Chris Lu 0a96972a99 s3: verify X-Forwarded-Prefix only from trusted proxies (#11843) ...

* s3api: check the direct peer against the trusted-proxy allowlist

* s3: verify X-Forwarded-Prefix only from trusted proxies

* s3: note that trusted proxies must sanitize forwarded headers

2026-10-19 15:55:18 -07:00

..

admin

fix(admin): improve Total Volumes count contrast (#11817)

2026-10-18 21:34:09 -07:00

cluster

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

command

s3: verify X-Forwarded-Prefix only from trusted proxies (#11843)

2026-10-19 15:55:18 -07:00

credential

s3: gate internal LifecycleDelete gRPC behind admin Bearer auth (#11291)

2026-09-13 13:07:10 -07:00

ec

ec: compare live idx NeedleId sets before encode (#11812)

2026-10-19 00:56:17 -07:00

filer

filer: free orphaned hard-link chunks and remote objects in delete sweeps (#11809)

2026-10-18 12:23:30 -07:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam: scope CreateServiceAccount's ParentUser by policy resource (#11736)

2026-10-18 11:48:01 -07:00

iamapi

s3api: align S3/IAM error responses with AWS (#11632)

2026-10-07 21:02:38 +08:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: release flock locks before the close-time flush (#11726)

2026-10-15 22:38:03 -07:00

mq

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

notification

kafka: honor notification.kafka.event_types (#11601)

2026-10-05 21:15:06 +08:00

operation

filer: honor a storage rule's rack/data-center constraint instead of falling back (#11804)

2026-10-17 22:28:53 -07:00

pb

s3api: make ambiguous routed-PUT recovery atomic and stop transaction replay (#11787)

2026-10-17 21:36:39 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

EC worker: pin jobs to replica-host workers, late-bind local source (#11718)

2026-10-13 05:31:34 +08:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

filer: free orphaned hard-link chunks and remote objects in delete sweeps (#11809)

2026-10-18 12:23:30 -07:00

replication

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

s3api

s3: verify X-Forwarded-Prefix only from trusted proxies (#11843)

2026-10-19 15:55:18 -07:00

security

security: share the admin gRPC peer authentication check

2026-10-12 02:55:50 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

Design + master mirror of max volume id outside raft (#11763) (#11818)

2026-10-19 02:42:42 -07:00

sftpd

sftp: enforce file ACLs on rename targets (#11770)

2026-10-17 12:36:20 -07:00

shell

fs.meta.load: wait for in-flight entry creation before returning (#11776)

2026-10-17 20:28:43 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

filer: evict remote-cached objects under storage pressure (#11515)

2026-09-29 22:05:42 +08:00

storage

storage: hash index-metric bloom filter with xxhash

2026-10-19 01:47:25 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

Design + master mirror of max volume id outside raft (#11763) (#11818)

2026-10-19 02:42:42 -07:00

util

filer: free orphaned hard-link chunks and remote objects in delete sweeps (#11809)

2026-10-18 12:23:30 -07:00

wdclient

filer: announce to master only once gRPC serves, and leave before it stops (#11700)

2026-10-11 21:10:46 +08:00

worker

ec: compare live idx NeedleId sets before encode (#11812)

2026-10-19 00:56:17 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00