Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-09-13 | Add a few more rate limit gates for anti-DOS hardening. | Adam Ierymenko | |
2016-09-09 | (1) Public networks now get COMs even though they do not gate with them ↵ | Adam Ierymenko | |
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. | |||
2016-09-07 | Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵ | Adam Ierymenko | |
pushes and simplify code. | |||
2016-09-07 | Bunch more path refactoring. Peers no longer forget paths, but do not ↵ | Adam Ierymenko | |
normally use expired paths. Expired paths might still be tried if nothing else is reachable. | |||
2016-09-03 | Tweaks to new Path code for dual-stack operation, and other fixes. | Adam Ierymenko | |
2016-09-02 | Tweak some timings. | Adam Ierymenko | |
2016-09-02 | Rest of big Path canonicalization refactor. | Adam Ierymenko | |
2016-09-01 | Work in progress: Path canonicalization refactor. | Adam Ierymenko | |
2016-08-23 | Obsolete "test network" removal. | Adam Ierymenko | |
2016-08-04 | ... | Adam Ierymenko | |
2016-04-22 | Refactor rules table in-memory structure in new NetworkConfig to permit far ↵ | Adam Ierymenko | |
more rules with better space efficiency. | |||
2016-04-19 | Cleanup in numerous places, reduce network chattiness around MULTICAST_LIKE, ↵ | Adam Ierymenko | |
and fix a "how was that working" latent bug causing some control traffic to take the scenic route. | |||
2016-04-12 | NetworkConfig refactor part 1 | Adam Ierymenko | |
2016-04-06 | Tweak new RX queue algorithm to "expire" old entries to prevent always ↵ | Adam Ierymenko | |
needing to traverse the whole queue array. | |||
2016-04-05 | More refactoring and prep for explicit interface bindings (for default route ↵ | Adam Ierymenko | |
support). | |||
2016-03-28 | More tweaks to OS determination stuff. | Adam Ierymenko | |
2016-03-28 | Try to define ZT_NO_TYPE_PUNNING on iOS in case it wasn't. | Adam Ierymenko | |
2016-03-18 | Refactor incoming packet (rxQueue/fragmentQueue) to eliminate variable ↵ | Adam Ierymenko | |
length queues and merge queues. This is both faster and saves memory. | |||
2016-02-22 | Reduce direct ping delay back to 1m and make SelfAwareness aware of local ↵ | Adam Ierymenko | |
received-on address to eliminate false symmetric classification. | |||
2016-02-08 | Make activity no longer a function of ping frequency, since this causes ↵ | Adam Ierymenko | |
compatibility bugs when the latter was modified due to timer interactions with other versions. | |||
2016-01-12 | boring doc stuff | Adam Ierymenko | |
2016-01-06 | Tighten up dead path detection. Should now auto-detect dead paths in less ↵ | Adam Ierymenko | |
than 10 seconds at a very small cost in ECHO requests (or HELLOs for older peers). GitHib issue #272 | |||
2016-01-05 | Implement first pass on rapid dead path detection, and increment version to ↵ | Adam Ierymenko | |
1.1.3 (dev) | |||
2015-12-21 | Selectively move over changes from "edge" to "dev" excluding netcon. | Adam Ierymenko | |
2015-11-30 | Increase maximum number of paths per IP scope to 4 | Janjaap Bos | |
Otherwise, local discovered routes are ignored. Don't know what the best value would be. Taking 4 for now. | |||
2015-11-11 | Increase WHOIS retry delay slightly to allow for global cluster latency ↵ | Adam Ierymenko | |
(e.g. 300+ms from New York to Johhannesburg) | |||
2015-11-02 | Tweak some more timings for better reliability. | Adam Ierymenko | |
2015-11-02 | Tweak some timings for better reliability. | Adam Ierymenko | |
2015-10-30 | Optimize AntiRecursion. | Adam Ierymenko | |
2015-10-28 | Clean up PUSH_DIRECT_PATH limits a bit more and make them a bit smarter. | Adam Ierymenko | |
2015-10-27 | Add a circuit breaker for VERB_PUSH_DIRECT_PATHS. | Adam Ierymenko | |
2015-10-27 | Replicate peer endpoints and forget paths if we have them -- this allows two ↵ | Adam Ierymenko | |
clusters to talk to each other, whereas forgetting all paths does not. | |||
2015-10-27 | Fix infinite loop in Cluster, clean up some stuff elsewhere, and back out ↵ | Adam Ierymenko | |
rate limiting in PUSH_DIRECT_PATHS for now (but we will do something else to mitigate amplification attacks) | |||
2015-10-27 | Lessen this limit just a bit to make cluster settle faster. | Adam Ierymenko | |
2015-10-16 | Add rate limit on receive of DIRECT_PATH_PUSH to prevent DOS exploitation. | Adam Ierymenko | |
2015-10-15 | GitHub issue #235, and I also see no reason not to communicate with people ↵ | Adam Ierymenko | |
from other Worlds. | |||
2015-10-14 | Work in progress on Cluster for new root infrastructure, multi-homing. | Adam Ierymenko | |
2015-10-07 | Tune NAT-t keepalives so that timing is better obeyed, clean up a build ↵ | Adam Ierymenko | |
warning, and fix a potential source of network recursion (though harmless). | |||
2015-10-01 | Refactor: move network COMs out of Network and into Peer in prep for ↵ | Adam Ierymenko | |
tightening up multicast lookup and other things. | |||
2015-09-24 | (1) Make ZT_ naming convention consistent (get rid of ZT1_), (2) Make local ↵ | Adam Ierymenko | |
interface a full sockaddr_storage instead of an int identifier, which turns out to be better for multi-homing and other uses. | |||
2015-07-28 | Kill more kittens. | Adam Ierymenko | |
2015-07-28 | Disable type punning on ARM by ifdef. | Adam Ierymenko | |
2015-07-28 | Try another NAT traversal improvement. | Adam Ierymenko | |
2015-07-23 | (1) Fix updating of network revision counter on member change. | Adam Ierymenko | |
(2) Go back to timestamp as certificate revision number. This is simpler and more robust than using the network revision number for this and forcing network revision fast-forward, which could cause some peers to fall off the horizon when you don't want them to. | |||
2015-07-06 | Almost everything for GitHub issue #180 except direct path map setup. | Adam Ierymenko | |
2015-07-06 | pushDirectPaths() implementation | Adam Ierymenko | |
2015-06-19 | Root server terminology cleanup, and tighten up a security check by checking ↵ | Adam Ierymenko | |
full identity of peers instead of just address. | |||
2015-05-06 | Renamed supernode to rootserver | Kees Bos | |
2015-05-22 | One second delay between NAT-t events. | Adam Ierymenko | |
2015-05-21 | Completely factor out "desperation" from the core. I thought of a ↵ | Adam Ierymenko | |
significantly simpler way to move all of this logic entirely into the containing service, liberating the core from any concern over the nature of its pipe to the outside world. |