Herbert Wolverson
db932928c7
Warn when expensive clocksource is active
2026-08-14 20:14:32 -05:00
Herbert Wolverson
e939ff5a87
Feat: add compatibility shim to first-run setup
2026-08-10 17:43:10 -05:00
Herbert Wolverson
f7d53d8cc6
Feat: add XDP interface compatibility shim
2026-08-10 17:02:09 -05:00
Herbert Wolverson
94b3c82679
Gate Bakery startup on local license-cache initialization
...
Keep queued Bakery commands intact while lqosd checks local .keys state, releasing the gate for both successful and non-fatal cache outcomes without tying startup to Insight network availability.
2026-08-06 10:13:45 -05:00
Herbert Wolverson
b89fe5d33a
Fix HTB-lazy full reload queue growth
2026-07-31 12:54:54 -05:00
Herbert Wolverson
bbb4acff71
Merge remote-tracking branch 'refs/remotes/origin/develop' into develop
2026-07-31 10:15:56 -05:00
Herbert Wolverson
8bea1e358d
Docs: Explain DOCSIS modem headroom
2026-07-30 20:20:10 -05:00
Herbert Wolverson
ddf78a0f16
Fix lazy queue memory preflight warnings
2026-07-30 09:59:57 -05:00
Herbert Wolverson
68725364f9
Update RADIUS accounting tests for stable IDs
2026-07-21 15:18:55 -05:00
Herbert Wolverson
d4fc3d255d
Stabilize flat-network binpacking assignments
2026-07-21 15:12:10 -05:00
Herbert Wolverson
12609a18c5
Fix NetworkJsonNode test fixture
2026-07-21 14:17:08 -05:00
Herbert Wolverson
2de0e0ad00
Remove RADIUS implementation PRD
2026-07-21 14:05:11 -05:00
Herbert Wolverson
128e85f49a
Merge remote-tracking branch 'origin/develop' into feat/radius_accounting
2026-07-21 14:00:17 -05:00
Herbert Wolverson
8ed78852af
Render RADIUS diagrams in Read the Docs
2026-07-21 13:57:33 -05:00
Herbert Wolverson
87e83d2cc4
Document RADIUS dynamic circuits
2026-07-21 13:55:10 -05:00
Herbert Wolverson
9987302830
Add portable RADIUS lifecycle harness
2026-07-21 13:39:07 -05:00
Herbert Wolverson
6416672f7b
Fix RADIUS MAC identity field
2026-07-21 13:13:45 -05:00
Herbert Wolverson
5726826735
Fix topology duplicate and stale locks
2026-07-21 12:43:07 -05:00
Herbert Wolverson
341d2fa39a
Recover stale override locks after PID reuse
2026-07-21 12:26:32 -05:00
Herbert Wolverson
e203bb3a94
Fix stable RADIUS dynamic circuit IDs
2026-07-21 12:06:48 -05:00
Herbert Wolverson
45976a75bc
Add RADIUS username circuit matching
2026-07-21 11:33:30 -05:00
Herbert Wolverson
49d4a29139
Log RADIUS accounting status
2026-07-20 12:06:44 -05:00
Herbert Wolverson
e975445c73
Merge remote-tracking branch 'origin/develop' into feat/radius_accounting
...
# Conflicts:
# src/rust/lqos_config/src/etc/mod.rs
# src/rust/lqos_config/src/lib.rs
# src/rust/lqosd/Cargo.toml
# src/rust/lqosd/src/main.rs
2026-07-20 11:27:51 -05:00
Herbert Wolverson
453feb71bc
Fix: classify merged CAKE bus requests
2026-07-17 15:04:52 -05:00
Herbert Wolverson
d522167177
Merge remote-tracking branch 'origin/codex/api-1000-user-policy' into codex/integrate-api-cake
2026-07-17 14:59:54 -05:00
Herbert Wolverson
174b4cf3ef
Merge remote-tracking branch 'origin/feat/1094_cake_extended' into codex/integrate-api-cake
...
