 Adam Ierymenko
|
6d8e1e8783
More cleanup of old stuff.
|
7 tahun lalu |
|
Adam Ierymenko
|
65c07afe05
Copyright updates for 2018.
|
7 tahun lalu |
 Grant Limberg
|
b1d60df44c
timestamps changed from uint64_t to int64_t
|
8 tahun lalu |
|
Adam Ierymenko
|
b9e1d53d7a
Minor cleanup.
|
8 tahun lalu |
|
Adam Ierymenko
|
495c5ce81d
Bunch of remote tracing work.
|
8 tahun lalu |
|
Adam Ierymenko
|
6015b529a0
More clustering work.
|
8 tahun lalu |
|
Adam Ierymenko
|
1b68d6dbdc
License header update.
|
8 tahun lalu |
|
Adam Ierymenko
|
88a4a3b1ba
Pass tptr on leave.
|
8 tahun lalu |
|
Adam Ierymenko
|
e4896b257f
Add thread PTR that gets passed through the entire ZT core call stack and then passed to handler functions resulting from a call.
|
8 tahun lalu |
|
Adam Ierymenko
|
e10325e133
GitHub issue #461 -- plus a bit of cleanup and optimization
|
8 tahun lalu |
|
Adam Ierymenko
|
10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
|
8 tahun lalu |
|
Adam Ierymenko
|
ed31cb76d6
Fix to cluster network configs.
|
8 tahun lalu |
|
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
8 tahun lalu |
|
Adam Ierymenko
|
9f550292fe
Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.
|
9 tahun lalu |
|
Adam Ierymenko
|
15c07c58b6
Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
|
9 tahun lalu |
|
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
9 tahun lalu |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 tahun lalu |
|
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
9 tahun lalu |
|
Adam Ierymenko
|
ab9afbc749
(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
|
9 tahun lalu |
|
Adam Ierymenko
|
ef87069957
Fix gating of multicast GATHER replies since these can come from upstream, etc., and fix an issue with sending ECHO to recheck marginal paths.
|
9 tahun lalu |
|
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 tahun lalu |
|
Adam Ierymenko
|
16df2c3363
Clean up handling of COMs, network access control, and fix a backward compatiblity issue.
|
9 tahun lalu |
|
Adam Ierymenko
|
daf8a66ced
More correct and efficient to initialize member relationship push stuff lazily when member is learned.
|
9 tahun lalu |
|
Adam Ierymenko
|
1908aa55f5
Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary pushes and simplify code.
|
9 tahun lalu |
|
Adam Ierymenko
|
74afef8eb1
Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.
|
9 tahun lalu |
|
Adam Ierymenko
|
f0636ffd4a
EXT_FRAME messages should always be accepted if we are the destination for a matching TEE or REDIRECT rule.
|
9 tahun lalu |
|
Adam Ierymenko
|
2cdda38dc4
It basically works... at least on current controllers.
|
9 tahun lalu |
|
Adam Ierymenko
|
ccea3d04d6
Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.
|
9 tahun lalu |
|
Adam Ierymenko
|
0a7a33ef8f
Instantaneous blacklisting and credential revocation.
|
9 tahun lalu |
|
Adam Ierymenko
|
4d498b3765
Handling of multi-part chunked network configs on the inbound side.
|
9 tahun lalu |
