infinitytier.git - Fork of ZeroTier (mirror of https://github.com/vyos/infinitytier.git)

Age	Commit message (Collapse)	Author
2016-10-05	Add a tags both equal match.	Adam Ierymenko

2016-10-05	Make capability flags match more user-friendly and appropriate since "match ↵	Adam Ierymenko
	any flag" is generally what we want.
2016-10-05	Go ahead and loop back packets whose destination is self. Some OSes require ↵	Adam Ierymenko
	this since they aactually follow the full network path even for local IPs.
2016-09-30	Add new rule to rules engine: random match.	Adam Ierymenko

2016-09-30	Fix deadlock-causing regression in Network.	Adam Ierymenko

2016-09-28	Fix memory leak.	Adam Ierymenko

2016-09-28	hashCode() for InetAddress	Adam Ierymenko

2016-09-28	Check multicast limit on send after NDP emulation code.	Adam Ierymenko

2016-09-28	TRACE verbosity increase on exceptions in NETWORK_CREDENTIALS.	Adam Ierymenko

2016-09-27	Send need credential error on more cases.	Adam Ierymenko

2016-09-27	Clusters can send multiple OKs so we must allow this.	Adam Ierymenko

2016-09-27	Simply network auth logic and always sent error on auth failure even for ↵	Adam Ierymenko
	unknown networks to prevent forensics.
2016-09-27	TRACE build fix.	Adam Ierymenko

2016-09-27	Cleanup, and implement compression disable flag for networks.	Adam Ierymenko

2016-09-27	Refactored network config chunking to sign every chunk to prevent stupid DOS ↵	Adam Ierymenko
	attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-26	It now builds.	Adam Ierymenko

2016-09-26	Bunch more refactoring and work on revocations, etc.	Adam Ierymenko

2016-09-23	Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵	Adam Ierymenko
	(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-20	Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵	Adam Ierymenko
	rapid setup. Will need to revisit later.
2016-09-15	Revise bearer token code in controller, and add relay policy as a meta-data ↵	Adam Ierymenko
	item presented to controller by nodes (to facilitate future meshiness).
2016-09-14	Naming...	Adam Ierymenko

2016-09-14	Add physical MTU recommendation hint to network config via API.	Adam Ierymenko

2016-09-13	docs	Adam Ierymenko

2016-09-13	Implement relay policy, and setting multicast limit to 0 now disables ↵	Adam Ierymenko
	multicast on the network as would be expected.
2016-09-13	Get rid of HELLO rate gate on path since its basically worthless. There are ↵	Adam Ierymenko
	65535 ports per IP.
2016-09-13	Set trustEstablished in a few more places.	Adam Ierymenko

2016-09-13	Add a few more rate limit gates for anti-DOS hardening.	Adam Ierymenko

2016-09-12	Rate gate requests for COM.	Adam Ierymenko

2016-09-09	Set trust established flag in MULTICAST_GATHER.	Adam Ierymenko

2016-09-09	(1) Public networks now get COMs even though they do not gate with them ↵	Adam Ierymenko
	since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
2016-09-09	Fix gating of multicast GATHER replies since these can come from upstream, ↵	Adam Ierymenko
	etc., and fix an issue with sending ECHO to recheck marginal paths.
2016-09-09	More refactoring to clean up code, and add a gate function to make sure we ↵	Adam Ierymenko
	do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08	Clean up handling of COMs, network access control, and fix a backward ↵	Adam Ierymenko
	compatiblity issue.
2016-09-08	Fix bug causing null addresses to get in memberships[] hash.	Adam Ierymenko

2016-09-07	More correct and efficient to initialize member relationship push stuff ↵	Adam Ierymenko
	lazily when member is learned.
2016-09-07	Also send MULTICAST_LIKEs to controllers.	Adam Ierymenko

2016-09-07	Turns out we do not need to pass network to receive().	Adam Ierymenko

2016-09-07	Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵	Adam Ierymenko
	pushes and simplify code.
2016-09-07	Tweak some expire times.	Adam Ierymenko

2016-09-07	Credential TTL (tags/capabilities) should be credential time max delta, ↵	Adam Ierymenko
	since we could get pushed one that is newer.
2016-09-07	Use ECHO instead of HELLO where possible.	Adam Ierymenko

2016-09-07	Typo fix.	Adam Ierymenko

2016-09-07	Bunch more path refactoring. Peers no longer forget paths, but do not ↵	Adam Ierymenko
	normally use expired paths. Expired paths might still be tried if nothing else is reachable.
2016-09-06	Cluster build fix.	Adam Ierymenko

2016-09-06	(1) fix crazy bug introduced in doRENDEZVOUS(), (2) reclaim Paths after ↵	Adam Ierymenko
	paths[] condense, (3) fix an edge case around symmetric NAT and external IP change detection.
2016-09-06	Rework how paths are set as remote cluster preferred. The code is now ↵	Adam Ierymenko
	clearer and cluster preference indications are now very sticky as they should be.
2016-09-06	comments, docs	Adam Ierymenko

2016-09-05	More tweaks to path behavior.	Adam Ierymenko

2016-09-03	Tweaks to new Path code for dual-stack operation, and other fixes.	Adam Ierymenko

2016-09-02	Remove debug line.	Adam Ierymenko