Ryan Huber

Integrate PCP and NAT-PMP

2

I can't find evidence this is in wide use, but worth supporting these, as it may help folks behind NAT.

Probing a LH isn't actually very useful, since recv_error should catch issues. this avoids stampeding a LH by dropping good tunnels during a reconnect spike. I debated putting this in...

routingProxy function has been removed in latest release. for now a workaround is to install the older version via npm: npm install [email protected]

Unsafe route that overlaps with existing route prevents Nebula from starting on MacOS

1

In 1.5.0 Nebula was changed to use system level route addition functions. If you have an unsafe_route defined that overlaps with an existing route on the device, a fatal error...

New style PSK0 handshake setup.

1

Future development idea/pointer: We should use the psk functionality of noise to lightly mask handshakes, but also to assert things like the IP address we are talking to and expecting...

When a lighthouse is unavailable, the process will continue to try handshaking with it. This results in unnecessary traffic and can keep a mobile device awake.

Don't create routing table entry for unsafe_routes that directly map to locally connected subnets.

1

For example, say your office is 192.168.3.0/24, and you have an unsafe_route on your laptop to use the router at your office as a gateway to this subnet. When you...

This would be to ensure you don't handshake with nodes via another nebula node, unless you really want to. We already allow you to disable connecting to particular subnets, but...