Adam Ierymenko
|
d5e6f59004
|
.
|
10 years ago |
|
Adam Ierymenko
|
22271f2a49
|
Cleanup.
|
10 years ago |
|
Adam Ierymenko
|
8b6d23b9f6
|
Optimize filter code a bit, and add a network-level setting for what should happen if an unsupported or unknown MATCH is encountered in a rules table.
|
10 years ago |
|
Adam Ierymenko
|
25056de5d3
|
Also need to send credentials when TEEing and REDIRECTing.
|
10 years ago |
|
Adam Ierymenko
|
994b25af4e
|
Simplify some logic.
|
10 years ago |
|
Adam Ierymenko
|
74afef8eb1
|
Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.
|
10 years ago |
|
Adam Ierymenko
|
54489a7f61
|
rename SAMENESS to DIFFERENCE which is less confusing
|
10 years ago |
|
Adam Ierymenko
|
8e3004591b
|
Add overlooked MATCH_ICMP to rule set.
|
10 years ago |
|
Adam Ierymenko
|
2ff2a8fd9a
|
Cluster build fixes and warning elimination.
|
10 years ago |
|
Adam Ierymenko
|
7a00036954
|
Tweak log length to fit JSON for members within two 4096-kb blocks.
|
10 years ago |
|
Adam Ierymenko
|
914c42537c
|
Type fixes.
|
10 years ago |
|
Adam Ierymenko
|
cb63babac4
|
Debug output fixes.
|
10 years ago |
|
Adam Ierymenko
|
ac1c127b68
|
Debug output fixes.
|
10 years ago |
|
Adam Ierymenko
|
cb82193333
|
Debug output fixes.
|
10 years ago |
|
Adam Ierymenko
|
f0636ffd4a
|
EXT_FRAME messages should always be accepted if we are the destination for a matching TEE or REDIRECT rule.
|
10 years ago |
|
Adam Ierymenko
|
51a420671f
|
Make rules engine debug a bit more verbose.
|
10 years ago |
|
Adam Ierymenko
|
77c2bf3ad9
|
Kill dead field from network JSON.
|
10 years ago |
|
Adam Ierymenko
|
7223685b96
|
.
|
10 years ago |
|
Adam Ierymenko
|
e7dff1c785
|
Change logic a little for self-as-destination in TEE and REDIRECT.
|
10 years ago |
|
Adam Ierymenko
|
a5383d83d8
|
Do not TEE or REDIRECT to self.
|
10 years ago |
|
Adam Ierymenko
|
a3c7627acf
|
Push more than one packet for credentials if we happen to have a whole lot. Should not happen often but might if a member has tons of tags.
|
10 years ago |
|
Adam Ierymenko
|
297b1b4258
|
Another tiny API bug fix.
|
10 years ago |
|
Adam Ierymenko
|
35ac995d05
|
Fix setting of v6AssignMode in controller.
|
10 years ago |
|
Adam Ierymenko
|
6bd5aba4fa
|
fix frame size range bug
|
10 years ago |
|
Adam Ierymenko
|
fb5217761b
|
Add missing names in filter debug code.
|
10 years ago |
|
Adam Ierymenko
|
90f3e94565
|
Always output trace info when debugging rules.
|
10 years ago |
|
Adam Ierymenko
|
ded5a53a6c
|
Documentation updates, add rules engine revision to network config request meta-data.
|
10 years ago |
|
Adam Ierymenko
|
d637988ccf
|
Fix chicken or egg problem in tags, and better filter debug instrumentation.
|
10 years ago |
|
Adam Ierymenko
|
858e8c5217
|
one more...
|
10 years ago |
|
Adam Ierymenko
|
df1ce856c9
|
A little bit more controller code cleanup.
|
10 years ago |
|
Adam Ierymenko
|
b5e0d014ab
|
Controller bug fixes
|
10 years ago |
|
Adam Ierymenko
|
5eaf397a94
|
Add a debug log feature in the filter, which only works if enabled in Network.cpp.
|
10 years ago |
|
Adam Ierymenko
|
1814016eb7
|
Add daemon thread to controller and move network member cache refreshes there.
|
10 years ago |
|
Adam Ierymenko
|
6ecb42b031
|
docs and null check in controller code
|
10 years ago |
|
Adam Ierymenko
|
584228b2b5
|
Dead code removal, and get rid of reliable() because we will no longer make that distinction.
|
10 years ago |
|
Adam Ierymenko
|
cd3683f2ba
|
Fix a missing receive().
|
10 years ago |
|
Adam Ierymenko
|
347ebcd899
|
Set trust flag in network controllers if remote query is accepted to allow NATed network controllers to better traverse.
|
10 years ago |
|
Adam Ierymenko
|
e52c2c41ec
|
Add a circuit breaker to prevent too many credentials from being stored per member.
|
10 years ago |
|
Adam Ierymenko
|
95ff057e04
|
Increase rule limits a little since chunking in netconf can accomodate this.
|
10 years ago |
|
Adam Ierymenko
|
60bc291414
|
Add noAutoAssignIps for member of networks.
|
10 years ago |
|
Adam Ierymenko
|
c476285bd6
|
Harden PUSH_DIRECT_PATHS and simplify things by only doing it on receive when hops>0 and trust has been established.
|
10 years ago |
|
Adam Ierymenko
|
63e8ad4cc3
|
TRACE stuff.
|
10 years ago |
|
Adam Ierymenko
|
2cdda38dc4
|
It basically works... at least on current controllers.
|
10 years ago |
|
Adam Ierymenko
|
ccea3d04d6
|
Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.
|
10 years ago |
|
Adam Ierymenko
|
90bd3e07a0
|
Remove http-parser from RPM spec.
|
10 years ago |
|
Adam Ierymenko
|
8e3463d47a
|
Add length limit to TEE and REDIRECT, and completely factor out old C json-parser to eliminate a dependency.
|
10 years ago |
|
Adam Ierymenko
|
8d594f8b53
|
cleanup
|
10 years ago |
|
Adam Ierymenko
|
5f4df0c6a9
|
Controller cleanup and perf improvements.
|
10 years ago |
|
Adam Ierymenko
|
0ee4d3554a
|
Stub out USER_MESSAGE.
|
10 years ago |
|
Adam Ierymenko
|
0a7a33ef8f
|
Instantaneous blacklisting and credential revocation.
|
10 years ago |
