Kuzz007 e7c6f92e7f fix(clients): reject AllowedIPs already used on another WireGuard/AmneziaWG inbound ...

defaultWireguardClients/defaultAmneziaWGClients only ever checked uniqueness
against their own inbound's client list, so two inbounds sharing a subnet
(same protocol or not) could silently hand out or accept the same address --
the exact scenario behind a real duplicate-IP incident where a WireGuard and
an AmneziaWG client both ended up on the same address. otherTunnelAllowedIPs
now collects every address already claimed on every other tunnel inbound and
folds it into both the auto-allocation pool and the manual-entry collision
check, naming the other inbound in the error when it fires.

2026-08-03 22:06:40 +03:00

..

amneziawg

feat(amneziawg): restore per-client public IPv6 identity (Phase 3.5)

2026-08-03 10:41:58 +03:00

amneziawgnet

feat(amneziawg): restore per-client public IPv6 identity (Phase 3.5)

2026-08-03 10:41:58 +03:00

config

chore: bump version to 3.6.0-awg.2

2026-08-02 00:03:48 +03:00

database

Merge remote-tracking branch 'upstream/main' into sync-3.6.0

2026-08-01 21:59:29 +03:00

eventbus

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

logger

fix(inbounds): apply runtime changes after the DB commit (#5768)

2026-07-08 22:12:28 +02:00

mtproto

fix(mtproto): synchronize child-process lifecycle (#6141)

2026-07-29 20:56:26 +02:00

sub

Merge remote-tracking branch 'upstream/main' into sync-3.6.0

2026-08-01 21:59:29 +03:00

tunnelmonitor

style: adopt golangci-lint v2 and resolve all findings

2026-06-27 15:42:22 +02:00

util

chore: refresh dependencies, fix Linux tool tasks, modernize Go idioms

2026-07-25 16:08:09 +02:00

web

fix(clients): reject AllowedIPs already used on another WireGuard/AmneziaWG inbound

2026-08-03 22:06:40 +03:00

xray

fix(xray): force a full restart for password-auth SOCKS5 hot-apply

2026-08-03 11:55:19 +03:00