Joseph Henry
1918c29fd7
Change ECHO divisor from 20 to 6
4 years ago
Joseph Henry
618202d426
Increase min failover to 500 ms and probe period to 1/3rd of failover
4 years ago
Joseph Henry
d1335dca11
Change ECHO rate-limit divsor from 16 to 20
4 years ago
Joseph Henry
5e13b42abc
Rate gate ECHO per Path instead of per Peer
4 years ago
Joseph Henry
96aa1c30a6
Proactively seek, enumerate, and distribute external surface addresses
4 years ago
Joseph Henry
1b0c183913
Force non-leaf peers into local active-backup bond when multipath is enabled
4 years ago
Joseph Henry
40269c2a97
Comment out debug traces
4 years ago
Adam Ierymenko
3c85a7f074
Rev roots.
4 years ago
Joseph Henry
f9c84c8c52
Remove stray debug trace
4 years ago
Grant Limberg
aa97aabb4e
for now, only enable sso on certain platforms
...
mac, windows, linux x86/x86_64/aarch64
4 years ago
Joseph Henry
4190318c85
Fix typo in constant name
4 years ago
Shawn
ae93cccde6
FIX: fix wrong flag usage of rateGateCredentialsReceived
4 years ago
Joseph Henry
46e955e3a1
Split bond logs into two categories to reduce logging size
4 years ago
Joseph Henry
2850f131e2
Fix code style
4 years ago
Grant Limberg
d719137565
temp workaround for oidc auth dropping issue
...
Add a method to "kick" the refresh thread and re-post the tokens in the case where the thread is somehow still running & controller pushes out an AUTH_REQUIRED. This situation happens in a corner case still under investigation where the controller pushes out many copies of the network config repeatedly
4 years ago
staphen
87d17088cc
Disable Salsa20 SSE on MinGW 32-bit compiler
4 years ago
staphen
1c956494a4
Use lowercase when including Windows headers
4 years ago
Andrej Binder
aeec7dae36
Prevent arithmetic error on interface change.
4 years ago
Adam Ierymenko
06ed114fb6
Release notes and GitHub issue #1512
4 years ago
Joseph Henry
bdef9d3bd7
Fix situation where too many ECHOs are sent to multipath peer
4 years ago
Joseph Henry
b154b7296c
Improve multipath logging output
4 years ago
Joseph Henry
1c6fd4125d
Fix custom policy parsing bug mentioned in issue #1507
4 years ago
Joseph Henry
e9375b50b0
Prevent path-amnesia
4 years ago
Joseph Henry
1f43a736b2
Fix active-backup path selection bug
4 years ago
Joseph Henry
05a0a20197
Fix multipath flow reallocation. Prevent allocation to dead paths
4 years ago
Grant Limberg
48b39ab005
removing comments
4 years ago
Grant Limberg
1192b1b422
refresh token run loop
...
Need central-side work to complete
4 years ago
Grant Limberg
663a09b38d
oidc stuff coming across the wire properly and generating a working login URL
4 years ago
Grant Limberg
eaccce743f
moar plumbing progress
4 years ago
Grant Limberg
7cce23ae79
wip
4 years ago
Grant Limberg
91e9b736dd
make service objs dependent on zeroidc
4 years ago
Adam Ierymenko
1ef385b685
Spinlock removed, causes long standing issues on single core machines.
4 years ago
Grant Limberg
fa21fdc1cc
rename stuff for clarity
...
authenticationURL will still be used by the client for v1 and v2 of sso
4 years ago
Grant Limberg
4d021e16a5
update field lengths
4 years ago
Grant Limberg
8d39c9a861
plumbing full flow from controller -> client network
4 years ago
Joseph Henry
cc6de583be
Prevent balance-xor from de-allocating from bad paths
4 years ago
Grant Limberg
95032cc74d
add sso version to network config object
4 years ago
Joseph Henry
9e8de2a702
Compilation fix
5 years ago
Joseph Henry
165757176a
Potential fix fro deadlock bug
5 years ago
Adam Ierymenko
eabe091038
Backport only the COM mitigation instead of everything from 1.8
5 years ago
Adam Ierymenko
b403f106fb
Revert "Use a faster method of fingerprinting identities."
...
This reverts commit b72e5e8386 .
5 years ago
Adam Ierymenko
75a45eeb27
Revert "Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed."
...
This reverts commit 48ce7632fa .
5 years ago
Adam Ierymenko
48ce7632fa
Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed.
5 years ago
Adam Ierymenko
30d5d5a892
Revert "Don't assume roots validated the identity, just in case they did not."
...
This reverts commit 39b97f9163 .
5 years ago
Adam Ierymenko
9bc79f94df
Revert "Don't assume roots validated the identity, just in case they did not."
...
This reverts commit 39b97f9163 .
5 years ago
Adam Ierymenko
a0239e17e9
Revert "Use a faster method of fingerprinting identities."
...
This reverts commit b72e5e8386 .
5 years ago
Adam Ierymenko
c8a58b4b04
Use a faster method of fingerprinting identities.
5 years ago
Adam Ierymenko
b72e5e8386
Use a faster method of fingerprinting identities.
5 years ago
Adam Ierymenko
565885a4c0
Remove ancient controller support.
...
# Conflicts:
# RELEASE-NOTES.md
5 years ago
Adam Ierymenko
134d33c218
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
5 years ago