jjkiers/layer4-proxy
1
0
Fork 0
Code Issues 4 Pull Requests Packages Projects Releases 4 Activity

Compare commits

base: jjkiers:1a9ca771aca65c6f4076493538d70c2cdbac8c12
Branches Tags
jjkiers:main
jjkiers:v0.1.10
jjkiers:v0.1.9
jjkiers:v0.1.8
jjkiers:v0.1.7
jjkiers:v0.1.6
jjkiers:v0.1.5
jjkiers:v0.1.4
jjkiers:v0.1.3
jjkiers:v0.1.2
jjkiers:v0.1.1
..
compare: jjkiers:2c6ad1d7b8777eca1fc7e400aee76d67e697ebb8
Branches Tags
jjkiers:main
jjkiers:v0.1.10
jjkiers:v0.1.9
jjkiers:v0.1.8
jjkiers:v0.1.7
jjkiers:v0.1.6
jjkiers:v0.1.5
jjkiers:v0.1.4
jjkiers:v0.1.3
jjkiers:v0.1.2
jjkiers:v0.1.1

2 Commits
1a9ca771ac ... 2c6ad1d7b8

Author SHA1 Message Date
Jacob Kiers
2c6ad1d7b8 Update based on lints
All checks were successful
continuous-integration/drone/push Build is passing
Details
continuous-integration/drone/pr Build is passing
Details 
Signed-off-by: Jacob Kiers <code@kiers.eu>
 2025-01-09 20:38:05 +01:00
Jacob Kiers
8fe1f7f57b Fix SNI header parsing 
When a listener is configured to deal with TLS upstreams, we use the SNI
field of the TLS ClientHello message to decide where to send the traffic.

Therefore, a buffer of 1024 bytes was used to temporarily store this
message. However, a TLS ClientHello message can be larger than that, up
to 16K bytes.

So now the first few bytes are read and manually parsed to find out how
long the message is. And then the entire ClientHello message is
retrieved.

So hopefully that will fix the issue causing the ClientHello
determination to fail.

Closes #10

Signed-off-by: Jacob Kiers <code@kiers.eu>
 2025-01-09 20:23:02 +01:00
1 changed files with 0 additions and 7 deletions
Show Stats Expand all files Collapse all files

7
CHANGELOG.md
View File

@ -7,13 +7,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased] ## [Unreleased]
### Fixed
* The ClientHello TLS header is now read in full before it is parsed, solving
an error where there was not enough data to fully read it. In those cases
it was not possible to determine the upstream address and therefore the proxy
would go the the default action instead.
### Changed ### Changed
* Updated some dependencies to prevent the build from breaking. * Updated some dependencies to prevent the build from breaking.