fix(rustproxy-routing): allow QUIC UDP TLS connections without SNI to match domain-restricted routes

This commit is contained in:
2026-03-20 02:35:22 +00:00
parent 07d88f6f6a
commit 247653c9d0
3 changed files with 65 additions and 5 deletions

View File

@@ -1,5 +1,11 @@
# Changelog
## 2026-03-20 - 25.17.1 - fix(rustproxy-routing)
allow QUIC UDP TLS connections without SNI to match domain-restricted routes
- Exempts UDP transport from the no-SNI rejection logic because QUIC encrypts the TLS ClientHello and SNI is unavailable at accept time
- Adds regression tests to confirm QUIC route matching succeeds without SNI while TCP TLS without SNI remains rejected
## 2026-03-19 - 25.17.0 - feat(rustproxy-passthrough)
add PROXY protocol v2 client IP handling for UDP and QUIC listeners