Separate client filtering (TLS handshake) from destination filtering
(per-request) with independent default_action for each section,
so inbound defaults don't leak into outbound evaluation and vice versa.
Block connections to specific ports (e.g. BitTorrent 6881-6889, 6969)
to prevent DMCA complaints. Rules with destination_port are evaluated
per TCP CONNECT / UDP request, while existing cidr/client_random_prefix
rules continue to be evaluated at TLS handshake.
Squashed commit of the following:
commit 0d037f73f1
Author: Sergey Fionov <sfionov@adguard.com>
Date: Sun Mar 1 08:38:32 2026 +0200
Fix error on certificate generation in setup_wizard
commit d2fda1f615
Author: Sergey Fionov <sfionov@adguard.com>
Date: Sun Mar 1 08:33:47 2026 +0200
Fix error on cettificate generation in setup_wizard
Squashed commit of the following:
commit 52522b5b230f0abf1acb085432b181db6214006a
Merge: 2ad57499d0de3e
Author: Sergey Fionov <sfionov@adguard.com>
Date: Thu Feb 26 09:48:16 2026 +0200
Merge remote-tracking branch 'origin/master' into TRUST-268-support-dual-stack-hostname-only-connection-to-server
commit 2ad5749fff
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Thu Feb 19 16:31:55 2026 +0500
Fix formatting
commit ab0597f558
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Thu Feb 19 16:11:13 2026 +0500
Code cleanup
commit d8329217cf
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Thu Feb 19 15:52:08 2026 +0500
Update changelog
commit c90821b4c8
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Thu Feb 19 15:14:45 2026 +0500
Support hostnames in deeplinks
commit f7e184a5e8
Merge: 71fdf978d5f207
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Thu Feb 19 14:36:29 2026 +0500
Merge branch 'master' into TRUST-268-support-dual-stack-hostname-only-connection-to-server
# Conflicts:
# CHANGELOG.md
# README.md
# endpoint/src/main.rs
# lib/src/client_config.rs
commit 71fdf97343
Author: Ilia Zhirov <i.zhirov@adguard.com>
Date: Fri Feb 13 19:43:24 2026 +0500
Explicitly set IPV6_V6ONLY=false for dual-stack listen sockets
Change addresses type from Vec<SocketAddr> to Vec<String>
Accept domain names in -a flag for client config export
Warn when -a domain does not match any hostname in hosts.toml
Update -a flag documentation to reflect domain name support
Add unit tests for parse_endpoint_address
Code quality improvements
Unmap IPv6-mapped IPv4 addresses (::ffff:a.b.c.d) before rules evaluation
Add more tests
Code cleanup
Squashed commit of the following:
commit 524190cfaab45dce4361af94d76554de2a8552c1
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Fri Jan 30 12:23:16 2026 +0300
fix: sync quic settings names in composer
Squashed commit of the following:
commit 4f8b5e76c4618ac2d7fe34e202a2226bc602689b
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Thu Jan 29 17:46:54 2026 +0300
fix: populate setting.clients before config validation
Squashed commit of the following:
commit 2180f578020af98ce5022bd1b150dc10faf25af6
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Thu Jan 29 12:05:19 2026 +0300
Add CHANGELOG
commit ee83a32baf03f787842ec0fa46deb5d6d8e2488b
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Thu Jan 29 11:39:48 2026 +0300
Do not fail with deny_unknown_fields
commit 81bec39b5dfb1ba705f3cd3292175f7ce8bdd498
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Thu Jan 29 10:47:58 2026 +0300
Do not start the endpoint without credentials; warn user about missing credentials
commit d772a4434bda3d72faed6d398b1cc376a7ac1d02
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Wed Jan 28 13:42:09 2026 +0300
Use valid names in quic setting
commit 963e3ea769928abc945cd1436112ed5547815c08
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Wed Jan 28 13:38:04 2026 +0300
Do not ignore wrong fields order with serde(deny_unknown_fields); add serde(alias) for backward compatability
Squashed commit of the following:
commit 2511d66376f6237ac134452492ba9b059a027609
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Wed Jan 28 15:10:44 2026 +0300
Disable use of setup_wizard in interactive mode without a TTY
