summaryrefslogtreecommitdiff
path: root/node/Packet.hpp
diff options
context:
space:
mode:
authorAdam Ierymenko <adam.ierymenko@gmail.com>2017-02-04 10:21:31 -0800
committerAdam Ierymenko <adam.ierymenko@gmail.com>2017-02-04 10:21:31 -0800
commitbeb642faa58bb3c2c283a068e6de942bfad2c314 (patch)
tree118f9ad3ee4cb6bdf7f5655e78b82b545abe44d5 /node/Packet.hpp
parent31db768e4d4c2815d2be0493b2c76ea5f5edbffa (diff)
downloadinfinitytier-beb642faa58bb3c2c283a068e6de942bfad2c314.tar.gz
infinitytier-beb642faa58bb3c2c283a068e6de942bfad2c314.zip
Stub out CAN_REACH.
Diffstat (limited to 'node/Packet.hpp')
-rw-r--r--node/Packet.hpp29
1 files changed, 25 insertions, 4 deletions
diff --git a/node/Packet.hpp b/node/Packet.hpp
index 26e87af8..a5831c8d 100644
--- a/node/Packet.hpp
+++ b/node/Packet.hpp
@@ -536,7 +536,7 @@ public:
* <[1] software major version>
* <[1] software minor version>
* <[2] software revision>
- * <[8] timestamp for determining latench>
+ * <[8] timestamp for determining latency>
* <[...] binary serialized identity (see Identity)>
* <[1] destination address type>
* [<[...] destination address to which packet was sent>]
@@ -548,8 +548,9 @@ public:
* [<[8] 64-bit timestamp of moon>]
* [... additional moons ...]
*
- * This is the only message that ever must be sent in the clear, since it
- * is used to push an identity to a new peer.
+ * Important security note: this message is sent in the clear as it
+ * contains the initial identity for key agreement. It can therefore
+ * contain no secrets or sensitive information.
*
* The destination address is the wire address to which this packet is
* being sent, and in OK is *also* the destination address of the OK
@@ -1058,7 +1059,27 @@ public:
* ZeroTier, Inc. itself. We recommend making up random ones for your own
* implementations.
*/
- VERB_USER_MESSAGE = 0x14
+ VERB_USER_MESSAGE = 0x14,
+
+ /**
+ * Announce that we can reach a particular address:
+ * <[1] protocol version>
+ * <[1] software major version>
+ * <[1] software minor version>
+ * <[2] software revision>
+ * <[...] binary serialized identity (see Identity)>
+ * <[1] 8-bit number of direct addresses where peer is reachable (if any)>
+ * [... serialized direct addresses ...]
+ *
+ * This message can be sent upstream to announce that we can reach a
+ * particular address. It can optionally report physical paths upstream
+ * to allow upstream peers to send RENDEZVOUS, but this may be omitted
+ * if it is not known or if endpoint address privacy is desired.
+ *
+ * The receiving peer should confirm this message by sending a message
+ * downstream and waiting for a reply.
+ */
+ VERB_CAN_REACH = 0x15
};
/**