Release 0.9.10

• Add init fixes for ip6_tables to systemd/openrc (see README_release-notes_latest.rst)

Release 0.9.9 maintenance update

• fixes python dep resolution in deb pkgs

Release 0.9.8 maintenance update

• refactor systemd service options, fixes issue
• update msg_responder logging and minor doc fixes
• update packaging files and requires, switch CI to github
• update appdirs version and install coverage for github ci

Add version-checking feature (disallow old versions)

• cleanup fpn0 net scripts, remove extraneous ip cmd, fix verbose output
  • switch back from SNAT to MASQ for egress routing
  • restrict rp_filter manipulation to fpn0 iface
  • flush custom route table instead of cache on shutdown
• cleanup msg daemons, remove verbose output, use get_runtimedir for pid
  • set verbose=0 as default, remove extraneous log output
• add UPGRADE msg handling and do_shutdown func, add semver dependency
• add version to announce msg and version check to responder daemon
• update get_cachedir/get_runtimedir cmd output, update valid dirs
• update readme, add/update tests for new code and output changes

wait_cache for route check

Use max_timeout to wait before setting route to False.

• add wait_cache using max_timeout to fpn0 UP handler
• make route check wait for max_timeout before setting route false

Fixes de-wedging nodes who never route and makes us a little more tolerant
of transient lookup errors (since route check relies on dns/https lookups
over fpn0 tunnel).

edge-case traffic and protocol fixes

• Add handler to reset wedge state variables on fpn0 UP event
• Fix: extend nanoservice msg timeout and filter IPv6 from peer cache
  • Increase node message handler timeout from 1 second to 3 seconds (allow for more crufty internet latency)
  • Add proper filter for IPv6 addresses in (ZT) peer list (only cache IPv4 addresses)
• Add back-ported stunnel package in PPA bionic series

Closes issue #85

systemd env fix

• slight refactor in get_cachedir for Ubuntu/systemd

rebase python/tests

re-integrate/refactor get_cachdir/wait_cache and related tests

• pytest against py37/38/39, runtime testing against python 3.7.9
• fixes for issues #79 and #80 (pending infra updates)
• fix pytest.raises context for different OS/python envs
• modules.conf to load ip6tables core module before startup

add tighter network/routing rules

• add src-net input allow/drop for udp traffic
• add icmp limiting between peers
• fix missing (plain-text) dns routing rules

doc and cfg updates

• add cfg option to set all IPv6 policies to DROP (default is true)
• update docs, minor fix for do_net_cmd