100 Commits
Author SHA1 Message Date
Herbert Wolverson db932928c7 Warn when expensive clocksource is active 2026-08-14 20:14:32 -05:00
Herbert Wolverson e939ff5a87 Feat: add compatibility shim to first-run setup 2026-08-10 17:43:10 -05:00
Herbert Wolverson f7d53d8cc6 Feat: add XDP interface compatibility shim 2026-08-10 17:02:09 -05:00
Herbert Wolverson 94b3c82679 Gate Bakery startup on local license-cache initialization
Keep queued Bakery commands intact while lqosd checks local .keys state, releasing the gate for both successful and non-fatal cache outcomes without tying startup to Insight network availability.
2026-08-06 10:13:45 -05:00
Herbert Wolverson b89fe5d33a Fix HTB-lazy full reload queue growth 2026-07-31 12:54:54 -05:00
Herbert Wolverson bbb4acff71 Merge remote-tracking branch 'refs/remotes/origin/develop' into develop 2026-07-31 10:15:56 -05:00
Herbert Wolverson 8bea1e358d Docs: Explain DOCSIS modem headroom 2026-07-30 20:20:10 -05:00
Herbert Wolverson ddf78a0f16 Fix lazy queue memory preflight warnings 2026-07-30 09:59:57 -05:00
Herbert Wolverson 68725364f9 Update RADIUS accounting tests for stable IDs 2026-07-21 15:18:55 -05:00
Herbert Wolverson d4fc3d255d Stabilize flat-network binpacking assignments 2026-07-21 15:12:10 -05:00
Herbert Wolverson 12609a18c5 Fix NetworkJsonNode test fixture 2026-07-21 14:17:08 -05:00
Herbert Wolverson 2de0e0ad00 Remove RADIUS implementation PRD 2026-07-21 14:05:11 -05:00
Herbert Wolverson 128e85f49a Merge remote-tracking branch 'origin/develop' into feat/radius_accounting 2026-07-21 14:00:17 -05:00
Herbert Wolverson 8ed78852af Render RADIUS diagrams in Read the Docs 2026-07-21 13:57:33 -05:00
Herbert Wolverson 87e83d2cc4 Document RADIUS dynamic circuits 2026-07-21 13:55:10 -05:00
Herbert Wolverson 9987302830 Add portable RADIUS lifecycle harness 2026-07-21 13:39:07 -05:00
Herbert Wolverson 6416672f7b Fix RADIUS MAC identity field 2026-07-21 13:13:45 -05:00
Herbert Wolverson 5726826735 Fix topology duplicate and stale locks 2026-07-21 12:43:07 -05:00
Herbert Wolverson 341d2fa39a Recover stale override locks after PID reuse 2026-07-21 12:26:32 -05:00
Herbert Wolverson e203bb3a94 Fix stable RADIUS dynamic circuit IDs 2026-07-21 12:06:48 -05:00
Herbert Wolverson 45976a75bc Add RADIUS username circuit matching 2026-07-21 11:33:30 -05:00
Herbert Wolverson 49d4a29139 Log RADIUS accounting status 2026-07-20 12:06:44 -05:00
Herbert Wolverson e975445c73 Merge remote-tracking branch 'origin/develop' into feat/radius_accounting
# Conflicts:
#	src/rust/lqos_config/src/etc/mod.rs
#	src/rust/lqos_config/src/lib.rs
#	src/rust/lqosd/Cargo.toml
#	src/rust/lqosd/src/main.rs
2026-07-20 11:27:51 -05:00
Herbert Wolverson 453feb71bc Fix: classify merged CAKE bus requests 2026-07-17 15:04:52 -05:00
Herbert Wolverson d522167177 Merge remote-tracking branch 'origin/codex/api-1000-user-policy' into codex/integrate-api-cake 2026-07-17 14:59:54 -05:00
Herbert Wolverson 174b4cf3ef Merge remote-tracking branch 'origin/feat/1094_cake_extended' into codex/integrate-api-cake
# Conflicts:
#	src/rust/lqos_bus/src/bus/protocol.rs
#	src/rust/lqos_bus/src/bus/queue_data.rs
#	src/rust/lqos_bus/src/lib.rs
#	src/rust/lqos_queue_tracker/src/queue_diff.rs
#	src/rust/lqos_queue_tracker/src/queue_types/tc_cake.rs
#	src/rust/lqosd/src/throughput_tracker/mod.rs
2026-07-17 14:59:46 -05:00
Herbert Wolverson ba939dcd8c Fix: prevent circuit bus handler deadlocks 2026-07-17 14:21:45 -05:00
Herbert Wolverson dd5ed5d15b Preserve API credentials across config updates 2026-07-17 10:41:10 -05:00
Herbert Wolverson bfc1d3f2d9 Document named local API keys 2026-07-17 10:04:01 -05:00
Herbert Wolverson abdf81c6f3 Add named local API keys 2026-07-17 10:03:42 -05:00
