BlindMaster24 ac3fc12077 fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554) ...

* fix(ports): refuse an inbound on a port an AmneziaWG peer forwards

checkForwardedPortsConflict only ever ran from the AmneziaWG save path, and only
in one direction: an AmneziaWG client's forwardedPorts were checked against the
ports other inbounds already hold, while the reverse -- an ordinary inbound
saved onto a port some peer forwards -- had no guard at all. The forward
listener binds that port on every interface in both directions
(amneziawgnet/portfwd.go's attachTCP/attachUDP), so the two listeners want the
same socket: the loser either leaves the peer's forward silently dead or fails
the inbound's listen.

checkPortConflictTx now resolves that owner the same way the relay-slot checks
do -- same host, peers derived from the stored settings with the shared
InstanceFromInbound -- and names the peer in the refusal. Sitting inside
checkPortConflictTx covers both the save and the enable path added in #6549.

TestAddInboundRefusesAPortAnAmneziaWGPeerForwards fails without this -- watched
red, the create is allowed -- and its node-row companion pins the scoping that
keeps a node row legal on a locally forwarded port.

* fix(ports): name only a peer that binds as the owner of a forwarded port

The owner lookup read instance.Peers and ForwardedPortsInclude directly, so a
peer the forward supervisor skips (no email, or no address the tunnel routes
to) was reported as holding a port nothing binds -- refusing a create that is
legal with a message naming a row whose own port is its WireGuard one. It also
repeated the candidate's listen address as the forward's location, though the
forward binds :port on every interface.

Share the supervisor's own gate through amneziawgnet.ForwardedPortOwner, report
the wildcard bind, and propagate a failed owner query instead of reading it as
"no conflict", matching the sibling checks in the same file.

* style(ports): keep the forwarded-key doc block within the 2-line cap

The reworded desiredPortForwardKeys doc ran to three lines, against the rule
this repo sets for committed Go comments.

2026-09-15 16:58:21 +03:00

..

discord

fix(discord): page the inbounds reply within Discord's embed caps (#6496)

2026-09-13 19:47:49 +02:00

email

fix(settings): show the SMTP failure reason instead of a raw i18n key

2026-09-09 00:51:44 +02:00

integration

feat(nord): support multi-server NordLynx outbounds (#6311)

2026-09-02 20:20:10 +02:00

outbound

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

panel

fix(panel): accept 2FA codes from adjacent TOTP windows (#6546)

2026-09-15 15:42:30 +03:00

tgbot

refactor(tgbot): make the add-client expiry presets say what they do (#6503)

2026-09-13 19:57:46 +02:00

access_log_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

api_scale_postgres_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

backup_filename_test.go

feat(backup): prefix backup filenames with date and time (#5606)

2026-06-27 12:08:20 +02:00

bulk_clients_test.go

fix(node): stop client edits from tearing down node inbounds and harden reconcile fingerprints

2026-07-05 02:06:58 +02:00

bulk_traffic_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

calendar_renew_test.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

calendar_renew.go

feat(clients): renew on a calendar day instead of a rolling interval (#6239)

2026-08-18 12:46:00 +02:00

client_add_dedupe_test.go

fix(client): stop duplicate client entries accumulating in inbound settings

2026-07-05 21:17:25 +02:00

client_amneziawg_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_amneziawg.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_apply_field_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_attach_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_bulk_fanout_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_flow_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reenable_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

client_bulk_reset_query_count_test.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_bulk_reset_reenable_test.go

fix(clients): surface bulk-reset auto-enable failures (#5763)

