Skip to content

v0.3.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Oct 18:24
v0.3.0
71a123d

Added

  • Routing: Router, Rule, Route (direct, TLS with a client credential,
    reject; optional upstream) and matchers in netproxy.rules (host globs,
    regex, ports, CIDR networks, paths, listeners, combinable with &, |,
    ~).
  • Credential: a client certificate for mTLS from an sslcontext keystore
    (Windows certificate store, PKCS#11 smart cards and HSMs), an identity or
    PEM, built on first use.
  • AsyncProxyServer / ProxyServer: an HTTP proxy (CONNECT, forwarded
    http:// requests upgraded to HTTPS by rule, /proxy.pac), local
    Tunnel ports, upstream proxy chaining through a proxylib ProxyMap with
    failover, loopback-only unless allow_remote=True.
  • TLS interception (netproxy.intercept) with a CA name-constrained to the
    intercepted hosts.
  • Recording (netproxy.recording): a Recorder hook per relayed session,
    LogRecorder, and PcapRecorder (extra capture) writing each session
    as a TCP connection in a pcap/pcapng file; keylog= writes the TLS
    secrets of every TLS connection the proxy owns (OpenSSL 1.1.1 or later;
    refused where the TLS library cannot log keys).
  • Configuration files (netproxy.config, default netproxy/netproxy.cfg),
    read with anycfg: TOML, or YAML (extra yaml), JSON or INI when the
    first line says so (#!yaml).
  • The netproxy command line
    (run, check, pac, ca init, ca show; extra cli).

Changed

  • A pem credential's certificate may be a PKCS#12 bundle (.p12/.pfx)
    or DER; password_file names a file holding the key's or bundle's
    password, read only when needed (requires sslcontext 2.1).
  • Requires proxylib 2: answers are read with proxylib.lookup, and
    egress = "system" is auto_proxy(environ={}) (the OS's settings only).
  • Rewritten from scratch on asyncio and the standard library's ssl.
    Twisted, the WSGI hosting and the TOML schema of 0.2 are gone; nothing of
    the 0.2 API remains.

Full Changelog: https://github.com/jose-pr/netproxy/commits/v0.3.0

Assets 4
Loading