1889 Commits (bc2c4cf80aceeb4bc86d570de1fe17f93f678ca4)

Author SHA1 Message Date
Joseph Henry 1918c29fd7
Change ECHO divisor from 20 to 6 4 years ago
Joseph Henry 618202d426
Increase min failover to 500 ms and probe period to 1/3rd of failover 4 years ago
Joseph Henry d1335dca11
Change ECHO rate-limit divsor from 16 to 20 4 years ago
Joseph Henry 5e13b42abc
Rate gate ECHO per Path instead of per Peer 4 years ago
Joseph Henry 96aa1c30a6
Proactively seek, enumerate, and distribute external surface addresses 4 years ago
Joseph Henry 1b0c183913
Force non-leaf peers into local active-backup bond when multipath is enabled 4 years ago
Joseph Henry 40269c2a97
Comment out debug traces 4 years ago
Adam Ierymenko 3c85a7f074
Rev roots. 4 years ago
Joseph Henry f9c84c8c52
Remove stray debug trace 4 years ago
Grant Limberg aa97aabb4e
for now, only enable sso on certain platforms 4 years ago
Joseph Henry 4190318c85
Fix typo in constant name 4 years ago
Shawn ae93cccde6 FIX: fix wrong flag usage of rateGateCredentialsReceived 4 years ago
Joseph Henry 46e955e3a1
Split bond logs into two categories to reduce logging size 4 years ago
Joseph Henry 2850f131e2
Fix code style 4 years ago
Grant Limberg d719137565
temp workaround for oidc auth dropping issue 4 years ago
staphen 87d17088cc
Disable Salsa20 SSE on MinGW 32-bit compiler 4 years ago
staphen 1c956494a4
Use lowercase when including Windows headers 4 years ago
Andrej Binder aeec7dae36 Prevent arithmetic error on interface change. 4 years ago
Adam Ierymenko 06ed114fb6
Release notes and GitHub issue #1512 4 years ago
Joseph Henry bdef9d3bd7
Fix situation where too many ECHOs are sent to multipath peer 4 years ago
Joseph Henry b154b7296c
Improve multipath logging output 4 years ago
Joseph Henry 1c6fd4125d
Fix custom policy parsing bug mentioned in issue #1507 4 years ago
Joseph Henry e9375b50b0
Prevent path-amnesia 4 years ago
Joseph Henry 1f43a736b2
Fix active-backup path selection bug 4 years ago
Joseph Henry 05a0a20197
Fix multipath flow reallocation. Prevent allocation to dead paths 4 years ago
Grant Limberg 48b39ab005
removing comments 4 years ago
Grant Limberg 1192b1b422
refresh token run loop 4 years ago
Grant Limberg 663a09b38d
oidc stuff coming across the wire properly and generating a working login URL 4 years ago
Grant Limberg eaccce743f
moar plumbing progress 4 years ago
Grant Limberg 7cce23ae79
wip 4 years ago
Grant Limberg 91e9b736dd
make service objs dependent on zeroidc 4 years ago
Adam Ierymenko 1ef385b685
Spinlock removed, causes long standing issues on single core machines. 4 years ago
Grant Limberg fa21fdc1cc
rename stuff for clarity 4 years ago
Grant Limberg 4d021e16a5
update field lengths 4 years ago
Grant Limberg 8d39c9a861
plumbing full flow from controller -> client network 4 years ago
Joseph Henry cc6de583be
Prevent balance-xor from de-allocating from bad paths 4 years ago
Grant Limberg 95032cc74d
add sso version to network config object 4 years ago
Joseph Henry 9e8de2a702
Compilation fix 5 years ago
Joseph Henry 165757176a
Potential fix fro deadlock bug 5 years ago
Adam Ierymenko eabe091038
Backport only the COM mitigation instead of everything from 1.8 5 years ago
Adam Ierymenko b403f106fb
Revert "Use a faster method of fingerprinting identities." 5 years ago
Adam Ierymenko 75a45eeb27
Revert "Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed." 5 years ago
Adam Ierymenko 48ce7632fa
Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed. 5 years ago
Adam Ierymenko 30d5d5a892
Revert "Don't assume roots validated the identity, just in case they did not." 5 years ago
Adam Ierymenko 9bc79f94df
Revert "Don't assume roots validated the identity, just in case they did not." 5 years ago
Adam Ierymenko a0239e17e9
Revert "Use a faster method of fingerprinting identities." 5 years ago
Adam Ierymenko c8a58b4b04
Use a faster method of fingerprinting identities. 5 years ago
Adam Ierymenko b72e5e8386
Use a faster method of fingerprinting identities. 5 years ago
Adam Ierymenko 565885a4c0
Remove ancient controller support. 5 years ago
Adam Ierymenko 134d33c218
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring. 5 years ago