fatedier and GitHub
26742060b1
feat(client): add useSystemCa and combine it with trustedCaFile ( #5572 )
...
Move the frpc-only TLS option into the shared TLSConfig as
transport.tls.useSystemCa, replacing the unpublished useSystemRoots.
When set, frpc verifies the server with the system CAs; when
trustedCaFile is also set, its CAs are appended to the system pool so
both are trusted. Failures to load either source abort the connection
instead of falling back. Enabling the option without effective TLS is a
configuration error, and the field is rejected in frps transport.tls
and in both webServer.tls sections.
Fixes #5545
2026-10-18 16:00:02 +08:00
fatedier and GitHub
954f918d0c
docs: clear release notes ( #5570 )
2026-10-15 23:25:45 +08:00
fatedier and GitHub
12b0093ccf
chore: prepare v0.71.1 release notes ( #5564 )
2026-10-13 10:46:29 +08:00
fatedier and GitHub
d20a232996
test: strengthen health check coverage ( #5528 )
2026-09-10 01:28:26 +08:00
fatedier and GitHub
ebb4773c2c
docs: update release notes ( #5521 )
2026-08-29 14:41:43 +08:00
fatedier and GitHub
71a2bf30f9
docs: add release note for domain validation fix ( #5475 )
2026-08-09 23:04:09 +08:00
fatedier and GitHub
1a3a872bd2
fix(frpc): respect feature gates in verify ( #5465 )
2026-08-04 12:53:10 +08:00
fatedier and GitHub
2291e8835f
feat: use binary codec for SUDP packets ( #5461 )
2026-07-31 16:53:16 +08:00
fatedier and GitHub
1ab59e763c
server: validate control pool counts ( #5459 )
2026-07-30 23:30:16 +08:00
fatedier and GitHub
9d45a55720
docs: add release note for #5456 ( #5458 )
2026-07-30 14:40:54 +08:00
fatedier and GitHub
f8fc3c6b1b
server: drop HTTP/1.1 h2c upgrade handling ( #5436 )
...
Use net/http Server.Protocols and the merged golib listener path instead of the deprecated h2c handler. Keep HTTP/1.1 and cleartext HTTP/2 prior-knowledge support, while intentionally dropping HTTP/1.1 Upgrade: h2c.
2026-07-22 19:55:42 +08:00
fatedier and GitHub
7dc7be930e
ssh: fix malformed exec payload panic ( #5428 )
2026-07-21 23:04:56 +08:00
fatedier and GitHub
d486018885
fix(server): prevent control replacement lifecycle leaks ( #5424 )
2026-07-21 18:09:09 +08:00
fatedier and GitHub
becee40715
docs: update API v2 release notes ( #5400 )
2026-07-08 15:54:16 +08:00
fatedier and GitHub
393a533744
docs: add release note for duplicate config names ( #5379 )
2026-06-24 15:03:22 +08:00
fatedier and GitHub
940bde5c46
docs: update release notes ( #5377 )
2026-06-23 17:06:16 +08:00
fatedier
ac3e82db4e
Release v0.69.1 ( #5348 )
2026-06-01 16:22:34 +08:00
fatedier
0773938d70
feat: bridge mixed wire protocol SUDP payloads ( #5347 )
...
SUDP payload codec follows transport wireProtocol; same-protocol v1/v1 and v2/v2 keep raw join; only mixed proxy/visitor protocols use message-aware bridge; no new capability/selection field.
