summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2016-09-27Refactored network config chunking to sign every chunk to prevent stupid DOS ↵Adam Ierymenko
attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-27cleanup atticAdam Ierymenko
2016-09-26It now builds.Adam Ierymenko
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into devAdam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-21java code still needed to reflect PEER_ROLE_RELAY rename to PEER_ROLE_UPSTREAMGrant Limberg
2016-09-21added missing copyright/license info from ZT_jniutilsGrant Limberg
2016-09-20Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into devAdam Ierymenko
2016-09-20Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵Adam Ierymenko
rapid setup. Will need to revisit later.
2016-09-19Don't print a few error messages when they don't matter.
Grant Limberg
2016-09-19ZT_PEER_ROLE_RELAY -> ZT_PEER_ROLE_UPSTREAM in JNI glueGrant Limberg
2016-09-18Merge branch 'dev' of http://git.int.zerotier.com/ZeroTier/ZeroTierOne into devGrant Limberg
2016-09-15Revise bearer token code in controller, and add relay policy as a meta-data ↵Adam Ierymenko
item presented to controller by nodes (to facilitate future meshiness).
2016-09-14No, definitely have to back out GitHub issue #385 (non-bisected routes) ↵Adam Ierymenko
since this breaks IPv6 on OSX and probably IPv4 too if you were to encounter a 6-only situation.
2016-09-14Naming...Adam Ierymenko
2016-09-14Add physical MTU recommendation hint to network config via API.Adam Ierymenko
2016-09-13Route management bug fixes.Adam Ierymenko
2016-09-13docsAdam Ierymenko
2016-09-13Implement relay policy, and setting multicast limit to 0 now disables ↵Adam Ierymenko
multicast on the network as would be expected.
2016-09-13Try a version of GitHub issue #385 (non-bifurcated default if not present) ↵Adam Ierymenko
on Mac. This version adds the bifurcated routes always but also adds a device-specific non-bifurcated route. Will have to see if this still interferes with OSX route settings, since by definition device specific routes should not conflict with general routes.
2016-09-13Get rid of HELLO rate gate on path since its basically worthless. There are ↵Adam Ierymenko
65535 ports per IP.
2016-09-13Set trustEstablished in a few more places.Adam Ierymenko
2016-09-13Add a few more rate limit gates for anti-DOS hardening.Adam Ierymenko
2016-09-12Rate gate requests for COM.Adam Ierymenko
2016-09-12Back out of GitHub issue #385 for now and maybe for this release. Would be ↵Adam Ierymenko
nice but it is non-critical and rules are the priority. Current implementation bangs heads with OSX route assignment on WiFi join, etc.
2016-09-09Just always do route bifurcation on Linux for now... basically the old behavior.Adam Ierymenko
2016-09-09Set trust established flag in MULTICAST_GATHER.Adam Ierymenko
2016-09-09(1) Public networks now get COMs even though they do not gate with them ↵Adam Ierymenko
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
2016-09-09Fix gating of multicast GATHER replies since these can come from upstream, ↵Adam Ierymenko
etc., and fix an issue with sending ECHO to recheck marginal paths.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08Clean up handling of COMs, network access control, and fix a backward ↵Adam Ierymenko
compatiblity issue.
2016-09-08Merge branch 'dev' of http://git.int.zerotier.com/ZeroTier/ZeroTierOne into devGrant Limberg
2016-09-08another couple of missing semicolonsGrant Limberg
2016-09-08Fix bug causing null addresses to get in memberships[] hash.Adam Ierymenko
2016-09-08Do not bifurcate if not replacing an existing route. (Still need to tie up ↵Adam Ierymenko
Linux and Windows.)
2016-09-07GitHub issue #346Adam Ierymenko
2016-09-07More correct and efficient to initialize member relationship push stuff ↵Adam Ierymenko
lazily when member is learned.
2016-09-07Also send MULTICAST_LIKEs to controllers.Adam Ierymenko
2016-09-07Turns out we do not need to pass network to receive().Adam Ierymenko
2016-09-07Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵Adam Ierymenko
pushes and simplify code.
2016-09-07Tweak some expire times.Adam Ierymenko
2016-09-07Credential TTL (tags/capabilities) should be credential time max delta, ↵Adam Ierymenko
since we could get pushed one that is newer.
2016-09-07Use ECHO instead of HELLO where possible.Adam Ierymenko
2016-09-07Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into devAdam Ierymenko
2016-09-07Typo fix.Adam Ierymenko
2016-09-07Bunch more path refactoring. Peers no longer forget paths, but do not ↵Adam Ierymenko
normally use expired paths. Expired paths might still be tried if nothing else is reachable.
2016-09-06Reflect changes to strut ZT_PeerPhysicalPathGrant Limberg
2016-09-06Cluster build fix.Adam Ierymenko
2016-09-06(1) fix crazy bug introduced in doRENDEZVOUS(), (2) reclaim Paths after ↵Adam Ierymenko
paths[] condense, (3) fix an edge case around symmetric NAT and external IP change detection.
generated by cgit v1.2.3 (git 2.39.1) at 2025-04-24 02:21:22 +0000