[WireGuard] [ANNOUNCE] Snapshot `experimental-0.0.20160808` Available
Jason A. Donenfeld
Jason at zx2c4.com
Mon Aug 8 17:57:16 CEST 2016
-----BEGIN PGP SIGNED MESSAGE-----
A new experimental snapshot, `experimental-0.0.20160808`, has been tagged in
the git repository.
Please note that this snapshot is, like the rest of the project at this point
in time, experimental, and does not consitute a real release that would be
considered secure and bug-free. However, if you'd like to test this snapshot
out, there are a few relevent changes.
== Changes ==
* timers: upstream removed the slack concept
We now group timers ourselves, this time with the ability to round down. This
ensures that we don't wind up rescheduling timers for every packet, but
instead keeping things within a quarter second window.
* c: specify static array size in function params
* contrib: move patchers to contrib/kernel-tree
There are now two patchers:
- contrib/kernel-tree/create-patch.sh This patcher simply spits out a patch
for use with `patch(1)` to stdout.
- contrib/kernel-tree/jerry-rig.sh This is the old hack that patches into
the kernel tree a reference to the WireGuard tree.
* tools: do not show private keys in pretty output
The `WG_HIDE_KEYS` environment variable now determines whether or not keys are
shown in the pretty `wg show` output.
* persistent-keepalive: change range to [1,65535]
Linux connection tracking is granular to 1 second, so it's important that we
do the same.
* selftest: move to subfolder
* Kbuild: move module deps out of tests/
* tests: use makefile and expand greatly
This is a big one. The entire testing subsystem has been entirely expanded.
With the help of Alex Xu and Naveen Nathan, the test suite is now hugely
expanded, and even does NAT testing with the persistent-keepalive feature. Not
only that, but the QEMU runner now builds from a Makefile and is much more
robust. We now build and run 7 kernels for every single commit, with the test
results published on https://www.wireguard.io/build-status/
* ratelimiter: do not require IPv6
CONFIG_IPV6 is no longer required at all for WireGuard.
As always, the source is available at https://git.zx2c4.com/WireGuard/ and
information about the project is available at https://www.wireguard.io/ .
This snapshot is available in tarball form here:
If you're a snapshot package maintainer, please bump your package version. If
you're a user, the WireGuard team welcomes any and all feedback on this latest
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
-----END PGP SIGNATURE-----
More information about the WireGuard