v0.0.31

What’s Changed

• add back missing logging rules for iptables (#383) @blotus
• update dependencies + lint (#382) @mmetc
• Pipenv cache + remove useless build flags (#381) @mmetc

v0.0.30

What’s Changed

• Add support for reporting number of bytes/packets that were blocked by the bouncer (#365)
• Improve performance when collecting metrics for prometheus and crowdsec by using iptables-save / embedded counters in the nft rules (#365)
• Improve performance in iptables/ipset mode during insertion (#365)
• In iptables/nftables mode, sets are now split per crowdsec origin (CAPI, crowdsec, list:XXX, ...) to provide accurate reporting (#365)

v0.0.29

What's Changed

• Release action: fix asset upload by @mmetc in #336
• allow ipset to clean up tables when receiving sigterm by @mmetc in #338
• remove the the Before causing some systemd cycling issue. by @sabban in #340
• Lint by @mmetc in #339
• update dependency on crowdsec and go-cs-bouncer by @mmetc in #345
• use go 1.21.5 by @mmetc in #344
• golangci-lint update by @mmetc in #348
• Log level: don't demote trace to debug if using the -v flag by @mmetc in #352
• logging: full standard timestamp with timezone (yyyy-mm-dd) by @mmetc in #353
• Makefile: use GO macro if set, to check for version by @mmetc in #351
• Governance init by @LaurenceJJones in #331
• basic PF prometheus metrics (packets, bytes, banned ip count) by @mmetc in #349
• use go 1.21.6 by @mmetc in #357
• CI: use go 1.21.7; bump actions by @mmetc in #359
• deps: bump crowdsec to 1.6.0 by @mmetc in #360
• go.mod: remove reference to unused sqlite package by @mmetc in #358
• deps: update test dependencies by @mmetc in #361
• config: apply variable expansion to all keys by @mmetc in #364
• Allow overriding version.System in docker builds by @mmetc in #363
• emit banned IPs metrics when in ipset mode by @nferch in #350
• update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 by @mmetc in #367
• use go 1.21.9 by @mmetc in #366
• Add TLS auth keys to config.yaml by @LaurenceJJones in #372
• update functional test by @mmetc in #374
• update lint configuration; require go 1.22 by @mmetc in #375
• make: remove redundant go version check by @mmetc in #373
• revert go 1.22 minimal requirement by @mmetc in #376

New Contributors

• @nferch made their first contribution in #350

Full Changelog: v0.0.28...v0.0.29

v0.0.29-rc4

What’s Changed

• revert go 1.22 minimal requirement (#376) @mmetc
• make: remove redundant go version check (#373) @mmetc
• update lint configuration; require go 1.22 (#375) @mmetc
• update functional test (#374) @mmetc
• Add TLS auth keys to config.yaml (#372) @LaurenceJJones
• use go 1.21.9 (#366) @mmetc
• update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 (#367) @mmetc
• emit banned IPs metrics when in ipset mode (#350) @nferch
• Allow overriding version.System in docker builds (#363) @mmetc
• config: apply variable expansion to all keys (#364) @mmetc
• deps: update test dependencies (#361) @mmetc
• go.mod: remove reference to unused sqlite package (#358) @mmetc
• deps: bump crowdsec to 1.6.0 (#360) @mmetc
• CI: use go 1.21.7; bump actions (#359) @mmetc
• use go 1.21.6 (#357) @mmetc
• basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
• Governance init (#331) @LaurenceJJones
• Makefile: use GO macro if set, to check for version (#351) @mmetc
• logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
• Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
• golangci-lint update (#348) @mmetc
• use go 1.21.5 (#344) @mmetc
• update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
• Lint (#339) @mmetc
• remove the the Before causing some systemd cycling issue. (#340) @sabban
• allow ipset to clean up tables when receiving sigterm (#338) @mmetc
• Release action: fix asset upload (#336) @mmetc

