v0.0.28

What’s Changed

• Change log message "failed to flush" from info -> debug (#333) @mmetc
• Add option -version in favor of -V (#330) @mmetc
• updated tls func tests (#327) @mmetc
• update crowdsec/go-cs-lib/go-cs-bouncer dependencies (#329) @mmetc
• Increase ipset_size default to 131072 (#324) @mmetc
• force raw output on cscli during install (#323) @mmetc
• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc6

What’s Changed

• updated tls func tests (#327) @mmetc
• update crowdsec/go-cs-lib/go-cs-bouncer dependencies (#329) @mmetc
• Increase ipset_size default to 131072 (#324) @mmetc
• force raw output on cscli during install (#323) @mmetc
• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc5

What’s Changed

• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc3

What’s Changed

• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc2

What’s Changed

• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc1

What’s Changed

• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.27

What’s Changed

• Improve message when an old system does not support set names > 15 chars (#284) @mmetc
• disable metrics if nft -j is not supported (#282) @mmetc
• symlink /usr/sbin/{bouncer} to /usr/bin/ (#281) @mmetc
• fix typo in test condition (#278) @mmetc
• nftables: repeat deletion of remaining elements in case of error in a batch (ip already expired) (fix #230) (#279) @mmetc
• deb, rpm: handle api key creation (skip or ignore error) in case of .yaml.local and remote LAPI (#275) @mmetc
• Nft context (#273) @mmetc
• include _bouncer.sh in release tarballs (#272) @mmetc

v0.0.27-rc2

What’s Changed

• Improve message when an old system does not support set names > 15 chars (#284) @mmetc
• disable metrics if nft -j is not supported (#282) @mmetc
• symlink /usr/sbin/{bouncer} to /usr/bin/ (#281) @mmetc
• fix typo in test condition (#278) @mmetc
• nftables: repeat deletion of remaining elements in case of error in a batch (ip already expired) (fix #230) (#279) @mmetc
• deb, rpm: handle api key creation (skip or ignore error) in case of .yaml.local and remote LAPI (#275) @mmetc
• Nft context (#273) @mmetc
• include _bouncer.sh in release tarballs (#272) @mmetc

v0.0.27-rc1

What’s Changed

• fix typo in test condition (#278) @mmetc
• nftables: repeat deletion of remaining elements in case of error in a batch (ip already expired) (fix #230) (#279) @mmetc
• deb, rpm: handle api key creation (skip or ignore error) in case of .yaml.local and remote LAPI (#275) @mmetc
• Nft code refactoring (#273) @mmetc
• include _bouncer.sh in release tarballs (#272) @mmetc

v0.0.26

What’s Changed

Edit: re-uploaded binary tarballs that were build with a 0.0.26-rc6 tag, and missed a shell script

• packet filter: notable performance improvements
• nftables: bug fixes + configurable hooks + custom priorities
• improved service management and error handling
• the release contains more target platforms, static binaries only
• require go 1.20, build with 1.20.3
• auto-remove bouncer when the package is purged (debian) or removed (rpm, uninstall.sh)
• common CI, build workflow and install scripts with the other Go bouncers
• packaging and installation tests
• Correct backend cleanup and return code

Full list:

• Build with go 1.20.4 (#270) @mmetc
• Correct backend cleanup and return code (#268) @mmetc
• test .yaml.local (#269) @mmetc
• use official library for slices (#267) @mmetc
• Log config cleanup, extract/inline Logging structure (#266) @mmetc
• Remove redundant code (#265) @mmetc
• fix minor logging issues (#264) @mmetc
• CI: packaging tests (#261) @mmetc
• deb: fixed bouncer removal when purging package (#259) @mmetc
• Fix CI cache (#258) @mmetc
• Cleanup packaging, fix permissions (#257) @mmetc
• Moved install helper to a library, shorter code (#256) @mmetc
• Fix build typo (#255) @mmetc
• Fix freebsd build with stubs (#254) @mmetc
• CI: codeql v2 (#253) @mmetc
• Add config to set priority of nftables chain (#213) @sbs2001
• Fix nftables mode for ipv4 only / ipv6 only (#252) @mmetc
• Add fixture for functional tests with docker (#242) @mmetc
• Split code in packages for pkg/ and cmd/ (#251) @mmetc
• Update install/uninstall scripts (#247) @mmetc
• Add hook to metrics (#250) @mmetc
• CI: Rewrote the release workflow (#246) @mmetc
• non-blocking stream bouncer (#240) @mmetc
• Install.sh: support suse/zypper (#245) @mmetc
• Increase file limit in systemd unit (#244) @mmetc
• Batch packet filter (#237) @mmetc
• Run tests with pytest, rename test directory, unify build/test/lint workflow (#241) @mmetc
• Update go.mod for stable versions and cve (#235) @mmetc
• Require go 1.20 (#234) @mmetc
• Nftables: Add configurable hooks (#231) @Xyaren
• make clean: remove debian/ artifacts (#226) @mmetc
• restart service from systemd (#225) @mmetc