# Conflicts:
# src/rust/lqos_bus/src/bus/protocol.rs
# src/rust/lqos_bus/src/bus/queue_data.rs
# src/rust/lqos_bus/src/lib.rs
# src/rust/lqos_queue_tracker/src/queue_diff.rs
# src/rust/lqos_queue_tracker/src/queue_types/tc_cake.rs
# src/rust/lqosd/src/throughput_tracker/mod.rs
2026-07-17 14:59:46 -05:00
Herbert Wolverson
ba939dcd8c
Fix: prevent circuit bus handler deadlocks
2026-07-17 14:21:45 -05:00
Herbert Wolverson
dd5ed5d15b
Preserve API credentials across config updates
2026-07-17 10:41:10 -05:00
Herbert Wolverson
bfc1d3f2d9
Document named local API keys
2026-07-17 10:04:01 -05:00
Herbert Wolverson
abdf81c6f3
Add named local API keys
2026-07-17 10:03:42 -05:00
Herbert Wolverson
082fc9d23c
Document LibreQoS 2.2 API access policy
2026-07-16 14:37:31 -05:00
Herbert Wolverson
51c91bacfd
Allow API access up to 1000 mapped circuits
2026-07-16 14:37:00 -05:00
Herbert Wolverson
6ac68ee860
Feat: add StormGuard diagnostics to the tree page
2026-07-15 12:30:04 -05:00
Herbert Wolverson
2cbfed0c12
Feat: add bounded StormGuard diagnostic telemetry
2026-07-15 12:29:45 -05:00
Herbert Wolverson
71d59129c9
Fix: acknowledge StormGuard adjustments and early recovery
2026-07-15 12:29:21 -05:00
Herbert Wolverson
e9a7e6eeb6
Fix: Update crossbeam-epoch to 0.9.20
2026-07-14 10:01:06 -05:00
Herbert Wolverson
82a8ecd9cf
Fix: Stop packaging lqos_topology as a binary
2026-07-14 09:46:02 -05:00
Herbert Wolverson
588e69ec04
Fix: Restore StormGuard rates when disabled
2026-07-13 16:07:30 -05:00
Herbert Wolverson
7322dcd5a3
Fix: WebUI was missing some options.
2026-07-06 14:33:41 -05:00
Herbert Wolverson
c6e5dc4966
Add RADIUS accounting config page
2026-06-26 14:22:23 -05:00
Herbert Wolverson
645cf55191
Add RADIUS radclient harness
2026-06-26 12:05:09 -05:00
Herbert Wolverson
384017b09d
refactor: split topology crate domains
2026-06-23 10:05:22 -05:00
Herbert Wolverson
0a862af744
fix: remove unused topology tracing subscriber
2026-06-23 09:26:17 -05:00
Herbert Wolverson
26078bf2a2
fix: share topology probe unavailable reasons
2026-06-23 09:24:41 -05:00
Herbert Wolverson
4df5b2017e
fix: validate topology probe IP prefixes
2026-06-23 09:22:21 -05:00
Herbert Wolverson
b14d07df52
fix: keep queue visible nodes visible
2026-06-23 09:19:11 -05:00
Herbert Wolverson
04edebe133
Reduce ALL_FLOWS lock contention
...
Hide the live flow table behind accessors, publish an ArcSwap active-flow snapshot for informational readers, and move export/BPF cleanup work outside the ALL_FLOWS lock.
Preserve existing wire and circuit identity behavior while adding regression coverage for snapshot readers, stale filtering, exact-rate serialization, and QoO/RTT thresholds.
2026-06-23 09:16:46 -05:00
Herbert Wolverson
2dde3874c8
fix: satisfy topology health clippy
2026-06-22 14:31:05 -05:00
Herbert Wolverson
4fd8c07385
fix: identify topology sites by canonical kind
2026-06-22 14:29:44 -05:00
Herbert Wolverson
2e18bd1176
fix: reject topology squashing key collisions
2026-06-22 14:25:23 -05:00
Herbert Wolverson
d40faa0c91
fix: clear anchors on circuit reparent
2026-06-22 14:21:35 -05:00
Herbert Wolverson
95edbe8a11
fix: reject conflicting duplicate circuit rows
2026-06-22 14:18:32 -05:00
Herbert Wolverson
67d8e9c3b5
fix: prefer healthy auto attachments
2026-06-22 14:15:33 -05:00
Herbert Wolverson
cdfa15dd6b
fix: mark unobserved topology health unavailable
2026-06-22 14:13:26 -05:00
Herbert Wolverson
31ef7e24bf
fix: reject mismatched topology probe responses
2026-06-22 14:08:25 -05:00
Herbert Wolverson
c1bb7bc630
fix: resolve nested queue aliases
2026-06-22 14:05:12 -05:00
Herbert Wolverson
4cae013e7d
fix: preserve name-only direct circuit nodes
2026-06-22 13:59:11 -05:00
Herbert Wolverson
0f4c006f97
fix: use process lock for topology publishing
2026-06-22 13:55:11 -05:00
Herbert Wolverson
2f01530b51
fix: prepare topology publish payloads before writes
2026-06-22 13:50:40 -05:00
Herbert Wolverson
a564b7beef
fix: fail closed on topology reparent errors
2026-06-22 13:46:29 -05:00
Herbert Wolverson
0d9acda3e1
chore: timeouts on channel calls to the bus
2026-06-22 13:32:23 -05:00
Herbert Wolverson
df1c9848d3
Chore: Cleanup duplicate unix_now (use the common one)
2026-06-22 13:12:05 -05:00
Herbert Wolverson
56890b6396
Refactor: break topology into more modules for readability.
