 Adam Ierymenko
|
72653e54f9
Finish wiring up ipauth and macauth to Network filter.
|
il y a 8 ans |
|
Adam Ierymenko
|
10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
|
il y a 8 ans |
|
Adam Ierymenko
|
78d548458b
Capabilities basically work but need to refactor a bit for performance reasons.
|
il y a 8 ans |
|
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
il y a 8 ans |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
il y a 8 ans |
|
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
il y a 9 ans |
|
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
il y a 9 ans |
|
Adam Ierymenko
|
16df2c3363
Clean up handling of COMs, network access control, and fix a backward compatiblity issue.
|
il y a 9 ans |
|
Adam Ierymenko
|
daf8a66ced
More correct and efficient to initialize member relationship push stuff lazily when member is learned.
|
il y a 9 ans |
|
Adam Ierymenko
|
1908aa55f5
Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary pushes and simplify code.
|
il y a 9 ans |
|
Adam Ierymenko
|
1c08f5e857
Tweak some expire times.
|
il y a 9 ans |
|
Adam Ierymenko
|
c9ee8612e4
Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.
|
il y a 9 ans |
|
Adam Ierymenko
|
25056de5d3
Also need to send credentials when TEEing and REDIRECTing.
|
il y a 9 ans |
|
Adam Ierymenko
|
a3c7627acf
Push more than one packet for credentials if we happen to have a whole lot. Should not happen often but might if a member has tons of tags.
|
il y a 9 ans |
|
Adam Ierymenko
|
d637988ccf
Fix chicken or egg problem in tags, and better filter debug instrumentation.
|
il y a 9 ans |
|
Adam Ierymenko
|
e52c2c41ec
Add a circuit breaker to prevent too many credentials from being stored per member.
|
il y a 9 ans |
|
Adam Ierymenko
|
0a7a33ef8f
Instantaneous blacklisting and credential revocation.
|
il y a 9 ans |
|
Adam Ierymenko
|
32fa061700
Compute credential TTL et al.
|
il y a 9 ans |
|
Adam Ierymenko
|
9a3c652a51
Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
|
il y a 9 ans |
|
Adam Ierymenko
|
00fd9c3a15
It builds... almost ready to test some rules engine stuff.
|
il y a 9 ans |
|
Adam Ierymenko
|
8007ca56aa
Refactor and tie-up of capabilities and tags and packet evaluation points. Some optimization is possible here but it is minor and we will make it work first.
|
il y a 9 ans |
|
Adam Ierymenko
|
e2f783ebbd
.
|
il y a 9 ans |
|
Adam Ierymenko
|
5cf410490e
.
|
il y a 9 ans |
|
Adam Ierymenko
|
404a0bbddd
...
|
il y a 9 ans |
|
Adam Ierymenko
|
f057bb63cd
More work on tags and capabilities.
|
il y a 9 ans |
|
Adam Ierymenko
|
7e6e56e2bc
Bunch of work on pushing and replication of tags and capabilities, and protocol cleanup.
|
il y a 9 ans |
