v0.9.0

This release has several new features:

• an ICMP forwarder was implemented in #597. Before this, ping was succeeding even for unknown addresses
• more DNS records (SOA/PTR/AAAA) are handled instead of being silently ignored (#696)
• lock contention in packet forwarding is reduced to improve performance (#613)
• source IP is correctly reported when running in a container (#634)

There were also several security hardening features:

• Unix sockets are created with 0600 permissions (#683)
• The REST API accessible in the virtual network can (optionally) require an authorization token before accepting requests (#724)
• REST API use is logged for auditing purpose (#669)
• gvproxy no longer attempts to remove files before listening on a unix socket (#718)

This last change could cause regressions/trigger bugs in applications using gvisor-tap-vsock.
Please file an issue if you have any problems with this change, or with this release in general.

What's Changed

New Features

• Add icmp forwarder by @evidolob in #597
• fix(dns): forward SOA/PTR/AAAA and other unhandled query types by @ekalinin in #696
• tap: reduce lock contention in switch packet forwarding by @nirs in #613
• config: add option to configure IP addresses through command line by @redbeam in #614
• Rework unix socket cleanup handling by @cfergeau in #718
• api: add Bearer token authentication to gateway API endpoints by @redbeam in #724
• Log security-relevant gvproxy services API requests by @vyasgun in #669
• forwarder: propagate source IP by @AkihiroSuda in #634
• Make TCP forwarder max in-flight connections and connect timeout configurable by @evidolob in #698

Bug Fixes

• forwarder: improve error message for port conflicts by @redbeam in #655
• Fix notification socket path handling on Windows by @Honny1 in #693
• security: cap the packet size in rxStream to prevent oversized packets by @vyasgun in #670
• sockets: set gvproxy-created unix sockets to 0600 by @vyasgun in #683
• fix(win-sshproxy): don't stop execution when setup log fails by @l0rd in #699
• dns: add input validation to /add endpoint (RHDESK-553) by @redbeam in #684

Dependency Updates

• dependabot: Group golang.org/x module updates by @cfergeau in #723
• build(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #682
• build(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in #697
• build(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in #616
• build(deps): bump redhat-actions/podman-login from 1 to 2 by @dependabot[bot] in #700
• build(deps): bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by @dependabot[bot] in #649
• build(deps): bump github.com/coreos/stream-metadata-go from 0.4.10 to 0.4.11 by @dependabot[bot] in #628
• build(deps): bump github.com/crc-org/vfkit from 0.6.3 to 0.6.4 by @dependabot[bot] in #689
• build(deps): bump github.com/dustin/go-humanize from 1.0.1 to 1.1.0 by @dependabot[bot] in #732
• build(deps): bump github.com/foxcpp/go-mockdns from 1.2.0 to 1.3.0 by @dependabot[bot] in #739
• build(deps): bump github.com/golangci/golangci-lint/v2 from 2.8.0 to 2.14.0 in /tools by @dependabot[bot] in #608, #656, #712, #717, #734
• build(deps): bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0 by @dependabot[bot] in #668
• build(deps): bump github.com/miekg/dns from 1.1.72 to 1.1.73 by @dependabot[bot] in #710
• build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.33.0 by @dependabot[bot] in #663, #685, #703, #725, #730
• build(deps): bump github.com/onsi/gomega from 1.39.1 to 1.44.0 by @dependabot[bot] in #652, #664, #686, #716, #731, #733
• build(deps): bump github.com/sirupsen/logrus from 1.9.4 to 1.10.2 by @dependabot[bot] in #706, #711, #715, #709
• build(deps): bump golang.org/x/crypto from 0.47.0 to 0.57.0 by @dependabot[bot] in #606, #625, #637, #657, #665, #690, #705, #719, #728
• build(deps): bump golang.org/x/mod from 0.32.0 to 0.41.0 by @dependabot[bot] in #607, #626, #633, #636, #659, #692, #707, #722
• build(deps): bump golang.org/x/net from 0.52.0 to 0.59.0 by @dependabot[bot] in #645, #691, #704, #728
• build(deps): bump golang.org/x/sync from 0.21.0 to 0.23.0 by @dependabot[bot] in #673, #721
• build(deps): bump golang.org/x/sys from 0.41.0 to 0.48.0 by @dependabot[bot] in #624, #635, #671, #720

New Contributors

• @nirs made their first contribution in #619
• @terlar made their first contribution in #632
• @redbeam made their first contribution in #614
• @jdork0 made their first contribution in #627
• @nohajc made their first contribution in #646
• @DTrippe made their first contribution in #647
• @Honny1 made their first contribution in #693
• @l0rd made their first contribution in #699
• @ekalinin made their first contribution in #696

Full Changelog: v0.8.8...v0.9.0