2026-06-22 12:30:52 -05:00
Herbert Wolverson
6014b3c468
Chore: Migrate topology from being async to being in an independent
...
thread. Stop using the bus - instead, use the the internal bus channel.
2026-06-22 11:29:56 -05:00
Herbert Wolverson
5a77c254dd
Implement RADIUS dynamic circuit handling
2026-06-22 09:24:54 -05:00
Herbert Wolverson
0f513229c2
Refactor Rust file locks into shared helper
2026-06-17 15:51:08 -05:00
Herbert Wolverson
c668850cb2
Update local workflow skills
2026-06-14 15:39:00 -05:00
Herbert Wolverson
902d72d345
Docs: Mark eBPF audit tasks deferred
2026-06-14 15:16:17 -05:00
Herbert Wolverson
55c0bddc21
Document managed Caddy API loopback guardrails
...
(cherry picked from commit 1a14cc8f72 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
18996c0faf
Add Node Manager content security policy
...
(cherry picked from commit 82e41c56bb )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
85ba1712e4
Harden browser storage for network drafts
...
(cherry picked from commit 85fb85b032 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
e3022c866e
Add Node Manager auth regression gates
...
(cherry picked from commit 2950a66857 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
c0a5ad906d
Clamp telemetry wire conversions
...
(cherry picked from commit c0219d07a4 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
719ca0a469
Fix packet capture XSS handling
...
(cherry picked from commit 711d117e7e )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
594517ff2c
Remove anonymous WebUI access
...
(cherry picked from commit 3359e6722c )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
cfc4262b1e
Fix broad test suite failures
...
(cherry picked from commit e9e48ab153 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
1b04a51bc6
Fix dashboard theme websocket XSS
...
(cherry picked from commit efbdcfab51 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
4f71f18b3f
Fix WebUI session token exposure
...
(cherry picked from commit 187db1be86 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
06cb3b902d
Fix operator names in WebUI HTML sinks
...
(cherry picked from commit 8f11fa4ee9 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
aa40b83eac
Fix NetFlow5 export narrowing
...
(cherry picked from commit c976364ea2 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
4a013e9829
Fix queue tracker counter narrowing
...
(cherry picked from commit 3ee5ecb58c )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
d28bb4d072
Fix flow explorer time-source panics
...
(cherry picked from commit 1e5b081889 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
59a4f9ba85
Fix packet capture download panic
...
(cherry picked from commit e5996e8205 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
7fe9677477
Restart lqos_api after Caddy changes
...
(cherry picked from commit ffc0fd619a )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
c2075de738
Add WebUI login rate limiting
...
(cherry picked from commit d162f7ddc6 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
c0a251e09b
Remove permissive WebUI CORS
...
(cherry picked from commit b3b04eab6a )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
3e4af631f9
Remove unused lqos_network_devices tokio dependency
...
(cherry picked from commit 9bb346c0c0 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
bc24789f35
Fix rand security audit finding
...
(cherry picked from commit a38d66152b )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
cc0a1b206d
Chore: Add security audit executive summary
...
(cherry picked from commit 3922e2c90c )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
e7b3cdbfd4
Chore: Add node manager privacy audit stage
...
(cherry picked from commit 61937c323b )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
79380fe97e
Chore: Add panic and type-loss audit stage
...
(cherry picked from commit dcd25a457b )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
ca7f96c95d
Chore: Add bridged-interface security audit stage
...
(cherry picked from commit e4ab113674 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
de92c5f0c5
Chore: Add control-plane security audit stage
...
(cherry picked from commit ae636a2b24 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
d5601933e1
Chore: Add security audit dependency baseline
...
(cherry picked from commit f564a2ef57 )
2026-06-14 15:14:14 -05:00
Herbert Wolverson
e2c00f5933
Fix: Add bus hang diagnostics and ticker backpressure
2026-06-13 10:09:30 -05:00
Herbert Wolverson
543b8d52db
Complete RADIUS accounting listener and fixtures
2026-06-10 12:36:02 -05:00
Herbert Wolverson
9f4ab17c4e
Add RADIUS accounting MVP plumbing
2026-06-09 21:58:05 -05:00
Herbert Wolverson
6b8eed335f
Reduce LTS2 WSS read timeout log level
2026-06-09 14:12:20 -05:00
Herbert Wolverson
da45f64732
Fix: Serialize dynamic IP promotions
2026-06-09 13:34:44 -05:00
Herbert Wolverson
276c845986
Fix: Exclude dynamic circuits from TreeGuard
2026-06-09 13:13:25 -05:00