tunnel

Files

T

TZGyn ebae420ab1 Add the native Go client and finish M3 hardening

The new cmd/tunnel client keeps the API URL and tunnel identity in
~/.config/tunnel/config.json (0600), provisions the key/CSR and
certificate, terminates TLS, proxies to local routes, reloads routes
without a restart, and runs as a background service. `tunnel import`
takes over an existing official CLI profile, preserving its tunnel ID,
token, key and certificate.

Server hardening: per-IP and per-tunnel rate limits for creates and
binds, a CA cool-down after repeated ACME failures, a startup sweep for
stale _acme-challenge records, admin metrics, a 60-second half-close
timeout, and separate prioritized control / ordered data bridge queues
(with `end` ordered after the final bytes). The dashboard shows the new
metrics.

2026-10-26 00:32:31 +08:00

api.go

Add the native Go client and finish M3 hardening

2026-10-26 00:32:31 +08:00

bridge.go

Add the native Go client and finish M3 hardening

2026-10-26 00:32:31 +08:00

client_test.go

Add the native Go client and finish M3 hardening

2026-10-26 00:32:31 +08:00

config.go

Add the native Go client and finish M3 hardening