17 Commits (29711e123febee2696e0f2cada72e7e533d21a8c)

Author SHA1 Message Date
Adam Ierymenko 74afef8eb1 Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics. 10 years ago
Adam Ierymenko 54489a7f61 rename SAMENESS to DIFFERENCE which is less confusing 10 years ago
Adam Ierymenko 8e3004591b Add overlooked MATCH_ICMP to rule set. 10 years ago
Adam Ierymenko 6bd5aba4fa fix frame size range bug 10 years ago
Adam Ierymenko 5eaf397a94 Add a debug log feature in the filter, which only works if enabled in Network.cpp. 10 years ago
Adam Ierymenko 8e3463d47a Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency. 10 years ago
Adam Ierymenko 9a3c652a51 Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity. 10 years ago
Adam Ierymenko b0d888d235 Signing of Capability and Tag objects. 10 years ago
Adam Ierymenko d166b494ee Rule parse fix. 10 years ago
Adam Ierymenko 2ba9343607 Encode and decode of tags and capabilities in NetworkConfig. 10 years ago
Adam Ierymenko 00fd9c3a15 It builds... almost ready to test some rules engine stuff. 10 years ago
Adam Ierymenko e2f783ebbd . 10 years ago
Adam Ierymenko 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 10 years ago
Adam Ierymenko f057bb63cd More work on tags and capabilities. 10 years ago
Adam Ierymenko 7e6e56e2bc Bunch of work on pushing and replication of tags and capabilities, and protocol cleanup. 10 years ago
Adam Ierymenko 67cb03742e Add tag rules and split out rule serialize/deserialize so the code can be reused. 10 years ago
Adam Ierymenko ecc1324bb0 Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places. 10 years ago