anti da2ad7a82a feat(dns): global upstream forward rate limit with sinkhole fallback ...

Adds DNS_FORWARD_BUDGET (default 50) and DNS_FORWARD_WINDOW (default 1.0s)
env vars. _can_forward() maintains a rolling deque of upstream call
timestamps; queries that exceed the budget within the window are answered
with the sinkhole (127.x) instead of being forwarded, making the honeypot
ineligible as a sustained amp vector even when real_recursive is enabled.
Rate limit is global (not per-source) so IP-spoofed amplification floods
hit the ceiling regardless of how many source addresses are rotated.

2026-05-21 20:50:20 -04:00

..

agent

fix(agent): pass --always-recreate-deps so service netns shares stay fresh

2026-04-27 22:55:48 -04:00

api

fix(test/schema): pin xdist_group to prevent multi-server startup, cap workers at 4

2026-05-16 18:36:26 -04:00

artifacts

refactor(artifacts): extract shard-finder out of transcripts router

2026-05-08 18:49:11 -04:00

asn

feat(asn): expose BGP prefix in AsnInfo and enrich_ip

2026-05-21 16:07:57 -04:00

bus

feat(correlation/attribution): substrate + idle handler (Phase 1)

2026-05-08 23:16:13 -04:00

canary

feat(canary): auto-deregister fingerprint slug after first valid beacon

2026-04-29 17:49:31 -04:00

cli

fix(test): pre-import decnet.cli at collection time to prevent agent-mode stripping

2026-05-10 07:32:43 -04:00

clustering

test(bus): pin scope-(2) producer wiring for reuse / clusterer / intel

2026-05-02 02:38:24 -04:00

collector

fix(collector): strip port from remote_addr before attacker identity resolution

2026-05-10 04:06:42 -04:00

config

fix(test): scrub DECNET_CORS_ORIGINS before domain-sections ini test

2026-05-10 05:17:00 -04:00

core

fix(network): accept CAP_NET_ADMIN in lieu of euid==0 for macvlan setup

2026-04-29 11:56:40 -04:00

correlation

test(correlation/attribution): v0 calibration lockdown (Phase 7)

2026-05-09 02:23:10 -04:00

db

feat(ttp/ipv6_leak): wire Ipv6LeakLifter into composite tagger and worker

2026-05-17 20:41:55 -04:00

decky_io

feat(deckies): generic file drops on fleet + MazeNET deckies

2026-04-28 22:43:34 -04:00

deploy

tests: realism migration regression coverage

2026-04-27 17:29:25 -04:00

docker

test: fix templates paths, CLI gating, and stress-suite harness

2026-04-19 23:50:53 -04:00

engine

fix(types): T7 — eliminate all remaining 38 mypy errors; fix DeckyRow subscript in engine tests

2026-05-01 02:07:53 -04:00

factories

test(clustering): fixture 4 paused_campaign + active_days/time_window

2026-04-26 07:39:46 -04:00

fixtures/campaigns

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

fleet

fix(fleet): strip digest from build_base tag before APT compatibility check; mark wizard done

2026-05-10 22:27:47 -04:00

geoip

feat(attackers): PTR record (reverse DNS) enrichment

2026-04-24 17:26:40 -04:00

intel

refactor(intel): migrate AttackerIntel JSON-string columns to native SQLAlchemy JSON

2026-05-10 09:17:15 -04:00

live

fix(live/mysql): use pytest_asyncio.fixture(loop_scope=module) on mysql_repo

2026-05-10 22:45:05 -04:00

logging

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

mutator

fix(types): T3 — narrow str|None at 12 sites; fix LANRow/DeckyRow subscript in mutator tests

2026-05-01 01:47:04 -04:00

orchestrator

feat(orchestrator): authoritative failure-count badge endpoint (DEBT-042)

2026-05-03 05:26:45 -04:00

perf

added: scripts/profile/view.sh — auto-pick newest artifact and open viewer

2026-04-17 13:20:05 -04:00

prober

feat(prober): add Icmp6ErrorProbe — ICMPv6 error-leakage fingerprint

2026-05-21 15:03:10 -04:00

profiler

perf(pytest): 194s → 4s collection — lazy heavy imports + norecursedirs

2026-05-10 06:41:25 -04:00

realism

fix(test): reset _cached_backend before factory dispatch tests

2026-05-10 05:47:26 -04:00

rpki

feat(profiler): wire enrich_rpki into _build_record

2026-05-21 16:14:51 -04:00

service_testing

feat(dns): global upstream forward rate limit with sinkhole fallback

2026-05-21 20:50:20 -04:00

services

fix(tests): fix stale asyncio.sleep patches and missing tarpit guards in service isolation tests

2026-05-10 22:10:54 -04:00

sniffer

feat(sniffer): passive IPv6 link-local leak detection

2026-05-17 20:16:29 -04:00

stress

fix(tests/stress): eliminate 0-request flakes in locust runs

2026-04-28 13:01:11 -04:00

swarm

fix(orchestrator/tests): attribute access on TopologySummary, not dict

2026-05-10 07:11:14 -04:00

telemetry

refactor(tests): move flat tests/*.py into per-subsystem subfolders

2026-04-23 21:34:25 -04:00

topology

refactor(topology): introduce TopologyRepository protocol with DTO return types

2026-04-30 23:51:41 -04:00

ttp

feat(ttp): Ipv6LeakLifter + R0059 rule for IPv6 link-local opsec failures

2026-05-17 20:22:26 -04:00

updater

sec(updater): harden tarball extraction and verify sha256 before extract

2026-04-27 21:14:48 -04:00

vectorstore

feat(creds): cred-reuse foundation + vectorstore scaffold

2026-04-26 03:18:34 -04:00

web

feat(ingester): promote icmp_error / icmp6_error probe fields to fingerprint bounties

2026-05-21 15:10:07 -04:00

webhook

fix(webhook/worker): self-heal when bus starts late or restarts

2026-04-24 16:39:38 -04:00

__init__.py

fix(tests+mutator): unbreak the docker-shadow test env + let mutator delete from active

2026-04-29 00:24:17 -04:00

conftest.py

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00

mysql_spinup.sh

merge: testing → main (reconcile 2-week divergence)

2026-04-28 18:36:00 -04:00