2026-07-08 20:53:42 +02:00

client_bulk.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_create_fanout_test.go

perf(clients): apply a multi-inbound client create concurrently

2026-09-04 01:01:20 +02:00

client_create_reuse_test.go

fix(clients): reuse stored credentials when re-adding an existing identity

2026-07-11 22:48:51 +02:00

client_cross_inbound_race_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_crud.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_delete_continue_test.go

fix(clients): finish deleting from every inbound when one fails

2026-07-11 22:48:57 +02:00

client_delete_node_baseline_test.go

fix(client): clean node_client_traffics rows when deleting a client

2026-07-07 15:05:22 +02:00

client_delete_node_full_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_delete_tombstone_test.go

fix(clients): withdraw the delete tombstone when the email is re-created

2026-09-09 00:17:54 +02:00

client_disable_restart_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_edit_node_dirty_test.go

fix(node): flag every hosting node before a client edit applies

2026-09-07 01:51:18 +02:00

client_effective_flow_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

client_email_validation_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_external_link_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_external_link.go

Add per-client external link controls (#5650)

2026-08-18 13:55:04 +02:00

client_flow_isolation_test.go

fix(clients): use EffectiveFlow in BulkAttach (#6454)

2026-09-12 11:13:19 +02:00

client_group_bulk_test.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_group_node_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_group_reset_test.go

fix(groups): keep group traffic totals stable across client resets and deletes

2026-07-02 09:17:47 +02:00

client_groups.go

fix(groups): report changed bulk moves without restarting xray (#6199)

2026-08-14 19:50:06 +02:00

client_hwid_test.go

feat(clients): show short HWID fingerprint in admin device list (#6464)

2026-09-12 11:13:22 +02:00

client_hwid.go

feat(clients): show short HWID fingerprint in admin device list (#6464)

2026-09-12 11:13:22 +02:00

client_identity_normalized_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_inbound_apply_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_inbound_apply.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

client_ips_prune_test.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

client_link_delta_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

client_link.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_locks_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

client_locks.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_lookup_test.go

feat(api): add GET endpoint to look up clients by Telegram ID (#5945)

2026-07-28 22:38:44 +02:00

client_lookup.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_node_push_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_paging_test.go

perf(clients): make the clients page scale to large panels

2026-07-30 02:49:32 +02:00

client_paging.go

docs(api): align OpenAPI with runtime contracts (#6409)

2026-09-04 15:23:41 +02:00

client_portable_test.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_portable.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

client_stat_reuse_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_sync_mtproto_test.go

feat(mtproto): per-client ad-tags, management-API auth, and record secret sync

2026-07-07 12:00:43 +02:00

client_sync_multiprotocol_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

client_sync_orphan_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

client_sync_orphan.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

client_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

client_traffic_cycle_test.go

feat(clients): give each client its own traffic reset cycle (#6240)

2026-08-18 13:08:44 +02:00

client_traffic.go

perf(clients): batch the client record lookup in bulk operations

2026-09-10 21:07:49 +02:00

client_update_allowedips_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_update_enable_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_fanout_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

client_update_keepalive_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

client_update_no_inbound_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_rename_test.go

feat(sub): add per-client subscription HWID limits (#5802)

2026-08-15 16:50:20 +02:00

client_update_tunnel_peers_test.go

fix(clients): keep per-peer keys when a client spans several tunnel inbounds

2026-09-09 00:30:02 +02:00

client_wireguard_crud_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

client_wireguard_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

client_wireguard.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

client.go

fix(clients): preserve enable on portable import (#6481)

2026-09-12 11:13:42 +02:00

config.json

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

default_template_freedom_test.go

fix(xray): place the freedom domain strategy where the core reads it (#6515)

2026-09-14 12:08:38 +02:00

del_shared_email_runtime_test.go

fix(node): fully delete clients on nodes instead of only detaching them

2026-07-05 20:28:26 +02:00

depleted_calendar_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

fallback.go

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

finalmask_rand_packet_test.go

fix(xray): reject configs xray-core refuses, and check the fixtures against it

2026-07-28 14:43:55 +02:00

geodata.go

feat(xray): browse geosite/geoip categories from routing rules (#6165)

2026-08-15 17:12:59 +02:00

global_traffic_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

golden_fixtures_xray_test.go

chore: refresh dependencies and modernize Go test idioms

2026-07-30 03:14:22 +02:00

happ_crypto.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_local_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

happ.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

host_test.go

feat(hosts): bulk-add multiple hosts to multiple inbounds (#5677)

