v0.1.7

This is a hotfix that bring the minimum required Linux kernel version back to 5.15 .

🐛 Bug Fixes

• Initialize struct bpf_timer without accessing its opaque fields

v0.1.6

edit: This release would stop working on lower versions of Linux kernel, just use hotfix v0.1.7 instead.

Highlights

• Fixed hairpinning, it was broken since v0.1.3..
• bpf_fib_lookup_external now respect ip rule selectors ipproto, sport, dport and fwmark in addition to previously working from, to and oif.
  This is useful for balancing traffic to multiple external source addresses in a static manner, see https://github.com/EHfive/einat-ebpf/discussions/26.

🚀 Features

• Add features info to cli version info
• (bpf) Lookup external source address with fwmark if possible
• (bpf) Fib lookup route with layer 4 ports passed

🐛 Bug Fixes

• Fix setting of hairpinning flag and route table

Improve

• Hide developer facing option --bpf-log from the help message
• (bpf) Update the bpf log tag to [einat]
• Avoid converting OsString to String for config file path
• Explicitly specify encap type for IP tunnel link types

v0.1.5

🐛 Bug Fixes

• Prevent pkg_config from emitting Cargo linking instructions
• Fix CLI arg --internal not being applied

Improve

• Re-enable libbpf logging
• TCX attach before all other links
• Prefix match binding & ct addresses with external network CIDR
• (build) Error out if build commands not exit with success
• Allow using bpftool for stripping

v0.1.4

This is a hot-fix addressing build error on Rust 1.80 on which is the minimal version that einat requires to build.

See https://github.com/EHfive/einat-ebpf/releases/tag/v0.1.3 for v0.1.3 changes.

🐛 Bug Fixes

• Elided lifetimes in associated constant

🧪 Testing

• Add tests for einat skel

v0.1.3

edit: Due to rust-lang/rust#115010 which triggers an error on Rust 1.80, it's required to build einat v0.1.3 with Rust >= 1.81. (fixed with 9e7bb8d which is not included in v0.1.3)

Highlights

• Fix a bug that might cause silent packet drop, which has been observed on PPPoE interface for large packets.
• Use pure-rust Aya loader by default, einat now has zero native dependency except libc on target platform.
  This should make einat be built more easily especially for cross-compilation.
• Allow attaching eBPF programs with new TCX interface, aya loader only.
• Allow do SNAT for specified internal network only

# do SNAT for internal packets with source of 192.168.1.0/24 only
einat -i extern0 --hairpin-if intern0 lo --internal 192.168.1.0/24

🚀 Features

• Add pure-Rust aya loading backend support
• Add config option to toggle TCX interface usage
• Allow do NAT for specified internal network only
• Add CLI options for snat_internals and bpf_loader

🐛 Bug Fixes

• Workaround an unroll failure
• (ebpf) Always pull first header bytes
• Split EINAT_BPF_CFLAGS args

Improve

• Increase log level of libbpf netlink error to DEBUG
• Describe NAT44 enabling more specifically
• Log eBPF loader used
• Enable bpf_fib_lookup_external by default on kernel>=6.7

v0.1.2

🚀 Features

• Implement interface monitoring and dynamic attaching
• Add CLI option to print einat version

🐛 Bug Fixes

• Filter out link address of all zero
• Fix checksums calculation of IPv6 packets
• Passthrough unsupported types of IPv6 packet

Improve

• Change the default UDP/ICMP timeout to 2 mins
• [breaking] Disallow user supplied if_index

v0.1.1

🚀 Features

• Add more CLI options

🐛 Bug Fixes

• Guard against division by zero in libbpf-rs
• Do not use unspecified IP address as external address
• Fix port range merging algorithm
• Prefer local address over prefix address, this fixes address selection on PPP interface

v0.1.0

Initial release, feedback is welcome!

Features

• IPv4 to IPv4 NAPT
• IPv6 to IPv6 NAPT
• Endpoint Independent Mapping and Endpoint Independent Filtering for TCP, UDP and ICMP
• Automatic reconfiguration for network interface address changes
• Automatic hairpin routing rule setup