10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
9 years ago
31db768e4d
A bit of code cleanup.
9 years ago
c9ee8612e4
Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.
10 years ago
68b4ca9b31
Cleanup.
10 years ago
9a3c652a51
Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
10 years ago
4d498b3765
Handling of multi-part chunked network configs on the inbound side.
10 years ago
2ba9343607
Encode and decode of tags and capabilities in NetworkConfig.
10 years ago
91940cbcf5
Kill network preferred relays -- this feature is gone (and was seldom used anyway) in favor of federation.
10 years ago
d3b0081447
Cleanup...
10 years ago
eaf6d6c938
Basic L2/L3 filter for rules engine (not integrated yet) and some cleanup.
10 years ago
38dfebad8c
IPv6 NDP emulation flag in NetworkConfig, and implement Docker-friendly
...
(and other host friendly) IPv6 /80 magic subnetting to allow massive
multicast-free NDP emulated IPv6 networks where each host can have a
/48 worth of IPv6 IPs for internal containers, VMs, etc.
Alan Kay, thou art avenged.
https://ivanovivan.wordpress.com/2010/09/13/alan-kay-quotes/
10 years ago
330c80f3f5
Add rule type to match a COM field of the peer by ID and value because this will be powerful.
10 years ago
b2d048aa0e
Make Dictionary templatable so it can be used where we want a higher capacity.
10 years ago
37afa876a7
Linux bug fixes, small controller fix.
10 years ago
901b75e756
New format now integrated, and it works.
10 years ago
e09c1a1c11
Big refactor mostly builds. We now have a uniform backward compatible netconf.
10 years ago
7ee3743c3d
Refactor controller to send both old and new format netconf.
10 years ago
8b9519f0af
Simplify a bunch of NetworkConfig stuff by eliminating accessors, also makes network controller easier to refactor.
10 years ago
0f17077b3d
Merge gateways and routes in netconf since they are the same thing.
10 years ago
b9dba97fdb
Bunch more refactoring for an even more compact NetworkConfig representation, especially rules.
10 years ago
e731fc1a3a
Replace two bools in NetworkConfig with a flags field.
10 years ago
90e1262a8b
More refactoring to remove old Dictionary dependencies.
10 years ago
d736074301
Refactor rules table in-memory structure in new NetworkConfig to permit far more rules with better space efficiency.
10 years ago
6f854c8391
NetworkConfig refactor part 1
10 years ago
4e4fd51117
boring doc stuff
10 years ago
0034efafe4
On semi-undocumented test net, assign a RFC4193 IPv6 address too. Will be useful for our at-scale tests.
11 years ago
5384f185ae
Simplify Dictionary and reduce memory usage, now no more std::maps in core.
11 years ago
f69454ec98
(1) Make ZT_ naming convention consistent (get rid of ZT1_), (2) Make local interface a full sockaddr_storage instead of an int identifier, which turns out to be better for multi-homing and other uses.
11 years ago
3ba54c7e35
Eliminate some poorly thought out optimizations from the netconf/controller interaction,
...
and go ahead and bump version to 1.0.4.
For a while in 1.0.3 -dev I was trying to optimize out repeated network controller
requests by using a ratcheting mechanism. If the client received a network config
that was indeed different from the one it had, it would respond by instantlly
requesting it again.
Not sure what I was thinking. It's fundamentally unsafe to respond to a message
with another message of the same type -- it risks a race condition. In this case
that's exactly what could happen.
It just isn't worth the added complexity to avoid a tiny, tiny amount of network
overhead, so I've taken this whole path out.
A few extra bytes every two minutes isn't worth fretting about, but as I recall
the reason for this optimization was to save CPU on the controller. This can be
achieved by just caching responses in memory *there* and serving those same
responses back out if they haven't changed.
I think I developed that 'ratcheting' stuff before I went full time on this. It's
hard to develop stuff like this without hours of sustained focus.
11 years ago
dbee1b38b3
Fix semantics of std::unique() to actually remove duplicates (hidden memory leak?)
11 years ago
57c7992c78
GitHub issue #191 - kill intra-network multicast rate limits (which were not well supported or easily configurable anyway) -- this is really left over from the old collaborative multicast propagation algorithm. New algorithm (in for a while) has been sender-side replication in which sender "pays" all bandwidth, which intrinsically limits multicast.
11 years ago
8aa68cd5f1
Add new fields in operator==
11 years ago
edbc5d3588
Gateways support in NetworkConfig object.
11 years ago
5341e32729
Fix to GitHub issue #140 -- network preferred relays. Also go ahead and allow RENDEZVOUS from regular peers.
11 years ago
da254d967f
Hack around GitHub issue #165 (?)
11 years ago
8a13cfdace
Add per-network relays to NetworkConfig.
11 years ago
6369c264e2
Rename netconf to controller and NetworkConfigMaster to NetworkController for consistency.
11 years ago
7529d050c7
All of node/ now compiles again!
11 years ago
bf2ff964e1
Utils::now() removal and a bunch of compile fixes.
11 years ago
8001b2c0cb
Network now calls port config function as per new API.
11 years ago
a8a92c5b89
A whole lot of Sqlite netconf master work, and some fixes elsewhere in the code.
11 years ago
93012b0ee5
Re-incorporation: ZeroTier Networks -> ZeroTier, Inc. [Delaware]
11 years ago
4e95384ad6
Cleanup, add tristate to config code in Network, and happy new year!
11 years ago
03dc823ad7
(1) Back off a little on default max multicast limit since 128 is pretty bandwidth heavy, (2) add a little to default multicast rate limit since new MC algo is fairerererer, (3) decided not to involve netconf masters in multicast so take that out of list of who gets LIKEs.
12 years ago
3f15752f73
Add IPv4 address assignment to ffffffffffffffff test network.
12 years ago
2c8321be1f
Pull logic to always send new multicasts to supernode since we need to do that differently, re-add support for active bridges, and remove some gratuitous use of std::set where not needed.
12 years ago
351db7f1a0
Plumb injectPacketFromHost through to API.
12 years ago
9e186bbd89
.
12 years ago
9180a30986
.
12 years ago
3afc629ac5
Bit of network config parser cleanup.
12 years ago
Adam Ierymenko