riccardom 5fbd6fdc69 pqkem: rotate PSK in kernel mode instead of skipping ...

The idle-gate reads LastActivities, which only tracks per-peer data in userspace;
in kernel mode it is empty, so the gate treated every kernel peer as idle and
disabled data-path rotation entirely. Detect the bind via IsUserspaceBind and, in
kernel mode, report zero activity age (always 'active') so rotation runs on every
rekey. Lazy back-to-idle is already limited in kernel; the eBPF WG-activity
detection will later supply a real signal that excludes handshake/pqkem traffic.

2026-07-31 10:49:27 +02:00

..

acl

[client] Skip firewall ruleset rebuild when config is unchanged (#6508)

2026-06-29 19:51:50 +02:00

auth

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

daemonaddr

Lower socket auto-discovery log from Info to Debug (#5463)

2026-02-26 17:51:38 +01:00

debug

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

dns

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dnsfwd

[client] Forward non-address DNS record types through route forwarders (#6455)

2026-06-28 18:50:17 +02:00

ebpf

[client] Clear stale UDP checksum in eBPF XDP proxy after port rewrite (#6861)

2026-07-23 14:37:52 +02:00

expose

[client] Add Expose support to embed library (#5695)

2026-03-30 15:53:50 +02:00

ingressgw

[client, management] Add port forwarding (#3275)

2025-03-09 16:06:43 +01:00

lazyconn

[client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863)

2026-07-23 18:40:54 +02:00

listener

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

metrics

[management, client] Add management-controlled client metrics push (#5886)

2026-07-01 14:50:25 +02:00

netflow

[client] fix flaky test around event aggregation (#6710)

2026-07-09 18:17:28 +02:00

networkmonitor

[client] Filter scoped/cloned default routes from BSD network monitor RTM_ADD (#6208)

2026-05-25 18:38:21 +02:00

peer

pqkem: rotate PSK in kernel mode instead of skipping

2026-07-31 10:49:27 +02:00

peerstore

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

portforward

[client] Apply netroute unspecified-destination workaround on android (#6192)

2026-05-29 15:15:22 +02:00

pqkem

pqkem: derive PSK with HKDF-SHA256

2026-07-31 10:49:27 +02:00

profilemanager

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

relay

[client, relay] Expose relay transport and connection errors in status and metrics (#6342)

2026-06-17 15:41:48 +02:00

rosenpass

[client,management] sync 0.74.4 changes (#6727)

2026-07-11 11:03:55 +02:00

routemanager

[client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863)

2026-07-23 18:40:54 +02:00

routeselector

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

sleep

[client] Bump macOS sleep callback timeout to 20s (#6220)

2026-05-20 13:09:22 +02:00

statemanager

[client] Diagnose empty vs corrupt state (#6816)

2026-07-17 15:31:07 +02:00

stdnet

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

syncstore

[client] Persist sync response via pluggable store (disk on iOS) (#6331)

2026-06-03 14:18:50 +02:00

templates

Update client login success page (#4797)

2025-11-17 15:28:20 +01:00

updater

[client, management, misc] expose VCS revision in dev build version output (#6263)

2026-06-03 08:56:50 +02:00

winregistry

[client] Clean up match domain reg entries between config changes (#4676)

2025-10-21 18:14:39 +02:00

conn_mgr_test.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

conn_mgr.go

[client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863)

2026-07-23 18:40:54 +02:00

connect_android_default.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

connect_android_embed.go

[client] Support embed.Client on Android with netstack mode (#5623)

2026-04-01 16:19:34 +02:00

connect_test.go

[client] Support random wireguard port on client (#4085)

2025-07-02 09:01:02 +02:00

connect.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

dns_peer_activator_test.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_peer_activator.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

dns.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

engine_authsession.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_generic.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_js.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_lazy_exclude_test.go

[client] Fix forwarder peers never excluded from lazy connections (#6674)

2026-07-14 12:12:37 +02:00

engine_privileged_test.go

[client] Categorize privileged tests behind a build tag and run them in Docker (#6425)

2026-06-28 16:15:54 +02:00

engine_session_deadline_test.go

[client] Keep session deadline visible across reconnects (#6847)

2026-07-22 15:22:16 +02:00

engine_sessionwatch_js.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_sessionwatch.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_ssh.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

engine_stdnet_android.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_stdnet.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_test.go

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

engine.go

pqkem: register data-path endpoint from signalling

2026-07-27 17:09:36 +02:00

iface_common.go

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

iface_windows.go

Interface code cleaning (#3358)

2025-02-21 10:19:38 +01:00

iface.go

Revert "Revert "[relay] Update GO version and QUIC version (#4736)" (#5055)" (#5071)

2026-01-08 18:58:22 +01:00

message_convert.go

[misc] Move shared components to shared directory (#4286)

2025-08-05 15:22:58 +02:00

mobile_dependency.go

[client] Android debug bundle support (#5888)

2026-04-20 11:26:30 +02:00

pqkem_adapter.go

Don't rotate PQ keys if data path is idle for ~90s (less than a WG handhshake time

2026-07-31 10:49:27 +02:00

pqkem_transport.go

Makes Transport just a UDP socket.

2026-07-27 17:09:36 +02:00

session.go

Send terminal notification on peer session expiry (#1660)

2024-03-08 18:28:13 +01:00

state.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

wg_iface_monitor_linux.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor_other.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00