection (ipv4 or ipv6). see https://desec.readthedocs.io/en/latest/dyndns/update-api.html#determine-ip-addresses Signed-off-by: Baptiste Fouques <bateast@duck.com> Update comment and bump PKG_RELEASE number. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* tunneldigger: add package for establishing L2TPv3 tunnels over UDPNick Hainke2023-06-12
| | | | | | | | | | | | In the previous commit we already added tunneldigger-broker. Add the corresponding client. This PR is just a refactoring of the already existing opkg package from wlanslovenija [0]. [0] - https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger Signed-off-by: Nick Hainke <vincent@systemli.org>
* tunneldigger-broker: add broker for tunneldiggerNick Hainke2023-06-12
| | | | | | | | | | | | | | | | | | In mesh communities, tunneldigger is widely used to create L2TPv3 tunnels and mesh via them. Since the broker is typically installed on other distributions, the openwrt broker package has not received any maintenance in recent years [0]. I take now care of the further maintaince of this package. Furthermore, I consulted with the maintainers to ensure that they were comfortable with the change [1]. This PR is just a refactoring of the already existing opkg package from wlanslovenija. It fixes config parsing and in general the config, adapts to the new python syntax and fixes dependency handling. - [0] https://github.com/wlanslovenija/firmware-packages-opkg/tree/master/net/tunneldigger-broker - [1] https://github.com/wlanslovenija/firmware-packages-opkg/issues/24 Signed-off-by: Nick Hainke <vincent@systemli.org>
* netavark: update to v1.6.0Oskari Rauta2023-06-12
| | | | | | | | | | | | | netavark v1.6.0 was released, so instead of using git version, use release. Does not contain very much of changes, but list is available from netavark's commit log. Software now comes with additional tool named netavark-dhcp-proxy-client which is now included in package. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* xtables-addons: fix compilation error on kernel 6.1Christian Marangi2023-06-11
| | | | | | | | | | | | | | | | | | | | | | Fix compilation error on kernel 6.1. Fix compilation error: In file included from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/controller.h:24, from /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/xt_LUA_target.c:27: /mnt/Data/Sources/openwrt/x-wrt/build_dir/target-aarch64_cortex-a72_musl/linux-bcm27xx_bcm2711/xtables-addons-3.24/extensions/LUA/lua/lua.h:12:10: fatal error: stddef.h: No such file or directory 12 | #include <stddef.h> | ^~~~~~~~~~ compilation terminated. The error is caused by commit 04e85bbf71c9 ("isystem: delete global -isystem compile option") present upstream from kernel 5.16. This commit dropped the inclusion of system headers by default and caused error on LUA module. Following what is done in the commit for the required code, modify the LUA Kbuild to include these header and restore correct compilation of the LUA module. Fixes: #21294 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>