v0.0.29-rc3

What’s Changed

• Add TLS auth keys to config.yaml (#372) @LaurenceJJones
• use go 1.21.9 (#366) @mmetc
• update deps: crowdsec 1.6.1, go-cs-lib 0.0.10 (#367) @mmetc
• emit banned IPs metrics when in ipset mode (#350) @nferch
• Allow overriding version.System in docker builds (#363) @mmetc
• config: apply variable expansion to all keys (#364) @mmetc
• deps: update test dependencies (#361) @mmetc
• go.mod: remove reference to unused sqlite package (#358) @mmetc
• deps: bump crowdsec to 1.6.0 (#360) @mmetc
• CI: use go 1.21.7; bump actions (#359) @mmetc
• use go 1.21.6 (#357) @mmetc
• basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
• Governance init (#331) @LaurenceJJones
• Makefile: use GO macro if set, to check for version (#351) @mmetc
• logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
• Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
• golangci-lint update (#348) @mmetc
• use go 1.21.5 (#344) @mmetc
• update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
• Lint (#339) @mmetc
• remove the the Before causing some systemd cycling issue. (#340) @sabban
• allow ipset to clean up tables when receiving sigterm (#338) @mmetc
• Release action: fix asset upload (#336) @mmetc

v0.0.29-rc2

What’s Changed

• deps: update test dependencies (#361) @mmetc
• go.mod: remove reference to unused sqlite package (#358) @mmetc
• deps: bump crowdsec to 1.6.0 (#360) @mmetc
• CI: use go 1.21.7; bump actions (#359) @mmetc
• use go 1.21.6 (#357) @mmetc
• basic PF prometheus metrics (packets, bytes, banned ip count) (#349) @mmetc
• Governance init (#331) @LaurenceJJones
• Makefile: use GO macro if set, to check for version (#351) @mmetc
• logging: full standard timestamp with timezone (yyyy-mm-dd) (#353) @mmetc
• Log level: don't demote trace to debug if using the -v flag (#352) @mmetc
• golangci-lint update (#348) @mmetc
• use go 1.21.5 (#344) @mmetc
• update dependency on crowdsec and go-cs-bouncer (#345) @mmetc
• Lint (#339) @mmetc
• remove the the Before causing some systemd cycling issue. (#340) @sabban
• allow ipset to clean up tables when receiving sigterm (#338) @mmetc
• Release action: fix asset upload (#336) @mmetc

v0.0.29-rc1

What’s Changed

• Lint (#339) @mmetc
• remove the the Before causing some systemd cycling issue. (#340) @sabban
• allow ipset to clean up tables when receiving sigterm (#338) @mmetc
• Release action: fix asset upload (#336) @mmetc

v0.0.28

What’s Changed

• Change log message "failed to flush" from info -> debug (#333) @mmetc
• Add option -version in favor of -V (#330) @mmetc
• updated tls func tests (#327) @mmetc
• update crowdsec/go-cs-lib/go-cs-bouncer dependencies (#329) @mmetc
• Increase ipset_size default to 131072 (#324) @mmetc
• force raw output on cscli during install (#323) @mmetc
• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc6

What’s Changed

• updated tls func tests (#327) @mmetc
• update crowdsec/go-cs-lib/go-cs-bouncer dependencies (#329) @mmetc
• Increase ipset_size default to 131072 (#324) @mmetc
• force raw output on cscli during install (#323) @mmetc
• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc

v0.0.28-rc5

What’s Changed

• upload .xz vendor file to release (#321) @mmetc
• iptables: allow deny_action=TARPIT (#320) @mmetc
• use go 1.20.7, golangci-lint 1.54 (#318) @mmetc
• update test dependencies (#319) @mmetc
• alternate vendor file (xz compression and version number) (#317) @mmetc
• default prom to false (#314) @LaurenceJJones
• update crowdsec dependency (#311) @mmetc
• Support option "retry_initial_connect" (#310) @mmetc
• bump google/nftables (#283) @mmetc
• Use go 1.20.6 (#309) @mmetc
• CI: run codeql in lint.yml (#303) @mmetc
• cross-platform interrupt handler (#304) @mmetc
• update go.mod to remove dependency from wasm (#305) @mmetc
• add vendor.tgz to release (#301) @mmetc
• lint (#299) @mmetc
• add "dry-run" backend mode, added connection tests with api key and tls (#297) @mmetc
• Use go 1.20.5 (#298) @mmetc
• deprecate "daemonize" option (#296) @mmetc
• handle SIGINT (#290) @mmetc
• update dependencies to crowdsec 1.5.2; allow build with devel version of go (#295) @mmetc
• Remove hard-coded 0600 log file perms (#294) @jarppiko
• Add metrics collection support to nftables set-only mode (#292) @jarppiko
• update user and test messages (#289) @mmetc
• substitute envvars in config file (#288) @mmetc
• use go-cs-lib (#287) @mmetc