 Adam Ierymenko
|
5e6a4e5f5e
Send revocations automatically on deauth for instant kill, also fix some issues with the RP.
|
8 éve |
|
Adam Ierymenko
|
d56f740dc6
Now with less bugs.
|
8 éve |
|
Adam Ierymenko
|
127bcb02ff
Save space in expecting-reply-to tracking.
|
8 éve |
|
Adam Ierymenko
|
4b11566505
Integrate moon concept into http config bus, and clean up that code quite a bit.
|
8 éve |
|
Adam Ierymenko
|
42f28bce52
Cleanup and make moons (federated roots) a little easier to deal with.
|
8 éve |
|
Adam Ierymenko
|
9f7919f71f
Add comments to join ("orbit") moons.
|
8 éve |
|
Adam Ierymenko
|
0b3b994241
Relay policy can now be computed.
|
8 éve |
|
Adam Ierymenko
|
64774d0d4f
Replace piecemeal designation of upstreams with the concept of moons, which is simpler and easier to use and inherits all the cool live update stuff of worlds (now called planets) and global roots.
|
8 éve |
 Adam Ierymenko
|
9a475eeff9
Windows build fix, warning removal.
|
8 éve |
|
Adam Ierymenko
|
d5528e4e9a
Wire up VERB_USER_MESSAGE in core.
|
8 éve |
|
Adam Ierymenko
|
84732fcb12
Wire through external path lookup. Static paths should now work.
|
8 éve |
|
Adam Ierymenko
|
42ba70e79e
Replace long callback arg list with struct, and implement path whitelisting, path blacklisting, and local.conf support for roles.
|
8 éve |
|
Adam Ierymenko
|
673c0c811e
Wire through upstream stuff and add setRole().
|
8 éve |
|
Adam Ierymenko
|
6e1da35c12
Remove debug.
|
8 éve |
|
Adam Ierymenko
|
2ea9f516e1
Rate gate expensive validation of new identities in HELLO.
|
8 éve |
|
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
8 éve |
|
Adam Ierymenko
|
0b44919ba2
Clusters can send multiple OKs so we must allow this.
|
9 éve |
|
Adam Ierymenko
|
9f550292fe
Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.
|
9 éve |
|
Adam Ierymenko
|
7e4b6b594b
It now builds.
|
9 éve |
|
Adam Ierymenko
|
5b6d27e659
Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.
|
9 éve |
|
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 éve |
|
Adam Ierymenko
|
ccea3d04d6
Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.
|
9 éve |
|
Adam Ierymenko
|
98152d974a
More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.
|
9 éve |
|
Adam Ierymenko
|
765082fdb6
Trusted path support, and version bump to 1.1.9
|
9 éve |
|
Adam Ierymenko
|
4e4fd51117
boring doc stuff
|
9 éve |
|
Adam Ierymenko
|
d6f0f1a82a
Use network user ptr in lookup for Ethernet frame handling to eliminate map lookup.
|
9 éve |
|
Adam Ierymenko
|
83ef98a9dc
Add a network-associated user ptr in API.
|
9 éve |
|
Adam Ierymenko
|
b3e3d4cacc
Instead of using binary packet comparison, add a callback to the API to explicitly check whether paths should be used. Check in with this callback (if present) when learning new paths or sending initial packets.
|
9 éve |
|
Adam Ierymenko
|
2cc50bdb10
Try bringing back TTL escalation -- may help with Docker (IP-MASQ) type NAT
|
9 éve |
|
Adam Ierymenko
|
3e22fee842
Integrate deferred background processing into main OneService implementation.
|
9 éve |
