ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2024-12-23 14:52:24 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
15c07c58b6
ZeroTierOne/node
History
Adam Ierymenko 15c07c58b6 Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-27 11:33:48 -07:00
..
Address.hpp Bunch more refactoring for an even more compact NetworkConfig representation, especially rules. 2016-04-26 17:11:25 -07:00
Array.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
AtomicCounter.hpp Implement "weak pointer" behavior on Topology Path canonicalization hash table. 2016-09-02 12:34:02 -07:00
Buffer.hpp Changes to how new-style binary network configs are detected, and a new-style binary serialized meta-data representation. 2016-05-06 13:29:10 -07:00
C25519.cpp More little stuff in crypto code. 2014-06-26 17:23:10 -07:00
C25519.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
Capability.cpp More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 2016-08-04 11:40:38 -07:00
Capability.hpp Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 2016-09-23 16:08:38 -07:00
CertificateOfMembership.cpp . 2016-08-04 10:39:28 -07:00
CertificateOfMembership.hpp Compute credential TTL et al. 2016-08-23 13:02:59 -07:00
Cluster.cpp Cluster build fix. 2016-09-06 15:06:07 -07:00
Cluster.hpp Tweak a few cluster params for higher perf / lower initial setup latency. 2016-02-08 09:57:46 -08:00
Constants.hpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
Dictionary.hpp Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 2016-09-27 11:33:48 -07:00
Hashtable.hpp Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be. 2016-09-06 12:45:28 -07:00
Identity.cpp Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places. 2016-08-02 13:36:17 -07:00
Identity.hpp Sign Dictionary in doNETWORK_CONFIG_REQUEST. 2016-08-23 11:57:56 -07:00
IncomingPacket.cpp Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 2016-09-27 11:33:48 -07:00
IncomingPacket.hpp Bunch more refactoring and work on revocations, etc. 2016-09-26 16:17:02 -07:00
InetAddress.cpp More controller work -- it builds! 2016-08-16 14:05:17 -07:00
InetAddress.hpp Bunch of rule JSON stuff. 2016-08-15 18:49:50 -07:00
MAC.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
Membership.cpp Bunch more refactoring and work on revocations, etc. 2016-09-26 16:17:02 -07:00
Membership.hpp Bunch more refactoring and work on revocations, etc. 2016-09-26 16:17:02 -07:00
Multicaster.cpp (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 2016-09-09 11:36:10 -07:00
Multicaster.hpp (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 2016-09-09 11:36:10 -07:00
MulticastGroup.hpp Dead code removal. 2016-08-09 15:01:46 -07:00
Mutex.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
Network.cpp Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 2016-09-27 11:33:48 -07:00
Network.hpp Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 2016-09-27 11:33:48 -07:00
NetworkConfig.cpp Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer. 2016-09-07 12:12:52 -07:00
NetworkConfig.hpp Revise bearer token code in controller, and add relay policy as a meta-data item presented to controller by nodes (to facilitate future meshiness). 2016-09-15 13:17:37 -07:00
NetworkController.hpp Encode and decode of tags and capabilities in NetworkConfig. 2016-08-09 08:32:42 -07:00
Node.cpp It now builds. 2016-09-26 17:05:39 -07:00
Node.hpp It now builds. 2016-09-26 17:05:39 -07:00
NonCopyable.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
OutboundMulticast.cpp More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions. 2016-09-09 08:43:58 -07:00
OutboundMulticast.hpp Integrate Filter into OutboundMulticast properly. 2016-08-04 13:01:14 -07:00
Packet.cpp Bunch more refactoring and work on revocations, etc. 2016-09-26 16:17:02 -07:00
Packet.hpp Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 2016-09-27 11:33:48 -07:00
Path.cpp Work in progress: Path canonicalization refactor. 2016-09-01 15:43:07 -07:00
Path.hpp Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected. 2016-09-13 14:27:18 -07:00
Peer.cpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
Peer.hpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
Poly1305.cpp Only enable 128-bit Poly1305 on X86_64 right now. Has compilation issues on ARM, but the 64-bit version should be fine. 2015-10-07 10:40:59 -07:00
Poly1305.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
README.md Docs and controller API version 2016-07-08 13:10:02 -07:00
Revocation.cpp Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 2016-09-23 16:08:38 -07:00
Revocation.hpp Bunch more refactoring and work on revocations, etc. 2016-09-26 16:17:02 -07:00
RuntimeEnvironment.hpp More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 2016-08-04 11:40:38 -07:00
Salsa20.cpp Unroll Salsa20 fully for a little more speed (non-SSE now almost as fast as SSE) 2015-10-09 09:39:27 -07:00
Salsa20.hpp Add uint16_t key to Hashtable, and make Salsa20 zero its keyspace on destruction. 2015-10-14 10:14:07 -07:00
SelfAwareness.cpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
SelfAwareness.hpp Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable. 2016-09-07 11:13:17 -07:00
SHA512.cpp boring doc stuff 2016-01-12 14:04:55 -08:00
SHA512.hpp boring doc stuff 2016-01-12 14:04:55 -08:00
SharedPtr.hpp Implement "weak pointer" behavior on Topology Path canonicalization hash table. 2016-09-02 12:34:02 -07:00
Switch.cpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
Switch.hpp More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff). 2016-08-09 15:45:26 -07:00
Tag.cpp Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 2016-09-23 16:08:38 -07:00
Tag.hpp Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 2016-09-23 16:08:38 -07:00
Topology.cpp Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 2016-09-20 21:21:34 -07:00
Topology.hpp Work in progress: Path canonicalization refactor. 2016-09-01 15:43:07 -07:00
Utils.cpp More tweaks to path behavior. 2016-09-05 15:47:22 -07:00
Utils.hpp Big refactor mostly builds. We now have a uniform backward compatible netconf. 2016-06-16 12:28:43 -07:00
World.hpp Naming... 2016-09-14 17:35:50 -07:00

README.md

ZeroTier Virtual Switch Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

  • Keep it minimal, especially in terms of code footprint and memory use.
  • There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
  • If it's not part of the core virtual Ethernet switch it does not belong here.
  • No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
  • Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.