Herbert Wolverson 082fc9d23c Document LibreQoS 2.2 API access policy 2026-07-16 14:37:31 -05:00
Herbert Wolverson 51c91bacfd Allow API access up to 1000 mapped circuits 2026-07-16 14:37:00 -05:00
Herbert Wolverson 6ac68ee860 Feat: add StormGuard diagnostics to the tree page 2026-07-15 12:30:04 -05:00
Herbert Wolverson 2cbfed0c12 Feat: add bounded StormGuard diagnostic telemetry 2026-07-15 12:29:45 -05:00
Herbert Wolverson 71d59129c9 Fix: acknowledge StormGuard adjustments and early recovery 2026-07-15 12:29:21 -05:00
Herbert Wolverson e9a7e6eeb6 Fix: Update crossbeam-epoch to 0.9.20 2026-07-14 10:01:06 -05:00
Herbert Wolverson 82a8ecd9cf Fix: Stop packaging lqos_topology as a binary 2026-07-14 09:46:02 -05:00
Herbert Wolverson 588e69ec04 Fix: Restore StormGuard rates when disabled 2026-07-13 16:07:30 -05:00
Herbert Wolverson 7322dcd5a3 Fix: WebUI was missing some options. 2026-07-06 14:33:41 -05:00
Herbert Wolverson c6e5dc4966 Add RADIUS accounting config page 2026-06-26 14:22:23 -05:00
Herbert Wolverson 645cf55191 Add RADIUS radclient harness 2026-06-26 12:05:09 -05:00
Herbert Wolverson 384017b09d refactor: split topology crate domains 2026-06-23 10:05:22 -05:00
Herbert Wolverson 0a862af744 fix: remove unused topology tracing subscriber 2026-06-23 09:26:17 -05:00
Herbert Wolverson 26078bf2a2 fix: share topology probe unavailable reasons 2026-06-23 09:24:41 -05:00
Herbert Wolverson 4df5b2017e fix: validate topology probe IP prefixes 2026-06-23 09:22:21 -05:00
Herbert Wolverson b14d07df52 fix: keep queue visible nodes visible 2026-06-23 09:19:11 -05:00
Herbert Wolverson 04edebe133 Reduce ALL_FLOWS lock contention
Hide the live flow table behind accessors, publish an ArcSwap active-flow snapshot for informational readers, and move export/BPF cleanup work outside the ALL_FLOWS lock.

Preserve existing wire and circuit identity behavior while adding regression coverage for snapshot readers, stale filtering, exact-rate serialization, and QoO/RTT thresholds.
2026-06-23 09:16:46 -05:00
Herbert Wolverson 2dde3874c8 fix: satisfy topology health clippy 2026-06-22 14:31:05 -05:00
Herbert Wolverson 4fd8c07385 fix: identify topology sites by canonical kind 2026-06-22 14:29:44 -05:00
Herbert Wolverson 2e18bd1176 fix: reject topology squashing key collisions 2026-06-22 14:25:23 -05:00
Herbert Wolverson d40faa0c91 fix: clear anchors on circuit reparent 2026-06-22 14:21:35 -05:00
Herbert Wolverson 95edbe8a11 fix: reject conflicting duplicate circuit rows 2026-06-22 14:18:32 -05:00
Herbert Wolverson 67d8e9c3b5 fix: prefer healthy auto attachments 2026-06-22 14:15:33 -05:00
Herbert Wolverson cdfa15dd6b fix: mark unobserved topology health unavailable 2026-06-22 14:13:26 -05:00
Herbert Wolverson 31ef7e24bf fix: reject mismatched topology probe responses 2026-06-22 14:08:25 -05:00
Herbert Wolverson c1bb7bc630 fix: resolve nested queue aliases 2026-06-22 14:05:12 -05:00
Herbert Wolverson 4cae013e7d fix: preserve name-only direct circuit nodes 2026-06-22 13:59:11 -05:00
Herbert Wolverson 0f4c006f97 fix: use process lock for topology publishing 2026-06-22 13:55:11 -05:00
Herbert Wolverson 2f01530b51 fix: prepare topology publish payloads before writes 2026-06-22 13:50:40 -05:00
Herbert Wolverson a564b7beef fix: fail closed on topology reparent errors 2026-06-22 13:46:29 -05:00
Herbert Wolverson 0d9acda3e1 chore: timeouts on channel calls to the bus 2026-06-22 13:32:23 -05:00
Herbert Wolverson df1c9848d3 Chore: Cleanup duplicate unix_now (use the common one) 2026-06-22 13:12:05 -05:00
Herbert Wolverson 56890b6396 Refactor: break topology into more modules for readability. 2026-06-22 12:30:52 -05:00
Herbert Wolverson 6014b3c468 Chore: Migrate topology from being async to being in an independent
thread. Stop using the bus - instead, use the the internal bus channel.
