 Adam Ierymenko
|
298e4a9f14
Also avoid sending tags and caps to old members since there is no point.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
5ebf5077f5
Log last meta-data in controller, and ease up just a bit on keepalives.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
1ebfca666d
Memo-ize some computed stuff to control CPU utilization.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
3d948a930e
Send a blanket rule to old versions. New versions will still bidirecitonally enforce on the inbound side.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
4524899e4d
Update LM time on members on request.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
360c84e035
Minor fixes.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
4868d21526
Bug fixes in controller refactor.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
a78d7311a6
Fix network list API call.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
08ff666e99
.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
0d108d37f6
.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
b03c7b2f30
Refactor controller to use split-out DB for better performance and less ugly.
|
8 gadi atpakaļ |
 Grant Limberg
|
8ffae313fd
add new files & remove old ones from VS project. Now builds & runs on Windows again
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
2cb760e0ac
Fix ICMP json.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
2d6a4e5974
cleanup
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
e53f63ca87
Broke down and added an OR to the rules engine. It is now possible to have a series of MATCHes that are ORed.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
45c4ccb153
Add a tags both equal match.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
adeb7e7da0
Make capability flags match more user-friendly and appropriate since "match any flag" is generally what we want.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
988049f39b
Add new rule to rules engine: random match.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
f0794e09b7
Controller cleanup.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
1eeebba2f7
Drop old /active path from network.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
2fc3d12fb6
Minor tweaks to member code in controller, and fix Linux build.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
7e4b6b594b
It now builds.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
68e549233d
Revise bearer token code in controller, and add relay policy as a meta-data item presented to controller by nodes (to facilitate future meshiness).
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
ab9afbc749
(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
c9ee8612e4
Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
74afef8eb1
Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
54489a7f61
rename SAMENESS to DIFFERENCE which is less confusing
|
9 gadi atpakaļ |
