Skip to content

v1.4.554

Choose a tag to compare

@github-actions github-actions released this 25 Oct 21:31
· 5 commits to main since this release

Changes

PR #2310 by mattjoyce and ksylvan: feat: opt-in allowlist for plaintext http to private/LAN model servers

  • Add FABRIC_ALLOW_INSECURE_LAN, an opt-in allowlist of hosts that can use plaintext http. Use it for a model server on a private network, LAN, or tailnet. Separate entries with commas or spaces. An entry can be an exact IP, a CIDR (192.168.20.0/24), an exact hostname, a hostname suffix (*.ts.net), or the keyword lan.
  • The lan keyword matches private, CGNAT, link-local, and ULA addresses, and hostnames that end in .local, .ts.net, .lan, .internal, or .home.arpa. It never matches a public address.
  • The default does not change. When the variable is unset or empty, it matches nothing. The check reads only the host in the URL and does not resolve names.