124 Commits

Author	SHA1	Message	Date
Adam Ierymenko	b5c86b6ba4	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	2016-09-07 11:13:17 -07:00
Adam Ierymenko	eebcf08084	Tweaks to new Path code for dual-stack operation, and other fixes.	2016-09-03 15:39:05 -07:00
Adam Ierymenko	8b6d23b9f6	Optimize filter code a bit, and add a network-level setting for what should happen if an unsupported or unknown MATCH is encountered in a rules table.	2016-09-01 12:07:17 -07:00
Adam Ierymenko	54489a7f61	rename SAMENESS to DIFFERENCE which is less confusing	2016-08-31 14:14:58 -07:00
Adam Ierymenko	8e3004591b	Add overlooked MATCH_ICMP to rule set.	2016-08-31 14:01:15 -07:00
Adam Ierymenko	ded5a53a6c	Documentation updates, add rules engine revision to network config request meta-data.	2016-08-26 10:38:43 -07:00
Adam Ierymenko	d637988ccf	Fix chicken or egg problem in tags, and better filter debug instrumentation.	2016-08-25 18:21:20 -07:00
Adam Ierymenko	5eaf397a94	Add a debug log feature in the filter, which only works if enabled in Network.cpp.	2016-08-25 13:31:23 -07:00
Adam Ierymenko	95ff057e04	Increase rule limits a little since chunking in netconf can accomodate this.	2016-08-24 17:16:26 -07:00
Adam Ierymenko	2cdda38dc4	It basically works... at least on current controllers.	2016-08-24 15:26:18 -07:00
Adam Ierymenko	ccea3d04d6	Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.	2016-08-24 14:28:16 -07:00
Adam Ierymenko	8e3463d47a	Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.	2016-08-24 13:37:57 -07:00
Adam Ierymenko	e2f783ebbd	.	2016-08-05 15:02:01 -07:00
Adam Ierymenko	4d9b74b171	.	2016-08-04 15:27:20 -07:00
Adam Ierymenko	98152d974a	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	2016-08-04 11:40:38 -07:00
Adam Ierymenko	7e6e56e2bc	Bunch of work on pushing and replication of tags and capabilities, and protocol cleanup.	2016-08-03 18:04:08 -07:00
Adam Ierymenko	67cb03742e	Add tag rules and split out rule serialize/deserialize so the code can be reused.	2016-08-03 14:12:38 -07:00
Adam Ierymenko	ecc1324bb0	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	2016-08-02 13:36:17 -07:00
Adam Ierymenko	d3b0081447	Cleanup...	2016-07-28 12:09:58 -07:00
Adam Ierymenko	22e44c762b	More rules engine work: key/value pair matching for microsegmentation.	2016-07-28 10:58:10 -07:00
Adam Ierymenko	eaf6d6c938	Basic L2/L3 filter for rules engine (not integrated yet) and some cleanup.	2016-07-25 15:52:16 -07:00
Adam Ierymenko	9657675755	Plumbing through trusted path stuff to OneService.	2016-07-12 11:30:22 -07:00
Adam Ierymenko	765082fdb6	Trusted path support, and version bump to 1.1.9	2016-07-12 08:29:50 -07:00
Adam Ierymenko	330c80f3f5	Add rule type to match a COM field of the peer by ID and value because this will be powerful.	2016-06-21 08:09:20 -07:00
Adam Ierymenko	e09c1a1c11	Big refactor mostly builds. We now have a uniform backward compatible netconf.	2016-06-16 12:28:43 -07:00
Adam Ierymenko	4446dbde5e	Big refactor in service code to prep for plumbing through route management.	2016-06-14 10:09:26 -07:00
Adam Ierymenko	82635ce606	Add flags and metric to ZT-managed routes.	2016-06-09 09:43:09 -07:00
Adam Ierymenko	9161eebc68	Carry virtual network routes through to API.	2016-06-07 12:15:19 -07:00
Adam Ierymenko	37b89b3944	Add TCP relative sequence number criterion for documentation/posterity.	2016-05-09 17:00:17 -07:00
Adam Ierymenko	8b9519f0af	Simplify a bunch of NetworkConfig stuff by eliminating accessors, also makes network controller easier to refactor.	2016-05-06 16:13:11 -07:00
Adam Ierymenko	69d0562e2c	docs	2016-05-06 11:41:11 -07:00
Adam Ierymenko	7913fa7bbd	Dead code removal.	2016-05-06 11:13:34 -07:00
Adam Ierymenko	0f17077b3d	Merge gateways and routes in netconf since they are the same thing.	2016-05-06 10:57:53 -07:00
Adam Ierymenko	e5cc487b95	Beginning of security doc and kill some obsolete defines in main include file.	2016-04-28 14:58:16 +02:00
Adam Ierymenko	b9dba97fdb	Bunch more refactoring for an even more compact NetworkConfig representation, especially rules.	2016-04-26 17:11:25 -07:00
Adam Ierymenko	246f86dad3	Define an "anchor" as a statically defined device that serves as a network lookup point.	2016-04-26 07:56:41 -07:00
Adam Ierymenko	d736074301	Refactor rules table in-memory structure in new NetworkConfig to permit far more rules with better space efficiency.	2016-04-22 15:40:53 -07:00
Adam Ierymenko	af471af8ef	Shrink NetworkConfig slightly.	2016-04-12 13:32:41 -07:00
Adam Ierymenko	6f854c8391	NetworkConfig refactor part 1	2016-04-12 12:11:34 -07:00
Adam Ierymenko	92f24d1988	Make maximum size of a circuit test structure sane.	2016-02-22 15:54:18 -08:00
Grant Limberg	6dac0c8c4f	C doesn't support default arguments	2016-01-13 17:47:34 -08:00
Adam Ierymenko	4e4fd51117	boring doc stuff	2016-01-12 14:04:55 -08:00
Adam Ierymenko	d6f0f1a82a	Use network user ptr in lookup for Ethernet frame handling to eliminate map lookup.	2016-01-12 11:34:22 -08:00
Adam Ierymenko	83ef98a9dc	Add a network-associated user ptr in API.	2016-01-12 11:04:35 -08:00
Adam Ierymenko	b3e3d4cacc	Instead of using binary packet comparison, add a callback to the API to explicitly check whether paths should be used. Check in with this callback (if present) when learning new paths or sending initial packets.	2016-01-11 10:17:44 -08:00
Adam Ierymenko	ba2a89c760	docs	2016-01-11 09:13:41 -08:00
Adam Ierymenko	ab19e19f00	Fix a bug that we visually found in Windows code -- it was not advertising uPnP addresses?!?	2016-01-11 09:09:24 -08:00
Adam Ierymenko	2cc50bdb10	Try bringing back TTL escalation -- may help with Docker (IP-MASQ) type NAT	2015-11-09 15:44:13 -08:00
Adam Ierymenko	6bc8c9d8ef	Clustering cleanup, still a work in progress.	2015-11-06 16:12:41 -08:00
Adam Ierymenko	8ef4edebbf	Deferred decode for HELLO to prevent HELLOcalypse under high load of new peers.	2015-11-05 12:22:58 -08:00