299 Commits

Author	SHA1	Message	Date
Adam Ierymenko	139c4b5633	Significant simplification to path logic.	2017-04-14 17:53:32 -07:00
Adam Ierymenko	91c9f4cb20	Fix TRACE and CLUSTER builds.	2017-03-27 17:33:25 -07:00
Adam Ierymenko	e4896b257f	Add thread PTR that gets passed through the entire ZT core call stack and then passed to handler functions resulting from a call.	2017-03-27 17:03:17 -07:00
Adam Ierymenko	a577b8d381	Update how controller handles circuit tests -- save results to filesystem.	2017-03-01 16:33:34 -08:00
Adam Ierymenko	1d39be61b2	ZeroTier now has link quality measurement. We are not using this yet but decided to put it in to prep for future QoS support and SD-WAN stuff.	2017-03-01 14:36:52 -08:00
Adam Ierymenko	2bf9145ae6	Outgoing side of packet counter for link quality reporting. Also some cleanup and a cluster mode build fix.	2017-03-01 10:22:57 -08:00
Adam Ierymenko	afba19e01c	When deciding whether to send PUSH_DIRECT_PATHS we should check global trust flag, not the one passed into receive().	2017-02-16 09:44:04 -08:00
Adam Ierymenko	e4b6611201	Only accept world updates from upstreams.	2017-02-13 09:46:34 -08:00
Adam Ierymenko	43182f8f57	Docs, code cleanup, and protect the extra new fields of HELLO with encryption as a precaution.	2017-02-05 16:19:03 -08:00
Adam Ierymenko	3587aa1ea7	Add and send certificates of representation to tell people what our valid upstreams are. These are not used yet but will be needed for future privacy modes, etc. Also some cleanup.	2017-02-04 13:17:00 -08:00
Adam Ierymenko	dcb1233b0d	Slight refactor to RENEDEZVOUS sending code for federation.	2017-02-03 23:54:02 -08:00
Adam Ierymenko	9f7919f71f	Add comments to join ("orbit") moons.	2017-01-27 15:27:26 -08:00
Adam Ierymenko	f102fd7f92	Extend in-band world updates to handle moons too.	2017-01-27 13:50:56 -08:00
Adam Ierymenko	64774d0d4f	Replace piecemeal designation of upstreams with the concept of moons, which is simpler and easier to use and inherits all the cool live update stuff of worlds (now called planets) and global roots.	2017-01-27 13:27:52 -08:00
Adam Ierymenko	84732fcb12	Wire through external path lookup. Static paths should now work.	2016-11-22 14:23:13 -08:00
Adam Ierymenko	42ba70e79e	Replace long callback arg list with struct, and implement path whitelisting, path blacklisting, and local.conf support for roles.	2016-11-22 10:54:58 -08:00
Adam Ierymenko	c61ca1dea2	Keep connections up for netconf stuff as well as frames.	2016-11-09 16:04:08 -08:00
Adam Ierymenko	9f550292fe	Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.	2016-09-27 13:49:43 -07:00
Adam Ierymenko	d3524f3609	Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.	2016-09-20 21:21:34 -07:00
Adam Ierymenko	5b6d27e659	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	2016-09-13 14:27:18 -07:00
Adam Ierymenko	cba37c6107	Add a few more rate limit gates for anti-DOS hardening.	2016-09-13 10:13:23 -07:00
Adam Ierymenko	ea1da3321a	Rate gate requests for COM.	2016-09-12 15:19:21 -07:00
Adam Ierymenko	ab9afbc749	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	2016-09-09 11:36:10 -07:00
Adam Ierymenko	0d4109a9f1	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Adam Ierymenko	c7a4da3dd3	Turns out we do not need to pass network to receive().	2016-09-07 15:24:53 -07:00