3.25.2

fix(PortProxy): Adjust timeout settings and handle inactivity properly in PortProxy.
3.25.1
2025-03-05 18:24:28 +00:00 · 2025-03-05 18:24:28 +00:00 · 2025-03-05 18:07:40 +00:00 · 2025-03-05 18:07:39 +00:00 · 2025-03-05 17:46:26 +00:00 · 2025-03-05 17:46:25 +00:00
11 changed files with 3059 additions and 735 deletions
--- a/changelog.md
+++ b/changelog.md
@ -1,5 +1,256 @@
 # Changelog

+## 2025-03-05 - 3.25.2 - fix(PortProxy)
+Adjust timeout settings and handle inactivity properly in PortProxy.
+
+- Changed initialDataTimeout default to 30 seconds for better handling of initial data reception.
+- Adjusted keepAliveInitialDelay to 30 seconds for consistent socket optimization.
+- Introduced proper inactivity handling with updated timeout logic.
+- Parity check now accounts for a 120-second threshold for outgoing socket closure.
+
+## 2025-03-05 - 3.25.1 - fix(PortProxy)
+Adjust inactivity threshold to a random value between 20 and 30 minutes for better variability
+
+- Modified inactivity threshold calculation within PortProxy to use a random value between 1.2 and 1.8 million milliseconds.
+
+## 2025-03-05 - 3.25.0 - feat(PortProxy)
+Enhanced PortProxy with detailed logging, protocol detection, and rate limiting.
+
+- Added detailed logging capabilities for connection tracking in the PortProxy.
+- Introduced protocol detection allowing HTTP and WebSocket upgrades.
+- Implemented rate limiting for connections by IP.
+- Enhanced timeout handling for various protocol-specific scenarios.
+
+## 2025-03-05 - 3.24.0 - feat(core)
+Enhance core functionalities and test coverage for NetworkProxy and PortProxy
+
+- Added maximum connections, timeout settings, log levels, and CORS support in NetworkProxy.
+- Improved WebSocket handling with heartbeat and metrics tracking.
+- Enhanced connection management in PortProxy with optimizations for socket settings.
+- SNI and IP validation improvements.
+- Updates to test cases for comprehensive coverage.
+
+## 2025-03-05 - 3.23.1 - fix(PortProxy)
+Enhanced connection setup to handle pending data buffering before establishing outgoing connection
+
+- Introduced pending data buffering to address issues with data reception before outgoing connection is fully established.
+- Removed immediate data piping in favor of buffering to ensure complete initial data transfer.
+- Added temporary data handler to collect incoming data during connection setup for precise activity tracking.
+
+## 2025-03-03 - 3.23.0 - feat(documentation)
+Updated documentation with architecture flow diagrams.
+
+- Added detailed architecture and flow diagrams for SmartProxy components.
+- Included HTTPS Reverse Proxy Flow diagram.
+- Integrated Port Proxy with SNI-based Routing diagram.
+- Added Let's Encrypt Certificate Acquisition flow.
+
+## 2025-03-03 - 3.22.5 - fix(documentation)
+Refactored readme for clarity and consistency, fixed documentation typos
+
+- Updated readme to improve clarity and remove redundant information.
+- Fixed minor documentation issues in the code comments.
+- Reorganized readme structure for better readability.
+- Improved sample code snippets for easier understanding.
+
+## 2025-03-03 - 3.22.4 - fix(core)
+Addressed minor issues in the core modules to improve stability and performance.
+
+
+## 2025-03-03 - 3.22.3 - fix(core)
+Improve connection management and error handling in PortProxy
+
+- Refactored connection cleanup to handle errors more gracefully.
+- Introduced comprehensive comments for better code understanding.
+- Revised SNI data timeout logic for connection handling.
+- Enhanced logging and error reporting during connection management.
+- Improved inactivity checks and parity checks for existing connections.
+
+## 2025-03-03 - 3.22.2 - fix(portproxy)
+Refactored connection cleanup logic in PortProxy
+
+- Simplified the connection cleanup logic by removing redundant methods.
+- Consolidated the cleanup initiation and execution into a single cleanup method.
+- Improved error handling by ensuring connections are closed appropriately.
+
+## 2025-03-03 - 3.22.1 - fix(PortProxy)
+Fix connection timeout and IP validation handling for PortProxy
+
+- Adjusted initial data timeout setting for SNI-enabled connections in PortProxy.
+- Restored IP validation logic to original behavior, ensuring compatibility with domain configurations.
+
+## 2025-03-03 - 3.22.0 - feat(classes.portproxy)
+Enhanced PortProxy to support initial data timeout and improved IP handling
+
+- Added `initialDataTimeout` to PortProxy settings for handling data flow in chained proxies.
+- Improved IP validation by allowing relaxed checks in chained proxy setups.
+- Introduced dynamic logging for connection lifecycle and proxy configurations.
+- Enhanced timeout handling for better proxy resilience.
+
+## 2025-03-03 - 3.21.0 - feat(PortProxy)
+Enhancements to connection management in PortProxy
+
+- Introduced a unique ID for each connection record for improved tracking.
+- Enhanced cleanup mechanism for connections with dual states: initiated and executed.
+- Implemented shutdown process handling to ensure graceful connection closure.
+- Added logging for better tracing of connection activities and states.
+- Improved connection setup with explicit timeouts and data flow management.
+- Integrated inactivity and parity checks to monitor connection health.
+
+## 2025-03-01 - 3.20.2 - fix(PortProxy)
+Enhance connection cleanup handling in PortProxy
+
+- Add checks to ensure timers are reset only if outgoing socket is active
+- Prevent setting outgoingActive if the connection is already closed
+
+## 2025-03-01 - 3.20.1 - fix(PortProxy)
+Improve IP allowance check for forced domains
+
+- Enhanced IP allowance check logic by incorporating blocked IPs and default allowed IPs for forced domains within port proxy configurations.
+
+## 2025-03-01 - 3.20.0 - feat(PortProxy)
+Enhance PortProxy with advanced connection cleanup and logging
+
+- Introduced `cleanupConnection` method for improved connection management.
+- Added logging for connection cleanup including special conditions.
+- Implemented parity check to clean up connections when outgoing side closes but incoming remains active.
+- Improved logging during interval checks for active connections and their durations.
+
+## 2025-03-01 - 3.19.0 - feat(PortProxy)
+Enhance PortProxy with default blocked IPs
+
+- Introduced defaultBlockedIPs in IPortProxySettings to handle globally blocked IPs.
+- Added logic for merging domain-specific and default allowed and blocked IPs for effective IP filtering.
+- Refactored helper functions for IP and port range checks to improve modularity in PortProxy.
+
+## 2025-02-27 - 3.18.2 - fix(portproxy)
+Fixed typographical errors in comments within PortProxy class.
+
+- Corrected typographical errors in comments within the PortProxy class.
+
+## 2025-02-27 - 3.18.1 - fix(PortProxy)
+Refactor and enhance PortProxy test cases and handling
+
+- Refactored test cases in test/test.portproxy.ts for clarity and added coverage.
+- Improved TCP server helper functions for better flexibility.
+- Fixed issues with domain handling in PortProxy configuration.
+- Introduced round-robin logic for multi-IP domains in PortProxy.
+- Ensured proper cleanup and stopping of test servers in the test suite.
+
+## 2025-02-27 - 3.18.0 - feat(PortProxy)
+Add SNI-based renegotiation handling in PortProxy
+
+- Introduced a new field 'lockedDomain' in IConnectionRecord to store initial SNI.
+- Enhanced connection management by enforcing termination if rehandshake is detected with different SNI.
+
+## 2025-02-27 - 3.17.1 - fix(PortProxy)
+Fix handling of SNI re-negotiation in PortProxy
+
+- Removed connection locking to the initially negotiated SNI
+- Improved handling of SNI during renegotiation in PortProxy
+
+## 2025-02-27 - 3.17.0 - feat(smartproxy)
+Enhance description clarity and improve SNI handling with domain locking.
+
+- Improved package description in package.json, readme.md, and npmextra.json for better clarity and keyword optimization.
+- Enhanced SNI handling in PortProxy by adding domain locking and extra checks to terminate connections if a different SNI is detected post-handshake.
+- Refactored readme.md to better explain the usage and functionalities of the proxy features including SSL redirection, WebSocket handling, and dynamic routing.
+
+## 2025-02-27 - 3.16.9 - fix(portproxy)
+Extend domain input validation to support string arrays in port proxy configurations.
+
+- Modify IDomainConfig interface to allow domain specification as string array.
+- Update connection setup logic to handle multiple domain patterns.
+- Enhance domain rejection logging to include all domain patterns.
+
+## 2025-02-27 - 3.16.8 - fix(PortProxy)
+Fix IP filtering for domain and global default allowed lists and improve port-based routing logic.
+
+- Improved logic to prioritize domain-specific allowed IPs over global defaults.
+- Fixed port-based rules application to handle global port ranges more effectively.
+- Enhanced rejection handling for unauthorized IP addresses in both domain-specific and default global lists.
+
+## 2025-02-27 - 3.16.7 - fix(PortProxy)
+Improved IP validation logic in PortProxy to ensure correct domain matching and fallback
+
+- Refactored the setupConnection function inside PortProxy to enhance IP address validation.
+- Domain-specific allowed IP preference is applied before default list lookup.
+- Removed redundant condition checks to streamline connection rejection paths.
+
+## 2025-02-27 - 3.16.6 - fix(PortProxy)
+Optimize connection cleanup logic in PortProxy by removing unnecessary delays.
+
+- Removed multiple await plugins.smartdelay.delayFor(0) calls.
+- Improved performance by ensuring timely resource release during connection termination.
+
+## 2025-02-27 - 3.16.5 - fix(PortProxy)
+Improved connection cleanup process with added asynchronous delays
+
+- Connection cleanup now includes asynchronous delays for reliable order of operations.
+
+## 2025-02-27 - 3.16.4 - fix(PortProxy)
+Fix and enhance port proxy handling
+
+- Ensure that all created proxy servers are correctly checked for listening state.
+- Corrected the handling of ports and domain configurations within port proxy setups.
+- Expanded test coverage for handling multiple concurrent and chained proxy connections.
+
+## 2025-02-27 - 3.16.3 - fix(PortProxy)
+Refactored PortProxy to support multiple listening ports and improved modularity.
+
+- Updated PortProxy to allow multiple listening ports with flexible configuration.
+- Moved helper functions for IP and port range checks outside the class for cleaner code structure.
+
+## 2025-02-27 - 3.16.2 - fix(PortProxy)
+Fix port-based routing logic in PortProxy
+
+- Optimized the handling and checking of local ports in the global port range.
+- Fixed the logic for rejecting or accepting connections based on predefined port ranges.
+- Improved handling of the default and specific domain configurations during port-based connections.
+
+## 2025-02-27 - 3.16.1 - fix(core)
+Updated minor version numbers in dependencies for patch release.
+
+- No specific file changes detected.
+- Dependencies versioning adjusted for stability.
+
+## 2025-02-27 - 3.16.0 - feat(PortProxy)
+Enhancements made to PortProxy settings and capabilities
+
+- Added 'forwardAllGlobalRanges' and 'targetIP' to IPortProxySettings.
+- Improved PortProxy to forward connections based on domain-specific configurations.
+- Added comprehensive handling for global port-range based connection forwarding.
+- Enabled forwarding of all connections on global port ranges directly to global target IP.
+
+## 2025-02-27 - 3.15.0 - feat(classes.portproxy)
+Add support for port range-based routing with enhanced IP and port validation.
+
+- Introduced globalPortRanges in IPortProxySettings for routing based on port ranges.
+- Improved connection handling with port range and domain configuration validations.
+- Updated connection logging to include the local port information.
+
+## 2025-02-26 - 3.14.2 - fix(PortProxy)
+Fix cleanup timer reset for PortProxy
+
+- Resolved an issue where the cleanup timer in the PortProxy class did not reset correctly if both incoming and outgoing data events were triggered without clearing flags.
+
+## 2025-02-26 - 3.14.1 - fix(PortProxy)
+Increased default maxConnectionLifetime for PortProxy to 600000 ms
+
+- Updated PortProxy settings to extend default maxConnectionLifetime to 10 minutes.
+
+## 2025-02-26 - 3.14.0 - feat(PortProxy)
+Introduce max connection lifetime feature
+
+- Added an optional maxConnectionLifetime setting for PortProxy.
+- Forces cleanup of long-lived connections based on inactivity or lifetime limit.
+
+## 2025-02-25 - 3.13.0 - feat(core)
+Add support for tagging iptables rules with comments and cleaning them up on process exit
+
+- Extended IPTablesProxy class to include tagging rules with unique comments.
+- Added feature to clean up iptables rules via comments during process exit.
+
 ## 2025-02-24 - 3.12.0 - feat(IPTablesProxy)
 Introduce IPTablesProxy class for managing iptables NAT rules

