summaryrefslogtreecommitdiff
path: root/node/Network.hpp
AgeCommit message (Collapse)Author
2017-04-27License header update.Adam Ierymenko
2017-04-11Pass tptr on leave.Adam Ierymenko
2017-03-27Add thread PTR that gets passed through the entire ZT core call stack and ↵Adam Ierymenko
then passed to handler functions resulting from a call.
2017-03-17GitHub issue #461 -- plus a bit of cleanup and optimizationAdam Ierymenko
2017-02-23Certificate of ownership -- used to secure against IP address spoofing, ↵Adam Ierymenko
especially for IPv4 and regular IPv6.
2017-01-30Fix to cluster network configs.Adam Ierymenko
2016-11-10Refactor controller to permit sending of pushes as well as just replies to ↵Adam Ierymenko
config requests.
2016-09-27Simply network auth logic and always sent error on auth failure even for ↵Adam Ierymenko
unknown networks to prevent forensics.
2016-09-27Refactored network config chunking to sign every chunk to prevent stupid DOS ↵Adam Ierymenko
attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-20Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵Adam Ierymenko
rapid setup. Will need to revisit later.
2016-09-09(1) Public networks now get COMs even though they do not gate with them ↵Adam Ierymenko
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
2016-09-09Fix gating of multicast GATHER replies since these can come from upstream, ↵Adam Ierymenko
etc., and fix an issue with sending ECHO to recheck marginal paths.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08Clean up handling of COMs, network access control, and fix a backward ↵Adam Ierymenko
compatiblity issue.
2016-09-07More correct and efficient to initialize member relationship push stuff ↵Adam Ierymenko
lazily when member is learned.
2016-09-07Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵Adam Ierymenko
pushes and simplify code.
2016-08-31Think through and refine a few things in rules, especially edge case TEE and ↵Adam Ierymenko
REDIRECT behavior and semantics.
2016-08-29EXT_FRAME messages should always be accepted if we are the destination for a ↵Adam Ierymenko
matching TEE or REDIRECT rule.
2016-08-24It basically works... at least on current controllers.Adam Ierymenko
2016-08-24Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.Adam Ierymenko
2016-08-23Instantaneous blacklisting and credential revocation.Adam Ierymenko
2016-08-09Handling of multi-part chunked network configs on the inbound side.Adam Ierymenko
2016-08-08It builds... almost ready to test some rules engine stuff.Adam Ierymenko
2016-08-08Refactor and tie-up of capabilities and tags and packet evaluation points. ↵Adam Ierymenko
Some optimization is possible here but it is minor and we will make it work first.
2016-08-05.Adam Ierymenko
2016-08-04Integrate Filter into OutboundMulticast properly.Adam Ierymenko
2016-06-16Big refactor mostly builds. We now have a uniform backward compatible netconf.Adam Ierymenko
2016-06-14Big refactor in service code to prep for plumbing through route management.Adam Ierymenko
2016-04-26More refactoring to remove old Dictionary dependencies.Adam Ierymenko
2016-04-19Cleanup in numerous places, reduce network chattiness around MULTICAST_LIKE, ↵Adam Ierymenko
and fix a "how was that working" latent bug causing some control traffic to take the scenic route.
2016-04-12Refactor Network for new NetworkConfig.Adam Ierymenko
2016-04-12NetworkConfig refactor part 1Adam Ierymenko
2016-01-12boring doc stuffAdam Ierymenko
2016-01-12Docs and cleanup.Adam Ierymenko
2016-01-12Use network user ptr in lookup for Ethernet frame handling to eliminate map ↵Adam Ierymenko
lookup.
2016-01-12Add a network-associated user ptr in API.Adam Ierymenko
2015-10-23Refactor multicast group announcement to work directly or indirectly.Adam Ierymenko
2015-10-01Always announce multicast groups, not just to peers with direct links, and ↵Adam Ierymenko
push network COMs to any MULTICAST_LIKE recipient for future use.
2015-10-01Restore group announcement on Peer::receive() but centralize packet ↵Adam Ierymenko
composition in one place.
2015-10-01Refactor: move network COMs out of Network and into Peer in prep for ↵Adam Ierymenko
tightening up multicast lookup and other things.
2015-09-24(1) Make ZT_ naming convention consistent (get rid of ZT1_), (2) Make local ↵Adam Ierymenko
interface a full sockaddr_storage instead of an int identifier, which turns out to be better for multi-homing and other uses.
2015-09-04Two for one! (std::map removal)Adam Ierymenko
2015-09-04... and another one!Adam Ierymenko
2015-09-04Another std::map<> dies.Adam Ierymenko
2015-07-07More cleanup to direct path push, comment fixes, etc.Adam Ierymenko
2015-07-07Revert some bad docs in Packet -- I think we will still use that. Also ↵Adam Ierymenko
rename addMembershipCertificate to more security-descriptive validateAndAddMembershipCertificate, give it a return value, and drop unused force parameter.
2015-06-26GitHub issue #191 - kill intra-network multicast rate limits (which were not ↵Adam Ierymenko
well supported or easily configurable anyway) -- this is really left over from the old collaborative multicast propagation algorithm. New algorithm (in for a while) has been sender-side replication in which sender "pays" all bandwidth, which intrinsically limits multicast.
2015-05-25Some nodeJS work, and apply fix from GitHub issue #166 plus a small ↵Adam Ierymenko
optimization to avoid repeated calls to _allMulticastGroups().