fix(aerotun): permit IPv6 link-local source packets for Babel/routing protocols & auto-clear transient tunnel errors (v1.8.24)

- Permit IPv6 link-local unicast sources (fe80::/10) in AeroTUN allowedSource policy, allowing Babel (and OSPFv3/BFD/NDP) multicast & unicast exchanges over point-to-point tunnels without being dropped by source filtering
- Add auto-clearing of transient lastError on successful transmit & receive in TunnelRunner, ensuring CLI and UI state correctly report 'connected' rather than 'failed'
- Update allowed_ips to include ::/0 on AeroTUN tunnels for dual-stack routing
- Synchronize interface name on remote DebTik to at-Maiden2 matching dynamic routing templates
- Rebuild AMD64 and ARM64 binaries and bump version to v1.8.24

VERSION

@@ -1 +1 @@
-1.8.23
+1.8.24

internal/aerotun/secure_io.go

@@ -172,6 +172,7 @@ func (t *TunnelRunner) txLoopSecure() {
 				atomic.AddUint64(&t.compressedPackets, compressed)
 				atomic.AddUint64(&t.savedBytes, savedBytes)
 				atomic.AddUint64(&t.rawPackets, raw)
+				t.clearError()
 			}
 			sent += n
 			if err != nil || n == 0 {
@@ -198,6 +199,9 @@ func (t *TunnelRunner) allowedSource(b []byte) bool {
 		copy(ip[:], b[8:24])
 		src = netip.AddrFrom16(ip)
 	}
+	if src.IsLinkLocalUnicast() {
+		return true
+	}
 	for _, prefix := range t.allowed {
 		if prefix.Contains(src) {
 			return true
@@ -336,6 +340,7 @@ func (t *TunnelRunner) rxLoopSecure() {
 			atomic.AddUint64(&t.rxBytes, uint64(wrote))
 			atomic.AddUint64(&t.rawBytesIn, uint64(wrote))
 			atomic.AddUint64(&t.packetsRx, 1)
+			t.clearError()
 		}
 	}
 }

internal/aerotun/secure_protocol_test.go

@@ -366,7 +366,7 @@ func TestSecureAllowedSourcePolicy(t *testing.T) {
 	for _, tc := range []struct {
 		source string
 		want   bool
-	}{{"2001:db8:42::1", true}, {"2001:db8:43::1", false}} {
+	}{{"2001:db8:42::1", true}, {"2001:db8:43::1", false}, {"fe80::1423:58a:b322:ae3a", true}} {
 		source := netip.MustParseAddr(tc.source).As16()
 		copy(v6[8:24], source[:])
 		if runner.allowedSource(v6) != tc.want {

internal/aerotun/tunnel.go

@@ -151,6 +151,11 @@ func (t *TunnelRunner) setError(err error) {
 	t.lastError = err.Error()
 	t.mu.Unlock()
 }
+func (t *TunnelRunner) clearError() {
+	t.mu.Lock()
+	t.lastError = ""
+	t.mu.Unlock()
+}
 func (t *TunnelRunner) target() *net.UDPAddr {
 	t.mu.RLock()
 	defer t.mu.RUnlock()