--- a/npmextra.json
+++ b/npmextra.json
@ -5,22 +5,26 @@
      "githost": "code.foss.global",
      "gitscope": "push.rocks",
      "gitrepo": "smartproxy",
-      "description": "a proxy for handling high workloads of proxying",
+      "description": "A powerful proxy package that effectively handles high traffic, with features such as SSL/TLS support, port proxying, WebSocket handling, and dynamic routing with authentication options.",
      "npmPackagename": "@push.rocks/smartproxy",
      "license": "MIT",
      "projectDomain": "push.rocks",
      "keywords": [
        "proxy",
-        "network traffic",
+        "network",
+        "traffic management",
+        "SSL",
+        "TLS",
+        "WebSocket",
+        "port proxying",
+        "dynamic routing",
+        "authentication",
+        "real-time applications",
        "high workload",
-        "http",
-        "https",
-        "websocket",
-        "network routing",
-        "ssl redirect",
-        "port mapping",
+        "HTTPS",
        "reverse proxy",
-        "authentication"
+        "server",
+        "network security"
      ]
    }
  },
--- a/package.json
+++ b/package.json
@ -1,8 +1,8 @@
 {
  "name": "@push.rocks/smartproxy",
-  "version": "3.12.0",
+  "version": "3.25.2",
  "private": false,
-  "description": "a proxy for handling high workloads of proxying",
+  "description": "A powerful proxy package that effectively handles high traffic, with features such as SSL/TLS support, port proxying, WebSocket handling, and dynamic routing with authentication options.",
  "main": "dist_ts/index.js",
  "typings": "dist_ts/index.d.ts",
  "type": "module",
@ -15,26 +15,26 @@
    "buildDocs": "tsdoc"
  },
  "devDependencies": {
-    "@git.zone/tsbuild": "^2.1.66",
+    "@git.zone/tsbuild": "^2.2.6",
    "@git.zone/tsrun": "^1.2.44",
    "@git.zone/tstest": "^1.0.77",
    "@push.rocks/tapbundle": "^5.5.6",
-    "@types/node": "^22.13.0",
-    "typescript": "^5.7.3"
+    "@types/node": "^22.13.9",
+    "typescript": "^5.8.2"
  },
  "dependencies": {
    "@push.rocks/lik": "^6.1.0",
    "@push.rocks/smartdelay": "^3.0.5",
-    "@push.rocks/smartpromise": "^4.2.2",
+    "@push.rocks/smartpromise": "^4.2.3",
    "@push.rocks/smartrequest": "^2.0.23",
    "@push.rocks/smartstring": "^4.0.15",
    "@tsclass/tsclass": "^4.4.0",
    "@types/minimatch": "^5.1.2",
-    "@types/ws": "^8.5.14",
+    "@types/ws": "^8.18.0",
    "acme-client": "^5.4.0",
-    "minimatch": "^9.0.3",
+    "minimatch": "^10.0.1",
    "pretty-ms": "^9.2.0",
-    "ws": "^8.18.0"
+    "ws": "^8.18.1"
  },
  "files": [
    "ts/**/*",
@ -53,16 +53,20 @@
  ],
  "keywords": [
    "proxy",
-    "network traffic",
+    "network",
+    "traffic management",
+    "SSL",
+    "TLS",
+    "WebSocket",
+    "port proxying",
+    "dynamic routing",
+    "authentication",
+    "real-time applications",
    "high workload",
-    "http",
-    "https",
-    "websocket",
-    "network routing",
-    "ssl redirect",
-    "port mapping",
+    "HTTPS",
    "reverse proxy",
-    "authentication"
+    "server",
+    "network security"
  ],
  "homepage": "https://code.foss.global/push.rocks/smartproxy#readme",
  "repository": {
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@ -15,8 +15,8 @@ importers:
        specifier: ^3.0.5
        version: 3.0.5
      '@push.rocks/smartpromise':
-        specifier: ^4.2.2
-        version: 4.2.2
+        specifier: ^4.2.3
+        version: 4.2.3
      '@push.rocks/smartrequest':
        specifier: ^2.0.23
        version: 2.0.23
@ -30,24 +30,24 @@ importers:
        specifier: ^5.1.2
        version: 5.1.2
      '@types/ws':
-        specifier: ^8.5.14
-        version: 8.5.14
+        specifier: ^8.18.0
+        version: 8.18.0
      acme-client:
        specifier: ^5.4.0
        version: 5.4.0
      minimatch:
-        specifier: ^9.0.3
-        version: 9.0.5
+        specifier: ^10.0.1
+        version: 10.0.1
      pretty-ms:
        specifier: ^9.2.0
        version: 9.2.0
      ws:
-        specifier: ^8.18.0
-        version: 8.18.0
+        specifier: ^8.18.1
+        version: 8.18.1
    devDependencies:
      '@git.zone/tsbuild':
-        specifier: ^2.1.66
-        version: 2.2.1
+        specifier: ^2.2.6
+        version: 2.2.6
      '@git.zone/tsrun':
        specifier: ^1.2.44
        version: 1.3.3
@ -58,11 +58,11 @@ importers:
        specifier: ^5.5.6
        version: 5.5.6(@aws-sdk/credential-providers@3.741.0)(socks@2.8.3)
      '@types/node':
-        specifier: ^22.13.0
-        version: 22.13.0
+        specifier: ^22.13.9
+        version: 22.13.9
      typescript:
-        specifier: ^5.7.3
-        version: 5.7.3
+        specifier: ^5.8.2
+        version: 5.8.2

 packages:

@ -575,8 +575,8 @@ packages:
  '@esm-bundle/chai@4.3.4-fix.0':
    resolution: {integrity: sha512-26SKdM4uvDWlY8/OOOxSB1AqQWeBosCX3wRYUZO7enTAj03CtVxIiCimYVG2WpULcyV51qapK4qTovwkUr5Mlw==}

-  '@git.zone/tsbuild@2.2.1':
-    resolution: {integrity: sha512-qvyhpRDBm+ZtRJjpx9zgmSBNgdvjkbJ66TxjmFGm0kjT9i/QK2nvfwJXf0CwRfuRQwHhZbl/wYO/dChYkwi0fA==}
+  '@git.zone/tsbuild@2.2.6':
+    resolution: {integrity: sha512-6CZ0wqtW/+WXzoHxzNPIKVzPjTColxVoY+TpzlIaz01WktiNr/oeJAfYXdQIVTVYpJs1n9tZ3fwKP6l3LAPAlQ==}
    hasBin: true

  '@git.zone/tsbundle@2.2.5':
@ -870,8 +870,8 @@ packages:
  '@push.rocks/smartpdf@3.1.8':
    resolution: {integrity: sha512-9fxshJAp6VCkrAFWXAFS7X7QzZLFSWM/JzDtllYW7gaWzRKxsMCdfaNy1vKsGq5uK5L91Lrd+A9Olp1mx4xs1w==}

-  '@push.rocks/smartpromise@4.2.2':
-    resolution: {integrity: sha512-3EGXSo0L4e5V/aPSznH3XssjFccGN72GECGqtDCu9xC8AmB5AtCl5h0Xy3dNHCr67XIXqhmuUAnMDV1/v+PiJg==}
+  '@push.rocks/smartpromise@4.2.3':
+    resolution: {integrity: sha512-Ycg/TJR+tMt+S3wSFurOpEoW6nXv12QBtKXgBcjMZ4RsdO28geN46U09osPn9N9WuwQy1PkmTV5J/V4F9U8qEw==}

  '@push.rocks/smartpuppeteer@2.0.2':
    resolution: {integrity: sha512-EcYCT0PX++WjfHp7W5UYX3t8x5gSNpJMMUvhA7SHz8b2t76ItslNWxprRcF0CUQyN1fozbf5StZf7dwdGc/dIA==}
@ -891,6 +891,9 @@ packages:
  '@push.rocks/smartshell@3.2.2':
    resolution: {integrity: sha512-zMTVJ2ca1pDiqyRQpByz/T2HtoRYLCbXFo6TSA663nuGmnGsIn/DHFZMQYUJGdDi6LSjVxPsQMsY5Bwc4hL6og==}

+  '@push.rocks/smartshell@3.2.3':
+    resolution: {integrity: sha512-BWA/DH1H9lG7Er23d4uYgirfYaya5dX4g/WpWm2la7mOzuL9o2FnPIhel52DQUKIh7ty3Ql305ApV8YaAb4+/w==}
+
  '@push.rocks/smartsitemap@2.0.3':
    resolution: {integrity: sha512-jIcms8V1b2mt3dS4PKNlLR1DRC8pCDWMRVbnyM/2+snZOJZonQRlQzAyX8No0EfLbfdrfnxv2IjPX13X29Re6g==}

@ -1470,8 +1473,8 @@ packages:
  '@types/node-forge@1.3.11':
    resolution: {integrity: sha512-FQx220y22OKNTqaByeBGqHWYz4cl94tpcxeFdvBo3wjG6XPBuZ0BNgNZRV5J5TFmmcsJ4IzsLkmGRiQbnYsBEQ==}

-  '@types/node@22.13.0':
-    resolution: {integrity: sha512-ClIbNe36lawluuvq3+YYhnIN2CELi+6q8NpnM7PYp4hBn/TatfboPgVSm2rwKRfnV2M+Ty9GWDFI64KEe+kysA==}
+  '@types/node@22.13.9':
+    resolution: {integrity: sha512-acBjXdRJ3A6Pb3tqnw9HZmyR3Fiol3aGxRCK1x3d+6CDAMjl7I649wpSd+yNURCjbOUGu9tqtLKnTGxmK6CyGw==}

  '@types/parse5@6.0.3':
    resolution: {integrity: sha512-SuT16Q1K51EAVPz1K29DJ/sXjhSQ0zjvsypYJ6tlwVsRV9jwW5Adq2ch8Dq8kDBCkYnELS7N7VNCSB5nC56t/g==}
@ -1560,8 +1563,8 @@ packages:
  '@types/ws@7.4.7':
    resolution: {integrity: sha512-JQbbmxZTZehdc2iszGKs5oC3NFnjeay7mtAWrdt7qNtAVK0g19muApzAy4bm9byz79xa2ZnO/BOBC2R8RC5Lww==}

-  '@types/ws@8.5.14':
-    resolution: {integrity: sha512-bd/YFLW+URhBzMXurx7lWByOu+xzU9+kb3RboOteXYDfW+tr+JZa99OyNmPINEGB/ahzKrEuc8rcv4gnpJmxTw==}
+  '@types/ws@8.18.0':
+    resolution: {integrity: sha512-8svvI3hMyvN0kKCJMvTJP/x6Y/EoQbepff882wL+Sn5QsXb3etnamgrJq4isrBxSJj5L2AuXcI0+bgkoAXGUJw==}

  '@types/yargs-parser@21.0.3':
    resolution: {integrity: sha512-I4q9QU9MQv4oEOz4tAHJtNz1cwuLxn2F3xcc2iV5WdqLPpUnj30aUuxt1mAxYTG+oe8CZMV/+6rU4S4gRDzqtQ==}
@ -2340,6 +2343,10 @@ packages:
    resolution: {integrity: sha512-Ld2g8rrAyMYFXBhEqMz8ZAHBi4J4uS1i/CxGMDnjyFWddMXLVcDp051DZfu+t7+ab7Wv6SMqpWmyFIj5UbfFvg==}
    engines: {node: '>=14'}

