summaryrefslogtreecommitdiff
path: root/node/Network.cpp
AgeCommit message (Collapse)Author
2017-03-06Send revocations automatically on deauth for instant kill, also fix some ↵Adam Ierymenko
issues with the RP.
2017-03-01Fix FILTER_TRACE breakage.Adam Ierymenko
2017-03-01Merge branch 'dev' of http://10.6.6.2/zerotier/ZeroTierOne into devAdam Ierymenko
2017-03-01Circuit tests now report link quality. Also fixed a little thing in ↵Adam Ierymenko
revocation propagation.
2017-03-01comment broken TRACE messageGrant Limberg
2017-02-28Match on tag sender equals or tag recipient equals.Adam Ierymenko
2017-02-28Add ipauth handling of IPv6 NDP neighbor solicitations and advertisements. ↵Adam Ierymenko
IPv6 works well now with ipauth.
2017-02-27ipauth characteristic now works with ARPAdam Ierymenko
2017-02-23Helps if you actually add the ipauth mask to the characteristics mask.Adam Ierymenko
2017-02-23Finish wiring up ipauth and macauth to Network filter.Adam Ierymenko
2017-02-22Ad-hoc networks, a cool and easy to implement little feature that allows ↵Adam Ierymenko
controllerless networks. These only allow IPv6 6plane, no multicast, and the network ID encodes the allowed port range.
2017-02-07Tags work.Adam Ierymenko
2017-02-07Add a mask and value range to the IP tos rule field. This allows TOS to be ↵Adam Ierymenko
matched more usefully. This will break anyone using tos in the beta, but nobody seems to be and its pre-release so now is the time.
2017-02-06Capabilities basically work but need to refactor a bit for performance reasons.Adam Ierymenko
2017-02-06Add a break action to rules engine to make capabilities easier to use.Adam Ierymenko
2017-02-01Minor send path refactor to make packet I/O work on clusters if they are ↵Adam Ierymenko
members of networks. Also fix a crash if compiled in cluster mode but no cluster is enabled.
2017-01-30Fix to cluster network configs.Adam Ierymenko
2017-01-27Relay policy can now be computed.Adam Ierymenko
2016-12-22.Adam Ierymenko
2016-12-22Add a workaround for an edge case in TEE/REDIRECT if we are the inbound ↵Adam Ierymenko
destination and teeing is only being done on the outbound side.
2016-12-22Fix MATCH_RANDOM in controller.Adam Ierymenko
2016-12-22Fix to characteristcs in rules engine.Adam Ierymenko
2016-11-10Refactor controller to permit sending of pushes as well as just replies to ↵Adam Ierymenko
config requests.
2016-10-13.Adam Ierymenko
2016-10-13typoAdam Ierymenko
2016-10-13.Adam Ierymenko
2016-10-13Fix ICMP match.Adam Ierymenko
2016-10-13Fix filter trace.Adam Ierymenko
2016-10-11Broke down and added an OR to the rules engine. It is now possible to have a ↵Adam Ierymenko
series of MATCHes that are ORed.
2016-10-05Add a tags both equal match.Adam Ierymenko
2016-10-05Make capability flags match more user-friendly and appropriate since "match ↵Adam Ierymenko
any flag" is generally what we want.
2016-09-30Add new rule to rules engine: random match.Adam Ierymenko
2016-09-30Fix deadlock-causing regression in Network.Adam Ierymenko
2016-09-28Fix memory leak.Adam Ierymenko
2016-09-27Simply network auth logic and always sent error on auth failure even for ↵Adam Ierymenko
unknown networks to prevent forensics.
2016-09-27Cleanup, and implement compression disable flag for networks.Adam Ierymenko
2016-09-27Refactored network config chunking to sign every chunk to prevent stupid DOS ↵Adam Ierymenko
attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-20Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵Adam Ierymenko
rapid setup. Will need to revisit later.
2016-09-15Revise bearer token code in controller, and add relay policy as a meta-data ↵Adam Ierymenko
item presented to controller by nodes (to facilitate future meshiness).
2016-09-14Add physical MTU recommendation hint to network config via API.Adam Ierymenko
2016-09-13docsAdam Ierymenko
2016-09-09(1) Public networks now get COMs even though they do not gate with them ↵Adam Ierymenko
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
2016-09-09Fix gating of multicast GATHER replies since these can come from upstream, ↵Adam Ierymenko
etc., and fix an issue with sending ECHO to recheck marginal paths.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08Clean up handling of COMs, network access control, and fix a backward ↵Adam Ierymenko
compatiblity issue.
2016-09-08Fix bug causing null addresses to get in memberships[] hash.Adam Ierymenko
2016-09-07More correct and efficient to initialize member relationship push stuff ↵Adam Ierymenko
lazily when member is learned.
2016-09-07Also send MULTICAST_LIKEs to controllers.Adam Ierymenko