mullvadvpn/mullvad-relay-selector/src/lib.rs, branch Add-imperative-verb-tidyThe Mullvad VPN client app for desktop and mobilehttp://git.waynecole.info/mullvadvpn/atom?h=Add-imperative-verb-tidy2024-03-27T10:43:44ZRefactor `mullvad-relay-selector`2024-03-27T10:43:44ZMarkus Petterssonmarkus.pettersson@mullvad.net2024-02-16T15:24:33Zurn:sha1:707ecf44bd2b21642e51c8b9f5440bc287bcc511
Implement a system built on 'queries' for selecting appropriate relays.
A query is a set of constraints which dictates which relay(s) that *can*
be chosen by the relay selector.
The user's settings can naturally be expressed as a query. The semantics
of merging two queries in a way that always prefer user settings is
defined by the new `Intersection` trait.
Split `mullvad-relay-selector` into several modules:
- `query.rs`: Definition of a query on different types of relays. This
module is integral to the new API of `mullvad-relay-selector`
- `matcher.rs`: Logic for filtering out candidate relays based on a
query.
- `detailer.rs`: Logic for deriving connection details for the selected
relay.
- `tests/`: Integration tests for the new relay selector. These tests
only use the public APIs of `RelaySelector` and make sure that the
output matches the expected output in different scenarios.
Replace err_derive with thiserror2024-02-27T09:38:19ZJoakim Hulthejoakim@hulthe.net2024-02-26T13:24:15Zurn:sha1:a6d3578d256349ffe74b7c6a7a80ac2d70b7f68e
`err_derive` is unmaintained and will probably stop working with rust
edition 2024. `thiserror` is almost a drop-in replacement. This commit
simply replaces all occurences of `derive(err_derive::Error)` with
`derive(thiserror::Error)` and fixes the attributes, but the Error and
Display impls should be identical.
Move `relay_updater` to `mullvad-daemon`2024-02-20T16:48:37ZMarkus Petterssonmarkus.pettersson@mullvad.net2024-02-20T13:10:07Zurn:sha1:16831a2ce194ef9defad6c13bd80baf639d57490
Move `mullvad-relay-selector::relay_updater` to the `mullvad-daemon`.
The implications of this is that `mullvad-relay-selector` can drop the
dependency on both `mullvad-api` and `tokio`, which brings down the
total amount of dependencies when running a simple `Cargo check` from
250+ down to a mere 75. :-)
Remove `parking_lot`2024-02-20T16:48:35ZMarkus Petterssonmarkus.pettersson@mullvad.net2024-02-20T13:58:08Zurn:sha1:40c41a13faebe3798b3db8ae9a27b971406671aaFix redundant imports2024-02-19T14:28:02ZDavid Lönnhagerdavid.l@mullvad.net2024-02-19T09:07:28Zurn:sha1:07bf94820842bd3a034ca4e9b32641d7ef1c5e78Allow app to use custom socks5 and shadwosocks proxies2024-01-03T13:38:41ZJonathanjonathan@mullvad.net2023-12-05T09:03:08Zurn:sha1:4fdc34acbba60d5092e45ce3e513d30ec996c317
This PR has a couple of different purposes
- Allow users to use socks5 local proxies with the CLI without
having to be root nor use split-tunneling. This only works for
OpenVPN.
- Unify the types used by different proxy parts of the codebase,
such as the Access Methods as well as some already existing
OpenVPN proxy code.
This PR changes the firewall on all desktop platforms as well as changes
the routing table slightly on MacOS and Windows.
On Linux the firewall code is modified to apply the appropriate firewall
marks to all packages that go to a remote endpoint corresponding to the
remote part of a local socks5 proxy. The firewall marks will allow the
routing to be done without having to modify the routing table.
On MacOS and Windows the routing table is modified to allow packages to
go to that same endpoint to pass outside the VPN tunnel, it will
additionally punch a hole in the firewall.
The PR also migrates the settings file from version 7 to version 8 in order
to properly and neatly unify Proxy related types.
Finally it provides some slight extensions to the gRPC interface in
order to allow for control over the custom proxy settings.
Select WireGuard as automatic tunnel protocol three times instead of two2023-12-12T16:09:00ZDavid Lönnhagerdavid.l@mullvad.net2023-12-06T14:57:04Zurn:sha1:9a4424d9599d323e0a2c154e1fca8ee0eb8e932dAlways alternate between random ports and port 53 when using WireGuard2023-12-12T16:09:00ZDavid Lönnhagerdavid.l@mullvad.net2023-12-06T15:52:16Zurn:sha1:72ee5f1546d84200e2f1918c74540eb5df7ba612Cycle over all udp2tcp ports2023-12-12T16:08:59ZDavid Lönnhagerdavid.l@mullvad.net2023-12-06T14:03:18Zurn:sha1:1ece9472405f8413d5ce5240e7444a1a495f973e
There are currently only two ports, so this only simplifies the logic
but makes no practical difference
Remove mention of special automatic tunnel protocol logic on Windows,2023-12-12T15:45:05ZDavid Lönnhagerdavid.l@mullvad.net2023-12-06T14:09:36Zurn:sha1:1e30f44b14df3f1c515ab5a8d79fa6cdf4ccf67e
and other vestiges