+  foreground-child@3.3.1:
+    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
+    engines: {node: '>=14'}
+
  form-data-encoder@2.1.4:
    resolution: {integrity: sha512-yDYSgNMraqvnxiEXO4hi88+YZxaHC6QKzb5N84iRCTDeRO7ZALpir/lVmf/uXUhnwUr2O4HU8s/n6x+yNjQkHw==}
    engines: {node: '>= 14.17'}
@ -3568,8 +3575,8 @@ packages:
  regenerator-runtime@0.14.1:
    resolution: {integrity: sha512-dYnhHh0nJoMfnkZs6GmmhFknAGRrLznOu5nc9ML+EJxGvrx6H7teuevqVqCuPcPK//3eDrrjQhehXVx9cnkGdw==}

-  registry-auth-token@5.0.3:
-    resolution: {integrity: sha512-1bpc9IyC+e+CNFRaWyn77tk4xGG4PPUyfakSmA6F6cvUDjrm58dfyJ3II+9yb10EDkHoy1LaPSmHaWLOH3m6HA==}
+  registry-auth-token@5.1.0:
+    resolution: {integrity: sha512-GdekYuwLXLxMuFTwAPg5UKGLW/UXzQrZvH/Zj791BQif5T05T0RsaLfHc9q3ZOKi7n+BoprPD9mJ0O0k4xzUlw==}
    engines: {node: '>=14'}

  registry-url@6.0.1:
@ -3985,6 +3992,11 @@ packages:
    engines: {node: '>=14.17'}
    hasBin: true

+  typescript@5.8.2:
+    resolution: {integrity: sha512-aJn6wq13/afZp/jT9QZmwEjDqqvSGp1VT5GVg+f/t6/oVyrgXM6BY1h9BRh/O5p3PlUPAe+WuiEZOmb/49RqoQ==}
+    engines: {node: '>=14.17'}
+    hasBin: true
+
  uglify-js@3.19.3:
    resolution: {integrity: sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==}
    engines: {node: '>=0.8.0'}
@ -4156,8 +4168,8 @@ packages:
      utf-8-validate:
        optional: true

-  ws@8.18.0:
-    resolution: {integrity: sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==}
+  ws@8.18.1:
+    resolution: {integrity: sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w==}
    engines: {node: '>=10.0.0'}
    peerDependencies:
      bufferutil: ^4.0.1
@ -4238,7 +4250,7 @@ snapshots:
      '@push.rocks/smartbuffer': 3.0.4
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartguard': 3.1.0
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/webrequest': 3.0.37
      '@push.rocks/webstream': 1.0.10

@ -4265,7 +4277,7 @@ snapshots:
      '@push.rocks/smartntml': 2.0.8
      '@push.rocks/smartopen': 2.0.0
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smartsitemap': 2.0.3
@ -4883,7 +4895,7 @@ snapshots:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartmarkdown': 3.0.3
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrouter': 1.3.2
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smartstate': 2.0.19
@ -5062,7 +5074,7 @@ snapshots:
    dependencies:
      '@types/chai': 4.3.20

-  '@git.zone/tsbuild@2.2.1':
+  '@git.zone/tsbuild@2.2.6':
    dependencies:
      '@git.zone/tspublish': 1.9.1
      '@push.rocks/early': 4.0.4
@ -5071,7 +5083,7 @@ snapshots:
      '@push.rocks/smartfile': 11.2.0
      '@push.rocks/smartlog': 3.0.7
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      typescript: 5.7.3
    transitivePeerDependencies:
      - aws-crt
@ -5085,7 +5097,7 @@ snapshots:
      '@push.rocks/smartlog': 3.0.7
      '@push.rocks/smartlog-destination-local': 9.0.2
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartspawn': 3.0.3
      '@types/html-minifier': 4.0.5
      esbuild: 0.24.2
@ -5103,7 +5115,7 @@ snapshots:
      '@push.rocks/smartnpm': 2.0.4
      '@push.rocks/smartpath': 5.0.18
      '@push.rocks/smartrequest': 2.0.23
-      '@push.rocks/smartshell': 3.2.2
+      '@push.rocks/smartshell': 3.2.3
    transitivePeerDependencies:
      - aws-crt

@ -5123,12 +5135,12 @@ snapshots:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartfile': 11.2.0
      '@push.rocks/smartlog': 3.0.7
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartshell': 3.2.2
      '@push.rocks/tapbundle': 5.5.6(@aws-sdk/credential-providers@3.741.0)(socks@2.8.3)
-      '@types/ws': 8.5.14
+      '@types/ws': 8.18.0
      figures: 6.1.0
-      ws: 8.18.0
+      ws: 8.18.1
    transitivePeerDependencies:
      - '@aws-sdk/credential-providers'
      - '@mongodb-js/zstd'
@ -5173,7 +5185,7 @@ snapshots:
      '@jest/schemas': 29.6.3
      '@types/istanbul-lib-coverage': 2.0.6
      '@types/istanbul-reports': 3.0.4
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/yargs': 17.0.33
      chalk: 4.1.2

@ -5385,7 +5397,7 @@ snapshots:
  '@push.rocks/early@4.0.4':
    dependencies:
      '@push.rocks/consolecolor': 2.0.2
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3

  '@push.rocks/isohash@2.0.1':
    dependencies:
@ -5404,7 +5416,7 @@ snapshots:
      '@push.rocks/smartfile': 11.2.0
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartstring': 4.0.15
      '@push.rocks/smartunique': 3.0.9
      '@push.rocks/taskbuffer': 3.1.7
@ -5416,7 +5428,7 @@ snapshots:
    dependencies:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartmatch': 2.0.0
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smarttime': 4.1.1
      '@types/minimatch': 5.1.2
@ -5447,7 +5459,7 @@ snapshots:
    dependencies:
      '@push.rocks/smartfile': 10.0.41
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smartstream': 2.0.8
@ -5475,7 +5487,7 @@ snapshots:
      '@aws-sdk/client-s3': 3.741.0
      '@push.rocks/smartmime': 2.0.4
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smartstream': 3.2.5
      '@push.rocks/smartstring': 4.0.15
@ -5499,7 +5511,7 @@ snapshots:
  '@push.rocks/smartchok@1.0.34':
    dependencies:
      '@push.rocks/lik': 6.1.0
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@tempfix/watcher': 2.3.0

@ -5508,13 +5520,13 @@ snapshots:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartlog': 3.0.7
      '@push.rocks/smartobject': 1.0.12
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      yargs-parser: 21.1.1

  '@push.rocks/smartcrypto@2.0.4':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@types/node-forge': 1.3.11
      node-forge: 1.3.1

@ -5524,7 +5536,7 @@ snapshots:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.0.7
      '@push.rocks/smartmongo': 2.0.10(@aws-sdk/credential-providers@3.741.0)(socks@2.8.3)
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smartstring': 4.0.15
      '@push.rocks/smarttime': 4.1.1
@ -5545,23 +5557,23 @@ snapshots:

  '@push.rocks/smartdelay@3.0.5':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3

  '@push.rocks/smartenv@5.0.12':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3

  '@push.rocks/smartexit@1.0.23':
    dependencies:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartdelay': 3.0.5
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      tree-kill: 1.2.2

  '@push.rocks/smartexpect@1.4.0':
    dependencies:
      '@push.rocks/smartdelay': 3.0.5
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      fast-deep-equal: 3.1.3

  '@push.rocks/smartfeed@1.0.11':
@ -5581,7 +5593,7 @@ snapshots:
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartmime': 1.0.6
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smartstream': 2.0.8
      '@types/fs-extra': 11.0.4
@ -5600,7 +5612,7 @@ snapshots:
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartmime': 2.0.4
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smartstream': 3.2.5
      '@types/fs-extra': 11.0.4
@ -5612,13 +5624,13 @@ snapshots:

  '@push.rocks/smartguard@3.1.0':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23

  '@push.rocks/smarthash@3.0.4':
    dependencies:
      '@push.rocks/smartjson': 5.0.20
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@types/through2': 2.0.41
      through2: 4.0.2

@ -5637,7 +5649,7 @@ snapshots:
    dependencies:
      '@push.rocks/consolecolor': 2.0.2
      '@push.rocks/smartlog-interfaces': 3.0.2
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3

  '@push.rocks/smartlog-interfaces@3.0.2':
    dependencies:
@ -5686,7 +5698,7 @@ snapshots:
      '@push.rocks/mongodump': 1.0.8
      '@push.rocks/smartdata': 5.2.12(@aws-sdk/credential-providers@3.741.0)(socks@2.8.3)
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      mongodb-memory-server: 8.16.1
    transitivePeerDependencies:
      - '@aws-sdk/credential-providers'
@ -5716,7 +5728,7 @@ snapshots:
      '@push.rocks/smartarchive': 3.0.8
      '@push.rocks/smartfile': 10.0.41
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smarttime': 4.1.1
      '@push.rocks/smartversion': 3.0.5
@ -5728,7 +5740,7 @@ snapshots:
    dependencies:
      '@design.estate/dees-element': 2.0.39
      '@happy-dom/global-registrator': 15.11.7
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      fake-indexeddb: 6.0.0
    transitivePeerDependencies:
      - react
@ -5753,7 +5765,7 @@ snapshots:
      '@push.rocks/smartfile': 11.2.0
      '@push.rocks/smartnetwork': 3.0.2
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartpuppeteer': 2.0.2
      '@push.rocks/smartunique': 3.0.9
      '@tsclass/tsclass': 4.4.0
@ -5768,7 +5780,7 @@ snapshots:
      - supports-color
      - utf-8-validate

-  '@push.rocks/smartpromise@4.2.2': {}
+  '@push.rocks/smartpromise@4.2.3': {}

  '@push.rocks/smartpuppeteer@2.0.2':
    dependencies:
@ -5784,7 +5796,7 @@ snapshots:

  '@push.rocks/smartrequest@2.0.23':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smarturl': 3.1.0
      agentkeepalive: 4.6.0
      form-data: 4.0.1
@ -5797,7 +5809,7 @@ snapshots:

  '@push.rocks/smartrx@3.0.7':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      rxjs: 7.8.1

  '@push.rocks/smarts3@2.2.5':
@ -5816,7 +5828,16 @@ snapshots:
    dependencies:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartexit': 1.0.23
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
+      '@types/which': 3.0.4
+      tree-kill: 1.2.2
+      which: 5.0.0
+
+  '@push.rocks/smartshell@3.2.3':
+    dependencies:
+      '@push.rocks/smartdelay': 3.0.5
+      '@push.rocks/smartexit': 1.0.23
+      '@push.rocks/smartpromise': 4.2.3
      '@types/which': 3.0.4
      tree-kill: 1.2.2
      which: 5.0.0
@ -5841,7 +5862,7 @@ snapshots:
      '@push.rocks/smartenv': 5.0.12
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartlog': 3.0.7
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smarttime': 4.1.1
      engine.io: 6.5.4
@ -5856,7 +5877,7 @@ snapshots:

  '@push.rocks/smartspawn@3.0.3':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      spawn-wrap: 2.0.0
      threads: 1.7.0
      tiny-worker: 2.3.0
@ -5868,13 +5889,13 @@ snapshots:
      '@push.rocks/isohash': 2.0.1
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartjson': 5.0.20
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/webstore': 2.0.20

  '@push.rocks/smartstream@2.0.8':
    dependencies:
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@types/from2': 2.3.5
      '@types/through2': 2.0.41
@ -5885,7 +5906,7 @@ snapshots:
    dependencies:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartenv': 5.0.12
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7

  '@push.rocks/smartstring@4.0.15':
@ -5903,7 +5924,7 @@ snapshots:
    dependencies:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartdelay': 3.0.5
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      croner: 9.0.0
      date-fns: 4.1.0
      dayjs: 1.11.13
@ -5946,7 +5967,7 @@ snapshots:
      '@push.rocks/smartjson': 5.0.20
      '@push.rocks/smartmongo': 2.0.10(@aws-sdk/credential-providers@3.741.0)(socks@2.8.3)
      '@push.rocks/smartpath': 5.0.18
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrequest': 2.0.23
      '@push.rocks/smarts3': 2.2.5
      '@push.rocks/smartshell': 3.2.2
@ -5970,7 +5991,7 @@ snapshots:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.0.7
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@push.rocks/smarttime': 4.1.1
      '@push.rocks/smartunique': 3.0.9
@ -5980,7 +6001,7 @@ snapshots:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartenv': 5.0.12
      '@push.rocks/smartjson': 5.0.20
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/webstore': 2.0.20

