3 Commits

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	e16299068f	feat: add native dual-stack IPv4/IPv6 support ... This commit implements comprehensive dual-stack support for the proxy, allowing it to listen on both IPv4 and IPv6 addresses simultaneously. Key changes: - Added new dual_stack.rs module with DualStackTcpListener implementation - Updated SSH module to use dual-stack listener - Updated configuration documentation to reflect IPv6 support - Added comprehensive tests for dual-stack functionality The implementation is inspired by tokio_dual_stack but implemented natively without external dependencies. It provides fair connection distribution between IPv4 and IPv6 clients while maintaining full backward compatibility with existing IPv4-only configurations. Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>	2026-03-10 23:38:19 +00:00
Sienna Meridian Satterwhite	41cf6ccc49	fix(deps): upgrade pingora 0.7→0.8 and aws-lc-sys to patch CVEs ... - pingora* 0.7.0 → 0.8.0: fixes CVE-2026-2833 (HTTP request smuggling via premature connection closure, CRITICAL) - aws-lc-sys 0.37.1 → 0.38.0: fixes GHSA-65p9-r9h6-22vj (timing side-channel in AES-CCM tag verification, HIGH) Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>	2026-03-10 23:38:19 +00:00
Sienna Meridian Satterwhite	6ec0f78a5b	feat: initial sunbeam-proxy implementation ... Custom Pingora-based edge proxy for the Sunbeam infrastructure stack. - HTTPS termination: mkcert file-based (local dev) or rustls-acme ACME (production) - Host-prefix routing with path-based sub-routing (auth virtual host) - HTTP→HTTPS redirect, WebSocket passthrough - cert-manager HTTP-01 challenge routing via Kubernetes Ingress watcher - TLS cert auto-reload via K8s Secret watcher - JSON structured audit logging (tracing-subscriber) - OpenTelemetry OTLP stub (disabled by default) - Multi-stage Dockerfile: musl static binary on chainguard/static distroless image Signed-off-by: Sienna Meridian Satterwhite <sienna@sunbeam.pt>	2026-03-10 23:38:19 +00:00