 Adam Ierymenko
|
78d548458b
Capabilities basically work but need to refactor a bit for performance reasons.
|
8 years ago |
|
Adam Ierymenko
|
9ddc2a4331
Add a break action to rules engine to make capabilities easier to use.
|
8 years ago |
|
Adam Ierymenko
|
5dbebc513a
Minor send path refactor to make packet I/O work on clusters if they are members of networks. Also fix a crash if compiled in cluster mode but no cluster is enabled.
|
8 years ago |
|
Adam Ierymenko
|
ed31cb76d6
Fix to cluster network configs.
|
8 years ago |
|
Adam Ierymenko
|
0b3b994241
Relay policy can now be computed.
|
8 years ago |
|
Adam Ierymenko
|
c8554504f3
.
|
8 years ago |
|
Adam Ierymenko
|
6b12d86209
Add a workaround for an edge case in TEE/REDIRECT if we are the inbound destination and teeing is only being done on the outbound side.
|
8 years ago |
|
Adam Ierymenko
|
fe530548bb
Fix MATCH_RANDOM in controller.
|
8 years ago |
|
Adam Ierymenko
|
2eaff6d484
Fix to characteristcs in rules engine.
|
8 years ago |
|
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
8 years ago |
|
Adam Ierymenko
|
27d997a2e5
.
|
8 years ago |
|
Adam Ierymenko
|
6469aa9df9
typo
|
8 years ago |
|
Adam Ierymenko
|
ce6b5bc6f5
.
|
8 years ago |
|
Adam Ierymenko
|
4f3775bb86
Fix ICMP match.
|
8 years ago |
|
Adam Ierymenko
|
8850a8610a
Fix filter trace.
|
8 years ago |
|
Adam Ierymenko
|
e53f63ca87
Broke down and added an OR to the rules engine. It is now possible to have a series of MATCHes that are ORed.
|
8 years ago |
|
Adam Ierymenko
|
45c4ccb153
Add a tags both equal match.
|
8 years ago |
|
Adam Ierymenko
|
adeb7e7da0
Make capability flags match more user-friendly and appropriate since "match any flag" is generally what we want.
|
8 years ago |
|
Adam Ierymenko
|
988049f39b
Add new rule to rules engine: random match.
|
8 years ago |
|
Adam Ierymenko
|
9eaa3756f8
Fix deadlock-causing regression in Network.
|
8 years ago |
|
Adam Ierymenko
|
4fe9a4fe83
Fix memory leak.
|
9 years ago |
|
Adam Ierymenko
|
9f550292fe
Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.
|
9 years ago |
|
Adam Ierymenko
|
cc4bacc199
Cleanup, and implement compression disable flag for networks.
|
9 years ago |
|
Adam Ierymenko
|
15c07c58b6
Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
|
9 years ago |
|
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
9 years ago |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 years ago |
|
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
9 years ago |
|
Adam Ierymenko
|
68e549233d
Revise bearer token code in controller, and add relay policy as a meta-data item presented to controller by nodes (to facilitate future meshiness).
|
9 years ago |
|
Adam Ierymenko
|
15402933bc
Add physical MTU recommendation hint to network config via API.
|
9 years ago |
|
Adam Ierymenko
|
83abc00aae
docs
|
9 years ago |
