 Adam Ierymenko
|
15c07c58b6
Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
|
9 rokov pred |
|
Adam Ierymenko
|
236fdb450c
cleanup attic
|
9 rokov pred |
|
Adam Ierymenko
|
7e4b6b594b
It now builds.
|
9 rokov pred |
|
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
9 rokov pred |
|
Adam Ierymenko
|
46049a1ef6
Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into dev
|
9 rokov pred |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 rokov pred |
 Grant Limberg
|
40d3993ceb
java code still needed to reflect PEER_ROLE_RELAY rename to PEER_ROLE_UPSTREAM
|
9 rokov pred |
|
Grant Limberg
|
0564bb3b35
added missing copyright/license info from ZT_jniutils
|
9 rokov pred |
|
Adam Ierymenko
|
29711e123f
Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into dev
|
9 rokov pred |
|
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
9 rokov pred |
|
Grant Limberg
|
d87f0293e3
Don't print a few error messages when they don't matter.
|
9 rokov pred |
|
Grant Limberg
|
5fadd8bdd2
ZT_PEER_ROLE_RELAY -> ZT_PEER_ROLE_UPSTREAM in JNI glue
|
9 rokov pred |
 Grant Limberg
|
3366b53247
Merge branch 'dev' of http://git.int.zerotier.com/ZeroTier/ZeroTierOne into dev
|
9 rokov pred |
|
Adam Ierymenko
|
68e549233d
Revise bearer token code in controller, and add relay policy as a meta-data item presented to controller by nodes (to facilitate future meshiness).
|
9 rokov pred |
|
Adam Ierymenko
|
24fce0be86
No, definitely have to back out GitHub issue #385 (non-bisected routes) since this breaks IPv6 on OSX and probably IPv4 too if you were to encounter a 6-only situation.
|
9 rokov pred |
|
Adam Ierymenko
|
740b34124f
Naming...
|
9 rokov pred |
|
Adam Ierymenko
|
15402933bc
Add physical MTU recommendation hint to network config via API.
|
9 rokov pred |
|
Adam Ierymenko
|
8d0b2b781e
Route management bug fixes.
|
9 rokov pred |
|
Adam Ierymenko
|
83abc00aae
docs
|
9 rokov pred |
|
Adam Ierymenko
|
5b6d27e659
Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.
|
9 rokov pred |
|
Adam Ierymenko
|
ced8dfc639
Try a version of GitHub issue #385 (non-bifurcated default if not present) on Mac. This version adds the bifurcated routes always but also adds a device-specific non-bifurcated route. Will have to see if this still interferes with OSX route settings, since by definition device specific routes should not conflict with general routes.
|
9 rokov pred |
|
Adam Ierymenko
|
8ef0e4bbaf
Get rid of HELLO rate gate on path since its basically worthless. There are 65535 ports per IP.
|
9 rokov pred |
|
Adam Ierymenko
|
0da9a9a3e0
Set trustEstablished in a few more places.
|
9 rokov pred |
|
Adam Ierymenko
|
cba37c6107
Add a few more rate limit gates for anti-DOS hardening.
|
9 rokov pred |
|
Adam Ierymenko
|
ea1da3321a
Rate gate requests for COM.
|
9 rokov pred |
|
Adam Ierymenko
|
34b146f28b
Back out of GitHub issue #385 for now and maybe for this release. Would be nice but it is non-critical and rules are the priority. Current implementation bangs heads with OSX route assignment on WiFi join, etc.
|
9 rokov pred |
|
Adam Ierymenko
|
fb46a546db
Just always do route bifurcation on Linux for now... basically the old behavior.
|
9 rokov pred |
|
Adam Ierymenko
|
debc4c45ee
Set trust established flag in MULTICAST_GATHER.
|
9 rokov pred |
|
Adam Ierymenko
|
ab9afbc749
(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
|
9 rokov pred |
|
Adam Ierymenko
|
ef87069957
Fix gating of multicast GATHER replies since these can come from upstream, etc., and fix an issue with sending ECHO to recheck marginal paths.
|
9 rokov pred |
