 Adam Ierymenko
|
65c07afe05
Copyright updates for 2018.
|
7 gadi atpakaļ |
|
Adam Ierymenko
|
0608704626
Some micro-optimizations, including a memcpy that is faster than Linux for most distro/compiler versions.
|
7 gadi atpakaļ |
|
Adam Ierymenko
|
395d8b3139
Full and clearer implementation of GitHub issue #588
|
7 gadi atpakaļ |
 Grant Limberg
|
099bedd2e9
A few more uint64_t -> int64_t changes for timestamps
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
b9e1d53d7a
Minor cleanup.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
1b68d6dbdc
License header update.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
eddbc7e757
Logic simplification, cleanup, and memory use improvements in Membership. Also fix an issue that may cause network instability in some cases.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
e4896b257f
Add thread PTR that gets passed through the entire ZT core call stack and then passed to handler functions resulting from a call.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
010d0a7d56
Docs and a bit of cleanup. In particular ALL makes no sense for revocations because they have IDs. In that case you would just revoke the COM.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
2b10a982e9
Match on tag sender equals or tag recipient equals.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
672f17c6e9
Add a mask and value range to the IP tos rule field. This allows TOS to be matched more usefully. This will break anyone using tos in the beta, but nobody seems to be and its pre-release so now is the time.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
3587aa1ea7
Add and send certificates of representation to tell people what our valid upstreams are. These are not used yet but will be needed for future privacy modes, etc. Also some cleanup.
|
8 gadi atpakaļ |
|
Adam Ierymenko
|
e53f63ca87
Broke down and added an OR to the rules engine. It is now possible to have a series of MATCHes that are ORed.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
45c4ccb153
Add a tags both equal match.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
adeb7e7da0
Make capability flags match more user-friendly and appropriate since "match any flag" is generally what we want.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
988049f39b
Add new rule to rules engine: random match.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
74afef8eb1
Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
54489a7f61
rename SAMENESS to DIFFERENCE which is less confusing
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
8e3004591b
Add overlooked MATCH_ICMP to rule set.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
6bd5aba4fa
fix frame size range bug
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
5eaf397a94
Add a debug log feature in the filter, which only works if enabled in Network.cpp.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
8e3463d47a
Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
9a3c652a51
Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
b0d888d235
Signing of Capability and Tag objects.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
d166b494ee
Rule parse fix.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
2ba9343607
Encode and decode of tags and capabilities in NetworkConfig.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
00fd9c3a15
It builds... almost ready to test some rules engine stuff.
|
9 gadi atpakaļ |
|
Adam Ierymenko
|
e2f783ebbd
.
|
9 gadi atpakaļ |
