7 Commits

Include renames

Author	SHA1	Message	Date
elky	17d01d7fe0	fix(dns): unify provider resolution and bound SMTP and tunnel egress ... Share provider DNS policy across WebSocket and connection probes, handle bracketed IPv6 literals, and preserve bounded address sets for outbound clients. Bound SMTP DNS and TCP setup with multi-address fallback. Add opt-in trusted proxy DNS for tunnel upstreams while retaining default IP ACLs and origin isolation. Document DNS policy boundaries and verify 809 gateway, tunnel, and HTTP regression tests.	2026-09-08 17:44:59 +08:00
elky	b37b252b14	fix(ci): satisfy protocol utility clippy checks	2026-09-05 02:37:41 +08:00
elky	c005700a7e	fix(network): tolerate synthetic DNS for trusted origins	2026-09-04 17:25:53 +08:00
elky	c142d39951	feat(http): expose narrow benchmarking fake-ip predicate	2026-09-04 16:13:19 +08:00
elky	579f2c7cc1	feat(security): harden gateway boundaries and usage policies ... Consolidate subscription usage policy enforcement, privacy-safe persistence, and gateway security hardening into one reviewable change. Includes bounded HTTP and execution envelopes, header and protocol guards, DNS and relay validation, authentication and secret projection hardening, secure backup/install paths, and regression coverage.	2026-09-04 03:45:52 +08:00
fawney19	a703acd1fe	feat(proxy): record tunnel stability metrics	2026-05-08 22:03:17 +08:00
fawney19	b5a0070023	feat: 引入 aether-runtime/cache/data/http/testkit 基础 crate，完善并发门控与审计系统 ... 新增 crate： - aether-runtime: 服务运行时基础设施（并发门控、分布式并发、指标、队列、优雅关闭、tracing） - aether-cache: 通用 TTL 缓存与命名空间抽象 - aether-data: 数据访问层（PostgreSQL/Redis 后端、repository 模式） - aether-http: HTTP 客户端封装（重试、配置） - aether-testkit: 集成测试工具集（gateway/executor/hub/proxy fixture、等待、负载测试） gateway 扩展： - 引入 audit 模块（shadow 执行审计、决策链路追踪、请求审计 bundle） - 引入 cache 模块（AuthContext 缓存、direct-plan bypass 缓存） - 引入 data 模块（auth/candidates/config/usage/video_tasks 数据访问） - 集成 ConcurrencyGate/DistributedConcurrencyGate 请求门控 - 新增本地 auth 拒绝、过载响应构建器 - 补充 control/auth_cache/video/concurrency 集成测试 aether-proxy 扩展： - AppState 集成 stream_gate / distributed_stream_gate 并发门控 - 新增 ProxyAdmissionError 及准入拒绝流程 - stream_handler 补充门控饱和/不可用场景测试 - 配置与注册客户端逻辑完善 aether-hub 扩展： - main.rs 引入运行时初始化、指标端点、健康检查 - local_relay 重构为 lib.rs 暴露公共接口	2026-03-24 15:12:56 +08:00