2026-07-08 23:35:20 +02:00

host.go

fix(hosts): assign group ids to imported hosts and repair empty ones

2026-07-23 18:52:42 +02:00

import_host_settings_test.go

fix: follow-ups from the post-merge reviews of #6221, #6227, #6230 and #6239 (#6250)

2026-08-18 15:24:59 +02:00

inbound_amneziawg_relay_window_test.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_amneziawg_test.go

fix(amneziawg): stop losing an inbound and its server keys on the API path

2026-09-09 00:42:52 +02:00

inbound_amneziawg.go

fix(amneziawg): refuse a row's own relay port and keep a disabled row's slot reserved (#6544)

2026-09-15 13:31:07 +03:00

inbound_autorenew_calendar_test.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_autorenew_globaltraffic_test.go

fix(traffic): clear cross-panel rows only for clients actually renewed (#6263)

2026-08-22 23:12:33 +02:00

inbound_autorenew_maxcount_test.go

feat(clients): cap how many times a client may auto-renew (#6238)

2026-08-18 11:53:11 +02:00

inbound_autorenew_shadowsocks_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_autorenew_shared_email_test.go

fix(clients): sync auto-renewal across inbounds (#6339)

2026-09-02 20:39:03 +02:00

inbound_autorenew_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_client_ips_merge_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

inbound_client_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_client_move_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

inbound_client_traffic_test.go

fix(traffic): persist delayed-start expiry only for converted clients

2026-07-02 16:24:18 +02:00

inbound_clients_stale_uuid_test.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_clients_tuic_test.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_clients.go

fix(inbounds): serve fresh client UUIDs for list and allLinks (#6458)

2026-09-12 11:12:13 +02:00

inbound_create_race_test.go

fix(inbounds): close the port check-and-claim race on the serial writer (#6225)

2026-08-18 11:48:40 +02:00

inbound_disable_flow_test.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_disable.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

inbound_durable_postgres_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_enable_port_test.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

inbound_fallback_runtime_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_finalmask_reality_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_finalmask_xmc_test.go

feat(xray): update xray-core to v26.7.28 and adapt panel

2026-07-28 13:14:06 +02:00

inbound_flow_restore_test.go

fix(flow): restore XTLS Vision when an inbound becomes flow-eligible (#5520)

2026-06-24 13:02:42 +02:00

inbound_flow_restore.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_hysteria_auth_test.go

fix: reject Hysteria inbound updates with empty client auth (#6268)

2026-08-22 23:11:42 +02:00

inbound_import_external_proxy_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_import_shared_clients_test.go

fix: refresh stale client_traffics row when an inbound-deleted client's email is reused (#6003)

2026-07-21 15:57:55 +02:00

inbound_migration_test.go

fix(migration): stop a half-applied startup migration from committing silently (#6182)

2026-08-14 20:10:39 +02:00

inbound_migration.go

feat(inbound): DisableFlow — opt an inbound out of auto XTLS Vision (#5689) (#5698)

2026-08-15 23:09:16 +02:00

inbound_mtproto_apply_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_client_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

inbound_mtproto_desired_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_mtproto_test.go

fix(mtproto): stop persisting a vestigial inbound-level secret

2026-07-06 17:55:57 +02:00

inbound_mtproto_txfail_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

inbound_mtproto.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

inbound_node_ips_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

inbound_node_ips.go

fix(job): expire stored client IPs of offline clients

2026-08-24 13:27:40 +02:00

inbound_node_protocol_update_test.go

fix(inbounds): let a node-adopted inbound keep its own protocol on edit

2026-09-09 00:24:01 +02:00

inbound_node_reconcile_test.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_node_sweep_log_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

inbound_node.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

inbound_options_node_address_test.go

fix(panel): use the hosting node address for WireGuard client configs (#5679)

