From 330c80f3f5958eb99b44632563dbe4dc0522120f Mon Sep 17 00:00:00 2001 From: Adam Ierymenko Date: Tue, 21 Jun 2016 08:09:20 -0700 Subject: Add rule type to match a COM field of the peer by ID and value because this will be powerful. --- include/ZeroTierOne.h | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) (limited to 'include') diff --git a/include/ZeroTierOne.h b/include/ZeroTierOne.h index d16e2a68..d46c64b8 100644 --- a/include/ZeroTierOne.h +++ b/include/ZeroTierOne.h @@ -507,7 +507,17 @@ enum ZT_VirtualNetworkRuleType /** * Match a range of relative TCP sequence numbers (e.g. approx first N bytes of stream) */ - ZT_NETWORK_RULE_MATCH_TCP_RELATIVE_SEQUENCE_NUMBER_RANGE = 50 + ZT_NETWORK_RULE_MATCH_TCP_RELATIVE_SEQUENCE_NUMBER_RANGE = 50, + + /** + * Match a certificate of network membership field from the ZT origin's COM: greater than or equal to + */ + ZT_NETWORK_RULE_MATCH_COM_FIELD_GE = 51, + + /** + * Match a certificate of network membership field from the ZT origin's COM: less than or equal to + */ + ZT_NETWORK_RULE_MATCH_COM_FIELD_LE = 52 }; /** @@ -618,6 +628,11 @@ typedef struct * Ethernet packet size in host byte order (start-end, inclusive) */ uint16_t frameSize[2]; + + /** + * COM ID and value for ZT_NETWORK_RULE_MATCH_COM_FIELD_GE and ZT_NETWORK_RULE_MATCH_COM_FIELD_LE + */ + uint64_t comIV[2]; } v; } ZT_VirtualNetworkRule; -- cgit v1.2.3