summaryrefslogtreecommitdiffhomepage
path: root/tunnel-obfuscation
AgeCommit message (Collapse)AuthorFilesLines
2025-10-09Connect LWO obfuscator when `run` is invokedMarkus Pettersson2-56/+103
Fixes race condition with socket bypass on Android
2025-09-22Improve xor_bytes performanceDavid Lönnhager1-4/+4
2025-09-18Add unit test for multiplexer obfuscationDavid Lönnhager2-0/+78
2025-09-18Limit number of initial packets in multiplexerDavid Lönnhager1-0/+11
2025-09-18Add documentation for multiplexer obfuscationDavid Lönnhager2-95/+148
2025-09-18Add multiplexer POC to daemon, TSM, and relay selectorDavid Lönnhager1-67/+138
2025-09-18Add POC multiplexer tunnel obfuscation moduleJon Petersson6-5/+269
Co-authored-by: David Lönnhager <david.l@mullvad.net>
2025-09-18Bump tokio-utilDavid Lönnhager1-1/+1
2025-09-15Add LWO obfuscatorDavid Lönnhager7-85/+500
2025-09-11Fix enable missing `socket` of `nix` crate in `tunnel-obfuscation`Markus Pettersson1-1/+1
2025-09-04Guarantee the QUIC UDP socket is non blockingBug Magnet1-0/+4
2025-09-03Add UI support for QUIC settingJonatan Rhodin1-5/+1
2025-09-03Call `bypass` on QUIC socket on AndroidMarkus Pettersson2-13/+35
2025-09-03Do not run QUIC proxy until `Obfuscator::run` is calledMarkus Pettersson1-13/+17
2025-08-18Update QUIC MTU valueDavid Lönnhager1-1/+3
2025-08-15Do not wait for QUIC connection establishment when spawning obfuscatorDavid Lönnhager1-10/+9
2025-07-10Run `cargo fmt`Sebastian Holmin3-4/+4
2025-07-09Adjust MTU for QUIC obfuscator based on tunnel MTUMarkus Pettersson1-8/+74
Make fields of `quic::Settings` private and expose constructors/builder fns to configure a `quic::Settings` struct. A previous commit that added a public, optional field to the settings struct broke a caller (iOS), which is suboptimal. Add a new token type: `quic::AuthToken`. This will perform "all" necessary validation that was previously done ad-hoc when the token was to be transformed into an authorization header. It also helps to not fuck up the values passed to `quic::Settings::new`, since it was previously Stringly-typed.
2025-07-09Add IPv6 support to `mullvad-masque-proxy`Markus Pettersson2-18/+65
2025-07-09Add support for QUIC in the relay selectorMarkus Pettersson1-3/+12
Parse new 'features' key from relay list API, and add Quic obfuscation to automatic retry order
2025-07-09Fix called `Iterator::last` on a `DoubleEndedIterator`Sebastian Holmin1-1/+1
2025-07-08Update FFI to handle new QUIC paramsJon Petersson1-4/+4
2025-06-10Update nix to 0.30 everywhereJoakim Hulthe2-6/+8
2025-05-08Add QUIC obfuscation to mullvad daemon and management interfaceDavid Lönnhager1-0/+6
2025-05-05Set auth header in tunnel-obfuscationDavid Lönnhager1-1/+5
2025-05-02Apply changes from PRAndrew Bulhak1-2/+7
2025-05-02Add unimplemented function on AndroidDavid Lönnhager1-0/+5
2025-05-02Update mullvad-iosDavid Lönnhager1-2/+0
2025-05-02Prevent blocking until connected to QUIC endpointDavid Lönnhager2-28/+23
2025-05-02Add Quic to tunnel-obfuscationAndrew Bulhak3-0/+98
2024-11-05Remove unnecessary result in return typeSebastian Holmin1-11/+3
2024-11-05Create shadowsocks socket with IP version of endpointSebastian Holmin1-2/+8
2024-10-23Use sendto and recvfrom instead of connecting Shadowsocks socketDavid Lönnhager1-11/+21
connect() seems to bind to a particular interface, which breaks the connection when roaming
2024-10-21Take obfuscation overhead into account when setting MTUJoakim Hulthe3-0/+32
2024-09-16Run VpnService.protect() on Shadowsocks socket before connectingDavid Lönnhager2-20/+62
2024-09-10Expose Shadowsocks fd on AndroidDavid Lönnhager1-16/+25
2024-09-02Fix panic caused by join handle being awaited twiceDavid Lönnhager1-6/+5
2024-08-29Lower log level of shadowsocks write errorsDavid Lönnhager1-1/+2
2024-08-16Add Shadowsocks to tunnel-obfuscation crateDavid Lönnhager5-14/+286
2024-02-27Replace err_derive with thiserrorJoakim Hulthe3-15/+13
`err_derive` is unmaintained and will probably stop working with rust edition 2024. `thiserror` is almost a drop-in replacement. This commit simply replaces all occurences of `derive(err_derive::Error)` with `derive(thiserror::Error)` and fixes the attributes, but the Error and Display impls should be identical.
2024-01-16Add rust-version to all Cargo.tomlLinus Färnstrand1-0/+1
2024-01-09Remove version and publish cargo metadataLinus Färnstrand1-2/+0
Since Rust 1.75.0 the `version` field is optional. The version defaults to "0.0.0" if it's not specified, and `publish` defaults to false if no version has been given. So by not specifying a version we get both `version = "0.0.0" and `publish = false` "for free"
2024-01-04Add workspace level lintsLinus Färnstrand1-0/+3
2023-09-11Make err-derive a workspace dependencyDavid Lönnhager1-1/+1
2023-08-02Remove unused dependencies in tunnel-obfuscationLinus Färnstrand1-1/+0
2023-07-14Move tokio dependency to be a workspace dependencyLinus Färnstrand1-1/+1
2023-07-14Set package fields in workspace and inherit in packagesLinus Färnstrand1-5/+6
2023-02-28Enable TCP_NODELAY on the WireGuard over TCP socketLinus Färnstrand1-0/+2
2023-02-28Upgrade udp-over-tcp to v0.3.0Linus Färnstrand1-1/+1
2023-01-30Run `cargo clippy --fix` with the new Rust 1.67 preferred formatLinus Färnstrand1-1/+1
Copyright © 2025 - 2026 Wayne Cole. WTFPL. Attribution appreciated. No warranty. Not liable for bodily damages.