 Adam Ierymenko
|
eebcf08084
Tweaks to new Path code for dual-stack operation, and other fixes.
|
пре 9 година |
|
Adam Ierymenko
|
22271f2a49
Cleanup.
|
пре 9 година |
|
Adam Ierymenko
|
8b6d23b9f6
Optimize filter code a bit, and add a network-level setting for what should happen if an unsupported or unknown MATCH is encountered in a rules table.
|
пре 9 година |
|
Adam Ierymenko
|
25056de5d3
Also need to send credentials when TEEing and REDIRECTing.
|
пре 9 година |
|
Adam Ierymenko
|
994b25af4e
Simplify some logic.
|
пре 9 година |
|
Adam Ierymenko
|
74afef8eb1
Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.
|
пре 9 година |
|
Adam Ierymenko
|
54489a7f61
rename SAMENESS to DIFFERENCE which is less confusing
|
пре 9 година |
|
Adam Ierymenko
|
8e3004591b
Add overlooked MATCH_ICMP to rule set.
|
пре 9 година |
|
Adam Ierymenko
|
cb63babac4
Debug output fixes.
|
пре 9 година |
|
Adam Ierymenko
|
ac1c127b68
Debug output fixes.
|
пре 9 година |
|
Adam Ierymenko
|
cb82193333
Debug output fixes.
|
пре 9 година |
|
Adam Ierymenko
|
f0636ffd4a
EXT_FRAME messages should always be accepted if we are the destination for a matching TEE or REDIRECT rule.
|
пре 9 година |
|
Adam Ierymenko
|
51a420671f
Make rules engine debug a bit more verbose.
|
пре 9 година |
|
Adam Ierymenko
|
7223685b96
.
|
пре 9 година |
|
Adam Ierymenko
|
e7dff1c785
Change logic a little for self-as-destination in TEE and REDIRECT.
|
пре 9 година |
|
Adam Ierymenko
|
a5383d83d8
Do not TEE or REDIRECT to self.
|
пре 9 година |
|
Adam Ierymenko
|
fb5217761b
Add missing names in filter debug code.
|
пре 9 година |
|
Adam Ierymenko
|
90f3e94565
Always output trace info when debugging rules.
|
пре 9 година |
|
Adam Ierymenko
|
ded5a53a6c
Documentation updates, add rules engine revision to network config request meta-data.
|
пре 9 година |
|
Adam Ierymenko
|
d637988ccf
Fix chicken or egg problem in tags, and better filter debug instrumentation.
|
пре 9 година |
|
Adam Ierymenko
|
b5e0d014ab
Controller bug fixes
|
пре 9 година |
|
Adam Ierymenko
|
5eaf397a94
Add a debug log feature in the filter, which only works if enabled in Network.cpp.
|
пре 9 година |
|
Adam Ierymenko
|
2cdda38dc4
It basically works... at least on current controllers.
|
пре 9 година |
|
Adam Ierymenko
|
ccea3d04d6
Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.
|
пре 9 година |
|
Adam Ierymenko
|
8e3463d47a
Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.
|
пре 9 година |
|
Adam Ierymenko
|
0a7a33ef8f
Instantaneous blacklisting and credential revocation.
|
пре 9 година |
|
Adam Ierymenko
|
68b4ca9b31
Cleanup.
|
пре 9 година |
|
Adam Ierymenko
|
77f7dcf40a
Obsolete "test network" removal.
|
пре 9 година |
|
Adam Ierymenko
|
9a3c652a51
Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
|
пре 9 година |
|
Adam Ierymenko
|
7d906df805
Better instrumentation for filter, and filter bug fixes.
|
пре 9 година |
