@push.rocks/smartvpn 1.19.4 → 1.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/dist_rust/smartvpn_daemon_linux_amd64 +0 -0
  2. package/dist_rust/smartvpn_daemon_linux_arm64 +0 -0
  3. package/dist_ts/00_commitinfo_data.js +1 -1
  4. package/dist_ts/smartvpn.interfaces.d.ts +8 -3
  5. package/package.json +1 -1
  6. package/ts/00_commitinfo_data.ts +1 -1
  7. package/ts/smartvpn.interfaces.ts +8 -3
package/dist_ts/00_commitinfo_data.js CHANGED
@@ -3,7 +3,7 @@
3
3
  */
4
4
  export const commitinfo = {
5
5
  name: '@push.rocks/smartvpn',
6
- version: '1.19.4',
6
+ version: '1.20.0',
7
7
  description: 'A VPN solution with TypeScript control plane and Rust data plane daemon'
8
8
  };
9
9
  //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLFFBQVE7SUFDakIsV0FBVyxFQUFFLHlFQUF5RTtDQUN2RixDQUFBIn0=
package/dist_ts/smartvpn.interfaces.d.ts CHANGED
@@ -105,10 +105,15 @@ export interface IVpnServerConfig {
105
105
  * Supports exact IPs, CIDR, wildcards, ranges. */
106
106
  connectionIpBlockList?: string[];
107
107
  /** When true and forwardingMode is 'socket', the userspace NAT engine prepends
108
- * PROXY protocol v2 headers on outbound TCP connections, conveying the VPN client's
109
- * tunnel IP as the source address. This allows downstream services (e.g. SmartProxy)
110
- * to see the real VPN client identity instead of 127.0.0.1. */
108
+ * PROXY protocol v2 headers on outbound TCP connections. */
111
109
  socketForwardProxyProtocol?: boolean;
110
+ /** Source address to place into outbound PROXY v2 headers.
111
+ * 'tunnelIp' preserves legacy behavior. 'remoteIp' exposes the VPN client's
112
+ * real connecting IP when known, with tunnel IP fallback. */
113
+ socketForwardProxyProtocolSource?: 'tunnelIp' | 'remoteIp';
114
+ /** When true, outbound PROXY v2 headers include authenticated SmartVPN metadata
115
+ * in a vendor TLV: clientId, assignedIp, transportType, and remoteAddr. */
116
+ socketForwardProxyProtocolVpnMetadata?: boolean;
112
117
  /** Destination routing policy for VPN client traffic (socket mode).
113
118
  * Controls where decrypted traffic goes: allow through, block, or redirect to a target.
114
119
  * Default: all traffic passes through (backward compatible). */
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@push.rocks/smartvpn",
3
- "version": "1.19.4",
3
+ "version": "1.20.0",
4
4
  "private": false,
5
5
  "description": "A VPN solution with TypeScript control plane and Rust data plane daemon",
6
6
  "type": "module",
package/ts/00_commitinfo_data.ts CHANGED
@@ -3,6 +3,6 @@
3
3
  */
4
4
  export const commitinfo = {
5
5
  name: '@push.rocks/smartvpn',
6
- version: '1.19.4',
6
+ version: '1.20.0',
7
7
  description: 'A VPN solution with TypeScript control plane and Rust data plane daemon'
8
8
  }
package/ts/smartvpn.interfaces.ts CHANGED
@@ -122,10 +122,15 @@ export interface IVpnServerConfig {
122
122
  * Supports exact IPs, CIDR, wildcards, ranges. */
123
123
  connectionIpBlockList?: string[];
124
124
  /** When true and forwardingMode is 'socket', the userspace NAT engine prepends
125
- * PROXY protocol v2 headers on outbound TCP connections, conveying the VPN client's
126
- * tunnel IP as the source address. This allows downstream services (e.g. SmartProxy)
127
- * to see the real VPN client identity instead of 127.0.0.1. */
125
+ * PROXY protocol v2 headers on outbound TCP connections. */
128
126
  socketForwardProxyProtocol?: boolean;
127
+ /** Source address to place into outbound PROXY v2 headers.
128
+ * 'tunnelIp' preserves legacy behavior. 'remoteIp' exposes the VPN client's
129
+ * real connecting IP when known, with tunnel IP fallback. */
130
+ socketForwardProxyProtocolSource?: 'tunnelIp' | 'remoteIp';
131
+ /** When true, outbound PROXY v2 headers include authenticated SmartVPN metadata
132
+ * in a vendor TLV: clientId, assignedIp, transportType, and remoteAddr. */
133
+ socketForwardProxyProtocolVpnMetadata?: boolean;
129
134
  /** Destination routing policy for VPN client traffic (socket mode).
130
135
  * Controls where decrypted traffic goes: allow through, block, or redirect to a target.
131
136
  * Default: all traffic passes through (backward compatible). */