1287 Commits

Author	SHA1	Message	Date
Adam Ierymenko	43780742b0	comments, docs	2016-09-06 11:10:04 -07:00
Adam Ierymenko	d7f2287ce9	More tweaks to path behavior.	2016-09-05 15:47:22 -07:00
Adam Ierymenko	eebcf08084	Tweaks to new Path code for dual-stack operation, and other fixes.	2016-09-03 15:39:05 -07:00
Adam Ierymenko	01aa469591	Remove debug line.	2016-09-02 14:26:04 -07:00
Adam Ierymenko	4992ac2d9f	Cluster sub-optimal is in fact necessary...	2016-09-02 14:20:55 -07:00
Adam Ierymenko	412979ba8f	Attempt to reactivate dead paths.	2016-09-02 13:55:33 -07:00
Adam Ierymenko	4f8253dcdb	Tweaks to path handling...	2016-09-02 13:33:56 -07:00
Adam Ierymenko	4931e44998	Implement "weak pointer" behavior on Topology Path canonicalization hash table.	2016-09-02 12:34:02 -07:00
Adam Ierymenko	d1101441b3	Tweak some timings.	2016-09-02 11:54:59 -07:00
Adam Ierymenko	e8f6b4b5d3	Rest of big Path canonicalization refactor.	2016-09-02 11:51:33 -07:00
Adam Ierymenko	a3bdae9735	Work in progress: Path canonicalization refactor.	2016-09-01 15:43:07 -07:00
Adam Ierymenko	d5e6f59004	.	2016-09-01 13:45:32 -07:00
Adam Ierymenko	22271f2a49	Cleanup.	2016-09-01 13:36:41 -07:00
Adam Ierymenko	8b6d23b9f6	Optimize filter code a bit, and add a network-level setting for what should happen if an unsupported or unknown MATCH is encountered in a rules table.	2016-09-01 12:07:17 -07:00
Adam Ierymenko	25056de5d3	Also need to send credentials when TEEing and REDIRECTing.	2016-08-31 17:56:59 -07:00
Adam Ierymenko	994b25af4e	Simplify some logic.	2016-08-31 17:45:55 -07:00
Adam Ierymenko	74afef8eb1	Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.	2016-08-31 16:50:22 -07:00
Adam Ierymenko	54489a7f61	rename SAMENESS to DIFFERENCE which is less confusing	2016-08-31 14:14:58 -07:00
Adam Ierymenko	8e3004591b	Add overlooked MATCH_ICMP to rule set.	2016-08-31 14:01:15 -07:00
Adam Ierymenko	2ff2a8fd9a	Cluster build fixes and warning elimination.	2016-08-31 09:38:21 -07:00
Adam Ierymenko	cb63babac4	Debug output fixes.	2016-08-29 16:38:10 -07:00
Adam Ierymenko	ac1c127b68	Debug output fixes.	2016-08-29 16:24:08 -07:00
Adam Ierymenko	cb82193333	Debug output fixes.	2016-08-29 16:19:26 -07:00
Adam Ierymenko	f0636ffd4a	EXT_FRAME messages should always be accepted if we are the destination for a matching TEE or REDIRECT rule.	2016-08-29 15:54:06 -07:00
Adam Ierymenko	51a420671f	Make rules engine debug a bit more verbose.	2016-08-29 15:17:34 -07:00
Adam Ierymenko	7223685b96	.	2016-08-26 15:30:20 -07:00
Adam Ierymenko	e7dff1c785	Change logic a little for self-as-destination in TEE and REDIRECT.	2016-08-26 15:28:31 -07:00
Adam Ierymenko	a5383d83d8	Do not TEE or REDIRECT to self.	2016-08-26 15:25:00 -07:00
Adam Ierymenko	a3c7627acf	Push more than one packet for credentials if we happen to have a whole lot. Should not happen often but might if a member has tons of tags.	2016-08-26 14:43:16 -07:00
Adam Ierymenko	6bd5aba4fa	fix frame size range bug	2016-08-26 13:26:26 -07:00
Adam Ierymenko	fb5217761b	Add missing names in filter debug code.	2016-08-26 13:20:55 -07:00
Adam Ierymenko	90f3e94565	Always output trace info when debugging rules.	2016-08-26 12:21:44 -07:00
Adam Ierymenko	ded5a53a6c	Documentation updates, add rules engine revision to network config request meta-data.	2016-08-26 10:38:43 -07:00
Adam Ierymenko	d637988ccf	Fix chicken or egg problem in tags, and better filter debug instrumentation.	2016-08-25 18:21:20 -07:00
Adam Ierymenko	b5e0d014ab	Controller bug fixes	2016-08-25 16:08:40 -07:00
Adam Ierymenko	5eaf397a94	Add a debug log feature in the filter, which only works if enabled in Network.cpp.	2016-08-25 13:31:23 -07:00
Adam Ierymenko	584228b2b5	Dead code removal, and get rid of reliable() because we will no longer make that distinction.	2016-08-24 17:56:35 -07:00
Adam Ierymenko	cd3683f2ba	Fix a missing receive().	2016-08-24 17:50:51 -07:00
Adam Ierymenko	347ebcd899	Set trust flag in network controllers if remote query is accepted to allow NATed network controllers to better traverse.	2016-08-24 17:48:13 -07:00
Adam Ierymenko	e52c2c41ec	Add a circuit breaker to prevent too many credentials from being stored per member.	2016-08-24 17:24:35 -07:00
Adam Ierymenko	c476285bd6	Harden PUSH_DIRECT_PATHS and simplify things by only doing it on receive when hops>0 and trust has been established.	2016-08-24 16:16:39 -07:00
Adam Ierymenko	63e8ad4cc3	TRACE stuff.	2016-08-24 15:45:37 -07:00
Adam Ierymenko	2cdda38dc4	It basically works... at least on current controllers.	2016-08-24 15:26:18 -07:00
Adam Ierymenko	ccea3d04d6	Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.	2016-08-24 14:28:16 -07:00
Adam Ierymenko	8e3463d47a	Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.	2016-08-24 13:37:57 -07:00
Adam Ierymenko	0ee4d3554a	Stub out USER_MESSAGE.	2016-08-23 14:38:20 -07:00
Adam Ierymenko	0a7a33ef8f	Instantaneous blacklisting and credential revocation.	2016-08-23 13:46:36 -07:00
Adam Ierymenko	32fa061700	Compute credential TTL et al.	2016-08-23 13:02:59 -07:00
Adam Ierymenko	7036831203	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	2016-08-23 11:57:56 -07:00
Adam Ierymenko	68b4ca9b31	Cleanup.	2016-08-23 11:52:10 -07:00