eduVPN/proxyguard
8
15
Fork 3
Code Issues 4 Pull requests 2 Projects Releases 8 Packages Wiki Activity Actions
8 releases 8 tags
  • v2.0.1 0fde23e5a3

    2.0.1
    All checks were successful
    / tests (push) Successful in 41s
    Details
    Stable

    jwijenbergh released this 2025-08-14 11:59:38 +02:00 | 5 commits to main since this release

    Signed by jwijenbergh
    SSH key fingerprint: SHA256:8N5EoON8reSTMm461SyWlzRhib6IymBjUHb1p62kwyw

    Note: I changed the tag to be v{VERSION} instead of {VERSION} as this works better with go modules

    Changes since 2.0.0:

    - Client: Disable HTTP/2
- Contrib: fix vpn_setup.sh script for 2.x ProxyGuard client
- Linting: Switch to staticcheck for golangci-lint

    This release is signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 2.0.0 46f0640c2f

    2.0.0
    All checks were successful
    / tests (push) Successful in 1m22s
    Details
    Stable

    jwijenbergh released this 2025-01-31 17:24:49 +01:00 | 12 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    Changes since 1.0.1:

    • Client:
      • Add support for setting the UserAgent
      • Remove code that dynamically waits for an UDP packet
      • The listen (ip:port combo) flag has been changed to listen-port as ProxyGuard always uses localhost for the IP
      • New mandatory option: forward-port to indicate which port WireGuard is sending traffic from, and thus where the traffic needs to be forwarded back to
      • Go API Client struct:
        • UserAgent new option to set the user agent for the HTTP handshake
        • Listen has been replaced by ListenPort
        • Ready callback has been removed as setting up the client including caching DNS is now separated with the Setup and Close function
        • Peer new option to specify the peer
        • PeerIPs new option to specify the DNS IPs of the peer
        • setupSocket callback no longer takes the peer IPs as the second argument, but only contains the file descriptor
        • The tunnel function no longer takes the peer and peer IPs, but takes the port WireGuard is listening on (the forward port)
      • Only re-establish a handshake once traffic has been sent
      • Only support TLS >= 1.3
      • Copy over settings from the default HTTP transport
    • Add some helpful scripts in the contrib directory
    • README:
      • Add technical docs
      • Document the goal
    • Makefile:
      • Use tokei in sloc target if available
      • Fix make install
    • Workflows:
      • Initial Forgejo CI
    • Server:
      • Properly close wireguard connections
      • Log when server is ready

    This release is signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 1.0.1 ef417e3c61

    1.0.1 Stable

    jwijenbergh released this 2024-04-05 10:29:15 +02:00 | 44 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    Small hotfix for 1.0.0:

    • Client: Remove the abort on max restart and instead wait 10s

    signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 1.0.0 79a0ba049c

    1.0.0 Stable

    jwijenbergh released this 2024-04-04 18:04:44 +02:00 | 48 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    First major version of ProxyGuard: A TCP proxy for your WireGuard (or general UDP) traffic.

    Changes since 0.4.0:

    • Client: Ensure the hostname is used for a DNS request instead of the host:port
    • Client: Mark some errors as 'fatal' such that retrying does not happen
    • Client: Loop using a more fancy restart loop that uses a variable wait time and max restarts
    • Server: Do not spam log by not logging EOF, TCP reader or clean exits
    • Server: Set Upgrade and Connection headers sooner
    • Client+Server: Compare headers case insensitive
    • Client+Server: Set Upgrade protocol from wireguard to UoTLV/1: UDP over TCP Length Value version 1
    • General: Rename Proxyguard to ProxyGuard

    signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 0.4.0 c5ee3ef1e3

    0.4.0 Stable

    jwijenbergh released this 2024-03-11 10:19:12 +01:00 | 71 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    Changes:

    • Client: Make it a struct type for a nicer Go API
    • Client: Set the default source port to 0
    • Client + Server: Make the TCP reader timeout after 60 seconds
    • Client: Ability to re-use source port on Linux, for reconnecting purposes
    • Client: Do a DNS request inside Proxyguard if no --peer-ips are set and cache it so that reconnecting cannot fail

    signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 0.3.0 94ea7db54f

    0.3.0 Stable

    jwijenbergh released this 2024-02-22 15:58:48 +01:00 | 83 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    Changelog:

    • Client: Implement a --peer-ips flag to bypass DNS resolution
    • Client: Log each IP that is being connected to in the --peer-ip case
    • Client: Add a callback when the proxy is ready

    signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 0.2.0 86ded1dcae

    0.2.0 Stable

    jwijenbergh released this 2024-02-13 16:05:12 +01:00 | 93 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    Changes since 0.1.0:

    • Add a file descriptor callback mechanism to the client for eduvpn-common + Android integration
    • Add a basic reconnect/retry mechanism to the client (fixes: #15)
    • Update systemd files for the HTTP change
    • Proxy over HTTP such that you can use it with a reverse proxy, e.g. Apache. This is done similar to Websockets with HTTP upgrade requests
    • Add systemd files for Proxyguard client mode. Make sure it starts after the network is up

    yet again signed with

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a

    and

    https://app.eduvpn.org/linux/v4/deb/app+linux@eduvpn.org.asc
    Downloads
  • 0.1.0 3d1a9afa91

    0.1.0 Stable

    jwijenbergh released this 2024-01-29 16:26:59 +01:00 | 114 commits to main since this release

    Signed by jwijenbergh
    GPG key ID: 1A2298F6C34F96E5

    initial release of Proxyguard. A Go program and library that tunnels UDP over TCP, to use with WireGuard

    signed with:

    untrusted comment: minisign public key CA9409316AC93C07
RWQHPMlqMQmUygeB0/sVeZiHgH5E9oICMcYHk9PBUekQ98cyloCUfE9a
    Downloads