unetd, branch masterWireGuard based VPN connection manager for OpenWrthttps://git-03.infra.openwrt.org/project/unetd/atom?h=master2026-02-15T12:45:06Zhost: fix gateway peers getting allowed IPs of unrelated hosts2026-02-15T12:45:06ZFelix Fietkau2026-02-13T17:16:28Zurn:sha1:52e504192ea746632e99abd75f07438c0237ff1a
When the local node is a gateway for a peer, network_host_uses_peer_route()
incorrectly added all other hosts' IPs to that peer's allowed IPs. This
caused WireGuard to steal IP assignments from other peers, leaving them
with no allowed IPs and breaking routing.
The faulty condition checked if the peer uses the local host as its gateway
and if so, routed all other hosts through that peer. This is wrong: a peer
using us as a gateway should only have its own IPs in its allowed IPs, not
every other host's.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
host: fix for_each_routed_host macro using wrong variable name2026-02-15T12:44:54ZFelix Fietkau2026-02-13T17:15:58Zurn:sha1:35c182b74fa4f9002fba6f8b1808b29e3106bdcb
The macro parameter is cur_host, but the body was using the hardcoded
name host instead. This happened to work because both call sites use
host as the loop variable.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
CMakeLists: update cmake minimum required version to 3.102025-10-03T21:38:37ZChristian Marangi2025-10-03T21:38:37Zurn:sha1:2f67f6faa08aa4b20663d4cbaf063a79041947c1
New cmake version 4.0 requires at least 3.5 version as the minimum
required version with it increased to 3.10 in to-be-released cmake
versions.
Set the minimum required version to 3.10 to future-proof for future
cmake version.
Suggested-by: Hannu Nyman <hannu.nyman@iki.fi>
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
host: add support for defining per-host metadata2025-07-05T17:34:55ZFelix Fietkau2025-07-05T17:34:50Zurn:sha1:8b100a9e311ab881ef19e0f1d787e07c74f39752
This can be queried from ubus via network_get
Signed-off-by: Felix Fietkau <nbd@nbd.name>
pex: indicate refused update requests2025-05-30T17:42:41ZFelix Fietkau2025-05-27T09:39:10Zurn:sha1:790b41b6b9871b7ff8705100d38fe0deee013ffd
This is used, in case an unknown peer requests a network update.
That way the peer can know that it is not considered to be a part of
the network by the remote peer.
Signed-off-by: Felix Fietkau <nbd@nbd.name>
cli: add support for adding xor key to private key2025-03-15T20:35:13ZFelix Fietkau2025-03-15T15:14:43Zurn:sha1:20e4b342aa0844417bbf00aa906a5ec5c9c84d7d
This can be used for dealing with intermediate keys mixed into
the PBKDF2 derived secret key
Signed-off-by: Felix Fietkau <nbd@nbd.name>
cli: reduce code duplication, cleanup2025-03-15T15:04:12ZFelix Fietkau2025-03-15T15:02:55Zurn:sha1:5f97919896c492b96ae698e726143f468323f372
Signed-off-by: Felix Fietkau <nbd@nbd.name>
service: add @all as alias for all members, unless defined differently2025-03-09T15:39:53ZFelix Fietkau2025-03-09T15:39:53Zurn:sha1:6c9c8fbd81285a2cba7dd1c2c1ac2bf25ca99e27
Signed-off-by: Felix Fietkau <nbd@nbd.name>
ubus: dump service information on network_get2025-03-09T15:37:16ZFelix Fietkau2025-03-09T15:37:16Zurn:sha1:7326459bd7438a47751873bbd4c2d45b6f31f8b6
Signed-off-by: Felix Fietkau <nbd@nbd.name>
ubus: fix token_create policy2025-03-05T17:49:22ZFelix Fietkau2025-03-05T17:49:20Zurn:sha1:d8b43985e4d794efaf26823252e39373f7c975a0
Remove unused enum entry
Signed-off-by: Felix Fietkau <nbd@nbd.name>