gofix/portal-tunnel-rs
Watch
1
0
Fork
You've already forked portal-tunnel-rs
 0
Code Issues Pull requests Projects Releases 22 Packages 1 Wiki Activity Actions
22 releases 88 tags
  • v2.6.1+rs.1 6e4ff4dcf6

    v2.6.1+rs.1
    All checks were successful
    Rust CI / Format, lint, and test (push) Successful in 6m46s
    Details
    Rust CI / Build and start linux/arm64 image (no push) (push) Successful in 14s
    Details
    Build and publish container image / Build linux/arm64 image (push) Successful in 5m16s
    Details
    Stable

    ada released this 2026-10-08 18:47:46 +00:00 | 8 commits to master since this release

    Rust relay compatibility release for upstream portal-tunnel v2.6.1.

    Highlights:

    • Registers identity-bound canonical hostnames (<name>-<40-hex address>.<root>) and returns hostname and canonical_hostname from /sdk/register, which official v2.6.1 clients require (protocol stays 10).
    • Honors allow_canonical_fallback: a v2.6.1 client whose friendly hostname is held by another identity keeps only its canonical hostname; older clients still receive hostname_conflict. SNI routes both names; TCP/UDP addresses use the canonical name.
    • /api/state and /api/policy/state leases carry address and canonical_hostname.
    • Access decisions now also apply to live raw TCP/UDP lease ports.
    • Pins the v2.6.1 browser WASM asset by its published checksum.

    Compatibility:

    • Official v2.6.1, v2.6.0, and v2.5.0 clients verified end to end on the deployed image. sni_port is still returned for v2.5.0/v2.6.0 UDP clients.
    • Names longer than 22 characters are rejected for every client, matching upstream.
    • Not ported (documented in docs/unsupported-features.md): the upstream IVNP revision bump (overlay is not offered on this deployment) and admin transport-policy HTTP 400 validation.

    Verification:

    • PR #110 CI and the linux/arm64 image workflow passed for the release revision.
    • The exact v2.6.1+rs.1-dev.1 image passed the public live gate on the production relay on the first attempt: v2.6.1/v2.6.0/v2.5.0 native nonce round-trips, --overlay direct fallback, v2.6.1 browser/WASM nonce round-trip with checksum-pinned assets, relay-served WASM asset checksums, release/health, and no overlay advertisement.
    • Production reports v2.6.1+rs.1 / protocol 10; all long-running official expose services were upgraded to v2.6.1 and passed public endpoint checks.

    Image: code.rly.best/gofix/portal-tunnel-rs:v2.6.1-rs.1
    Digest: sha256:33a49de47d3b86c2819fe55bc9d38b3cfdd2c7a12cd987d32bdccafe836fd902
    Revision: 6e4ff4dcf6
    Upstream: https://github.com/gosuda/portal-tunnel/releases/tag/v2.6.1

    Downloads