ab2c28c595
harden security: frame limits, HTTPS enforcement, checksum validation, download bounds
...
- WebSocket: reject frames exceeding 16 MB to prevent OOM
- MikroTik: reject words exceeding 10 MB to prevent OOM
- Self-update: require HTTPS for download URLs
- Self-update: require non-empty SHA256 checksum
- Self-update: use constant-time comparison for checksum verification
- Self-update: bound download size to 100 MB
2026-02-12 10:24:49 -06:00
94192f402a
propagate context to job executors for cancellation on disconnect
2026-02-12 09:59:45 -06:00
8b866ae946
add worker pool with bounded concurrency for job dispatch
...
Replace unbounded goroutine spawning with fixed-size worker pools:
100 workers for SNMP, 20 for MikroTik, 50 for ping. Prevents file
descriptor exhaustion and device overload when handling thousands
of concurrent jobs. Pool provides backpressure when saturated.
2026-02-12 09:50:17 -06:00
a36a2b7fd7
increase test coverage and improve logger output
2026-02-11 10:42:19 -06:00
37f411ec55
cleanup
2026-02-11 10:07:27 -06:00
769ac1f623
Full rewrite in golang
2026-02-11 10:04:30 -06:00
