Fix Cascade egress verify to bind awg0 IP (v2.2.1).

Use client-subnet policy routing for curl checks instead of cascade peer Address; soft-warn when echo services fail but the route is OK.
This commit is contained in:
orohi
2026-07-27 04:27:00 +03:00
parent ac76a0e540
commit 80160d0ef4
9 changed files with 168 additions and 26 deletions
+2 -2
View File
@@ -1,4 +1,4 @@
{
{
"nav_servers": "Servers",
"nav_users": "Users",
"nav_invites": "Invite links",
@@ -611,7 +611,7 @@
"cascade_opt_wait_handshake": "Wait for exit handshake",
"cascade_opt_wait_handshake_hint": "Do not mark cascade active if the exit peer never answers.",
"cascade_verify_egress": "Verify egress IP",
"cascade_verify_egress_hint": "After handshake, curl ifconfig.me via the cascade Address; fail and roll back if empty.",
"cascade_verify_egress_hint": "After handshake, verify policy route from awg0 IP via cascade, then curl public-IP services. Soft-warn if curl fails but route is OK.",
"cascade_opt_keep_dns": "Keep DNS from exit config",
"cascade_opt_keep_dns_hint": "Usually off — the client sets DNS itself.",
"cascade_opt_handshake_timeout": "Handshake timeout (sec)",
+2 -2
View File
@@ -1,4 +1,4 @@
{
{
"nav_servers": "سرورها",
"nav_users": "کاربران",
"nav_invites": "لینک دعوت",
@@ -554,7 +554,7 @@
"cascade_opt_wait_handshake": "Wait for exit handshake",
"cascade_opt_wait_handshake_hint": "Do not mark cascade active if the exit peer never answers.",
"cascade_verify_egress": "Verify egress IP",
"cascade_verify_egress_hint": "After handshake, curl ifconfig.me via the cascade Address; fail and roll back if empty.",
"cascade_verify_egress_hint": "After handshake, verify policy route from awg0 IP via cascade, then curl public-IP services. Soft-warn if curl fails but route is OK.",
"cascade_opt_keep_dns": "Keep DNS from exit config",
"cascade_opt_keep_dns_hint": "Usually off — the client sets DNS itself.",
"cascade_opt_handshake_timeout": "Handshake timeout (sec)",
+2 -2
View File
@@ -1,4 +1,4 @@
{
{
"nav_servers": "Serveurs",
"nav_users": "Utilisateurs",
"nav_invites": "Liens d\u0027invitation",
@@ -554,7 +554,7 @@
"cascade_opt_wait_handshake": "Wait for exit handshake",
"cascade_opt_wait_handshake_hint": "Do not mark cascade active if the exit peer never answers.",
"cascade_verify_egress": "Verify egress IP",
"cascade_verify_egress_hint": "After handshake, curl ifconfig.me via the cascade Address; fail and roll back if empty.",
"cascade_verify_egress_hint": "After handshake, verify policy route from awg0 IP via cascade, then curl public-IP services. Soft-warn if curl fails but route is OK.",
"cascade_opt_keep_dns": "Keep DNS from exit config",
"cascade_opt_keep_dns_hint": "Usually off — the client sets DNS itself.",
"cascade_opt_handshake_timeout": "Handshake timeout (sec)",
+2 -2
View File
@@ -1,4 +1,4 @@
{
{
"nav_servers": "Серверы",
"nav_users": "Пользователи",
"nav_invites": "Ссылки",
@@ -611,7 +611,7 @@
"cascade_opt_wait_handshake": "Ждать handshake с выходом",
"cascade_opt_wait_handshake_hint": "Не помечать каскад «активным», если выход не отвечает.",
"cascade_verify_egress": "Проверять внешний IP",
"cascade_verify_egress_hint": "После handshake — curl ifconfig.me через Address каскада; при пустом ответе откат.",
"cascade_verify_egress_hint": "После handshake — проверка policy route с IP awg0 через cascade, затем curl. При сбое curl (при OK маршруте) — предупреждение, не откат.",
"cascade_opt_keep_dns": "Оставить DNS из конфига выхода",
"cascade_opt_keep_dns_hint": "Обычно выключено — DNS берёт клиент сам.",
"cascade_opt_handshake_timeout": "Таймаут handshake (сек)",
+2 -2
View File
@@ -1,4 +1,4 @@
{
{
"nav_servers": "服务器",
"nav_users": "用户列表",
"nav_invites": "邀请链接",
@@ -554,7 +554,7 @@
"cascade_opt_wait_handshake": "Wait for exit handshake",
"cascade_opt_wait_handshake_hint": "Do not mark cascade active if the exit peer never answers.",
"cascade_verify_egress": "Verify egress IP",
"cascade_verify_egress_hint": "After handshake, curl ifconfig.me via the cascade Address; fail and roll back if empty.",
"cascade_verify_egress_hint": "After handshake, verify policy route from awg0 IP via cascade, then curl public-IP services. Soft-warn if curl fails but route is OK.",
"cascade_opt_keep_dns": "Keep DNS from exit config",
"cascade_opt_keep_dns_hint": "Usually off — the client sets DNS itself.",
"cascade_opt_handshake_timeout": "Handshake timeout (sec)",