From bbbf24fd1c930b90963e837b07f12cd08459954d Mon Sep 17 00:00:00 2001 From: Shawn Carey Date: Tue, 13 Apr 2021 08:25:44 -0400 Subject: [PATCH] start release 0.19.11 with host.v1 config type updates --- CHANGELOG.md | 13 +++++++++++++ go.mod | 2 +- 2 files changed, 14 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7b5475752..fe72807d1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,16 @@ +# Release 0.19.11 + +## What's New + +* The host.v1 service configuration type has been changed as follows: + * Rename `dialIntercepted*` properties to `forwardProtocol`, `forwardAddress`, `forwardPort` for better consistency with non-tunneler client applications. + * Add `allowedProtocols`, `allowedAddresses`, and `allowedPortRanges` properties to whitelist destinations that are dialed via `forward*`. The `allowed*` properties are required for any corresponding `forward*` property that is `true`. + * Add `allowedSourceAddresses`, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service. + + Caveats: + * Any existing host.v1 configurations that use will become invalid. + * ziti-tunnel and the converged router/tunneler creates local routes that are establised for `allowedSourceAddresses`, but the routes are not consistently cleaned up when `ziti-tunnel` exits. This issue will be addressed in a future release. + # Release 0.19.10 ## What's New diff --git a/go.mod b/go.mod index 2cb97355b..f4b24365f 100644 --- a/go.mod +++ b/go.mod @@ -27,7 +27,7 @@ require ( github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d github.com/keybase/go-ps v0.0.0-20190827175125-91aafc93ba19 github.com/michaelquigley/pfxlog v0.3.7 - github.com/openziti/edge v0.19.74 + github.com/openziti/edge v0.19.78 github.com/openziti/fabric v0.16.51 github.com/openziti/foundation v0.15.46 github.com/openziti/sdk-golang v0.15.38