Updated release

Changelog for 0.8.2:

• PR #22 Add variable to select an existing secret for tls by @jsiebens

Commits
70fc5bb Update Chart version by @alexellis
b428dcd Add variable to select an existing secret for tls by @jsiebens
88988eb Update syntax by @alexellis
a9447a8 Update notes by @alexellis
3477346 Update README.md by @alexellis
36f81ce Update README.md by @alexellis
412128b Create README.md by @alexellis
461628b Add upstream variable, update Docker image version by @alexellis

Generated by Derek

Fix inlets-operator/ctl systemd unit file

Changelog for 0.8.1:

Commits
228c075 Update systemd unit file by @alexellis
cbf80ff Update to tls-san flag for 0.8.0 release by @alexellis

Generated by Derek

Consolidate data / control plane flags

Changelog for 0.8.0-rc4:

• Adds automatic LetsEncrypt for HTTP exit-servers without a reverse proxy
• Adds auto-tls for encryption of HTTP control-planes
• Adds client forwarding for HTTP and TCP tunnels
• Converges the --url parameter for both inlets-pro http/tcp client commands
• Adds inlets-pro http fileserver for sharing ad-hoc files securely

Docker image: ghcr.io/inlets/inlets-pro:0.8.0-rc4-dirty

Additional changes in this RC:

• Consolidate flags for listening and binding ports

--data-port
--control-port

--control-addr
--data-addr

• : is no longer required at the end of any addresses when specifying listen or adapters
• Fixes an issue with reconnecting the HTTP client in auto-tls mode
• --le-* flags are now written --letsencrypt-*
• The --common-name flag changed to --tls-san

Generated by Derek

Release of 0.8.0 with TCP and HTTP modes

Changelog for 0.8.0:

See an example of how to use the new HTTPs mode: Your quest - establish a secure tunnel with a custom domain

• Adds automatic LetsEncrypt for HTTP exit-servers without a reverse proxy
• Adds auto-tls for encryption of HTTP control-planes
• Adds client forwarding for HTTP and TCP tunnels
• Converges the --url parameter for both inlets-pro http/tcp client commands
• Adds inlets-pro http fileserver for sharing ad-hoc files securely

Note: There are breaking changes in to the CLI flags in this release, which need migration steps.

Docker image: ghcr.io/inlets/inlets-pro:0.8.0

Additional changes in this release:

• Consolidate flags for listening and binding ports

--data-port
--control-port

--control-addr
--data-addr

• : is no longer required at the end of any addresses when specifying listen or adapters
• Fixes an issue with reconnecting the HTTP client in auto-tls mode
• --le-* flags are now written --letsencrypt-*
• The --common-name flag changed to --tls-san

Generated by Derek

Automatic LE certs for HTTP servers

Changelog for 0.8.0-rc3:

Commits

• Adds automatic LetsEncrypt for HTTP exit-servers without a reverse proxy
• Adds auto-tls for encryption of HTTP control-planes
• Adds client forwarding for HTTP and TCP tunnels
• Converges the --url parameter for both inlets-pro http/tcp client commands
• Adds inlets-pro http fileserver for sharing ad-hoc files securely

Docker image: ghcr.io/inlets/inlets-pro:0.8.0-rc3

Generated by Derek

AutoTLS for HTTP tunnels

Changelog for 0.8.0-rc2:

• Adds auto-tls for encryption of HTTP control-planes
• Adds client forwarding for HTTP and TCP tunnels
• Converges the --url parameter for both inlets-pro http/tcp client commands
• Adds inlets-pro http fileserver for sharing ad-hoc files securely

Generated by Derek

Combine inlets OSS, plus and PRO into one, add fileserver mode

Changelog for 0.8.0-rc1:

• PR #18 Add helm chart for inlets PRO servers by @alexellis

Commits
0e38793 Update README.md by @alexellis
1f93049 Move diagrams by @alexellis
8a4eb8f Set inlets PRO server chart to use private data plane by @alexellis
b7a7fd8 Add chart for inlets PRO the client by @alexellis
413bc64 Update README.md by @alexellis
4081d66 Add helm chart for inlets PRO servers by @alexellis
0e89de4 Remove duplicated blog posts from docs by @alexellis

Generated by Derek

Publish FreeBSD binary, update third-party libraries

Changelog for 0.7.2:

Commits

Generated by Derek

Fix for generate command for systemd and new SHA hashes for binaries

Changelog for 0.7.1:

Commits
9dcbb3a Update sample to 0.7.0 by @alexellis
7e2b0ee Add 0.7.0 commands to CLI reference guide by @alexellis
0a304d3 Add inlets PRO server service by @alexellis

Make hashes of binaries by @alexellis
Fix issue with generate flag by @alexellis
Hide a couple of flags by @alexellis

Generated by Derek

Major release with private binding, and client upstream flags. See notes

Changelog for 0.7.0:

• Enables binding of data ports to localhost or another adapter
  for a split-plane configuration, without using Kubernetes Pods
  within the server
• Removes --remote-tcp flag in client and adds "upstream" flag
  in its place
• Removes tcp-port in client and adds --port and --ports
• Allows for an empty token to be set in the server
• Adds --generate=systemd to the server

Migrating to 0.7.0

Before:

inlets-pro server --common-name $SERVER 
  --token test \
  --remote-tcp 192.168.0.35

inlets-pro client --connect wss://$SERVER:8123/connect \
  --token test \
  --tcp-ports 80,443

After:

inlets-pro server --common-name $SERVER --token test

inlets-pro client --url wss://$SERVER:8123/connect \
  --token test \
  --upstream 192.168.0.35 \
  --ports 80,443

inlets-pro client --url wss://$SERVER:8123/connect \
  --token test \
  --upstream 192.168.0.35 \
  --port 80 --port 443

Binding the data-plane to the local network, to keep tunnelled services hidden from the Internet:

After:

inlets-pro server --common-name $SERVER \
  --token test \
  --listen-data "127.0.0.1:"

inlets-pro client --url wss://$SERVER:8123/connect \
  --token test \
  --upstream 192.168.0.35 \
  --port 80 --port 443

8123 is exposed on all adapters, ports 80 and 443 can only be accessed from localhost on the server.

Generated by Derek