Squashed commit of the following:
commit 868936154da794b13ed24f18743d361fb52bfb8f
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Mon Dec 29 13:10:17 2025 +0300
do not ask user about the speedtest path and disable it by default
commit 84793f74664b4ff9229d7fc0f48a4437efd02c3c
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Sun Dec 28 16:07:22 2025 +0300
lint-fix
commit 4d6ea3e9bbe964b2a2f8b34b3ccf541ec661e985
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Sun Dec 28 16:05:48 2025 +0300
do not create ping/speedtest hosts in setup_wizard
commit 3cde015560880f57027aaa394109ec29af7b6bad
Author: Zhavoronkov Aleksei <a.zhavoronkov@adguard.com>
Date: Wed Dec 24 14:33:46 2025 +0300
Change setup_wizard logic for ping/speedtest endpoints
Squashed commit of the following:
commit b04f8cbc91ff6b85d468033427941d99e1433e19
Author: Alexey Zhavoronkov <a.zhavoronkov@adguard.com>
Date: Mon Dec 22 19:14:06 2025 +0300
Support interactive mode for alternative SNIs
commit a599aa706d2ee66baec839c15077cdc28548db55
Author: Alexey Zhavoronkov <a.zhavoronkov@adguard.com>
Date: Mon Dec 22 17:49:22 2025 +0300
Support alternative SNIs for domain
Squashed commit of the following:
commit e69c9007117a7600c499d84ea8a5294c0d54dcfc
Author: Andrey Meshkov <am@adguard.com>
Date: Sun Dec 21 21:32:33 2025 +0300
Fix grammar in log messages, errors and CLI
Squashed commit of the following:
commit 0dc9600ff3bd8573d805e4de4d85290b1052a222
Author: Andrey Meshkov <am@adguard.com>
Date: Sun Dec 21 20:53:02 2025 +0300
Rollback to the old changelog
commit fb56f619d5f703d712dbfdb95ab093a211dc0c58
Author: Andrey Meshkov <am@adguard.com>
Date: Sun Dec 21 20:36:24 2025 +0300
Improve the dev doc
commit afd44a5e2bebd51b07dcb587cf39ada925a42db9
Author: Andrey Meshkov <am@adguard.com>
Date: Sun Dec 21 20:32:49 2025 +0300
Added auto-formatting and pre-commit hook
Squashed commit of the following:
commit ea27f1d12d0b3bf576a10568a82fff6fc12be8d1
Author: Alexey Zhavoronkov <a.zhavoronkov@adguard.com>
Date: Fri Nov 28 12:14:25 2025 +0300
Change format of client_random_prefix to prefix[/mask]; use log crate for logging as in core
commit 9b914105145aa3b7af0220d77a03d12cd3c00c3b
Author: Alexey Zhavoronkov <a.zhavoronkov@adguard.com>
Date: Thu Nov 27 12:51:57 2025 +0300
Add an ability to specify TLS client random mask
Mask will be applied only if prefix is provided.
The final result is calculated as: match = (client_random_data[i] & mask_bytes[i] == prefix_bytes[i] & mask_bytes[i]).
See-also: AG-48706
Signed-off-by: Alexey Zhavoronkov <a.zhavoronkov@adguard.com>
Squashed commit of the following:
commit 53948bab8841c8278906cc17d6e306a2547fe908
Author: Sergey Fionov <sfionov@adguard.com>
Date: Sat Aug 2 22:53:36 2025 +0300
Use httpbin.agrd.dev instead of example.com
commit c467b86f3d680e61fcb799dcd65f010d932b7331
Author: Sergey Fionov <sfionov@adguard.com>
Date: Sat Aug 2 22:25:28 2025 +0300
Update images
commit b555b242a124f30595a30d18c3bf5a78349d9819
Author: Sergey Fionov <sfionov@adguard.com>
Date: Sat Aug 2 22:22:05 2025 +0300
Changes for intrumented tests
Merge in ADGUARD-CORE-LIBS/vpn-libs-endpoint from feature/AG-22970 to master
Squashed commit of the following:
commit 98ba1f1c8157786afa476077463dd23598a2cfea
Author: Sergei Gunchenko <s.gunchenko@adguard.com>
Date: Mon Jul 17 11:08:15 2023 +0300
clean up
commit 2917030a1bd15323904693da021dfbff64b7d691
Author: Sergei Gunchenko <s.gunchenko@adguard.com>
Date: Mon Jul 17 11:06:06 2023 +0300
changelog
commit bad35fd0a99c932e0a2e6ca2d00ae2c61f80eefc
Author: Sergei Gunchenko <s.gunchenko@adguard.com>
Date: Mon Jul 17 10:53:34 2023 +0300
Introduce a docker image to set up an endpoint and a makefile to ease the setup procedure
commit 5c9d1148320dff2ca75c366fc911d478678bcf26
Author: Sergei Gunchenko <s.gunchenko@adguard.com>
Date: Mon Jul 17 10:46:50 2023 +0300
wizard: do not ask for input if a parameter is predefined
commit 82222837b220ec30d0b5e1d08bff9077333da242
Author: Sergei Gunchenko <s.gunchenko@adguard.com>
Date: Mon Jul 17 10:41:16 2023 +0300
bench: minor
