Commit Graph
85 Commits
Author SHA1 Message Date
Tianling Shen 696b64d79a cloudflared: update to 2026.8.3
2026.8.3
- 2026-08-28 chore: Remove stale metrics timeout TODO
- 2026-08-28 TUN-10798: Parse Quick Tunnel allowed mail rules
- 2026-08-27 chore: Clean up unused code
- 2026-08-26 chore: bump gorilla/websocket for GO-2026-6278
- 2026-08-26 VULN-142146: Update GitLab R2 token path (cloudflared-pkgs) to protected branches
- 2026-08-26 TUN-10820: Remove test-only stdin reconnect control
- 2026-08-26 TUN-10822: Remove fetching protocol percentage from remote
- 2026-08-25 TUN-10725: Remove unused certificate configuration
- 2026-08-20 chore: Update distrolesss images in amd64

2026.8.2
- 2026-08-14 VULN-141859: Revert path normalization

2026.8.1
- 2026-08-13 VULN-141859: Fix missing trailing slash

2026.8.0
- 2026-08-12 AUTH-9041 Generate ephemeral keypair for login token transfer
- 2026-08-12 VULN-141859: Normalize request path
- 2026-08-11 TUN-10748: Add FIPS image variant for Cloudflared tunnel
- 2026-08-10 AUTH-9012 Verify Access app identity with signed metadata
- 2026-08-07 chore: Bump grpc to v.1.83.0 to fix vulnerability
- 2026-07-08 TUN-10557: Bump quic-go v0.59.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-09-03 16:12:20 +08:00
Tianling Shen c409cd96eb cloudflared: update to 2026.7.3
Release note:
- https://github.com/cloudflare/cloudflared/releases/tag/2026.7.0
- https://github.com/cloudflare/cloudflared/releases/tag/2026.7.1
- https://github.com/cloudflare/cloudflared/releases/tag/2026.7.2
- https://github.com/cloudflare/cloudflared/releases/tag/2026.7.3

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-07-27 12:01:36 +08:00
Josef Schlehofer e755a9aef2 tree-wide: remove redundant test.sh files
Generic version checks were introduced in actions-shared-workflows,
making these individual test.sh files obsolete.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2026-07-04 23:42:46 +03:00
Tianling Shen b70e4e47ac cloudflared: Update to 2026.6.1
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2026.6.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-06-30 18:06:58 +08:00
Tianling Shen 951f11cfc2 cloudflared: Update to 2026.6.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2026.6.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-06-15 11:35:34 +08:00
kouhei-ioroi fb5ad65e5c cloudflared: support multiple upstream interfaces.
support multiple upstream interfaces in config.

Signed-off-by: kouhei-ioroi <kouhei@ioroi.group>
2026-04-20 14:48:39 +08:00
Tianling Shen f460aa1f48 cloudflared: Update to 2026.3.0
2026.3.0
- 2026-03-05 TUN-10292: Add cloudflared management token command
- 2026-03-03 chore: Addressing small fixes and typos
- 2026-03-03 fix: Update go-sentry and go-oidc to address CVE's
- 2026-02-24 TUN-10258: add agents.md
- 2026-02-23 TUN-10267: Update mods to fix CVE GO-2026-4394
- 2026-02-20 TUN-10247: Update tail command to use /management/logs endpoint
- 2026-02-11 TUN-9858: Add more information to proxy-dns removal message

2026.2.0
- 2026-02-06 TUN-10216: TUN fix cloudflare vulnerabilities GO-2026-4340 and GO-2026-4341
- 2026-02-02 TUN-9858: Remove proxy-dns feature from cloudflared

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-03-27 11:12:11 +08:00
Tianling Shen 3c59d49b52 cloudflared: Update to 2026.1.2
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2026.1.2

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2026-02-08 17:25:05 +08:00
Bohdan Chubuk 137a710fc2 cloudflared: fix duplicate "run" command argument
The init script was appending the 'run' subcommand twice. The first
instance was misplaced, causing a command syntax error by placing 'run'
before other tunnel options, which breaks the service.

This patch removes the first, incorrect 'run' argument, leaving the
second one in the correct position after all options have been set.

This fixes a regression introduced in pull request #27786.

Ref: https://github.com/openwrt/packages/pull/27786
Signed-off-by: Bohdan Chubuk <chbgdn@gmail.com>
2025-11-10 20:06:34 +08:00
Tianling Shen e1b49dc033 cloudflared: Update to 2025.11.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.11.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-11-09 21:16:46 +08:00
Akihiro Nagai 38da2ccc4d cloudflared: fix argument order for tunnel command
Move all global options (--protocol, --loglevel, --logfile, --config,
--origincert, etc.) before the 'run' subcommand, and keep --token
after it to match the correct cloudflared CLI syntax.

Signed-off-by: Akihiro Nagai <bashing.tremors_0f@icloud.com>
2025-11-08 02:30:51 +08:00
Akihiro Nagai b68f1c8c04 cloudflared: improve init script for tunnel management
Resolved conflict between remotely-managed tunnel and locally-managed
tunnel configurations.

