📋 New Issue #71: IP tracking table full for secret 0

by koznov
View issue

🚀 New Release: v4.12.1


Hotfix for log spam introduced in 4.12.0.

- Fix WARNING: IP tracking table full for secret 0 flooding docker logs
on busy plain secrets (#71). The 4.12.0 fix for #70 made every secret
populate a fixed-size 256-entry per-IP table, which overflows on any
proxy serving more than ~256 distinct source IPs since startup. Plain
secrets (no max_ips, no rate_limit) now bypass the precise tracking
table entirely and feed the cumulative teleproxy_secret_unique_ips
counter from a per-secret Bloom filter — bounded memory, no overflow.
- For limit-bearing secrets where the table can still legitimately fill
if max_ips exceeds 256, throttle the warning to once per minute per
slot and include the secret label and a remediation hint.

Release notes | GitHub

💬 Comment on #68: Compatible with compilation using Clang on x86_64 systems.

Landed in fb62089 with attribution preserved. Branch protection rejected the GitHub merge button (CodeQL doesn't run on fork PRs), so I cherry-picked the commit onto main directly. Thanks for the patch.

View comment

💬 Comment on #73: Verify __builtin_ia32_punpckhdq128 under clang in crc32.c

Closing — the new build-clang CI job (#72, commit f9ad4c7) ran make CC=clang on ubuntu-latest and succeeded. Clang ships __builtin_ia32_punpckhdq128 as a native builtin, so no 7th alias is needed.

View comment

🚀 New Release: v4.12.2


Build hygiene. No runtime changes.

- Compile cleanly with make CC=clang on x86_64 (#68). Adds _mm_*
intrinsic shims for the GCC-only __builtin_ia32_* names used in
src/common/crc32.c, gated to x86 so Apple Silicon clang isn't
affected.
- New build-clang job in the CI matrix exercises the clang x86_64
build path so future regressions surface in CI rather than only in
third-party packaging (#72).

Release notes | GitHub