11 Commits

Author	SHA1	Message	Date
ginuerzh	dd19e4387a	feat(tls): add rejectUnknownSNI support for TLS listeners ... Adds RejectUnknownSNI and ServerNames fields to TLSConfig. When enabled, TLS handshakes with missing or non-allowlisted SNI are rejected at the handshake level via GetConfigForClient before any certificate is sent. Works across all TLS-based listener types (tls, mtls, ws, mws, http2, grpc, http3) since they share the same *tls.Config from LoadServerConfig.	2026-05-31 22:11:29 +08:00
ginuerzh	c42a44abb6	add sniffer utility	2024-10-02 22:51:23 +08:00
ginuerzh	e22aa91571	add route for recorder	2024-09-24 20:20:15 +08:00
ginuerzh	e09ec08881	add sid for connector log	2024-09-20 18:20:57 +08:00
ginuerzh	2ae0462822	add support for linux network namespace	2024-06-21 23:38:18 +08:00
ginuerzh	6bface4581	add path option for hop	2023-11-09 20:34:59 +08:00
ginuerzh	e8d5e719a4	add tls options	2023-10-29 10:27:13 +08:00
Charles Xu	7833ca8bc6	replace deprecated method	2023-09-18 10:16:48 +00:00
ginuerzh	18fa84b51f	load default CA from ca.pem	2023-03-21 18:28:05 +08:00
ginuerzh	a39800270b	load default CA from ca.pem	2023-03-21 18:11:06 +08:00
ginuerzh	a3346ad246	add pkgs from core	2022-04-04 12:44:35 +08:00