v0.3.1

Added

• Add key algorithm to user details in the admin interface.
• Add --disable-http CLI flag.
• Add --disable-tcp CLI flag.
• Add --random-subdomain-filter-profanities CLI flag.
• Add --requested-domain-filter-profanities CLI flag.
• Add --ip-allowlist CLI flag.
• Add --ip-blocklist CLI flag.

Changed

• Separate TCP and alias logic.
• Remove inaccesible tabs from admin interface when using one or more of the --disable-* flags.
• Set nodelay for TCP streams.
• Don't duplicate fingerprints logic.

v0.3.0

Added

• Add user detail popups to admin interface.
• Add functionality to remove users via the admin interface.
• Add CLI to integration tests.
• Add mechanism to disconnect unproxied unauthed users.
• Add tcp-alias option for remote forwarding connections.
• Add --disable-aliasing CLI flag.
• Add --unproxied-connection-timeout CLI flag.
• Add --random-subdomain-length CLI flag.

Fixed

• BREAKING: Panic if required directories are missing.
• Prevent memory leak if a session hasn't been opened.
• Improve support for HTTP aliases.
• Use proxy_handler for HTTP local forwardings.
• Better handling of exec_request commands.

Changed

• BREAKING: Downgrade HTTP hosts to aliases when passing allowed-fingerprints.
• Bump MSRV to 1.82.0.
• Consolidate configurations.
• Warn when one of multiple parsings fail.

v0.2.1

Added

• Add Sandhole version to admin interface.
• Add signal handling for shutdown.

Fixed

• Fix SSH authentication log always showing "no authentication".

Changed

• Minor improvements to admin interface.

v0.2.0

Added

• BREAKING: Add remote_address field to API login request.
• Add user forwarding quotas via the --quota-per-user option.
• Add --connect-ssh-on-https-port option.
• Add user IDs to admin interface.

Fixed

• Better handling of initial value and windowing for telemetry counters.
• Improve random addressing to avoid most collisions.

Changed

• BREAKING: Bump MSRV to 1.81.0.
• BREAKING: Rename --allow-provided-subdomains to --allow-requested-subdomains.
• Change --random-subdomain-seed=fingerprint to also take user into account.
• Modify exports to live within lib.rs.
• Update russh dependency to version 0.49.2.
• Update sysinfo dependency to version 0.33.0.

v0.1.4

Changed

• Update russh dependency to version 0.47.0-beta.4 in order to be published to Crates.io

v0.1.3

Added

• Add system info to admin interface

Fixed

• Fix leak with SSH connections

Changed

• Revamp admin interface
• Improve counter measurements
• Improve placeholders in CLI
• Use DroppableHandle in more places

v0.1.2

Added

• Add logging for ACME certificates
• Basic documentation for docs.rs

Changed

• Improve logging when using --load-balance=replace
• Make fingerprint-checking consistent
• Better logging/admin interface with canonical IPs
• Remove some unecessary allocations
• Decrease size of Docker images

v0.1.1

Fixed

• Fix fingerprint verification for non-alias flows

Changed

• Remove dependency on reqwest

v0.1.0

Initial release.