v3.37.0
🎉 🎆 Happy new year 2024 🎉 🎆 Personal note at the bottom 😉
Features
- Port forwarding: port redirection with
VPN_PORT_FORWARDING_LISTENING_PORT
- Custom provider: support tcp-client proto for OpenVPN
- NordVPN: add access token warning if used as wireguard private key
- Windscribe: update servers data
Fixes
- Shadowsocks: bump from v0.5.0-rc1 to v0.5.0
- treat udp read error as non critical
- log out crash error for tcpudp combined server
- Wireguard:
- Load preshared key from toml file correctly and from peer selection
- Custom provider OpenVPN:
- Default TCP port for any tcp protocol
- Firewall:
- Handle OpenVPN
tcp-client
protocol astcp
- Handle OpenVPN
- PureVPN: fix update url and update servers (#1992)
- VPN Unlimited OpenVPN:
- Update CA certificate and add new second certificate
- Remove
DEFAULT:@SECLEVEL=0
- Specify cipher as AES-256-CBC and auth as SHA512
- Format-servers command:
- Fix for providers with dashes
- Add missing
server name
header for PIA
Maintenance
- Bump github.com/breml/rootcerts from 0.2.11 to 0.2.14 (#1800, #1981)
- Bump github.com/fatih/color from 1.15.0 to 1.16.0 (#1950)
- Bump github.com/klauspost/compress from 1.16.7 to 1.17.4 (#1922, #1993)
- Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#2012)
- Bump golang.org/x/net from 0.12.0 to 0.19.0 (#1907, #1953, #1985)
- Bump golang.org/x/sys from 0.11.0 to 0.13.0 (#1897)
- Bump golang.org/x/text from 0.11.0 to 0.14.0 (#1845, #1946)
- CI:
- Bump actions/checkout from 3 to 4 (#1847)
- Bump crazy-max/ghaction-github-labeler from 4 to 5 (#1858)
- Bump DavidAnson/markdownlint-cli2-action from 11 to 14 (#1871, #1982)
- Bump docker/build-push-action from 4.1.1 to 5.1.0 (#1860, #1969)
- Bump docker/login-action from 2 to 3 (#1936)
- Bump docker/metadata-action from 4 to 5 (#1937)
- Bump docker/setup-buildx-action from 2 to 3 (#1938)
- Bump docker/setup-qemu-action from 2 to 3 (#1861)
- Bump github/codeql-action from 2 to 3 (#2002)
Personal note on the state of Gluetun
I have been focusing my effort since mid November on a DNSSEC validator to finalize a Go library on par with the usage we have of Unbound, in order to replace Unbound in Gluetun and add DNS special features for Gluetun. For example:
- automatically diverting local hostnames questions to the local Docker DNS server (a long overdued problem) - already implemented
- allow resolution of VPN endpoint hostname to ips in a very restricted DNS server + firewall to only allow a specific hostname to resolve (not implemented yet)
This is a tough problem not so well documented with few complete and valid implementations, so it's taking some time. There is likely 2 more weeks of work left before finalization.