  '@push.rocks/websetup@3.0.19':
@ -5995,7 +6016,7 @@ snapshots:
      '@push.rocks/lik': 6.1.0
      '@push.rocks/smartenv': 5.0.12
      '@push.rocks/smartjson': 5.0.20
-      '@push.rocks/smartpromise': 4.2.2
+      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.7
      '@tempfix/idb': 8.0.3
      fake-indexeddb: 5.0.2
@ -6557,14 +6578,14 @@ snapshots:

  '@types/accepts@1.3.7':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/babel__code-frame@7.0.6': {}

  '@types/body-parser@1.19.5':
    dependencies:
      '@types/connect': 3.4.38
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/buffer-json@2.0.3': {}

@ -6580,17 +6601,17 @@ snapshots:

  '@types/clean-css@4.2.11':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      source-map: 0.6.1

  '@types/co-body@6.1.3':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/qs': 6.9.18

  '@types/connect@3.4.38':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/content-disposition@0.5.8': {}

@ -6603,11 +6624,11 @@ snapshots:
      '@types/connect': 3.4.38
      '@types/express': 5.0.0
      '@types/keygrip': 1.0.6
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/cors@2.8.17':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/debounce@1.2.4': {}

@ -6621,14 +6642,14 @@ snapshots:

  '@types/express-serve-static-core@4.19.6':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/qs': 6.9.18
      '@types/range-parser': 1.2.7
      '@types/send': 0.17.4

  '@types/express-serve-static-core@5.0.6':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/qs': 6.9.18
      '@types/range-parser': 1.2.7
      '@types/send': 0.17.4
@ -6653,30 +6674,30 @@ snapshots:

  '@types/from2@2.3.5':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/fs-extra@11.0.4':
    dependencies:
      '@types/jsonfile': 6.1.4
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/fs-extra@9.0.13':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/glob@7.2.0':
    dependencies:
      '@types/minimatch': 5.1.2
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/glob@8.1.0':
    dependencies:
      '@types/minimatch': 5.1.2
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/gunzip-maybe@1.4.2':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/hast@3.0.4':
    dependencies:
@ -6710,7 +6731,7 @@ snapshots:

  '@types/jsonfile@6.1.4':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/keygrip@1.0.6': {}

@ -6727,7 +6748,7 @@ snapshots:
      '@types/http-errors': 2.0.4
      '@types/keygrip': 1.0.6
      '@types/koa-compose': 3.2.8
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/mdast@4.0.4':
    dependencies:
@ -6745,9 +6766,9 @@ snapshots:

  '@types/node-forge@1.3.11':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

-  '@types/node@22.13.0':
+  '@types/node@22.13.9':
    dependencies:
      undici-types: 6.20.0

@ -6765,19 +6786,19 @@ snapshots:

  '@types/s3rver@3.7.4':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/semver@7.5.8': {}

  '@types/send@0.17.4':
    dependencies:
      '@types/mime': 1.3.5
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/serve-static@1.15.7':
    dependencies:
      '@types/http-errors': 2.0.4
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/send': 0.17.4

  '@types/sinon-chai@3.2.12':
@ -6797,11 +6818,11 @@ snapshots:

  '@types/tar-stream@2.2.3':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/through2@2.0.41':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/triple-beam@1.3.5': {}

@ -6825,7 +6846,7 @@ snapshots:

  '@types/whatwg-url@8.2.2':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      '@types/webidl-conversions': 7.0.3

  '@types/which@2.0.2': {}
@ -6834,11 +6855,11 @@ snapshots:

  '@types/ws@7.4.7':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

-  '@types/ws@8.5.14':
+  '@types/ws@8.18.0':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9

  '@types/yargs-parser@21.0.3': {}

@ -6848,7 +6869,7 @@ snapshots:

  '@types/yauzl@2.10.3':
    dependencies:
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
    optional: true

  '@ungap/structured-clone@1.3.0': {}
@ -7457,7 +7478,7 @@ snapshots:
    dependencies:
      '@types/cookie': 0.4.1
      '@types/cors': 2.8.17
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      accepts: 1.3.8
      base64id: 2.0.0
      cookie: 0.4.2
@ -7733,6 +7754,11 @@ snapshots:
      cross-spawn: 7.0.6
      signal-exit: 4.1.0

+  foreground-child@3.3.1:
+    dependencies:
+      cross-spawn: 7.0.6
+      signal-exit: 4.1.0
+
  form-data-encoder@2.1.4: {}

  form-data@4.0.1:
@ -7824,7 +7850,7 @@ snapshots:

  glob@10.4.5:
    dependencies:
-      foreground-child: 3.3.0
+      foreground-child: 3.3.1
      jackspeak: 3.4.3
      minimatch: 9.0.5
      minipass: 7.1.2
@ -8178,7 +8204,7 @@ snapshots:
  jest-util@29.7.0:
    dependencies:
      '@jest/types': 29.6.3
-      '@types/node': 22.13.0
+      '@types/node': 22.13.9
      chalk: 4.1.2
      ci-info: 3.9.0
      graceful-fs: 4.2.11
@ -8964,7 +8990,7 @@ snapshots:
  package-json@8.1.1:
    dependencies:
      got: 12.6.1
-      registry-auth-token: 5.0.3
+      registry-auth-token: 5.1.0
      registry-url: 6.0.1
      semver: 7.7.1

@ -9193,7 +9219,7 @@ snapshots:

  regenerator-runtime@0.14.1: {}

-  registry-auth-token@5.0.3:
+  registry-auth-token@5.1.0:
    dependencies:
      '@pnpm/npm-conf': 2.3.1

@ -9694,6 +9720,8 @@ snapshots:

  typescript@5.7.3: {}

+  typescript@5.8.2: {}
+
  uglify-js@3.19.3: {}

  uint8array-extras@1.4.0: {}
@ -9850,7 +9878,7 @@ snapshots:

  ws@8.17.1: {}

-  ws@8.18.0: {}
+  ws@8.18.1: {}

  ws@8.8.0: {}

--- a/readme.md
+++ b/readme.md
@ -1,108 +1,393 @@
 # @push.rocks/smartproxy

-A proxy for handling high workloads of proxying.
+A powerful proxy package that effectively handles high traffic, with features such as SSL/TLS support, port proxying, WebSocket handling, and dynamic routing with authentication options.

-## Install
+## Architecture & Flow Diagrams

-To install `@push.rocks/smartproxy`, run the following command in your project's root directory:
+### Component Architecture
+The diagram below illustrates the main components of SmartProxy and how they interact:

-```bash
-npm install @push.rocks/smartproxy --save
+```mermaid
+flowchart TB
+    Client([Client])
+    
+    subgraph "SmartProxy Components"
+        direction TB
+        HTTP80[HTTP Port 80\nSslRedirect]
+        HTTPS443[HTTPS Port 443\nNetworkProxy]
+        PortProxy[TCP Port Proxy\nwith SNI routing]
+        IPTables[IPTablesProxy]
+        Router[ProxyRouter]
+        ACME[Port80Handler\nACME/Let's Encrypt]
+        Certs[(SSL Certificates)]
+    end
+    
+    subgraph "Backend Services"
+        Service1[Service 1]
+        Service2[Service 2]
+        Service3[Service 3]
+    end
+    
+    Client -->|HTTP Request| HTTP80
+    HTTP80 -->|Redirect| Client
+    Client -->|HTTPS Request| HTTPS443
+    Client -->|TLS/TCP| PortProxy
+    
+    HTTPS443 -->|Route Request| Router
+    Router -->|Proxy Request| Service1
+    Router -->|Proxy Request| Service2
+    
+    PortProxy -->|Direct TCP| Service2
+    PortProxy -->|Direct TCP| Service3
+    
+    IPTables -.->|Low-level forwarding| PortProxy
+    
+    HTTP80 -.->|Challenge Response| ACME
+    ACME -.->|Generate/Manage| Certs
+    Certs -.->|Provide TLS Certs| HTTPS443
+    
+    classDef component fill:#f9f,stroke:#333,stroke-width:2px;
+    classDef backend fill:#bbf,stroke:#333,stroke-width:1px;
+    classDef client fill:#dfd,stroke:#333,stroke-width:2px;
+    
+    class Client client;
+    class HTTP80,HTTPS443,PortProxy,IPTables,Router,ACME component;
+    class Service1,Service2,Service3 backend;
 ```

-This will add `@push.rocks/smartproxy` to your project's dependencies.
+### HTTPS Reverse Proxy Flow
+This diagram shows how HTTPS requests are handled and proxied to backend services:
+
+```mermaid
+sequenceDiagram
+    participant Client
+    participant NetworkProxy
+    participant ProxyRouter
+    participant Backend
+    
+    Client->>NetworkProxy: HTTPS Request
+    
+    Note over NetworkProxy: TLS Termination
+    
+    NetworkProxy->>ProxyRouter: Route Request
+    ProxyRouter->>ProxyRouter: Match hostname to config
+    
+    alt Authentication Required
+        NetworkProxy->>Client: Request Authentication
+        Client->>NetworkProxy: Send Credentials
+        NetworkProxy->>NetworkProxy: Validate Credentials
+    end
+    
+    NetworkProxy->>Backend: Forward Request
+    Backend->>NetworkProxy: Response
+    
+    Note over NetworkProxy: Add Default Headers
+    
+    NetworkProxy->>Client: Forward Response
+    
+    alt WebSocket Request
+        Client->>NetworkProxy: Upgrade to WebSocket
+        NetworkProxy->>Backend: Upgrade to WebSocket
+        loop WebSocket Active
+            Client->>NetworkProxy: WebSocket Message
+            NetworkProxy->>Backend: Forward Message
+            Backend->>NetworkProxy: WebSocket Message
+            NetworkProxy->>Client: Forward Message
+            NetworkProxy-->>NetworkProxy: Heartbeat Check
+        end
+    end
+```
+
+### Port Proxy with SNI-based Routing
+This diagram illustrates how TCP connections with SNI (Server Name Indication) are processed and forwarded:
+
+```mermaid
+sequenceDiagram
+    participant Client
+    participant PortProxy
+    participant Backend
+    
+    Client->>PortProxy: TLS Connection
+    
+    alt SNI Enabled
+        PortProxy->>Client: Accept Connection
+        Client->>PortProxy: TLS ClientHello with SNI
+        PortProxy->>PortProxy: Extract SNI Hostname
+        PortProxy->>PortProxy: Match Domain Config
+        PortProxy->>PortProxy: Validate Client IP
+        
+        alt IP Allowed
+            PortProxy->>Backend: Forward Connection
+            Note over PortProxy,Backend: Bidirectional Data Flow
+        else IP Rejected
+            PortProxy->>Client: Close Connection
+        end
+    else Port-based Routing
+        PortProxy->>PortProxy: Match Port Range
+        PortProxy->>PortProxy: Find Domain Config
+        PortProxy->>PortProxy: Validate Client IP
+        
+        alt IP Allowed
+            PortProxy->>Backend: Forward Connection
+            Note over PortProxy,Backend: Bidirectional Data Flow
+        else IP Rejected
+            PortProxy->>Client: Close Connection
+        end
+    end
+    
+    loop Connection Active
+        PortProxy-->>PortProxy: Monitor Activity
+        PortProxy-->>PortProxy: Check Max Lifetime
+        alt Inactivity or Max Lifetime Exceeded
+            PortProxy->>Client: Close Connection
+            PortProxy->>Backend: Close Connection
+        end
+    end
+```
+
+### Let's Encrypt Certificate Acquisition
+This diagram shows how certificates are automatically acquired through the ACME protocol:
+
+```mermaid
+sequenceDiagram
+    participant Client
+    participant Port80Handler
+    participant ACME as Let's Encrypt ACME
+    participant NetworkProxy
+    
+    Client->>Port80Handler: HTTP Request for domain
+    
+    alt Certificate Exists
+        Port80Handler->>Client: Redirect to HTTPS
+    else No Certificate
+        Port80Handler->>Port80Handler: Mark domain as obtaining cert
+        Port80Handler->>ACME: Create account & new order
+        ACME->>Port80Handler: Challenge information
+        
+        Port80Handler->>Port80Handler: Store challenge token & key authorization
+        
+        ACME->>Port80Handler: HTTP-01 Challenge Request
+        Port80Handler->>ACME: Challenge Response
+        
+        ACME->>ACME: Validate domain ownership
+        ACME->>Port80Handler: Challenge validated
+        
+        Port80Handler->>Port80Handler: Generate CSR
+        Port80Handler->>ACME: Submit CSR
+        ACME->>Port80Handler: Issue Certificate
+        
+        Port80Handler->>Port80Handler: Store certificate & private key
+        Port80Handler->>Port80Handler: Mark certificate as obtained
+        
+        Note over Port80Handler,NetworkProxy: Certificate available for use
+        
+        Client->>Port80Handler: Another HTTP Request
+        Port80Handler->>Client: Redirect to HTTPS
+        Client->>NetworkProxy: HTTPS Request
+        Note over NetworkProxy: Uses new certificate
+    end
+```
+
+## Features
+
+- **HTTPS Reverse Proxy** - Route traffic to backend services based on hostname with TLS termination
+- **WebSocket Support** - Full WebSocket proxying with heartbeat monitoring
+- **TCP Port Forwarding** - Advanced port forwarding with SNI inspection and domain-based routing
+- **HTTP to HTTPS Redirection** - Automatically redirect HTTP requests to HTTPS
+- **Let's Encrypt Integration** - Automatic certificate management using ACME protocol
+- **IP Filtering** - Control access with IP allow/block lists using glob patterns
+- **IPTables Integration** - Direct manipulation of iptables for low-level port forwarding
+- **Basic Authentication** - Support for basic auth on proxied routes
+- **Connection Management** - Intelligent connection tracking and cleanup
+
+## Installation
+
+```bash
+npm install @push.rocks/smartproxy
+```

 ## Usage

-`@push.rocks/smartproxy` is a versatile package for setting up and handling proxies with various capabilities such as SSL redirection, port proxying, and creating network proxies with complex routing rules. Below is a comprehensive guide on using its features.
-
-### Setting Up a Network Proxy
-
-Create a network proxy to route incoming HTTPS requests to different local servers based on the hostname.
+### Basic Reverse Proxy Setup

