Firegex 3.2.8

• less constraints on port hijack

Full Changelog: 3.2.7...3.2.8

Firegex 3.2.7

• fgex alias version auto-push and enforcing

No code changes

Full Changelog: 3.2.6...3.2.7

Firegex 3.2.6

• postrouting rules after the snat hook (used also in masquerade) that in particular scenarios with docker/wireguard was not allowing to correctly capture the outgoing traffic
• websocket refresh on login to avoid loss the ws updates
• reject uses now RST bit

Full Changelog: 3.2.5...3.2.6

Firegex 3.2.5

• using new zstd version with 3.12 support

Full Changelog: 3.2.4...3.2.5

Firegex 3.2.4

• fixed py module on pypi setup

Full Changelog: 3.2.3...3.2.4

Firegex 3.2.3

• nice set to -10 for cpproxy and cppregex

Full Changelog: 3.2.2...3.2.3

Firegex 3.2.2

• Fixes on mangling and empty filters

Full Changelog: 3.2.1...3.2.2

Firegex 3.2.1

• Parsing websocket extentions from server response

Full Changelog: 3.2.0...3.2.1

Firegex 3.2.0

• HTTP compression fix (now supporting brotli, zstd, gzip, deflate)
• bug fix on stream parsing when upgrading protocol
• flags for type of upgrade (h2 and ws)
• websocket Frame decode implemented (with support to permessage-deflate extention)
• fixed multiple header key: now as mentionated in the RFC multiple header with the same field, are concatenated with a comma in a single value, but also leaving the possibility to check how it was encoded originally
• updated docs

Full Changelog: 3.1.0...3.2.0

Firegex 3.1.0

3.0.0 Fixing

• nfproxy: ipv6 invalid packet was risen due to an invalid payload size in the header (fixed)
• nfproxy: on invalid data on reserialize, double free was triggered
• API and DB: PK on nfproxy now is name + service_id (added service_id in the pyfilter model)
• API: added service_id reference at every pyfilter API
• nfproxy - fgex: when handling data types, now parsers can return a list of parsed values
• nfproxy - fgex: default rejecting connections on invalide parsing, added an option to customize this behaviour (documented in the docs)
• nfproxy - fgex: more checks on FGEX_ options (invalid values raise an exception on compiling)
• nfproxy - fgex: refactor of HTTP parser: now the same parser is used for all the stream and allows to parse correctly all the HTTP messages
• nfproxy - fgex: flush action don't destroy llhttp object but drops body first, and if necessary also all the other info
• tests: added tests for nfproxy

Full Changelog: 3.0.0...3.1.0