summaryrefslogtreecommitdiff
path: root/include
AgeCommit message (Collapse)Author
2017-03-27Add thread PTR that gets passed through the entire ZT core call stack and ↵Adam Ierymenko
then passed to handler functions resulting from a call.
2017-03-01Circuit tests now report link quality. Also fixed a little thing in ↵Adam Ierymenko
revocation propagation.
2017-03-01ZeroTier now has link quality measurement. We are not using this yet but ↵Adam Ierymenko
decided to put it in to prep for future QoS support and SD-WAN stuff.
2017-02-28Match on tag sender equals or tag recipient equals.Adam Ierymenko
2017-02-23Merge.Adam Ierymenko
2017-02-23Finish wiring up ipauth and macauth to Network filter.Adam Ierymenko
2017-02-23iOS fixesGrant Limberg
2017-02-23Certificate of ownership -- used to secure against IP address spoofing, ↵Adam Ierymenko
especially for IPv4 and regular IPv6.
2017-02-22Ad-hoc networks, a cool and easy to implement little feature that allows ↵Adam Ierymenko
controllerless networks. These only allow IPv6 6plane, no multicast, and the network ID encodes the allowed port range.
2017-02-13Integrate moon concept into http config bus, and clean up that code quite a bit.Adam Ierymenko
2017-02-13Cleanup and make moons (federated roots) a little easier to deal with.Adam Ierymenko
2017-02-07Add a mask and value range to the IP tos rule field. This allows TOS to be ↵Adam Ierymenko
matched more usefully. This will break anyone using tos in the beta, but nobody seems to be and its pre-release so now is the time.
2017-02-06Add a break action to rules engine to make capabilities easier to use.Adam Ierymenko
2017-01-27Add comments to join ("orbit") moons.Adam Ierymenko
2017-01-27Relay policy can now be computed.Adam Ierymenko
2017-01-27Replace piecemeal designation of upstreams with the concept of moons, which ↵Adam Ierymenko
is simpler and easier to use and inherits all the cool live update stuff of worlds (now called planets) and global roots.
2017-01-09Wire up VERB_USER_MESSAGE in core.Adam Ierymenko
2016-11-22Fixes to allow usage of ZeroTierOne.h with a C compilerGrant Limberg
2016-11-22Replace long callback arg list with struct, and implement path whitelisting, ↵Adam Ierymenko
path blacklisting, and local.conf support for roles.
2016-11-21Expose relay policy in node settings.Adam Ierymenko
2016-11-18Wire through upstream stuff and add setRole().Adam Ierymenko
2016-11-09Keep connections up for netconf stuff as well as frames.Adam Ierymenko
2016-10-11Broke down and added an OR to the rules engine. It is now possible to have a ↵Adam Ierymenko
series of MATCHes that are ORed.
2016-10-05Add a tags both equal match.Adam Ierymenko
2016-10-05Make capability flags match more user-friendly and appropriate since "match ↵Adam Ierymenko
any flag" is generally what we want.
2016-09-30Add new rule to rules engine: random match.Adam Ierymenko
2016-09-26It now builds.Adam Ierymenko
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-14Add physical MTU recommendation hint to network config via API.Adam Ierymenko
2016-09-13Implement relay policy, and setting multicast limit to 0 now disables ↵Adam Ierymenko
multicast on the network as would be expected.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-07Bunch more path refactoring. Peers no longer forget paths, but do not ↵Adam Ierymenko
normally use expired paths. Expired paths might still be tried if nothing else is reachable.
2016-09-03Tweaks to new Path code for dual-stack operation, and other fixes.Adam Ierymenko
2016-09-01Optimize filter code a bit, and add a network-level setting for what should ↵Adam Ierymenko
happen if an unsupported or unknown MATCH is encountered in a rules table.
2016-08-31rename SAMENESS to DIFFERENCE which is less confusingAdam Ierymenko
2016-08-31Add overlooked MATCH_ICMP to rule set.Adam Ierymenko
2016-08-26Documentation updates, add rules engine revision to network config request ↵Adam Ierymenko
meta-data.
2016-08-25Fix chicken or egg problem in tags, and better filter debug instrumentation.Adam Ierymenko
2016-08-25Add a debug log feature in the filter, which only works if enabled in ↵Adam Ierymenko
Network.cpp.
2016-08-24Increase rule limits a little since chunking in netconf can accomodate this.Adam Ierymenko
2016-08-24It basically works... at least on current controllers.Adam Ierymenko
2016-08-24Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.Adam Ierymenko
2016-08-24Add length limit to TEE and REDIRECT, and completely factor out old C ↵Adam Ierymenko
json-parser to eliminate a dependency.
2016-08-05.Adam Ierymenko
2016-08-04.Adam Ierymenko
2016-08-04More cleanup and removal of DeferredPackets, will do the latter in a more ↵Adam Ierymenko
elegant way.
2016-08-03Bunch of work on pushing and replication of tags and capabilities, and ↵Adam Ierymenko
protocol cleanup.
2016-08-03Add tag rules and split out rule serialize/deserialize so the code can be ↵Adam Ierymenko
reused.
2016-08-02Rules engine work: capability based security model with tags and ↵Adam Ierymenko
capabilities, and some cleanup across other places.