Releases: crowdsecurity/cs-firewall-bouncer
Releases · crowdsecurity/cs-firewall-bouncer
v0.0.32-rc2
What's Changed
- CI: use golangci-lint 1.61 by @mmetc in #384
- pf: properly flush outgoing connections when adding a banned ip by @mmetc in #389
- simplify pf state flush by @mmetc in #392
- CI: python tests with uv & typing by @mmetc in #393
- Disable timeouts for Edgerouter 10x ipsets by @oddlid in #394
- CI: golangci-lint v2 by @mmetc in #398
- Ensure monotonic traffic metrics by @mmetc in #400
- add an option to allow adding a comment to iptables rules by @verybadsoldier in #386
- refactor metrics registration by @mmetc in #401
- lint: update configuration, reserve fmt.Print for debugging by @mmetc in #402
- update dependencies by @mmetc in #406
- lint update+formatting by @mmetc in #407
New Contributors
- @oddlid made their first contribution in #394
- @verybadsoldier made their first contribution in #386
Full Changelog: v0.0.31...v0.0.32-rc2
v0.0.32
What's Changed
- CI: use golangci-lint 1.61 by @mmetc in #384
- pf: properly flush outgoing connections when adding a banned ip by @mmetc in #389
- simplify pf state flush by @mmetc in #392
- CI: python tests with uv & typing by @mmetc in #393
- Disable timeouts for Edgerouter 10x ipsets by @oddlid in #394
- CI: golangci-lint v2 by @mmetc in #398
- Ensure monotonic traffic metrics by @mmetc in #400
- add an option to allow adding a comment to iptables rules by @verybadsoldier in #386
- refactor metrics registration by @mmetc in #401
- lint: update configuration, reserve fmt.Print for debugging by @mmetc in #402
- update dependencies by @mmetc in #406
- lint update+formatting by @mmetc in #407
New Contributors
- @oddlid made their first contribution in #394
- @verybadsoldier made their first contribution in #386
Full Changelog: v0.0.31...v0.0.32
v0.0.32-rc1
What's Changed
- CI: use golangci-lint 1.61 by @mmetc in #384
- pf: properly flush outgoing connections when adding a banned ip by @mmetc in #389
- simplify pf state flush by @mmetc in #392
- CI: python tests with uv & typing by @mmetc in #393
- Disable timeouts for Edgerouter 10x ipsets by @oddlid in #394
- CI: golangci-lint v2 by @mmetc in #398
- Ensure monotonic traffic metrics by @mmetc in #400
- add an option to allow adding a comment to iptables rules by @verybadsoldier in #386
- refactor metrics registration by @mmetc in #401
- lint: update configuration, reserve fmt.Print for debugging by @mmetc in #402
New Contributors
- @oddlid made their first contribution in #394
- @verybadsoldier made their first contribution in #386
Full Changelog: v0.0.31...v0.0.32-rc1
v0.0.31
v0.0.30
What’s Changed
- Add support for reporting number of bytes/packets that were blocked by the bouncer (#365)
- Improve performance when collecting metrics for prometheus and crowdsec by using
iptables-save
/ embedded counters in thenft
rules (#365) - Improve performance in
iptables
/ipset
mode during insertion (#365) - In
iptables
/nftables
mode, sets are now split per crowdsec origin (CAPI
,crowdsec
,list:XXX
, ...) to provide accurate reporting (#365)
v0.0.29
What's Changed
- Release action: fix asset upload by @mmetc in #336
- allow ipset to clean up tables when receiving sigterm by @mmetc in #338
- remove the the Before causing some systemd cycling issue. by @sabban in #340
- Lint by @mmetc in #339
- update dependency on crowdsec and go-cs-bouncer by @mmetc in #345
- use go 1.21.5 by @mmetc in #344
- golangci-lint update by @mmetc in #348
- Log level: don't demote trace to debug if using the -v flag by @mmetc in #352
- logging: full standard timestamp with timezone (yyyy-mm-dd) by @mmetc in #353
- Makefile: use GO macro if set, to check for version by @mmetc in #351
- Governance init by @LaurenceJJones in #331
- basic PF prometheus metrics (packets, bytes, banned ip count) by @mmetc in #349
- use go 1.21.6 by @mmetc in #357
- CI: use go 1.21.7; bump actions by @mmetc in #359
- deps: bump crowdsec to 1.6.0 by @mmetc in #360
- go.mod: remove reference to unused sqlite package by @mmetc in #358
- deps: update test dependencies by @mmetc in #361
- config: apply variable expansion to all keys by @mmetc in #364