2026-07-03 01:12:32 +02:00

inbound_protocol_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_protocol.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

inbound_settings_clients_test.go

fix(clients): parse only settings.clients across protocols (#5855)

2026-07-08 20:31:00 +02:00

inbound_settings_clients.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

inbound_sub_sort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_sublink.go

feat(inbounds): apply remark template to Export all inbound links

2026-06-27 11:22:45 +02:00

inbound_subsort_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_tgbot_lookup_test.go

fix(tgbot): find clients by tgId regardless of settings JSON formatting

2026-07-05 20:18:59 +02:00

inbound_tls_test.go

fix(inbounds): reject missing TLS certificates before saving (#6429)

2026-09-08 18:08:24 +02:00

inbound_traffic_apply.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_traffic_global.go

fix(node): stop a departed master's frozen traffic from disabling clients (#6113)

2026-07-27 14:21:56 +02:00

inbound_traffic_reset_test.go

inbounds: allow custom monthly traffic reset days (#6071)

2026-07-28 23:27:09 +02:00

inbound_traffic.go

fix(clients): snap EOM 23:59:59 expiry to billing midnight without renew (#6457)

2026-09-12 11:06:47 +02:00

inbound_tuic.go

Feature/tuic v5 (#6337)

2026-09-12 10:15:48 +02:00

inbound_update_tag_test.go

fix(mtproto): use hosts for public share links (#6369)

2026-09-08 15:36:57 +02:00

inbound_util_test.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound_util.go

fix(inbounds): allow negative subSortIndex for subscription order (#6465)

2026-09-12 11:14:53 +02:00

inbound.go

fix(inbounds): check ports when an inbound is enabled, not only when it is saved (#6549)

2026-09-15 15:29:32 +03:00

key_gen_parse_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

metric_history_test.go

chore: bump deps and modernize test loops

2026-06-26 00:10:30 +02:00

metric_history.go

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

mtproto_fake_test.go

fix(mtproto): stop dropping connections on client/inbound edits; add live updates + ad-tag (#5838)

2026-07-07 01:13:24 +02:00

node_bulk_dispatch_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

node_client_breakdown_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_client_expiry_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_client_renew_sync_test.go

fix(node): start a fresh quota window when a node auto-renews a client

2026-07-07 15:05:23 +02:00

node_client_traffic_sum_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_contract.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_credentials_writeonly_test.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node_delete_orphan_test.go

fix(nodes): block node delete while inbounds are still attached (#5394)

2026-06-20 01:09:53 +02:00

node_dirty_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_foreign_client_test.go

fix(node): refuse a node's claim on another inbound's client

2026-09-03 18:06:35 +02:00

node_host_adopt_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_http_fake_test.go

perf(node): bound the per-client node push and fan out the traffic reset

2026-09-07 14:24:14 +02:00

node_mtls_test.go

fix(nodes): apply a rotated master mTLS certificate without restarting the panel (#6194)

2026-08-15 16:03:42 +02:00

node_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

node_netmetrics_test.go

feat(node): node hardening — mTLS, hashed+zstd reconcile transport, per-node net metrics (#5382)

2026-06-16 12:19:33 +02:00

node_origin_guid_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_probe_body_cap_test.go

Update deps and simplify parsing

2026-09-08 14:12:13 +02:00

node_push_payload_test.go

fix(node): stop the node sync from deleting clients it never meant to

2026-08-01 15:19:08 +02:00

node_shared_guid_test.go

fix(nodes): cloned-node attribution, node-hosted client display (online/speed/counts), and sync robustness (#5488)

2026-06-22 20:20:55 +02:00

node_sweep_guard_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_sync_link_churn_test.go

perf(clients): write client_inbounds deltas and check identity from the clients table

2026-08-20 04:09:57 +02:00

node_tag_sync_test.go

fix(node): stop stale expiry sync from undoing client extensions (#6228) (#6231)

2026-08-23 23:17:56 +02:00

node_test.go

fix(node): adopt a matching deployed inbound instead of recreating it (#6197)

