summaryrefslogtreecommitdiff
path: root/node/Network.hpp
AgeCommit message (Collapse)Author
2023-05-04Metrics consolidation (#1997)Grant Limberg
* Rename zt_packet_incoming -> zt_packet Also consolidate zt_peer_packets into a single metric with tx and rx labels. Same for ztc_tcp_data and ztc_udp_data * Further collapse tcp & udp into metric labels for zt_data * Fix zt_data metric description * zt_peer_packets description fix * Consolidate incoming/outgoing network packets to a single metric * zt_incoming_packet_error -> zt_packet_error * Disable peer metrics for central controllers Can change in the future if needed, but given the traffic our controllers serve, that's going to be a *lot* of data * Disable peer metrics for controllers pt 2
2023-05-03Network-metrics (#1994)Grant Limberg
* Add a couple quick functions for converting a uint64_t network ID/node ID into std::string * Network metrics
2023-05-01Brenton/curly braces (#1971)Brenton Bostick
* fix formatting * properly adjust various lines breakup multiple statements onto multiple lines * insert {} around if, for, etc.
2023-01-19Client & Central Controller updates to support additonal OIDC features (#1848)Grant Limberg
Client side: * Fix compatibility with OneLogin * Requested scopes vary by OIDC provider. Different providers have different Controller side: *Update Postgres queries to latest Central schema * Added Central Controller support for the different providers * Base OIDC provider details are still attached to an org. Client ID & group/email lists are now associated with individual networks.
2022-04-19Fix a possible excessive memory use issue in controller and clean up a bunch ↵Adam Ierymenko
of COM handling and other code in the normal node.
2022-04-19Clean up some credential push stuff.Adam Ierymenko
2022-04-19Push credentials always if updated (client-side) and some controller-side ↵Adam Ierymenko
cleanup that should be logically irrelevant but will prevent unnecessary DB lookups.
2021-12-01moar plumbing progressGrant Limberg
2021-11-18make service objs dependent on zeroidcGrant Limberg
2021-11-11rename stuff for clarityGrant Limberg
authenticationURL will still be used by the client for v1 and v2 of sso
2021-11-04plumbing full flow from controller -> client networkGrant Limberg
2021-06-05set ssoEnabled = true on network config if we get ↵Grant Limberg
ERROR_NETWORK_AUTHENTICATION_REQUIRED
2021-05-25Fix authentication URL...Adam Ierymenko
2021-05-24Basic plumbing for authentication requirement and piping through of URL ↵Adam Ierymenko
information.
2020-08-20BSL date bumpAdam Ierymenko
2019-08-23Relicense: GPLv3 -> ZeroTier BSL 1.1Adam Ierymenko
2019-08-02Fix for sharing of capabilities in 1.4 (problem introduced when push ↵Adam Ierymenko
frequency was reduced)
2019-06-25Tighten up credential push just a bit for faster up-time with older nodes, ↵Adam Ierymenko
should not have significant impact on bandwidth. Also some cleanup and push direct path timing fixes.
2019-03-19.Adam Ierymenko
2019-03-14Clean out some unnecessarily pedantic auth stuff in favor of a simpler way ↵Adam Ierymenko
of gating multicast gathers.
2019-01-14Updated licenses for 2019Joseph Henry
2018-07-10Rough draft of fq-codel implementationJoseph Henry
2018-06-07Spellcheck sweep across codebaseJoseph Henry
2018-01-26More cleanup of old stuff.Adam Ierymenko
2018-01-08Copyright updates for 2018.Adam Ierymenko
2017-10-02timestamps changed from uint64_t to int64_tGrant Limberg
There were cases in the code where time calculations and comparisons were overflowing and causing connection instability. This will keep time calculations within expected ranges.
2017-07-17Minor cleanup.Adam Ierymenko
2017-07-13Bunch of remote tracing work.Adam Ierymenko
2017-06-01More clustering work.Adam Ierymenko
2017-04-27License header update.Adam Ierymenko
2017-04-11Pass tptr on leave.Adam Ierymenko
2017-03-27Add thread PTR that gets passed through the entire ZT core call stack and ↵Adam Ierymenko
then passed to handler functions resulting from a call.
2017-03-17GitHub issue #461 -- plus a bit of cleanup and optimizationAdam Ierymenko
2017-02-23Certificate of ownership -- used to secure against IP address spoofing, ↵Adam Ierymenko
especially for IPv4 and regular IPv6.
2017-01-30Fix to cluster network configs.Adam Ierymenko
2016-11-10Refactor controller to permit sending of pushes as well as just replies to ↵Adam Ierymenko
config requests.
2016-09-27Simply network auth logic and always sent error on auth failure even for ↵Adam Ierymenko
unknown networks to prevent forensics.
2016-09-27Refactored network config chunking to sign every chunk to prevent stupid DOS ↵Adam Ierymenko
attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
2016-09-26Bunch more refactoring and work on revocations, etc.Adam Ierymenko
2016-09-23Revocation work in progress, add WATCH which is TEE with implicit rate sync ↵Adam Ierymenko
(thanks JG@DCVC!), and clean up some cruft in Network.
2016-09-20Refactor COM stuff a bit, and respond to COM requests a bit more readily for ↵Adam Ierymenko
rapid setup. Will need to revisit later.
2016-09-09(1) Public networks now get COMs even though they do not gate with them ↵Adam Ierymenko
since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
2016-09-09Fix gating of multicast GATHER replies since these can come from upstream, ↵Adam Ierymenko
etc., and fix an issue with sending ECHO to recheck marginal paths.
2016-09-09More refactoring to clean up code, and add a gate function to make sure we ↵Adam Ierymenko
do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
2016-09-08Clean up handling of COMs, network access control, and fix a backward ↵Adam Ierymenko
compatiblity issue.
2016-09-07More correct and efficient to initialize member relationship push stuff ↵Adam Ierymenko
lazily when member is learned.
2016-09-07Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary ↵Adam Ierymenko
pushes and simplify code.
2016-08-31Think through and refine a few things in rules, especially edge case TEE and ↵Adam Ierymenko
REDIRECT behavior and semantics.
2016-08-29EXT_FRAME messages should always be accepted if we are the destination for a ↵Adam Ierymenko
matching TEE or REDIRECT rule.
2016-08-24It basically works... at least on current controllers.Adam Ierymenko
generated by cgit v1.2.3 (git 2.39.1) at 2025-12-31 05:23:27 +0000