Age | Commit message (Collapse) | Author | |
---|---|---|---|
2017-04-27 | License header update. | Adam Ierymenko | |
2017-04-11 | Pass tptr on leave. | Adam Ierymenko | |
2017-03-27 | Add thread PTR that gets passed through the entire ZT core call stack and ↵ | Adam Ierymenko | |
then passed to handler functions resulting from a call. | |||
2017-03-17 | GitHub issue #461 -- plus a bit of cleanup and optimization | Adam Ierymenko | |
2017-02-23 | Certificate of ownership -- used to secure against IP address spoofing, ↵ | Adam Ierymenko | |
especially for IPv4 and regular IPv6. | |||
2017-01-30 | Fix to cluster network configs. | Adam Ierymenko | |
2016-11-10 | Refactor controller to permit sending of pushes as well as just replies to ↵ | Adam Ierymenko | |
config requests. | |||
2016-09-27 | Simply network auth logic and always sent error on auth failure even for ↵ | Adam Ierymenko | |
unknown networks to prevent forensics. | |||
2016-09-27 | Refactored network config chunking to sign every chunk to prevent stupid DOS ↵ | Adam Ierymenko | |
attack potential, and implement network config fast propagate (though we probably will not use this for a bit). | |||
2016-09-26 | Bunch more refactoring and work on revocations, etc. | Adam Ierymenko | |
2016-09-23 | Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵ | Adam Ierymenko | |
(thanks JG@DCVC!), and clean up some cruft in Network. | |||
2016-09-20 | Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵ | Adam Ierymenko | |
rapid setup. Will need to revisit later. | |||
2016-09-09 | (1) Public networks now get COMs even though they do not gate with them ↵ | Adam Ierymenko | |
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. | |||
2016-09-09 | Fix gating of multicast GATHER replies since these can come from upstream, ↵ | Adam Ierymenko | |
etc., and fix an issue with sending ECHO to recheck marginal paths. | |||
2016-09-09 | More refactoring to clean up code, and add a gate function to make sure we ↵ | Adam Ierymenko | |
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions. | |||
2016-09-08 | Clean up handling of COMs, network access control, and fix a backward ↵ | Adam Ierymenko | |
compatiblity issue. | |||
2016-09-07 | More correct and efficient to initialize member relationship push stuff ↵ | Adam Ierymenko | |
lazily when member is learned. | |||
2016-09-07 | Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵ | Adam Ierymenko | |
pushes and simplify code. | |||
2016-08-31 | Think through and refine a few things in rules, especially edge case TEE and ↵ | Adam Ierymenko | |
REDIRECT behavior and semantics. | |||
2016-08-29 | EXT_FRAME messages should always be accepted if we are the destination for a ↵ | Adam Ierymenko | |
matching TEE or REDIRECT rule. | |||
2016-08-24 | It basically works... at least on current controllers. | Adam Ierymenko | |
2016-08-24 | Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller. | Adam Ierymenko | |
2016-08-23 | Instantaneous blacklisting and credential revocation. | Adam Ierymenko | |
2016-08-09 | Handling of multi-part chunked network configs on the inbound side. | Adam Ierymenko | |
2016-08-08 | It builds... almost ready to test some rules engine stuff. | Adam Ierymenko | |
2016-08-08 | Refactor and tie-up of capabilities and tags and packet evaluation points. ↵ | Adam Ierymenko | |
Some optimization is possible here but it is minor and we will make it work first. | |||
2016-08-05 | . | Adam Ierymenko | |
2016-08-04 | Integrate Filter into OutboundMulticast properly. | Adam Ierymenko | |
2016-06-16 | Big refactor mostly builds. We now have a uniform backward compatible netconf. | Adam Ierymenko | |
2016-06-14 | Big refactor in service code to prep for plumbing through route management. | Adam Ierymenko | |
2016-04-26 | More refactoring to remove old Dictionary dependencies. | Adam Ierymenko | |
2016-04-19 | Cleanup in numerous places, reduce network chattiness around MULTICAST_LIKE, ↵ | Adam Ierymenko | |
and fix a "how was that working" latent bug causing some control traffic to take the scenic route. | |||
2016-04-12 | Refactor Network for new NetworkConfig. | Adam Ierymenko | |
2016-04-12 | NetworkConfig refactor part 1 | Adam Ierymenko | |
2016-01-12 | boring doc stuff | Adam Ierymenko | |
2016-01-12 | Docs and cleanup. | Adam Ierymenko | |
2016-01-12 | Use network user ptr in lookup for Ethernet frame handling to eliminate map ↵ | Adam Ierymenko | |
lookup. | |||
2016-01-12 | Add a network-associated user ptr in API. | Adam Ierymenko | |
2015-10-23 | Refactor multicast group announcement to work directly or indirectly. | Adam Ierymenko | |
2015-10-01 | Always announce multicast groups, not just to peers with direct links, and ↵ | Adam Ierymenko | |
push network COMs to any MULTICAST_LIKE recipient for future use. | |||
2015-10-01 | Restore group announcement on Peer::receive() but centralize packet ↵ | Adam Ierymenko | |
composition in one place. | |||
2015-10-01 | Refactor: move network COMs out of Network and into Peer in prep for ↵ | Adam Ierymenko | |
tightening up multicast lookup and other things. | |||
2015-09-24 | (1) Make ZT_ naming convention consistent (get rid of ZT1_), (2) Make local ↵ | Adam Ierymenko | |
interface a full sockaddr_storage instead of an int identifier, which turns out to be better for multi-homing and other uses. | |||
2015-09-04 | Two for one! (std::map removal) | Adam Ierymenko | |
2015-09-04 | ... and another one! | Adam Ierymenko | |
2015-09-04 | Another std::map<> dies. | Adam Ierymenko | |
2015-07-07 | More cleanup to direct path push, comment fixes, etc. | Adam Ierymenko | |
2015-07-07 | Revert some bad docs in Packet -- I think we will still use that. Also ↵ | Adam Ierymenko | |
rename addMembershipCertificate to more security-descriptive validateAndAddMembershipCertificate, give it a return value, and drop unused force parameter. | |||
2015-06-26 | GitHub issue #191 - kill intra-network multicast rate limits (which were not ↵ | Adam Ierymenko | |
well supported or easily configurable anyway) -- this is really left over from the old collaborative multicast propagation algorithm. New algorithm (in for a while) has been sender-side replication in which sender "pays" all bandwidth, which intrinsically limits multicast. | |||
2015-05-25 | Some nodeJS work, and apply fix from GitHub issue #166 plus a small ↵ | Adam Ierymenko | |
optimization to avoid repeated calls to _allMulticastGroups(). |