2026-08-14 20:01:35 +02:00

node_token_encryption_test.go

feat(nodes): opt-in encryption at rest for the outbound node API token (#6186)

2026-08-15 16:48:50 +02:00

node_tree_test.go

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

node_tree.go

fix(nodes): make node API tokens write-only (#5613)

2026-07-23 15:35:11 +02:00

node.go

fix(node): import a newly selected node inbound instead of sweeping it

2026-09-13 22:44:50 +02:00

outbound_subscription_ssrf_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

outbound_subscription_test.go

feat(outbounds): support custom subscription user agents (#6398)

2026-09-11 15:32:04 +02:00

outbound_subscription.go

feat(outbounds): support custom subscription user agents (#6398)

2026-09-11 15:32:04 +02:00

port_conflict_forwarded_test.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

port_conflict_test.go

fix(amneziawg): reserve the relay port before an AmneziaWG inbound has a peer (#6542)

2026-09-15 11:49:18 +03:00

port_conflict.go

fix(ports): refuse an inbound on a port an AmneziaWG peer forwards (#6554)

2026-09-15 16:58:21 +03:00

reality_scan_test.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reality_scan.go

feat(settings): add setting for Reality scan candidates (#6471)

2026-09-13 14:48:28 +02:00

reset_writer_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

scale_helpers_test.go

refactor: modernize Go with strings.SplitSeq and maps.Copy

2026-07-08 22:10:54 +02:00

server_geofile_test.go

feat(geodata): add standard source presets (#6504)

2026-09-13 20:02:43 +02:00

server_import_sniff_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_import_stage_test.go

feat(server): sniff sqlite panel restore uploads and keep the fallback on failure

2026-07-12 20:14:22 +02:00

server_pg_restore_test.go

feat(db): add pgclient command to install or upgrade PostgreSQL client tools

2026-07-06 09:24:18 +02:00

server_vlessenc_test.go

feat(web): vless encryption new modes (#5517)

2026-06-24 21:22:42 +02:00

server_xray_checksum_test.go

fix(xray): verify the release archive checksum before installing (#5396)

2026-06-20 00:37:35 +02:00

server.go

fix(xray): refuse a config the running core cannot bind (#6547)

2026-09-15 15:27:28 +03:00

setting_clash_test.go

feat(sub): auto-detect subscription format by User-Agent (Updated) (#5826)

2026-07-14 13:01:40 +02:00

setting_factory_defaults_test.go

feat(discord): add Discord notification bot service (#6486)

2026-09-13 14:04:53 +02:00

setting_happ_test.go

feat(happ): generate Crypt5 subscription links locally (#6494)

2026-09-13 12:44:55 +02:00

setting_mtls_bundle_test.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_mtls_test.go

chore(build): bump Go toolchain to 1.27.0

2026-08-23 21:57:03 +02:00

setting_mtls.go

fix(nodes): validate every certificate in the node mTLS trust bundle (#6188)

2026-08-15 21:31:31 +02:00

setting_remote_routing_test.go

feat(sub): bake Happ/INCY routing profiles into the JSON subscription (#6402)

2026-09-10 17:05:54 +02:00

setting_security_test.go

fix(panel): accept 2FA codes from adjacent TOTP windows (#6546)

2026-09-15 15:42:30 +03:00

setting_sub_identity_test.go

feat(sub): allow identity tokens on every subscription link (#5935)

2026-07-28 22:12:52 +02:00

setting_sub_info_node_test.go

feat(sub): add dummy info node and status configs for subscriptions (#6412)

2026-09-08 17:14:01 +02:00

setting_sub_json_dns_test.go

feat(sub): let the panel set the JSON subscription DNS servers (#6485)

2026-09-13 11:51:56 +02:00

setting.go

fix(panel): accept 2FA codes from adjacent TOTP windows (#6546)