- Allow overriding version.System in docker builds by @mmetc in #363
- emit banned IPs metrics when in ipset mode by @nferch in #350
- update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 by @mmetc in #367
- use go 1.21.9 by @mmetc in #366
- Add TLS auth keys to config.yaml by @LaurenceJJones in #372
- update functional test by @mmetc in #374
- update lint configuration; require go 1.22 by @mmetc in #375
- make: remove redundant go version check by @mmetc in #373
- revert go 1.22 minimal requirement by @mmetc in #376
New Contributors
Full Changelog: v0.0.28...v0.0.29
v0.0.29-rc4
What’s Changed
- revert go 1.22 minimal requirement (#376) @mmetc
- make: remove redundant go version check (#373) @mmetc
- update lint configuration; require go 1.22 (#375) @mmetc
- update functional test (#374) @mmetc
- Add TLS auth keys to config.yaml (#372) @LaurenceJJones
- use go 1.21.9 (#366) @mmetc
- update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 (#367) @mmetc
- emit banned IPs metrics when in ipset mode (#350) @nferch
- Allow overriding version.System in docker builds (#363) @mmetc
- config: apply variable expansion to all keys (#364) @mmetc
- deps: update test dependencies (#361) @mmetc
- go.mod: remove reference to unused sqlite package (#358) @mmetc
- deps: bump crowdsec to 1.6.0 (#360) @mmetc
- CI: use go 1.21.7; bump actions (#359) @mmetc
- use go 1.21.6 (#357) @mmetc
- basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
- Governance init (#331) @LaurenceJJones
- Makefile: use GO macro if set, to check for version (#351) @mmetc
- logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
- Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
- golangci-lint update (#348) @mmetc
- use go 1.21.5 (#344) @mmetc
- update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
- Lint (#339) @mmetc
- remove the the Before causing some systemd cycling issue. (#340) @sabban
- allow ipset to clean up tables when receiving sigterm (#338) @mmetc
- Release action: fix asset upload (#336) @mmetc
v0.0.29-rc3
What’s Changed
- Add TLS auth keys to config.yaml (#372) @LaurenceJJones
- use go 1.21.9 (#366) @mmetc
- update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 (#367) @mmetc
- emit banned IPs metrics when in ipset mode (#350) @nferch
- Allow overriding version.System in docker builds (#363) @mmetc
- config: apply variable expansion to all keys (#364) @mmetc
- deps: update test dependencies (#361) @mmetc
- go.mod: remove reference to unused sqlite package (#358) @mmetc
- deps: bump crowdsec to 1.6.0 (#360) @mmetc
- CI: use go 1.21.7; bump actions (#359) @mmetc
- use go 1.21.6 (#357) @mmetc
- basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
- Governance init (#331) @LaurenceJJones
- Makefile: use GO macro if set, to check for version (#351) @mmetc
- logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
- Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
- golangci-lint update (#348) @mmetc
- use go 1.21.5 (#344) @mmetc
- update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
- Lint (#339) @mmetc
- remove the the Before causing some systemd cycling issue. (#340) @sabban
- allow ipset to clean up tables when receiving sigterm (#338) @mmetc
- Release action: fix asset upload (#336) @mmetc
v0.0.29-rc2
What’s Changed
- deps: update test dependencies (#361) @mmetc
- go.mod: remove reference to unused sqlite package (#358) @mmetc
- deps: bump crowdsec to 1.6.0 (#360) @mmetc
- CI: use go 1.21.7; bump actions (#359) @mmetc
- use go 1.21.6 (#357) @mmetc
- basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
- Governance init (#331) @LaurenceJJones
- Makefile: use GO macro if set, to check for version (#351) @mmetc
- logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
- Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
- golangci-lint update (#348) @mmetc
- use go 1.21.5 (#344) @mmetc
- update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
- Lint (#339) @mmetc
- remove the the Before causing some systemd cycling issue. (#340) @sabban
- allow ipset to clean up tables when receiving sigterm (#338) @mmetc
- Release action: fix asset upload (#336) @mmetc