openconnect
Proxygen
openconnect | Proxygen | |
---|---|---|
13 | 7 | |
- | 8,039 | |
- | 0.2% | |
- | 9.3 | |
- | about 12 hours ago | |
C++ | ||
- | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
openconnect
-
Backdoor in upstream xz/liblzma leading to SSH server compromise
A lot of software (including https://gitlab.com/openconnect/openconnect of which I'm a maintainer) uses libxml2, which in turn transitively links to libzma, using it to load and store compressed XML.
I'm not *too* worried about OpenConnect given that we use `libxml2` only to read and parse uncompressed XML…
But I am wondering if there has been any statement from libxml2 devs (they're under the GNOME umbrella) about potential risks to libxml2 and its users.
-
Actual SSH over HTTPS
From the article:
> Ubiquitous presence of HTTPS allows you to pass your data through very restrictive middle boxes!
This is, in fact, why all — or nearly all — proprietary VPN protocols (so-called "SSL VPNs") implement a mode that initiates a tunnel via HTTPS, at least as a fallback if not as the primary mode of operation: precisely in order to have a mode of operation that works with almost any connection to the global Internet.
I'm one of the main developers of https://gitlab.com/openconnect/openconnect, which implements many such protocols, and wrote https://github.com/dlenski/what-vpn, which sniffs or identifies even more flavors of TLS-based VPN servers.
-
OpenConnect stopped working: Unexpected 404 result from server
Found the solution: It's as simple, as changing the user agent with --useragent=AnyConnect. This is ridiculous. https://gitlab.com/openconnect/openconnect/-/issues/544
-
Work from home (WFH) while travelling internationally?
Source: I am one of the lead developers of OpenConnect, a popular open-source client for many corporate VPNs, and have done all of the above.
-
How to vet an untrusted open-source project?
Be careful you're not using an illicit fork. https://gitlab.com/openconnect/openconnect
-
Which SLT package is better if I want the best consistent speed? would they reduce the speed in the unlimited package?
I personally have an openconnect server, and I patched their client to let me specify the SNI, (it's set to the server's hostname by default (https://gitlab.com/openconnect/openconnect/-/blob/master/gnutls.c#L2366), but it's optional in the anyconnect protocol spec)
-
GlobalProtect from PaloAlto: "Cannot connect to local gpd service."
Thank you, trying openconnect for multiple hours, but cannot auth, created issue about that https://gitlab.com/openconnect/openconnect/-/issues/446
-
Overriding a minimum EC2 sizing from a vendor
If this is for anything other than AnyConnect I feel like you're better off with a t4g.nano running OpenVPN. If it's AnyConnect, you can run OpenConnect.
- Linux user has to migrate to Windows or Mac
-
Create second MacOS VM within MacOS install
I had similar issue with Fortinet VPN. Try using something like https://gitlab.com/openconnect/openconnect. Run this from terminal to connect to VPN when needed. If this doesn't work search for global protect open source and there are other options.
Proxygen
-
Backdoor in upstream xz/liblzma leading to SSH server compromise
Looking forward to the time when Meta will make https://github.com/facebookincubator/zstrong.git public
found it mentioned in https://github.com/facebook/proxygen/blob/main/build/fbcode_..., looks like it's going to be cousin of zstd, but maybe for the stronger compression use cases
- Nghttp3 1.0.0 – HTTP/3 library written in C
- Zap – fast back ends in Zig
- C++ (or C, I guess) application server that's QUIC/HTTP3 ready?
-
kleinsHTTP: A stupid stupidly simple HTTP Server
proxygen claims to support all 3, although I'm still not sure if it's an actual library or just an interface.
-
cpprestsdk in maintenance mode
If you need an embedded C++ HTTP server then there are plenty of libraries/frameworks (in random order): Crow, RESTinio, Boost.Beast, cpp-httplib, http_backend, Pistache, RestBed, served, proxygen, Simple-Web-Server, drogon, oat++.
-
Experiments with h3 clients + Envoy
proxygen/hq
What are some alternatives?
GlobalProtect-openconnect - A GlobalProtect VPN client for Linux, written in Rust, based on OpenConnect and Tauri, supports SSO with MFA, Yubikey, and client certificate authentication, etc.
C++ REST SDK - The C++ REST SDK is a Microsoft project for cloud-based client-server communication in native code using a modern asynchronous C++ API design. This project aims to help C++ developers connect to and interact with services.
macos-virtualbox-vm - Instructions and script to help you create a VirtualBox VM running macOS.
Boost.Beast - HTTP and WebSocket built on Boost.Asio in C++11
rsa_ct_kip - Provision an RSA SecurID token with RSA's CT-KIP protocol
POCO - The POCO C++ Libraries are powerful cross-platform C++ libraries for building network- and internet-based applications that run on desktop, server, mobile, IoT, and embedded systems.
openconnect - OpenConnect client extended to support Palo Alto Networks' GlobalProtect VPN
Simple-WebSocket-Server
gp-saml-gui - Interactively authenticate to GlobalProtect VPNs that require SAML
nghttp2 - nghttp2 - HTTP/2 C Library and tools
stencil-golang - Template repository for Golang applications
Mongoose - Embedded Web Server