Adam Ierymenko
|
5e6a4e5f5e
Send revocations automatically on deauth for instant kill, also fix some issues with the RP.
|
8 anni fa |
Adam Ierymenko
|
1d39be61b2
ZeroTier now has link quality measurement. We are not using this yet but decided to put it in to prep for future QoS support and SD-WAN stuff.
|
8 anni fa |
Adam Ierymenko
|
2bf9145ae6
Outgoing side of packet counter for link quality reporting. Also some cleanup and a cluster mode build fix.
|
8 anni fa |
Adam Ierymenko
|
4b11566505
Integrate moon concept into http config bus, and clean up that code quite a bit.
|
8 anni fa |
Adam Ierymenko
|
42f28bce52
Cleanup and make moons (federated roots) a little easier to deal with.
|
8 anni fa |
Adam Ierymenko
|
43182f8f57
Docs, code cleanup, and protect the extra new fields of HELLO with encryption as a precaution.
|
8 anni fa |
Adam Ierymenko
|
9e7c778cc8
Fix deadlock.
|
8 anni fa |
Adam Ierymenko
|
1d775af34a
Fix moon persistence.
|
8 anni fa |
Adam Ierymenko
|
9f7919f71f
Add comments to join ("orbit") moons.
|
8 anni fa |
Adam Ierymenko
|
0b3b994241
Relay policy can now be computed.
|
8 anni fa |
Adam Ierymenko
|
64774d0d4f
Replace piecemeal designation of upstreams with the concept of moons, which is simpler and easier to use and inherits all the cool live update stuff of worlds (now called planets) and global roots.
|
8 anni fa |
Adam Ierymenko
|
d7e7ad4f88
Can't send a user message to self.
|
8 anni fa |
Adam Ierymenko
|
d5528e4e9a
Wire up VERB_USER_MESSAGE in core.
|
8 anni fa |
Adam Ierymenko
|
244f37179c
Minor security: lock roots to only be reachable via World IPs.
|
8 anni fa |
Adam Ierymenko
|
84732fcb12
Wire through external path lookup. Static paths should now work.
|
9 anni fa |
Adam Ierymenko
|
42ba70e79e
Replace long callback arg list with struct, and implement path whitelisting, path blacklisting, and local.conf support for roles.
|
9 anni fa |
Adam Ierymenko
|
cbaef66e82
Fix a deadlock in federation/upstream code.
|
9 anni fa |
Adam Ierymenko
|
97d915b06c
Expose relay policy in node settings.
|
9 anni fa |
Adam Ierymenko
|
673c0c811e
Wire through upstream stuff and add setRole().
|
9 anni fa |
Adam Ierymenko
|
2ea9f516e1
Rate gate expensive validation of new identities in HELLO.
|
9 anni fa |
Adam Ierymenko
|
1615ef1114
Rename getBestRoot() etc.
|
9 anni fa |
Adam Ierymenko
|
12d32b9311
Small fix to send pushes if not a reply.
|
9 anni fa |
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
9 anni fa |
Adam Ierymenko
|
c61ca1dea2
Keep connections up for netconf stuff as well as frames.
|
9 anni fa |
Adam Ierymenko
|
7e4b6b594b
It now builds.
|
9 anni fa |
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
9 anni fa |
Adam Ierymenko
|
5b6d27e659
Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.
|
9 anni fa |
Adam Ierymenko
|
ab9afbc749
(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
|
9 anni fa |
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 anni fa |
Adam Ierymenko
|
16df2c3363
Clean up handling of COMs, network access control, and fix a backward compatiblity issue.
|
9 anni fa |