Présentation
Installation et utilisation
Historique des versions
Tarifs

Historique des versions de Edge Shield

Toutes les versions publiées, de la plus récente à la plus ancienne. Les téléchargements se trouvent dans votre compte ; les abonnements et les essais reçoivent toujours la dernière version, les licences à vie reçoivent les mises à jour pendant leur période de mises à jour.

0.1.5

Dernière

Fixed: the "License" link on the main page did not open the License page in Emby 4.10; the page now has the common MediaLab header (icon, title, the license status badge opening the License page, and a banner when the license is not active).

0.1.4

Fixed (licensing): the license key field is always visible, so a new key can be activated even while the saved license still shows as active; a refused key no longer replaces the saved key and the page shows why; when the last check fails (for example a deleted or revoked license), the page and the log show a warning with the date until which the saved license keeps working; activation, manual checks and release are written to the log.

0.1.3

  • Security (audit): in "media only" mode, internet clients that do not come through Cloudflare (the streaming host or the server IP, with any Host header) reach media paths only; the LAN and requests through Cloudflare are unaffected.
  • Failed logins on any variant of the login path (case, trailing "/", "//") are counted and get the IP banned; the Cloudflare rate-limit rule catches them too.
  • The Cloudflare ranges added to KnownProxies are removed on disconnect, when the rules are removed and when switching to "DNS only" mode.
  • Limits: at most 5000 bans and 10 000 repeat-offence records (an offence decays after 30 days without a ban); address lists are parsed once instead of on every request; batched saves; a warning when the Cloudflare IP list nears the account limit.
  • Manual range blocks: at least /16 (IPv4) and /32 (IPv6), refused when they touch the LAN, the allowlist, Cloudflare or the server's own addresses. Unblocking also clears the repeat-offence history.
  • Without a license: Under Attack still switches off on time and expired bans leave the Cloudflare list; unblocking and switching Under Attack off always work.
  • Secret files (token key, state, certificate and its password, license) are created with mode 600 from the start, folders 700; each certificate has its own password.
  • Cloudflare IP ranges are sanity-checked (no 0.0.0.0/0, ::/0 or overly wide prefixes); hidden settings (API, ACME) can no longer be changed through the generic configuration; ACME TXT records are removed even when the server shuts down.
  • License: exported or sent logs no longer contain tokens; updates are verified by signature. (Versions 0.1.1 and 0.1.2: the username no longer goes to Cloudflare; the payment QR code is generated locally.)

0.1.1

First release: Cloudflare connection (encrypted token), DNS + DDNS, SSL Full (strict) and TLS settings, Let's Encrypt certificate through DNS-01, Cloudflare rules (video streams redirected straight to the server, no caching of media, block list, spoofed IP headers, countries, login rate limit, origin port), real client IP, automatic blocking of IPs with failed logins (the attempted username stays on your server, it is not sent to Cloudflare), timed Under Attack, status page with fixes.