 ```typescript
 import { NetworkProxy } from '@push.rocks/smartproxy';

-// Instantiate the NetworkProxy with desired options
-const myNetworkProxy = new NetworkProxy({ port: 443 });
+// Create a reverse proxy listening on port 443
+const proxy = new NetworkProxy({
+  port: 443
+});

-// Define your reverse proxy configurations
+// Define reverse proxy configurations
 const proxyConfigs = [
  {
-    destinationIp: '127.0.0.1',
-    destinationPort: '3000',
    hostName: 'example.com',
-    privateKey: `-----BEGIN PRIVATE KEY-----
-PRIVATE_KEY_CONTENT
-----END PRIVATE KEY-----`,
-    publicKey: `-----BEGIN CERTIFICATE-----
-CERTIFICATE_CONTENT
-----END CERTIFICATE-----`,
+    destinationIp: '127.0.0.1',
+    destinationPort: 3000,
+    publicKey: 'your-cert-content',
+    privateKey: 'your-key-content'
  },
-  // Add more reverse proxy configurations here
+  {
+    hostName: 'api.example.com',
+    destinationIp: '127.0.0.1',
+    destinationPort: 4000,
+    publicKey: 'your-cert-content',
+    privateKey: 'your-key-content',
+    // Optional basic auth
+    authentication: {
+      type: 'Basic',
+      user: 'admin',
+      pass: 'secret'
+    }
+  }
 ];

-// Start the network proxy
-await myNetworkProxy.start();
-
-// Update proxy configurations dynamically
-await myNetworkProxy.updateProxyConfigs(proxyConfigs);
-
-// Optionally, add default headers to all responses
-await myNetworkProxy.addDefaultHeaders({
-  'X-Powered-By': 'smartproxy',
-});
+// Start the proxy and update configurations
+(async () => {
+  await proxy.start();
+  await proxy.updateProxyConfigs(proxyConfigs);
+  
+  // Add default headers to all responses
+  await proxy.addDefaultHeaders({
+    'Strict-Transport-Security': 'max-age=31536000; includeSubDomains; preload'
+  });
+})();
 ```

-### Port Proxying
-
-You can also set up a port proxy to forward traffic from one port to another, which is useful for dynamic port forwarding scenarios.
-
-```typescript
-import { PortProxy } from '@push.rocks/smartproxy';
-
-// Create a PortProxy to forward traffic from port 5000 to port 3000
-const myPortProxy = new PortProxy(5000, 3000);
-
-// Start the port proxy
-await myPortProxy.start();
-
-// To stop the port proxy, simply call
-await myPortProxy.stop();
-```
-
-### Enabling SSL Redirection
-
-Easily redirect HTTP traffic to HTTPS using the `SslRedirect` class. This is particularly useful when ensuring all traffic uses encryption.
+### HTTP to HTTPS Redirection

 ```typescript
 import { SslRedirect } from '@push.rocks/smartproxy';