2026-06-22 11:29:56 -05:00
Herbert Wolverson 5a77c254dd Implement RADIUS dynamic circuit handling 2026-06-22 09:24:54 -05:00
Herbert Wolverson 0f513229c2 Refactor Rust file locks into shared helper 2026-06-17 15:51:08 -05:00
Herbert Wolverson c668850cb2 Update local workflow skills 2026-06-14 15:39:00 -05:00
Herbert Wolverson 902d72d345 Docs: Mark eBPF audit tasks deferred 2026-06-14 15:16:17 -05:00
Herbert Wolverson 55c0bddc21 Document managed Caddy API loopback guardrails
(cherry picked from commit 1a14cc8f72)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 18996c0faf Add Node Manager content security policy
(cherry picked from commit 82e41c56bb)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 85ba1712e4 Harden browser storage for network drafts
(cherry picked from commit 85fb85b032)
2026-06-14 15:14:14 -05:00
Herbert Wolverson e3022c866e Add Node Manager auth regression gates
(cherry picked from commit 2950a66857)
2026-06-14 15:14:14 -05:00
Herbert Wolverson c0a5ad906d Clamp telemetry wire conversions
(cherry picked from commit c0219d07a4)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 719ca0a469 Fix packet capture XSS handling
(cherry picked from commit 711d117e7e)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 594517ff2c Remove anonymous WebUI access
(cherry picked from commit 3359e6722c)
2026-06-14 15:14:14 -05:00
Herbert Wolverson cfc4262b1e Fix broad test suite failures
(cherry picked from commit e9e48ab153)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 1b04a51bc6 Fix dashboard theme websocket XSS
(cherry picked from commit efbdcfab51)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 4f71f18b3f Fix WebUI session token exposure
(cherry picked from commit 187db1be86)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 06cb3b902d Fix operator names in WebUI HTML sinks
(cherry picked from commit 8f11fa4ee9)
2026-06-14 15:14:14 -05:00
Herbert Wolverson aa40b83eac Fix NetFlow5 export narrowing
(cherry picked from commit c976364ea2)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 4a013e9829 Fix queue tracker counter narrowing
(cherry picked from commit 3ee5ecb58c)
2026-06-14 15:14:14 -05:00
Herbert Wolverson d28bb4d072 Fix flow explorer time-source panics
(cherry picked from commit 1e5b081889)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 59a4f9ba85 Fix packet capture download panic
(cherry picked from commit e5996e8205)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 7fe9677477 Restart lqos_api after Caddy changes
(cherry picked from commit ffc0fd619a)
2026-06-14 15:14:14 -05:00
Herbert Wolverson c2075de738 Add WebUI login rate limiting
(cherry picked from commit d162f7ddc6)
2026-06-14 15:14:14 -05:00
Herbert Wolverson c0a251e09b Remove permissive WebUI CORS
(cherry picked from commit b3b04eab6a)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 3e4af631f9 Remove unused lqos_network_devices tokio dependency
(cherry picked from commit 9bb346c0c0)
2026-06-14 15:14:14 -05:00
Herbert Wolverson bc24789f35 Fix rand security audit finding
(cherry picked from commit a38d66152b)
2026-06-14 15:14:14 -05:00
Herbert Wolverson cc0a1b206d Chore: Add security audit executive summary
(cherry picked from commit 3922e2c90c)
2026-06-14 15:14:14 -05:00
Herbert Wolverson e7b3cdbfd4 Chore: Add node manager privacy audit stage
(cherry picked from commit 61937c323b)
2026-06-14 15:14:14 -05:00
Herbert Wolverson 79380fe97e Chore: Add panic and type-loss audit stage
(cherry picked from commit dcd25a457b)
2026-06-14 15:14:14 -05:00
Herbert Wolverson ca7f96c95d Chore: Add bridged-interface security audit stage
(cherry picked from commit e4ab113674)
2026-06-14 15:14:14 -05:00
Herbert Wolverson de92c5f0c5 Chore: Add control-plane security audit stage
(cherry picked from commit ae636a2b24)
2026-06-14 15:14:14 -05:00
Herbert Wolverson d5601933e1 Chore: Add security audit dependency baseline
(cherry picked from commit f564a2ef57)
2026-06-14 15:14:14 -05:00
Herbert Wolverson e2c00f5933 Fix: Add bus hang diagnostics and ticker backpressure 2026-06-13 10:09:30 -05:00
Herbert Wolverson 543b8d52db Complete RADIUS accounting listener and fixtures 2026-06-10 12:36:02 -05:00
Herbert Wolverson 9f4ab17c4e Add RADIUS accounting MVP plumbing 2026-06-09 21:58:05 -05:00
Herbert Wolverson 6b8eed335f Reduce LTS2 WSS read timeout log level 2026-06-09 14:12:20 -05:00
Herbert Wolverson da45f64732 Fix: Serialize dynamic IP promotions 2026-06-09 13:34:44 -05:00
Herbert Wolverson 276c845986 Fix: Exclude dynamic circuits from TreeGuard 2026-06-09 13:13:25 -05:00