- Bumped PKG_RELEASE to 2
- Commented out 'config' and 'origincert' options in default
  configuration file
- Preserved options as comments for user reference

Signed-off-by: Akihiro Nagai <bashing.tremors_0f@icloud.com>
2025-11-06 02:11:02 +02:00
Tianling Shen b228b5ee4f cloudflared: Update to 2025.10.1
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.10.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-11-04 14:18:37 +08:00
Tianling Shen 185cfc0f9a cloudflared: Update to 2025.10.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.10.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-10-15 13:17:24 +08:00
Tianling Shen 894ae1dd03 cloudflared: Update to 2025.9.1
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.9.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-29 19:56:28 +08:00
Tianling Shen 173eb1d169 cloudflared: Update to 2025.9.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.9.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-09-22 17:16:47 +08:00
Tianling Shen c16bee8b90 cloudflared: Update to 2025.8.1
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.8.1

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-22 19:36:37 +08:00
Tianling Shen 651d18f623 cloudflared: Update to 2025.8.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.8.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-08-14 21:07:33 +08:00
Tianling Shen 29c9bf31c5 cloudflared: change default protocol back to 'auto'
Most of the PQ and FIPS compliant curves are already available
in go 1.24.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-10 15:43:56 +08:00
Tianling Shen 4df4bf3696 cloudflared: Update to 2025.7.0
Release note: https://github.com/cloudflare/cloudflared/releases/tag/2025.7.0

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-07-07 21:03:39 +08:00
Tianling Shen 93bd9fc3e0 cloudflared: Update to 2025.6.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-06-22 21:44:19 +08:00
Tianling Shen c26204d36a cloudflared: Update to 2025.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-17 21:41:34 +08:00
Tianling Shen 12b3f62910 cloudflared: Update to 2025.4.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-05-09 16:17:27 +08:00
Tianling Shen 87ed509841 cloudflared: Update to 2025.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-04-15 19:42:45 +08:00
Tianling Shen dfa0ec2d5f cloudflared: Update to 2025.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-03-12 17:21:30 +08:00
Tianling Shen 66906b8677 cloudflared: Update to 2025.2.0
Remove unneeded reload_service func while at it.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-18 19:55:55 +08:00
Tianling Shen 2d83d187a0 cloudflared: Update to 2025.1.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-02-03 20:22:18 +08:00
Tianling Shen 0c547b9ebb cloudflared: Update to 2025.1.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2025-01-15 13:38:09 +08:00
Tianling Shen 34c79e8d83 cloudflared: Update to 2024.12.2
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-12-24 16:09:22 +08:00
Tianling Shen 44544ee74e cloudflared: Update to 2024.12.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-12-13 19:06:01 +08:00
Tianling Shen b0303ca161 cloudflared: Update to 2024.11.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-11-28 15:03:01 +08:00
Tianling Shen 78ccd862af cloudflared: Update to 2024.11.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-11-14 17:00:30 +08:00
Tianling Shen a15d47d7b1 cloudflared: Update to 2024.10.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-11-02 19:17:22 +08:00
Tianling Shen 52037eb625 cloudflared: reload service if wan inferface has (re)connected
Sometimes the wan connection needs time to be established (e.g. cold
boot after power loss) and the service may crash as the internet is
yet available. Add a trigger to reload the service once the wan
interface is up.

Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-09-02 13:19:16 +08:00
Milinda Brantini e905c66399 cloudflared: Update to 2024.8.3
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-08-24 18:28:54 +08:00
Milinda Brantini c22e7071ff cloudflared: Update to 2024.8.2
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-08-07 13:18:45 +08:00
Ryan Keane 2d711c8fbd cloudflared: Fix incorrect uci config syntax
Fix incorrect uci config syntax, caused by a careless newbie contributer.
Modify function append_param_arg() in init script, to support hyphenated
arguments.
Add more command parameters as uci options, no value is set to keep it default.

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
2024-06-24 15:35:56 +08:00
Ryan Keane 31c91837f9 cloudflared: Add more run parameters in UCI
https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/configure-tunnels/tunnel-run-parameters/

Close #24122

Signed-off-by: Ryan Keane <the.ra2.ifv@gmail.com>
2024-06-20 04:26:30 +08:00
Milinda Brantini 43e0590049 cloudflared: Update to 2024.6.1
Signed-off-by: Milinda Brantini <C_A_T_T_E_R_Y@outlook.com>
2024-06-19 17:48:56 +08:00
Tianling Shen b965bd59aa cloudflared: Update to 2024.5.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-05-24 22:13:42 +08:00
Tianling Shen 462bfd84e4 cloudflared: Update to 2024.4.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-27 13:18:55 +08:00
Tianling Shen d9419aeabd cloudflared: Update to 2024.4.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-04-15 13:22:56 +08:00
Tianling Shen bcb7553385 cloudflared: Update to 2024.3.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-03-21 15:05:52 +08:00
Tianling Shen 18aef55126 cloudflared: Update to 2024.2.1
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-26 16:21:09 +08:00
Tianling Shen 87bd747652 cloudflared: Update to 2024.2.0
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-02-14 12:51:05 +08:00
Sergey Ponomarev b3580a76d8 cloudflared: refine config.yml
The config.yml is an example of a tunnel local configuration.
But the cloudlfared treat it as a real config and fails to start.
So to avoid problems let's comment all the statements.

The `url: http://localhost:8000` is not a valid config option.

Additionally add a smale of configuring ingres rules.

The cloudflared.config has missing option token.

Signed-off-by: Sergey Ponomarev <stokito@gmail.com>
2024-02-04 10:47:41 +08:00
Tianling Shen 17dfbd8613 cloudflared: Update to 2024.1.5
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-01-30 23:41:25 +08:00
Tianling Shen 48b55bde67 cloudflared: Update to 2024.1.4
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-01-20 12:54:09 +08:00
Tianling Shen d16377d23f cloudflared: Update to 2024.1.2
Finally fixed build with Go 1.21.

Fixes: #22383
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2024-01-14 14:09:15 +08:00
Tianling Shen 08f3dccccd cloudflared: Update to 2023.7.3
Signed-off-by: Tianling Shen <cnsztl@immortalwrt.org>
2023-07-31 00:41:02 +08:00