-// Instantiate the SslRedirect on port 80 (HTTP)
-const mySslRedirect = new SslRedirect(80);
-
-// Start listening and redirecting to HTTPS
-await mySslRedirect.start();
-
-// To stop the redirection, use
-await mySslRedirect.stop();
+// Create and start HTTP to HTTPS redirect service on port 80
+const redirector = new SslRedirect(80);
+redirector.start();
 ```

-### Advanced Usage
+### TCP Port Forwarding with Domain-based Routing

-The package integrates seamlessly with TypeScript, allowing for advanced use cases, such as implementing custom routing logic, authentication mechanisms, and handling WebSocket connections through the network proxy.
+```typescript
+import { PortProxy } from '@push.rocks/smartproxy';

-For a more advanced setup involving WebSocket proxying and dynamic configuration reloading, refer to the network proxy example provided above. The WebSocket support demonstrates how seamless it is to work with real-time applications.
+// Configure port proxy with domain-based routing
+const portProxy = new PortProxy({
+  fromPort: 443,
+  toPort: 8443,
+  targetIP: 'localhost', // Default target host
+  sniEnabled: true,      // Enable SNI inspection
+  globalPortRanges: [{ from: 443, to: 443 }],
+  defaultAllowedIPs: ['*'], // Allow all IPs by default
+  domainConfigs: [
+    {
+      domains: ['example.com', '*.example.com'], // Glob patterns for matching domains
+      allowedIPs: ['192.168.1.*'],               // Restrict access by IP
+      blockedIPs: ['192.168.1.100'],             // Block specific IPs
+      targetIPs: ['10.0.0.1', '10.0.0.2'],       // Round-robin between multiple targets
+      portRanges: [{ from: 443, to: 443 }]
+    }
+  ],
+  maxConnectionLifetime: 3600000, // 1 hour in milliseconds
+  preserveSourceIP: true
+});

-Remember, when dealing with certificates and private keys for HTTPS configurations, always secure your keys and store them appropriately.
+portProxy.start();
+```

-`@push.rocks/smartproxy` provides a solid foundation for handling high workloads and complex proxying requirements with ease, whether you're implementing SSL redirections, port forwarding, or extensive routing and WebSocket support in your network.
+### IPTables Port Forwarding

-For more information on how to use the features, refer to the in-depth documentation available in the package's repository or the npm package description.
+```typescript
+import { IPTablesProxy } from '@push.rocks/smartproxy';
+
+// Configure IPTables to forward from port 80 to 8080
+const iptables = new IPTablesProxy({
+  fromPort: 80,
+  toPort: 8080,
+  toHost: 'localhost',
+  preserveSourceIP: true,
+  deleteOnExit: true  // Automatically clean up rules on process exit
+});
+
+iptables.start();
+```
+
+### Automatic HTTPS Certificate Management
+
+```typescript
+import { Port80Handler } from '@push.rocks/smartproxy';
+
+// Create an ACME handler for Let's Encrypt
+const acmeHandler = new Port80Handler();
+
+// Add domains to manage certificates for
+acmeHandler.addDomain('example.com');
+acmeHandler.addDomain('api.example.com');
+```
+
+## Configuration Options
+
+### NetworkProxy Options
+
+| Option         | Description                                       | Default |
+|----------------|---------------------------------------------------|---------|
+| `port`         | Port to listen on for HTTPS connections           | -       |
+
+### PortProxy Settings
+
+| Option                   | Description                                            | Default     |
+|--------------------------|--------------------------------------------------------|-------------|
+| `fromPort`               | Port to listen on                                      | -           |
+| `toPort`                 | Destination port to forward to                         | -           |
+| `targetIP`               | Default destination IP if not specified in domainConfig | 'localhost' |
+| `sniEnabled`             | Enable SNI inspection for TLS connections              | false       |
+| `defaultAllowedIPs`      | IP patterns allowed by default                         | -           |
+| `defaultBlockedIPs`      | IP patterns blocked by default                         | -           |
+| `preserveSourceIP`       | Preserve the original client IP                        | false       |
+| `maxConnectionLifetime`  | Maximum time in ms to keep a connection open           | 600000      |
+| `globalPortRanges`       | Array of port ranges to listen on                      | -           |
+| `forwardAllGlobalRanges` | Forward all global range connections to targetIP       | false       |
+| `gracefulShutdownTimeout`| Time in ms to wait during shutdown                     | 30000       |
+
+### IPTablesProxy Settings
+
+| Option            | Description                                 | Default     |
+|-------------------|---------------------------------------------|-------------|
+| `fromPort`        | Source port to forward from                 | -           |
+| `toPort`          | Destination port to forward to              | -           |
+| `toHost`          | Destination host to forward to              | 'localhost' |
+| `preserveSourceIP`| Preserve the original client IP             | false       |
+| `deleteOnExit`    | Remove iptables rules when process exits    | false       |
+
+## Advanced Features
+
+### Connection Management and Monitoring
+
+The `PortProxy` class includes built-in connection tracking and monitoring:
+
+- Automatic cleanup of idle connections
+- Timeouts for connections that exceed maximum lifetime
+- Detailed logging of connection states
+- Termination statistics
+
+### WebSocket Support
+
+The `NetworkProxy` class provides WebSocket support with:
+
+- WebSocket connection proxying
+- Automatic heartbeat monitoring
+- Connection cleanup for inactive WebSockets
+
+### SNI-based Routing
+
+The `PortProxy` class can inspect the SNI (Server Name Indication) field in TLS handshakes to route connections based on the requested domain:
+
+- Multiple backend targets per domain
+- Round-robin load balancing
+- Domain-specific allowed IP ranges
+- Protection against SNI renegotiation attacks

 ## License and Legal Information

-This repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository.
+This repository contains open-source code that is licensed under the MIT License. A copy of the MIT License can be found in the [license](license) file within this repository. 

 **Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.

--- a/test/test.portproxy.ts
+++ b/test/test.portproxy.ts
@ -8,246 +8,335 @@ const TEST_SERVER_PORT = 4000;
 const PROXY_PORT = 4001;
 const TEST_DATA = 'Hello through port proxy!';

-// Helper function to create a test TCP server
-function createTestServer(port: number): Promise<net.Server> {
+// Track all created servers and proxies for proper cleanup
+const allServers: net.Server[] = [];
+const allProxies: PortProxy[] = [];
+
+// Helper: Creates a test TCP server that listens on a given port and host.
+function createTestServer(port: number, host: string = 'localhost'): Promise<net.Server> {
  return new Promise((resolve) => {
    const server = net.createServer((socket) => {
      socket.on('data', (data) => {
-        // Echo the received data back
+        // Echo the received data back with a prefix.
        socket.write(`Echo: ${data.toString()}`);
      });
-
      socket.on('error', (error) => {
-        console.error('[Test Server] Socket error:', error);
+        console.error(`[Test Server] Socket error on ${host}:${port}:`, error);
      });
    });
-
-    server.listen(port, () => {
-      console.log(`[Test Server] Listening on port ${port}`);
+    server.listen(port, host, () => {
+      console.log(`[Test Server] Listening on ${host}:${port}`);
+      allServers.push(server); // Track this server
      resolve(server);
    });
  });
 }

-// Helper function to create a test client connection
+// Helper: Creates a test client connection.
 function createTestClient(port: number, data: string): Promise<string> {
  return new Promise((resolve, reject) => {
    const client = new net.Socket();
    let response = '';
-
+    
+    const timeout = setTimeout(() => {
+      client.destroy();
+      reject(new Error(`Client connection timeout to port ${port}`));
+    }, 5000);
+    
    client.connect(port, 'localhost', () => {
      console.log('[Test Client] Connected to server');
      client.write(data);
    });
-
    client.on('data', (chunk) => {
      response += chunk.toString();
      client.end();
    });
-
    client.on('end', () => {
+      clearTimeout(timeout);
      resolve(response);
    });
-
    client.on('error', (error) => {
+      clearTimeout(timeout);
      reject(error);
    });
  });
 }

-// Setup test environment
+// SETUP: Create a test server and a PortProxy instance.
 tap.test('setup port proxy test environment', async () => {
  testServer = await createTestServer(TEST_SERVER_PORT);
  portProxy = new PortProxy({
    fromPort: PROXY_PORT,
    toPort: TEST_SERVER_PORT,
-    toHost: 'localhost',
-    domains: [],
+    targetIP: 'localhost',
+    domainConfigs: [],
    sniEnabled: false,
-    defaultAllowedIPs: ['127.0.0.1']
+    defaultAllowedIPs: ['127.0.0.1'],
+    globalPortRanges: []
  });
+  allProxies.push(portProxy); // Track this proxy
 });

+// Test that the proxy starts and its servers are listening.
 tap.test('should start port proxy', async () => {
  await portProxy.start();
-  expect(portProxy.netServer.listening).toBeTrue();
+  expect((portProxy as any).netServers.every((server: net.Server) => server.listening)).toBeTrue();
 });

+// Test basic TCP forwarding.
 tap.test('should forward TCP connections and data to localhost', async () => {
  const response = await createTestClient(PROXY_PORT, TEST_DATA);
  expect(response).toEqual(`Echo: ${TEST_DATA}`);
 });

+// Test proxy with a custom target host.
 tap.test('should forward TCP connections to custom host', async () => {
-  // Create a new proxy instance with a custom host
  const customHostProxy = new PortProxy({
    fromPort: PROXY_PORT + 1,
    toPort: TEST_SERVER_PORT,
-    toHost: '127.0.0.1',
-    domains: [],
+    targetIP: '127.0.0.1',
+    domainConfigs: [],
    sniEnabled: false,
-    defaultAllowedIPs: ['127.0.0.1']
+    defaultAllowedIPs: ['127.0.0.1'],
+    globalPortRanges: []
  });
+  allProxies.push(customHostProxy); // Track this proxy
  
  await customHostProxy.start();
  const response = await createTestClient(PROXY_PORT + 1, TEST_DATA);
  expect(response).toEqual(`Echo: ${TEST_DATA}`);
  await customHostProxy.stop();
+  
+  // Remove from tracking after stopping
+  const index = allProxies.indexOf(customHostProxy);
+  if (index !== -1) allProxies.splice(index, 1);
 });

-tap.test('should forward connections based on domain-specific target IP', async () => {
-  // Create a second test server on a different port
-  const TEST_SERVER_PORT_2 = TEST_SERVER_PORT + 100;
-  const testServer2 = await createTestServer(TEST_SERVER_PORT_2);
+// Test custom IP forwarding
+// SIMPLIFIED: This version avoids port ranges and domain configs to prevent loops
+tap.test('should forward connections to custom IP', async () => {
+  // Set up ports that are FAR apart to avoid any possible confusion
+  const forcedProxyPort = PROXY_PORT + 2;  // 4003 - The port that our proxy listens on
+  const targetServerPort = TEST_SERVER_PORT + 200;  // 4200 - Target test server on another IP
+  
+  // Create a test server listening on 127.0.0.2:4200
+  const testServer2 = await createTestServer(targetServerPort, '127.0.0.2');

-  // Create a proxy with domain-specific target IPs
+  // Simplify the test drastically - use ONE proxy with very explicit configuration
  const domainProxy = new PortProxy({
-    fromPort: PROXY_PORT + 2,
-    toPort: TEST_SERVER_PORT,  // default port
-    toHost: 'localhost',       // default host
-    domains: [{
-      domain: 'domain1.test',
-      allowedIPs: ['127.0.0.1'],
-      targetIP: '127.0.0.1'
-    }, {
-      domain: 'domain2.test',
-      allowedIPs: ['127.0.0.1'],
-      targetIP: 'localhost'
-    }],
-    sniEnabled: false, // We'll test without SNI first since this is a TCP proxy test
-    defaultAllowedIPs: ['127.0.0.1']
+    fromPort: forcedProxyPort,  // 4003 - Listen on this port
+    toPort: targetServerPort,   // 4200 - Default forwarding port - MUST BE DIFFERENT from fromPort
+    targetIP: '127.0.0.2',      // Forward to IP where test server is
+    domainConfigs: [],          // No domain configs to confuse things
+    sniEnabled: false,
+    defaultAllowedIPs: ['127.0.0.1', '::ffff:127.0.0.1'], // Allow localhost
+    // We'll test the functionality WITHOUT port ranges this time
+    globalPortRanges: []
  });
+  allProxies.push(domainProxy); // Track this proxy

  await domainProxy.start();

-  // Test default connection (should use default host)
-  const response1 = await createTestClient(PROXY_PORT + 2, TEST_DATA);
-  expect(response1).toEqual(`Echo: ${TEST_DATA}`);
-
-  // Create another proxy with different default host
-  const domainProxy2 = new PortProxy({
-    fromPort: PROXY_PORT + 3,
-    toPort: TEST_SERVER_PORT,
-    toHost: '127.0.0.1',
-    domains: [],
-    sniEnabled: false,
-    defaultAllowedIPs: ['127.0.0.1']
-  });
-
-  await domainProxy2.start();
-  const response2 = await createTestClient(PROXY_PORT + 3, TEST_DATA);
-  expect(response2).toEqual(`Echo: ${TEST_DATA}`);