2026-06-01 16:22:34 +08:00
fatedier
7f8d68b666
feat: use wire v2 framing for UDP workConn payload ( #5340 )
2026-06-01 16:22:34 +08:00
fatedier and GitHub
8666e3643f
protocol: add AEAD encryption negotiation to v2 wire control channel ( #5304 )
2026-05-06 10:43:47 +08:00
fatedier and GitHub
cef71fb949
plugin/http_proxy: fix fragmented CONNECT method detection and add read deadline ( #5296 )
2026-04-27 02:30:29 +08:00
fatedier and GitHub
410c4861c4
update Release.md ( #5295 )
2026-04-27 01:31:10 +08:00
fatedier and GitHub
a9a4416ecf
vhost/http: fix auth bypass when routeByHTTPUser is used with proxy-style requests ( #5285 )
2026-04-14 00:58:19 +08:00
fatedier and GitHub
061c141756
update README.md ( #5267 )
2026-03-29 23:53:17 +08:00
fatedier and GitHub
ff4ad2f907
auth/oidc: fix eager token fetch at startup, add validation and e2e tests ( #5234 )
2026-03-15 22:29:45 +08:00
fatedier and GitHub
541878af4d
docs: update release notes for config parsing error improvements ( #5196 )
2026-03-05 00:00:46 +08:00
fatedier and GitHub
381245a439
build: add noweb tag to allow building without frontend assets ( #5189 )
2026-03-02 01:32:19 +08:00
fatedier and GitHub
01997deb98
add persistent proxy/visitor store with CRUD API and web UI ( #5188 )
2026-03-02 01:09:59 +08:00
fatedier and GitHub
266c492b5d
web/frps: add detailed client and proxy views with enhanced tracking ( #5144 )
2026-01-31 02:18:35 +08:00
fatedier and GitHub
3370bd53f5
udp: fix proxy protocol header sent on every packet instead of first packet only ( #5119 )
2026-01-09 11:33:00 +08:00
fatedier and GitHub
a4175a2595
update release notes ( #5116 )
2026-01-08 20:25:03 +08:00
fatedier and GitHub
ef96481f58
update version and release notes ( #5106 )
2025-12-25 10:15:40 +08:00
fatedier and GitHub
2e2802ea13
refactor: use MessageSender interface for message transporter ( #5083 )
2025-12-02 11:22:48 +08:00
fatedier and GitHub
b27b846971
config: add enabled field for individual proxy and visitor ( #5048 )
2025-11-06 14:05:03 +08:00
fatedier and GitHub
e025843d3c
vnet: add exponential backoff for failed reconnections ( #5035 )
2025-10-29 01:08:48 +08:00
fatedier and GitHub
1cf325bb0c
https: add load balancing group support ( #5032 )
2025-10-28 17:37:18 +08:00
fatedier and GitHub
b5e90c03a1
bump version to v0.65.0 and update release notes ( #4998 )
2025-09-25 20:11:17 +08:00
fatedier and GitHub
abf4942e8a
auth: enhance OIDC client with TLS and proxy configuration options ( #4990 )
2025-09-25 10:19:19 +08:00
fatedier and GitHub
80d3f332e1
xtcp: add configuration to disable assisted addresses in NAT traversal ( #4951 )
2025-08-25 15:52:52 +08:00
fatedier and GitHub
024e4f5f1d
improve random TLS certificate generation ( #4923 )
2025-08-10 22:59:28 +08:00
e6dacf3a67
Fix SSH tunnel gateway binding address issue #4900 ( #4902 )
...
- Fix SSH tunnel gateway incorrectly binding to proxyBindAddr instead of bindAddr
- This caused external connections to fail when proxyBindAddr was set to 127.0.0.1
- SSH tunnel gateway now correctly binds to bindAddr for external accessibility
- Update Release.md with bug fix description
Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2025-07-28 15:19:56 +08:00
fatedier and GitHub
f9065a6a78
add tokenSource support for auth configuration ( #4865 )
2025-07-03 13:17:21 +08:00
fatedier
3fa76b72f3
add proxy protocol support for UDP proxies ( #4810 )
2025-06-25 11:40:23 +08:00
fatedier
8eb525a648
feat: support YAML merge in strict configuration mode ( #4809 )
2025-06-25 11:40:23 +08:00
fatedier
b41d8f8e40
update release notes ( #4772 )
2025-04-27 15:46:22 +08:00
fatedier and GitHub
a78814a2e9
virtual-net: initial ( #4751 )
2025-04-16 16:05:54 +08:00
fatedier and GitHub
1e8db66743
update Release.md ( #4668 )
2025-02-12 12:30:37 +08:00
fatedier and GitHub
27db6217ec
frpc: support metadatas and annotations in frpc proxy commands ( #4623 )
2025-01-06 14:22:57 +08:00
fatedier and GitHub
f47d8ab97f
update Release.md ( #4589 )
2024-12-16 19:33:58 +08:00
fatedier and GitHub
4383756fd4
frps: add support for quic-bind-port parameter in frps ( #4519 )
2024-10-30 15:12:31 +08:00
fatedierandGitHub
