1299 commits

Author	SHA1	Message	Date
Adam Ierymenko	347ebcd899	Set trust flag in network controllers if remote query is accepted to allow NATed network controllers to better traverse.	2016-08-24 17:48:13 -07:00
Adam Ierymenko	e52c2c41ec	Add a circuit breaker to prevent too many credentials from being stored per member.	2016-08-24 17:24:35 -07:00
Adam Ierymenko	c476285bd6	Harden PUSH_DIRECT_PATHS and simplify things by only doing it on receive when hops>0 and trust has been established.	2016-08-24 16:16:39 -07:00
Adam Ierymenko	63e8ad4cc3	TRACE stuff.	2016-08-24 15:45:37 -07:00
Adam Ierymenko	2cdda38dc4	It basically works... at least on current controllers.	2016-08-24 15:26:18 -07:00
Adam Ierymenko	ccea3d04d6	Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.	2016-08-24 14:28:16 -07:00
Adam Ierymenko	8e3463d47a	Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.	2016-08-24 13:37:57 -07:00
Adam Ierymenko	0ee4d3554a	Stub out USER_MESSAGE.	2016-08-23 14:38:20 -07:00
Adam Ierymenko	0a7a33ef8f	Instantaneous blacklisting and credential revocation.	2016-08-23 13:46:36 -07:00
Adam Ierymenko	32fa061700	Compute credential TTL et al.	2016-08-23 13:02:59 -07:00
Adam Ierymenko	7036831203	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	2016-08-23 11:57:56 -07:00
Adam Ierymenko	68b4ca9b31	Cleanup.	2016-08-23 11:52:10 -07:00
Adam Ierymenko	0dfc08b317	Tidy up a few minor protocol things, improve documentation in Packet.hpp.	2016-08-23 11:29:02 -07:00
Adam Ierymenko	77f7dcf40a	Obsolete "test network" removal.	2016-08-23 09:39:38 -07:00
Adam Ierymenko	9a3c652a51	Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.	2016-08-22 18:06:46 -07:00
Adam Ierymenko	b0d888d235	Signing of Capability and Tag objects.	2016-08-22 14:25:59 -07:00
Adam Ierymenko	faa9a06bf5	Controller fixes...	2016-08-17 17:37:37 -07:00
Adam Ierymenko	b72847d504	Finally implement network join auth tokens, at least at the protocol level.	2016-08-17 13:41:45 -07:00
Adam Ierymenko	b08ca49580	More controller work -- it builds!	2016-08-16 14:05:17 -07:00
Adam Ierymenko	bd15262e54	Bunch of rule JSON stuff.	2016-08-15 18:49:50 -07:00
Adam Ierymenko	7d906df805	Better instrumentation for filter, and filter bug fixes.	2016-08-10 14:27:52 -07:00
Adam Ierymenko	d166b494ee	Rule parse fix.	2016-08-10 13:41:22 -07:00
Adam Ierymenko	81959f14af	Refactor and redesign symmetric NAT predictor. This is cleaner.	2016-08-10 10:28:54 -07:00
Adam Ierymenko	c9d7845fea	Minor bug fix and some instrumentation stuff for testing.	2016-08-09 17:00:01 -07:00
Adam Ierymenko	0b0cda2be4	ZT_TRACE fix.	2016-08-09 15:55:41 -07:00
Adam Ierymenko	e1310a764a	More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff).	2016-08-09 15:45:26 -07:00
Adam Ierymenko	dbf3e6c3c9	Dead code removal.	2016-08-09 15:01:46 -07:00
Adam Ierymenko	dee7f75f7e	Minor cleanup.	2016-08-09 14:46:11 -07:00
Adam Ierymenko	774c7e0ea5	Put CONFIG_REFRESH back.	2016-08-09 13:52:08 -07:00
Adam Ierymenko	4d498b3765	Handling of multi-part chunked network configs on the inbound side.	2016-08-09 13:14:38 -07:00
Adam Ierymenko	bcd05fbdfa	Chunking of network config replies.	2016-08-09 09:34:13 -07:00
Adam Ierymenko	2ba9343607	Encode and decode of tags and capabilities in NetworkConfig.	2016-08-09 08:32:42 -07:00
Adam Ierymenko	51cf49a24f	cleanup	2016-08-08 17:40:22 -07:00
Adam Ierymenko	00fd9c3a15	It builds... almost ready to test some rules engine stuff.	2016-08-08 17:33:26 -07:00
Adam Ierymenko	8007ca56aa	Refactor and tie-up of capabilities and tags and packet evaluation points. Some optimization is possible here but it is minor and we will make it work first.	2016-08-08 16:50:00 -07:00
Adam Ierymenko	4d7f625aa1	.	2016-08-05 15:55:38 -07:00
Adam Ierymenko	e2f783ebbd	.	2016-08-05 15:02:01 -07:00
Adam Ierymenko	4d9b74b171	.	2016-08-04 15:27:20 -07:00
Adam Ierymenko	37d139177d	Integrate Filter into OutboundMulticast properly.	2016-08-04 13:01:14 -07:00
Adam Ierymenko	8a7753cfe3	Filter cleanup, prep for filter integration in a few places.	2016-08-04 12:35:25 -07:00
Adam Ierymenko	331382cf2f	More cleanup and a tiny federation prep item.	2016-08-04 12:14:13 -07:00
Adam Ierymenko	98152d974a	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	2016-08-04 11:40:38 -07:00
Adam Ierymenko	56febbf2ba	.	2016-08-04 10:39:28 -07:00
Adam Ierymenko	5cf410490e	.	2016-08-04 10:18:33 -07:00
Adam Ierymenko	404a0bbddd	...	2016-08-04 09:51:15 -07:00
Adam Ierymenko	f057bb63cd	More work on tags and capabilities.	2016-08-04 09:02:35 -07:00
Adam Ierymenko	7e6e56e2bc	Bunch of work on pushing and replication of tags and capabilities, and protocol cleanup.	2016-08-03 18:04:08 -07:00
Adam Ierymenko	67cb03742e	Add tag rules and split out rule serialize/deserialize so the code can be reused.	2016-08-03 14:12:38 -07:00
Adam Ierymenko	91940cbcf5	Kill network preferred relays -- this feature is gone (and was seldom used anyway) in favor of federation.	2016-08-02 14:40:26 -07:00
Adam Ierymenko	ecc1324bb0	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	2016-08-02 13:36:17 -07:00