summaryrefslogtreecommitdiff
path: root/node/Membership.hpp
AgeCommit message (Collapse)Author
2017-04-27License header update.Adam Ierymenko
2017-04-04Small fix, should filter by temporal validity.Adam Ierymenko
2017-04-04Logic simplification, cleanup, and memory use improvements in Membership. ↵Adam Ierymenko
Also fix an issue that may cause network instability in some cases.
2017-04-04Membership cleanup work in progress.Adam Ierymenko
2017-03-27Add thread PTR that gets passed through the entire ZT core call stack and ↵Adam Ierymenko
then passed to handler functions resulting from a call.
2017-03-06Send revocations automatically on deauth for instant kill, also fix some ↵Adam Ierymenko
issues with the RP.
2017-02-23Finish wiring up ipauth and macauth to Network filter.Adam Ierymenko
2017-02-23Certificate of ownership -- used to secure against IP address spoofing, ↵Adam Ierymenko
especially for IPv4 and regular IPv6.
2017-02-06Capabilities basically work but need to refactor a bit for performance reasons.Adam Ierymenko
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-20Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵Adam Ierymenko
rapid setup. Will need to revisit later.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08Clean up handling of COMs, network access control, and fix a backward ↵Adam Ierymenko
compatiblity issue.
2016-09-07More correct and efficient to initialize member relationship push stuff ↵Adam Ierymenko
lazily when member is learned.
2016-09-07Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵Adam Ierymenko
pushes and simplify code.
2016-09-07Tweak some expire times.Adam Ierymenko
2016-09-07Credential TTL (tags/capabilities) should be credential time max delta, ↵Adam Ierymenko
since we could get pushed one that is newer.
2016-08-31Also need to send credentials when TEEing and REDIRECTing.Adam Ierymenko
2016-08-26Push more than one packet for credentials if we happen to have a whole lot. ↵Adam Ierymenko
Should not happen often but might if a member has tons of tags.
2016-08-25Fix chicken or egg problem in tags, and better filter debug instrumentation.Adam Ierymenko
2016-08-24Add a circuit breaker to prevent too many credentials from being stored per ↵Adam Ierymenko
member.
2016-08-23Instantaneous blacklisting and credential revocation.Adam Ierymenko
2016-08-23Compute credential TTL et al.Adam Ierymenko
2016-08-22Get rid of expiration in Capability and Tag and move this to NetworkConfig ↵Adam Ierymenko
so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
2016-08-08It builds... almost ready to test some rules engine stuff.Adam Ierymenko
2016-08-08Refactor and tie-up of capabilities and tags and packet evaluation points. ↵Adam Ierymenko
Some optimization is possible here but it is minor and we will make it work first.
2016-08-05.Adam Ierymenko
2016-08-04.Adam Ierymenko
2016-08-04...Adam Ierymenko
2016-08-04More work on tags and capabilities.Adam Ierymenko
2016-08-03Bunch of work on pushing and replication of tags and capabilities, and ↵Adam Ierymenko
protocol cleanup.