2026-09-15 15:42:30 +03:00

shadowsocks_client_key_test.go

fix(inbound): regenerate SS-2022 client PSKs on method key-size change

2026-06-17 14:11:35 +02:00

stream_network_alias_test.go

feat(xray): update xray-core to v26.7.11 and adapt panel

2026-07-12 00:30:47 +02:00

sub_balancer_inbound_cleanup_test.go

feat(sub): client-side balancers for the JSON subscription (#6243)

2026-08-23 22:34:20 +02:00

sub_balancer_test.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_balancer.go

feat(sub): leastLoad member weights for subscription balancers (#6304)

2026-09-02 20:21:27 +02:00

sub_uri_base_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

sync_scale_postgres_test.go

feat(clients): support setting HWID limit and MTProto ad-tag in bulk adjust (#6399)

2026-09-10 16:24:48 +02:00

traffic_commit_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

traffic_poll_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

traffic_runtime_apply_test.go

fix(traffic): apply maintenance side effects only after the commit lands (#6200)

2026-08-14 19:42:09 +02:00

traffic_writer_test.go

refactor: focused service files, leaf subpackages, and an internal/ layout (#5167)

2026-06-10 15:19:22 +02:00

traffic_writer.go

fix(service): serialize client/inbound writes to prevent Postgres deadlock

2026-06-17 15:55:47 +02:00

url_safety_test.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

url_safety.go

fix(panel): stop one poisoned DNS answer from blocking outbound tests

2026-08-24 13:27:40 +02:00

ws_payload_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_amneziawg_outbound_test.go

fix(amneziawg): read the outbound pseudo-protocol id like the core (#6531)

2026-09-15 08:23:18 +03:00

xray_amneziawg_outbound.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_bind_conflict_test.go

fix(xray): refuse a config the running core cannot bind (#6547)

2026-09-15 15:27:28 +03:00

xray_bind_conflict.go

fix(xray): refuse a config the running core cannot bind (#6547)

2026-09-15 15:27:28 +03:00

xray_config_clients_test.go

style: drop the line comments added with the triage fixes

2026-07-27 14:37:57 +02:00

xray_config_inject_test.go

feat(amneziawg): add native AmneziaWG protocol support (#6105)

2026-08-24 02:41:15 +02:00

xray_config_scale_test.go

test(scale): cover traffic poll, ws payloads, ip-limit job, sub and xray config at 500k

2026-07-02 16:12:46 +02:00

xray_drop_clients_test.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00

xray_lifecycle_test.go

fix(xray): synchronize lifecycle state (#6138)

2026-07-29 21:00:29 +02:00

xray_log_confine_test.go

fix(xray): confine log paths written under any key case

2026-09-03 18:06:15 +02:00

xray_metrics_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_metrics.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_restart_test.go

Repo-wide self-correcting audit: 54 verified bug fixes (#5970)

2026-07-17 00:33:06 +02:00

xray_setting_dns_routing_test.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_dns_routing.go

Bug-label issue sweep: 16 fixes (#6083)

2026-07-23 15:34:42 +02:00

xray_setting_routing_sync_test.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_routing_sync.go

fix(xray): read the last two inboundTag protocol ids like the core (#6530)

2026-09-14 21:18:31 +03:00

xray_setting_test.go

fix: gate embedded unencrypted-outbound rejection on running Xray core version (#6028)

2026-07-21 15:51:46 +02:00

xray_setting.go

feat(amneziawg): add AmneziaWG as an outbound protocol (#6320)

2026-09-10 14:50:48 +02:00

xray_strip_rules_test.go

Add Enable/Disable Toggle for Xray Routing Rules (#5296)

2026-06-15 00:43:49 +02:00

xray_wireguard_config_test.go

feat(clients): let admins set PersistentKeepalive on tunnel clients (#6377)

2026-09-10 22:32:42 +02:00

xray_xhttp_session_test.go

feat(xhttp): support sessionID* rename + sessionIDTable/Length (xray v26.6.22) (#5506)

2026-06-23 17:38:16 +02:00

xray.go

fix(xray): restart when a diff strands a client's live session (#6550)

2026-09-15 15:39:40 +03:00