08200b7a09
Add dynamic Softnet policy control ( #181 )
...
* Add dynamic Softnet policy control
* Simplify Softnet policy RPC methods
* Use jsonrpsee types for Softnet policy RPC
* Reject superseded Softnet policy revisions
* Apply Softnet policy updates only after enqueue
* Flush final Softnet response after input EOF
* Signal EOF when disabling Softnet control
* Normalize Softnet default-route isolation
* Keep policy rules on Proxy (#182 )
* Simplify Softnet policy protocol
* Bound pipelined Softnet policy responses
* Keep Softnet port forwarding active on control wakes
---------
Co-authored-by: edi-oai <edi@openai.com>
2026-07-21 21:30:06 +01:00
5d6b4b9d0c
Validate VM file descriptors before ownership transfer ( #177 )
...
* Validate VM file descriptors before ownership transfer
* Handle unnamed macOS Unix sockets
2026-07-16 10:47:53 -04:00
2d351db2df
Validate VM ARP packets before reading addresses ( #175 )
2026-07-08 09:45:25 +01:00
4461df5b7b
Tighten DHCP port matching ( #174 )
2026-07-08 00:17:45 +01:00
df84a30016
--allow: support "@host" syntax ( #160 )
...
* --allow: support "@host" syntax
To make communication with the guest VM possible
when using --block=0.0.0.0/0.
* Use "@-alias" wording instead of "@host"
2026-05-15 16:06:03 +02:00
173f7832b3
DHCP snooper: use coarse time to avoid clock_gettime() overhead ( #137 )
...
* DHCP snooper: use coarse time to avoid clock_gettime() overhead
* Introduce uncertainty duration and subtract it from total lease time
* Update coarse time after we've performed the waiting
* Use coarsetime::Updater to update time even when deep inside event loop
* No need for manual coarsetime::Instant::update() anymore
* Ensure that coarsetime::Updater is stopped on Proxy::shutdown()
* Revert "Ensure that coarsetime::Updater is stopped on Proxy::shutdown()"
This reverts commit de255f42406a95272dcf9ffa829add
2026-01-14 21:16:19 +01:00
7dc5992b55
Perform batched reads from host to improve efficiency ( #128 )
...
* Perform batched reads from host to improve efficiency
* CI: don't test on macOS Sonoma
2025-10-28 16:48:05 +04:00
431ae9bbc9
Introduce --block in addition to --allow ( #126 )
2025-10-21 17:14:28 +04:00
4fa4fb1bda
Avoid using one-shot triggered events ( #102 )
2025-04-21 18:16:09 +04:00
570f02e8d5
PartialEq for ExposedPort ( #90 )
2025-03-05 15:13:07 +04:00
8519fa2f86
Support TCP port exposure via "--expose" command-line argument ( #70 )
2025-01-09 16:50:39 +04:00
762868a8eb
Bump smoltcp from 0.11.0 to 0.12.0 ( #62 )
...
* Bump smoltcp from 0.11.0 to 0.12.0
Bumps [smoltcp](https://github.com/smoltcp-rs/smoltcp ) from 0.11.0 to 0.12.0.
- [Release notes](https://github.com/smoltcp-rs/smoltcp/releases )
- [Changelog](https://github.com/smoltcp-rs/smoltcp/blob/main/CHANGELOG.md )
- [Commits](https://github.com/smoltcp-rs/smoltcp/compare/v0.11.0...v0.12.0 )
---
updated-dependencies:
- dependency-name: smoltcp
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* smoltcp moved to core::net types for IP addresses
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Nikolay Edigaryev <edigaryev@gmail.com>
2024-12-05 00:15:21 +04:00
147c051b0e
Disable isolation when `--allow=0.0.0.0/0` is specified ( #39 )
...
* Disable isolation when --allow=0.0.0.0/0 is specified
* Upgrade & upgrade the dependencies
2024-07-02 15:36:07 +04:00
867679446e
Ignore socketpair(2) errors when sending ( #36 )
2024-03-25 12:37:53 -04:00
4a13c5922b
Prevent multiple --allow flags ( #35 )
...
* Prevent multiple --allow flags
* --allow: better value name instead of just <ALLOW>
2024-03-11 23:02:59 +04:00
a92f4e0c99
Introduce --allow command-line argument to allow traffic to CIDRs ( #34 )
2024-03-11 22:07:39 +04:00
0a92c290be
Added a way to enable host-only networking through tart using --net-host ( #32 )
...
* Added a way to enable host-only networking through tart using SOFTNET_NET_TYPE=host
* Removed env variable and moved to Enum instead of str
* Fixed defaults & restricted publicity of host
* Fixed usage of NetType
2024-03-01 11:25:19 -05:00
d7699e95a9
Support graceful termination via SIGINT ( #23 )
...
* Support graceful termination via SIGINT
* $ cargo fmt
* Explain why we need to ignore the SIGINT
2023-03-16 18:38:03 +04:00
d635751948
Capture ENOBUFS message into Sentry only once ( #19 )
2022-12-24 11:36:42 +04:00
59cd9098e0
Ignore ENOBUFS when writing to VM's socket ( #18 )
...
* Ignore ENOBUFS when writing to VM's socket
* Hint the into() target type to the compiler to fix the build error
* Fix Clippy warnings
2022-12-15 00:15:19 +04:00
11910d8540
Sentry integration ( #13 )
...
* Sentry integration
* Introduce a more generic CIRRUS_SENTRY_TAGS
* Revert switching to nightly toolchain
2022-12-12 21:33:45 +04:00
22c92688e5
Don't panic in Drop ( #12 )
2022-11-19 20:53:30 +04:00
e2403f0ea9
Only perform DHCP snooping for frames destined to the VM ( #10 )
2022-11-10 20:31:18 +04:00
ce129ba5cb
Allow host communication ( #7 )
...
* Allow communication with host
* Clarify missing root privileges message
2022-08-12 17:50:10 +03:00
226a7e6c86
Initial revision of Softnet, a software networking for Tart
2022-06-10 16:53:03 +03:00
Fedor Kororkov
Minh Vu
Nikolay Edigaryev
Peter A.
dependabot[bot]
Sergei Parshev