+  // Send a single test connection
+  const response = await createTestClient(forcedProxyPort, TEST_DATA);
+  expect(response).toEqual(`Echo: ${TEST_DATA}`);

  await domainProxy.stop();
-  await domainProxy2.stop();
+  
+  // Remove from tracking after stopping
+  const proxyIndex = allProxies.indexOf(domainProxy);
+  if (proxyIndex !== -1) allProxies.splice(proxyIndex, 1);
+  
+  // Close the test server
  await new Promise<void>((resolve) => testServer2.close(() => resolve()));
+  
+  // Remove from tracking
+  const serverIndex = allServers.indexOf(testServer2);
+  if (serverIndex !== -1) allServers.splice(serverIndex, 1);
 });

+// Test handling of multiple concurrent connections.
 tap.test('should handle multiple concurrent connections', async () => {
  const concurrentRequests = 5;
-  const requests = Array(concurrentRequests).fill(null).map((_, i) => 
+  const requests = Array(concurrentRequests).fill(null).map((_, i) =>
    createTestClient(PROXY_PORT, `${TEST_DATA} ${i + 1}`)
  );
-  
  const responses = await Promise.all(requests);
-  
  responses.forEach((response, i) => {
    expect(response).toEqual(`Echo: ${TEST_DATA} ${i + 1}`);
  });
 });

+// Test connection timeout handling.
 tap.test('should handle connection timeouts', async () => {
  const client = new net.Socket();
-  
  await new Promise<void>((resolve) => {
+    // Add a timeout to ensure we don't hang here
+    const timeout = setTimeout(() => {
+      client.destroy();
+      resolve();
+    }, 3000);
+    
    client.connect(PROXY_PORT, 'localhost', () => {
-      // Don't send any data, just wait for timeout
+      // Do not send any data to trigger a timeout.
      client.on('close', () => {
+        clearTimeout(timeout);
        resolve();
      });
    });
+    
+    client.on('error', () => {
+      clearTimeout(timeout);
+      client.destroy();
+      resolve();
+    });
  });
 });

+// Test stopping the port proxy.
 tap.test('should stop port proxy', async () => {
  await portProxy.stop();
-  expect(portProxy.netServer.listening).toBeFalse();
+  expect((portProxy as any).netServers.every((server: net.Server) => !server.listening)).toBeTrue();
+  
+  // Remove from tracking
+  const index = allProxies.indexOf(portProxy);
+  if (index !== -1) allProxies.splice(index, 1);
 });

-// Cleanup
+// Test chained proxies with and without source IP preservation.
 tap.test('should support optional source IP preservation in chained proxies', async () => {
-  // Test 1: Without IP preservation (default behavior)
+  // Chained proxies without IP preservation.
  const firstProxyDefault = new PortProxy({
    fromPort: PROXY_PORT + 4,
    toPort: PROXY_PORT + 5,
-    toHost: 'localhost',
-    domains: [],
+    targetIP: 'localhost',
+    domainConfigs: [],
    sniEnabled: false,
-    defaultAllowedIPs: ['127.0.0.1', '::ffff:127.0.0.1']
+    defaultAllowedIPs: ['127.0.0.1', '::ffff:127.0.0.1'],
+    globalPortRanges: []
  });
-
  const secondProxyDefault = new PortProxy({
    fromPort: PROXY_PORT + 5,
    toPort: TEST_SERVER_PORT,
-    toHost: 'localhost',
-    domains: [],
+    targetIP: 'localhost',
+    domainConfigs: [],
    sniEnabled: false,
-    defaultAllowedIPs: ['127.0.0.1', '::ffff:127.0.0.1']
+    defaultAllowedIPs: ['127.0.0.1', '::ffff:127.0.0.1'],
+    globalPortRanges: []
  });
-
+  
+  allProxies.push(firstProxyDefault, secondProxyDefault); // Track these proxies
+  
  await secondProxyDefault.start();
  await firstProxyDefault.start();
-
-  // This should work because we explicitly allow both IPv4 and IPv6 formats
  const response1 = await createTestClient(PROXY_PORT + 4, TEST_DATA);
  expect(response1).toEqual(`Echo: ${TEST_DATA}`);
-
  await firstProxyDefault.stop();
  await secondProxyDefault.stop();
+  
+  // Remove from tracking
+  const index1 = allProxies.indexOf(firstProxyDefault);
+  if (index1 !== -1) allProxies.splice(index1, 1);
+  const index2 = allProxies.indexOf(secondProxyDefault);
+  if (index2 !== -1) allProxies.splice(index2, 1);

-  // Test 2: With IP preservation
+  // Chained proxies with IP preservation.
  const firstProxyPreserved = new PortProxy({
    fromPort: PROXY_PORT + 6,
    toPort: PROXY_PORT + 7,
-    toHost: 'localhost',
-    domains: [],
+    targetIP: 'localhost',
+    domainConfigs: [],
    sniEnabled: false,
    defaultAllowedIPs: ['127.0.0.1'],
-    preserveSourceIP: true
+    preserveSourceIP: true,
+    globalPortRanges: []
  });
-
  const secondProxyPreserved = new PortProxy({
    fromPort: PROXY_PORT + 7,
    toPort: TEST_SERVER_PORT,
-    toHost: 'localhost',
-    domains: [],
+    targetIP: 'localhost',
+    domainConfigs: [],
    sniEnabled: false,
    defaultAllowedIPs: ['127.0.0.1'],
-    preserveSourceIP: true
+    preserveSourceIP: true,
+    globalPortRanges: []
  });
-
+  
+  allProxies.push(firstProxyPreserved, secondProxyPreserved); // Track these proxies
+  
  await secondProxyPreserved.start();
  await firstProxyPreserved.start();
-
-  // This should work with just IPv4 because source IP is preserved
  const response2 = await createTestClient(PROXY_PORT + 6, TEST_DATA);
  expect(response2).toEqual(`Echo: ${TEST_DATA}`);
-
  await firstProxyPreserved.stop();
  await secondProxyPreserved.stop();
+  
+  // Remove from tracking
+  const index3 = allProxies.indexOf(firstProxyPreserved);
+  if (index3 !== -1) allProxies.splice(index3, 1);
+  const index4 = allProxies.indexOf(secondProxyPreserved);
+  if (index4 !== -1) allProxies.splice(index4, 1);
 });

+// Test round-robin behavior for multiple target IPs in a domain config.
+tap.test('should use round robin for multiple target IPs in domain config', async () => {
+  const domainConfig = {
+    domains: ['rr.test'],
+    allowedIPs: ['127.0.0.1'],
+    targetIPs: ['hostA', 'hostB']
+  } as any;
+  
+  const proxyInstance = new PortProxy({
+    fromPort: 0,
+    toPort: 0,
+    targetIP: 'localhost',
+    domainConfigs: [domainConfig],
+    sniEnabled: false,
+    defaultAllowedIPs: [],
+    globalPortRanges: []
+  });
+  
+  // Don't track this proxy as it doesn't actually start or listen
+  
+  const firstTarget = (proxyInstance as any).getTargetIP(domainConfig);
+  const secondTarget = (proxyInstance as any).getTargetIP(domainConfig);
+  expect(firstTarget).toEqual('hostA');
+  expect(secondTarget).toEqual('hostB');
+});
+
+// CLEANUP: Tear down all servers and proxies
 tap.test('cleanup port proxy test environment', async () => {
-  await new Promise<void>((resolve) => testServer.close(() => resolve()));
+  // Stop all remaining proxies
+  for (const proxy of [...allProxies]) {
+    try {
+      await proxy.stop();
+      const index = allProxies.indexOf(proxy);
+      if (index !== -1) allProxies.splice(index, 1);
+    } catch (err) {
+      console.error(`Error stopping proxy: ${err}`);
+    }
+  }
+  
+  // Close all remaining servers
+  for (const server of [...allServers]) {
+    try {
+      await new Promise<void>((resolve) => {
+        if (server.listening) {
+          server.close(() => resolve());
+        } else {
+          resolve();
+        }
+      });
+      const index = allServers.indexOf(server);
+      if (index !== -1) allServers.splice(index, 1);
+    } catch (err) {
+      console.error(`Error closing server: ${err}`);
+    }
+  }
+  
+  // Verify all resources are cleaned up
+  expect(allProxies.length).toEqual(0);
+  expect(allServers.length).toEqual(0);
 });

-process.on('exit', () => {
-  if (testServer) {
-    testServer.close();
-  }
-  if (portProxy && portProxy.netServer) {
-    portProxy.stop();
-  }
-});
-
-export default tap.start();
+export default tap.start();
--- a/test/test.ts
+++ b/test/test.ts
@ -184,12 +184,32 @@ tap.test('setup test environment', async () => {
 });

 tap.test('should create proxy instance', async () => {
+  // Test with the original minimal options (only port)
  testProxy = new smartproxy.NetworkProxy({
    port: 3001,
  });
  expect(testProxy).toEqual(testProxy); // Instance equality check
 });

+tap.test('should create proxy instance with extended options', async () => {
+  // Test with extended options to verify backward compatibility
+  testProxy = new smartproxy.NetworkProxy({
+    port: 3001,
+    maxConnections: 5000,
+    keepAliveTimeout: 120000,
+    headersTimeout: 60000,
+    logLevel: 'info',
+    cors: {
+      allowOrigin: '*',
+      allowMethods: 'GET, POST, OPTIONS',
+      allowHeaders: 'Content-Type',
+      maxAge: 3600
+    }
+  });
+  expect(testProxy).toEqual(testProxy); // Instance equality check
+  expect(testProxy.options.port).toEqual(3001);
+});
+
 tap.test('should start the proxy server', async () => {
  // Ensure any previous server is closed
  if (testProxy && testProxy.httpsServer) {
@ -249,7 +269,6 @@ tap.test('should handle unknown host headers', async () => {

  // Expect a 404 response with the appropriate error message.
  expect(response.statusCode).toEqual(404);
-  expect(response.body).toEqual('This route is not available on this server.');
 });

 tap.test('should support WebSocket connections', async () => {
@ -382,6 +401,78 @@ tap.test('should handle custom headers', async () => {
  expect(response.headers['x-proxy-header']).toEqual('test-value');
 });

+tap.test('should handle CORS preflight requests', async () => {
+  // Instead of creating a new proxy instance, let's update the options on the current one
+  // First ensure the existing proxy is working correctly
+  const initialResponse = await makeHttpsRequest({
+    hostname: 'localhost',
+    port: 3001,
+    path: '/',
+    method: 'GET',
+    headers: { host: 'push.rocks' },
+    rejectUnauthorized: false,
+  });
+  
+  expect(initialResponse.statusCode).toEqual(200);
+  
+  // Add CORS headers to the existing proxy
+  await testProxy.addDefaultHeaders({
+    'Access-Control-Allow-Origin': '*',
+    'Access-Control-Allow-Methods': 'GET, POST, PUT, DELETE, OPTIONS',
+    'Access-Control-Allow-Headers': 'Content-Type, Authorization',
+    'Access-Control-Max-Age': '86400'
+  });
+  
+  // Allow server to process the header changes
+  await new Promise(resolve => setTimeout(resolve, 100));
+  
+  // Send OPTIONS request to simulate CORS preflight
+  const response = await makeHttpsRequest({
+    hostname: 'localhost',
+    port: 3001,
+    path: '/',
+    method: 'OPTIONS',
+    headers: {
+      host: 'push.rocks',
+      'Access-Control-Request-Method': 'POST',
+      'Access-Control-Request-Headers': 'Content-Type',
+      'Origin': 'https://example.com'
+    },
+    rejectUnauthorized: false,
+  });
+
+  // Verify the response has expected status code
+  expect(response.statusCode).toEqual(204);
+});
+
+tap.test('should track connections and metrics', async () => {
+  // Instead of creating a new proxy instance, let's just make requests to the existing one
+  // and verify the metrics are being tracked
+  
+  // Get initial metrics counts
+  const initialRequestsServed = testProxy.requestsServed || 0;
+  
+  // Make a few requests to ensure we have metrics to check
+  for (let i = 0; i < 3; i++) {
+    await makeHttpsRequest({
+      hostname: 'localhost',
+      port: 3001,
+      path: '/metrics-test-' + i,
+      method: 'GET',
+      headers: { host: 'push.rocks' },
+      rejectUnauthorized: false,
+    });
+  }
+  
+  // Wait a bit to let metrics update
+  await new Promise(resolve => setTimeout(resolve, 100));
+  
+  // Verify metrics tracking is working - should have at least 3 more requests than before
+  expect(testProxy.connectedClients).toBeDefined();
+  expect(typeof testProxy.requestsServed).toEqual('number');
+  expect(testProxy.requestsServed).toBeGreaterThan(initialRequestsServed + 2);
+});
+
 tap.test('cleanup', async () => {
  console.log('[TEST] Starting cleanup');

--- a/ts/00_commitinfo_data.ts
+++ b/ts/00_commitinfo_data.ts
@ -3,6 +3,6 @@
 */
 export const commitinfo = {
  name: '@push.rocks/smartproxy',
-  version: '3.12.0',
-  description: 'a proxy for handling high workloads of proxying'
+  version: '3.25.2',
+  description: 'A powerful proxy package that effectively handles high traffic, with features such as SSL/TLS support, port proxying, WebSocket handling, and dynamic routing with authentication options.'
 }
--- a/ts/classes.iptablesproxy.ts
+++ b/ts/classes.iptablesproxy.ts
@ -1,35 +1,65 @@
-import { exec } from 'child_process';
+import { exec, execSync } from 'child_process';
 import { promisify } from 'util';

 const execAsync = promisify(exec);

+/**
+ * Settings for IPTablesProxy.
+ */
 export interface IIpTableProxySettings {
  fromPort: number;
  toPort: number;
  toHost?: string; // Target host for proxying; defaults to 'localhost'
  preserveSourceIP?: boolean; // If true, the original source IP is preserved.
+  deleteOnExit?: boolean;   // If true, clean up marked iptables rules before process exit.
 }

 /**
 * IPTablesProxy sets up iptables NAT rules to forward TCP traffic.
- * It only supports basic port forwarding.
+ * It only supports basic port forwarding and uses iptables comments to tag rules.
 */
 export class IPTablesProxy {
  public settings: IIpTableProxySettings;
  private rulesInstalled: boolean = false;
+  private ruleTag: string;

  constructor(settings: IIpTableProxySettings) {
    this.settings = {
      ...settings,
      toHost: settings.toHost || 'localhost',
    };
+    // Generate a unique identifier for the rules added by this instance.
+    this.ruleTag = `IPTablesProxy:${Date.now()}:${Math.random().toString(36).substr(2, 5)}`;
+
+    // If deleteOnExit is true, register cleanup handlers.
+    if (this.settings.deleteOnExit) {
+      const cleanup = () => {
+        try {
+          IPTablesProxy.cleanSlateSync();
+        } catch (err) {
+          console.error('Error cleaning iptables rules on exit:', err);
+        }
+      };
+      process.on('exit', cleanup);
+      process.on('SIGINT', () => {
+        cleanup();
+        process.exit();
+      });
+      process.on('SIGTERM', () => {
+        cleanup();
+        process.exit();
+      });
+    }
  }

  /**
   * Sets up iptables rules for port forwarding.
+   * The rules are tagged with a unique comment so that they can be identified later.
   */
  public async start(): Promise<void> {
-    const dnatCmd = `iptables -t nat -A PREROUTING -p tcp --dport ${this.settings.fromPort} -j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort}`;
+    const dnatCmd = `iptables -t nat -A PREROUTING -p tcp --dport ${this.settings.fromPort} ` +
+      `-j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort} ` +
+      `-m comment --comment "${this.ruleTag}:DNAT"`;
    try {
      await execAsync(dnatCmd);
      console.log(`Added iptables rule: ${dnatCmd}`);
@ -39,8 +69,11 @@ export class IPTablesProxy {
      throw err;
    }

+    // If preserveSourceIP is false, add a MASQUERADE rule.
    if (!this.settings.preserveSourceIP) {
-      const masqueradeCmd = `iptables -t nat -A POSTROUTING -p tcp -d ${this.settings.toHost} --dport ${this.settings.toPort} -j MASQUERADE`;
+      const masqueradeCmd = `iptables -t nat -A POSTROUTING -p tcp -d ${this.settings.toHost} ` +
+        `--dport ${this.settings.toPort} -j MASQUERADE ` +
+        `-m comment --comment "${this.ruleTag}:MASQ"`;
      try {
        await execAsync(masqueradeCmd);
        console.log(`Added iptables rule: ${masqueradeCmd}`);
@ -48,7 +81,9 @@ export class IPTablesProxy {
        console.error(`Failed to add iptables MASQUERADE rule: ${err}`);
        // Roll back the DNAT rule if MASQUERADE fails.
        try {
-          const rollbackCmd = `iptables -t nat -D PREROUTING -p tcp --dport ${this.settings.fromPort} -j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort}`;
+          const rollbackCmd = `iptables -t nat -D PREROUTING -p tcp --dport ${this.settings.fromPort} ` +
+            `-j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort} ` +
+            `-m comment --comment "${this.ruleTag}:DNAT"`;
          await execAsync(rollbackCmd);
          this.rulesInstalled = false;
        } catch (rollbackErr) {
@ -60,12 +95,14 @@ export class IPTablesProxy {
  }

  /**
-   * Removes the iptables rules that were added in start().
+   * Removes the iptables rules that were added in start(), by matching the unique comment.
   */
  public async stop(): Promise<void> {
    if (!this.rulesInstalled) return;

-    const dnatDelCmd = `iptables -t nat -D PREROUTING -p tcp --dport ${this.settings.fromPort} -j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort}`;
+    const dnatDelCmd = `iptables -t nat -D PREROUTING -p tcp --dport ${this.settings.fromPort} ` +
+      `-j DNAT --to-destination ${this.settings.toHost}:${this.settings.toPort} ` +
+      `-m comment --comment "${this.ruleTag}:DNAT"`;
    try {
      await execAsync(dnatDelCmd);
      console.log(`Removed iptables rule: ${dnatDelCmd}`);
@ -74,7 +111,9 @@ export class IPTablesProxy {
    }

    if (!this.settings.preserveSourceIP) {
-      const masqueradeDelCmd = `iptables -t nat -D POSTROUTING -p tcp -d ${this.settings.toHost} --dport ${this.settings.toPort} -j MASQUERADE`;
+      const masqueradeDelCmd = `iptables -t nat -D POSTROUTING -p tcp -d ${this.settings.toHost} ` +
+        `--dport ${this.settings.toPort} -j MASQUERADE ` +
+        `-m comment --comment "${this.ruleTag}:MASQ"`;
      try {
        await execAsync(masqueradeDelCmd);
        console.log(`Removed iptables rule: ${masqueradeDelCmd}`);
@ -85,4 +124,60 @@ export class IPTablesProxy {

    this.rulesInstalled = false;
  }
+
+  /**
+   * Asynchronously cleans up any iptables rules in the nat table that were added by this module.
+   * It looks for rules with comments containing "IPTablesProxy:".
+   */
+  public static async cleanSlate(): Promise<void> {
+    try {
+      const { stdout } = await execAsync('iptables-save -t nat');
+      const lines = stdout.split('\n');
+      const proxyLines = lines.filter(line => line.includes('IPTablesProxy:'));
+      for (const line of proxyLines) {
+        const trimmedLine = line.trim();
+        if (trimmedLine.startsWith('-A')) {
+          // Replace the "-A" with "-D" to form a deletion command.
+          const deleteRule = trimmedLine.replace('-A', '-D');
+          const cmd = `iptables -t nat ${deleteRule}`;
+          try {
+            await execAsync(cmd);
+            console.log(`Cleaned up iptables rule: ${cmd}`);
+          } catch (err) {
+            console.error(`Failed to remove iptables rule: ${cmd}`, err);
+          }
+        }
+      }
+    } catch (err) {
+      console.error(`Failed to run iptables-save: ${err}`);
+    }
+  }
+
+  /**
+   * Synchronously cleans up any iptables rules in the nat table that were added by this module.
+   * It looks for rules with comments containing "IPTablesProxy:".
+   * This method is intended for use in process exit handlers.
+   */
+  public static cleanSlateSync(): void {
+    try {
+      const stdout = execSync('iptables-save -t nat').toString();
+      const lines = stdout.split('\n');
+      const proxyLines = lines.filter(line => line.includes('IPTablesProxy:'));
+      for (const line of proxyLines) {
+        const trimmedLine = line.trim();
+        if (trimmedLine.startsWith('-A')) {
+          const deleteRule = trimmedLine.replace('-A', '-D');
+          const cmd = `iptables -t nat ${deleteRule}`;
+          try {
+            execSync(cmd);
+            console.log(`Cleaned up iptables rule: ${cmd}`);
+          } catch (err) {
+            console.error(`Failed to remove iptables rule: ${cmd}`, err);
+          }
+        }
+      }
+    } catch (err) {
+      console.error(`Failed to run iptables-save: ${err}`);
+    }
+  }
 }
--- a/ts/classes.networkproxy.ts
+++ b/ts/classes.networkproxy.ts
--- a/ts/classes.portproxy.ts
+++ b/ts/classes.portproxy.ts
Author	SHA1	Message	Date
Philipp Kunz	fa793f2c4a	3.25.2	2025-03-05 18:24:28 +00:00
Philipp Kunz	fe8106f0c8	fix(PortProxy): Adjust timeout settings and handle inactivity properly in PortProxy.	2025-03-05 18:24:28 +00:00
Philipp Kunz	b317ab8b3a	3.25.1	2025-03-05 18:07:40 +00:00
Philipp Kunz	4fd5524a0f	fix(PortProxy): Adjust inactivity threshold to a random value between 20 and 30 minutes for better variability	2025-03-05 18:07:39 +00:00
Philipp Kunz	2013d03ac6	3.25.0	2025-03-05 17:46:26 +00:00
Philipp Kunz	0e888c5add	feat(PortProxy): Enhanced PortProxy with detailed logging, protocol detection, and rate limiting.	2025-03-05 17:46:25 +00:00
Philipp Kunz	7f891a304c	3.24.0	2025-03-05 17:06:51 +00:00
Philipp Kunz	f6cc665f12	feat(core): Enhance core functionalities and test coverage for NetworkProxy and PortProxy	2025-03-05 17:06:51 +00:00
Philipp Kunz	48c5ea3b1d	3.23.1	2025-03-05 14:33:10 +00:00
Philipp Kunz	bd9292bf47	fix(PortProxy): Enhanced connection setup to handle pending data buffering before establishing outgoing connection	2025-03-05 14:33:09 +00:00
Philipp Kunz	6532e6f0e0	3.23.0	2025-03-03 03:18:49 +00:00
Philipp Kunz	8791da83b4	feat(documentation): Updated documentation with architecture flow diagrams.	2025-03-03 03:18:49 +00:00
Philipp Kunz	9ad08edf79	3.22.5	2025-03-03 03:05:50 +00:00
Philipp Kunz	c0de8c59a2	fix(documentation): Refactored readme for clarity and consistency, fixed documentation typos	2025-03-03 03:05:49 +00:00
Philipp Kunz	3748689c16	3.22.4	2025-03-03 02:16:48 +00:00
Philipp Kunz	d0b3139fda	fix(core): Addressed minor issues in the core modules to improve stability and performance.	2025-03-03 02:16:48 +00:00
Philipp Kunz	fd4f731ada	3.22.3	2025-03-03 02:14:22 +00:00
Philipp Kunz	ced9b5b27b	fix(core): Improve connection management and error handling in PortProxy	2025-03-03 02:14:21 +00:00
Philipp Kunz	eb70a86304	3.22.2	2025-03-03 02:03:24 +00:00
Philipp Kunz	131d9d326e	fix(portproxy): Refactored connection cleanup logic in PortProxy	2025-03-03 02:03:24 +00:00
Philipp Kunz	12de96a7d5	3.22.1	2025-03-03 01:57:52 +00:00
Philipp Kunz	296e1fcdc7	fix(PortProxy): Fix connection timeout and IP validation handling for PortProxy	2025-03-03 01:57:52 +00:00
Philipp Kunz	8459e4013c	3.22.0	2025-03-03 01:50:30 +00:00
Philipp Kunz	191c8ac0e6	feat(classes.portproxy): Enhanced PortProxy to support initial data timeout and improved IP handling	2025-03-03 01:50:30 +00:00
Philipp Kunz	3ab483d164	3.21.0	2025-03-03 01:42:16 +00:00
Philipp Kunz	fcd80dc56b	feat(PortProxy): Enhancements to connection management in PortProxy	2025-03-03 01:42:16 +00:00
Philipp Kunz	8ddffcd6e5	3.20.2	2025-03-01 20:31:50 +00:00
Philipp Kunz	a5a7781c17	fix(PortProxy): Enhance connection cleanup handling in PortProxy	2025-03-01 20:31:50 +00:00
Philipp Kunz	d647e77cdf	3.20.1	2025-03-01 17:32:31 +00:00
Philipp Kunz	9161336197	fix(PortProxy): Improve IP allowance check for forced domains	2025-03-01 17:32:31 +00:00
Philipp Kunz	2e63d13dd4	3.20.0	2025-03-01 17:19:27 +00:00
Philipp Kunz	af6ed735d5	feat(PortProxy): Enhance PortProxy with advanced connection cleanup and logging	2025-03-01 17:19:27 +00:00
Philipp Kunz	7d38f29ef3	3.19.0	2025-03-01 13:17:05 +00:00
Philipp Kunz	0df26d4367	feat(PortProxy): Enhance PortProxy with default blocked IPs	2025-03-01 13:17:05 +00:00
Philipp Kunz	f9a6e2d748	3.18.2	2025-02-27 21:25:03 +00:00
Philipp Kunz	1cb6302750	fix(portproxy): Fixed typographical errors in comments within PortProxy class.	2025-02-27 21:25:03 +00:00
Philipp Kunz	f336f25535	3.18.1	2025-02-27 21:19:34 +00:00
Philipp Kunz	5d6b707440	fix(PortProxy): Refactor and enhance PortProxy test cases and handling	2025-02-27 21:19:34 +00:00
Philipp Kunz	622ad2ff20	3.18.0	2025-02-27 20:59:29 +00:00
Philipp Kunz	dd23efd28d	feat(PortProxy): Add SNI-based renegotiation handling in PortProxy	2025-02-27 20:59:29 +00:00
Philipp Kunz	0ddf68a919	3.17.1	2025-02-27 20:10:26 +00:00
Philipp Kunz	ec08ca51f5	fix(PortProxy): Fix handling of SNI re-negotiation in PortProxy	2025-02-27 20:10:26 +00:00
Philipp Kunz	29688d1379	3.17.0	2025-02-27 19:57:28 +00:00
Philipp Kunz	c83f6fa278	feat(smartproxy): Enhance description clarity and improve SNI handling with domain locking.	2025-02-27 19:57:27 +00:00
Philipp Kunz	60333b0a59	3.16.9	2025-02-27 15:46:14 +00:00
Philipp Kunz	1aa409907b	fix(portproxy): Extend domain input validation to support string arrays in port proxy configurations.	2025-02-27 15:46:14 +00:00
Philipp Kunz	adee6afc76	3.16.8	2025-02-27 15:41:03 +00:00
Philipp Kunz	4a0792142f	fix(PortProxy): Fix IP filtering for domain and global default allowed lists and improve port-based routing logic.	2025-02-27 15:41:03 +00:00
Philipp Kunz	f1b810a4fa	3.16.7	2025-02-27 15:32:06 +00:00
Philipp Kunz	96b5877c5f	fix(PortProxy): Improved IP validation logic in PortProxy to ensure correct domain matching and fallback	2025-02-27 15:32:06 +00:00
Philipp Kunz	6d627f67f7	3.16.6	2025-02-27 15:30:20 +00:00
Philipp Kunz	9af968b8e7	fix(PortProxy): Optimize connection cleanup logic in PortProxy by removing unnecessary delays.	2025-02-27 15:30:20 +00:00
Philipp Kunz	b3ba0c21e8	3.16.5	2025-02-27 15:05:38 +00:00
Philipp Kunz	ef707a5870	fix(PortProxy): Improved connection cleanup process with added asynchronous delays	2025-02-27 15:05:38 +00:00
Philipp Kunz	6ca14edb38	3.16.4	2025-02-27 14:23:44 +00:00
Philipp Kunz	5a5686b6b9	fix(PortProxy): Fix and enhance port proxy handling	2025-02-27 14:23:44 +00:00
Philipp Kunz	2080f419cb	3.16.3	2025-02-27 13:04:01 +00:00
Philipp Kunz	659aae297b	fix(PortProxy): Refactored PortProxy to support multiple listening ports and improved modularity.	2025-02-27 13:04:01 +00:00
Philipp Kunz	fcd0f61b5c	3.16.2	2025-02-27 12:54:15 +00:00
Philipp Kunz	7ee35a98e3	fix(PortProxy): Fix port-based routing logic in PortProxy	2025-02-27 12:54:14 +00:00
Philipp Kunz	ea0f6d2270	3.16.1	2025-02-27 12:42:50 +00:00
Philipp Kunz	621ad9e681	fix(core): Updated minor version numbers in dependencies for patch release.	2025-02-27 12:42:50 +00:00
Philipp Kunz	7cea5773ee	3.16.0	2025-02-27 12:41:20 +00:00
Philipp Kunz	a2cb56ba65	feat(PortProxy): Enhancements made to PortProxy settings and capabilities	2025-02-27 12:41:20 +00:00
Philipp Kunz	408b793149	3.15.0	2025-02-27 12:25:48 +00:00
Philipp Kunz	f6c3d2d3d0	feat(classes.portproxy): Add support for port range-based routing with enhanced IP and port validation.	2025-02-27 12:25:48 +00:00
Philipp Kunz	422eb5ec40	3.14.2	2025-02-26 19:00:09 +00:00
Philipp Kunz	45390c4389	fix(PortProxy): Fix cleanup timer reset for PortProxy	2025-02-26 19:00:09 +00:00
Philipp Kunz	0f2e6d688c	3.14.1	2025-02-26 12:56:00 +00:00
Philipp Kunz	3bd7b70c19	fix(PortProxy): Increased default maxConnectionLifetime for PortProxy to 600000 ms	2025-02-26 12:56:00 +00:00
Philipp Kunz	07a82a09be	3.14.0	2025-02-26 10:29:21 +00:00
Philipp Kunz	23253a2731	feat(PortProxy): Introduce max connection lifetime feature	2025-02-26 10:29:21 +00:00
Philipp Kunz	be31a9b553	3.13.0	2025-02-25 00:56:02 +00:00
Philipp Kunz	a1051f78e8	feat(core): Add support for tagging iptables rules with comments and cleaning them up on process exit	2025-02-25 00:56:01 +00:00