Monica Moniot
666fb7ea2d
eliminated duplicate paths ( #1870 )
3 years ago
Gleb Mazovetskiy
9c9d1650d1
Check for ARM Cryptography Extension support
...
ARM Cryptography Extension is optional and not all ARM CPUs support it.
For example, the CPU in Raspberry Pi 4 does not support it.
Check for `__ARM_FEATURE_CRYPTO` before attempting to use the optional
extension.
`__ARM_FEATURE_CRYPTO` is defined by both clang and gcc when the target
has the cryptography extension.
Fixes #1854 .
3 years ago
Grant Limberg
0ae09577f6
Client & Central Controller updates to support additonal OIDC features ( #1848 )
...
Client side:
* Fix compatibility with OneLogin
* Requested scopes vary by OIDC provider. Different providers have different
Controller side:
*Update Postgres queries to latest Central schema
* Added Central Controller support for the different providers
* Base OIDC provider details are still attached to an org. Client ID & group/email lists are now associated with individual networks.
3 years ago
Brenton Bostick
a59f82093a
Fix Possible misuse of comma operator here ( #1851 )
...
Xcode warns about "Possible misuse of comma operator here".
Comma is a sequencing operator in C++ and original code does work, but
is highly non-idiomatic.
3 years ago
Joseph Henry
39f3f5b2d9
User-configurable physical MTU for individual links
...
This patch allows users to specify the physical layer MTU for individual links
when in multipath mode. For example:
{
"settings":
{
"defaultBondingPolicy": "custom-balance-xor",
"policies":
{
"custom-balance-xor":
{
"basePolicy": "balance-xor",
"failoverInterval": 5000,
"links": {
"weird_5g_link": { "mtu": 1300 },
"enp5s0": { "mtu": 1400 }
}
}
}
}
}
3 years ago
Brenton Bostick
d31f238be0
fix typos ( #1843 )
3 years ago
Joseph Henry
91bae4b1a8
Add missing default initialization of _lowBandwidthMode
3 years ago
Joseph Henry
3c9ea2b667
Add low-bandwidth mode
3 years ago
Brenton Bostick
5b5f9a069a
fix typos
3 years ago
Brenton Bostick
4d50ed0b9d
Fix several warning: format specifies type 'XXX' but the argument has type 'YYY'
...
Use %z for printing size_t and PRId64 etc. macros for printing
platform-specific widths, and remove now-redundant casts
3 years ago
Brenton Bostick
3b8c33d49a
fix typos in code
3 years ago
Brenton Bostick
f74a594e98
fix typos in comments and strings
3 years ago
Joseph Henry
b02a41751c
Fix unresponsiveness when moving flows in balance-aware (See #1764 )
3 years ago
travis laduke
82c799b9d1
Expose surface addresses in info json
...
Surface Addresses are the addresses that
the roots report back to you.
This is helpful for trouble shooting.
If you're behind NAT, the source port is different
than what zerotier is bound to.
If the list of surface address ports is larger than the list of
bound addresses, you are probably behind symmetric NAT.
Anways this can be added to later with a more simple
"easy" or "hard" nat computed message somewhere.
3 years ago
Joseph Henry
e1f60e3f83
Behavioral changes to multipath balance modes (See: #1745 and #1753 )
3 years ago
Adam Ierymenko
86a436e9bf
Small string fix.
4 years ago
Joseph Henry
bc521504ca
Improved multipath link monitoring
4 years ago
Joseph Henry
0797adf223
Improve output of bond list command
4 years ago
Joseph Henry
50e131a4ff
Partial fix for discrepancy between docs and implementation
4 years ago
grapexy
b733bb8ead
Fix sanity checks overwriting custom policy parameters
4 years ago
Joseph Henry
e18d206248
Add warm spare feature for balance modes
4 years ago
Joseph Henry
66b70a8043
Prevent re-armoring of packets when in multipath broadcast mode
4 years ago
Joseph Henry
1d1843bf3b
Forget links if QoS verbs fail to arrive
4 years ago
Joseph Henry
0e23ba8f1a
Add logic short-circuit to avoid unnecessary bond rebuild logic when appropriate
4 years ago
Joseph Henry
b6074da498
Fix nonsensical equality comparison which may prevent certain links from being regarded as preferred in multipath scenarios
4 years ago
Anders Jenbo
7e92d478a1
Add missing <algorithm> include ( #1709 )
...
This is required for building under VS2017
4 years ago
Joseph Henry
ff670d044a
Fix integer format specifier compiler warnings
4 years ago
Joseph Henry
7ed5bde426
Fix for ab-mode link failure, QoS metrics (WIP)
4 years ago
Adam Ierymenko
e672dc8094
Set version to correct 1.10.0.
4 years ago
Joseph Henry
1a400d33fd
Fix link creation bug in active-backup mode
4 years ago
Joseph Henry
c34325fee7
Fix attribute placement for debugging functions ( #1587 )
4 years ago
Joseph Henry
db8443ef7d
Remove attributes causing build failures on various platforms ( #1587 )
4 years ago
Joseph Henry
6c85f8c7a7
Safely handle disappearing bonded interfaces (See issue #1587 )
4 years ago
David Baird
eea93d2607
Fix SEGV caused by format string on 32-bit platforms / armv7l, reported in #1587 ( #1658 )
...
Looks great. Thanks for this!
4 years ago
Joseph Henry
e9f8ecbf7e
Properly initialize active-backup path index as partial fix for #1587
4 years ago
Adam Ierymenko
166c7978ee
ALMOST compiles for ARM64 Windows, only remaining barrier is ring in zeroidc.
4 years ago
Joseph Henry
66236e91a2
Style fix
4 years ago
Adam Ierymenko
76bce44280
Build fix.
4 years ago
Adam Ierymenko
ee0a194b25
Several more SSO/OIDC related fixes, and bump version to 1.8.9.
4 years ago
Adam Ierymenko
ef08346a74
Fix a possible excessive memory use issue in controller and clean up a bunch of COM handling and other code in the normal node.
4 years ago
Adam Ierymenko
fe0068da52
A bit more auth cleanup in the local node.
4 years ago
Adam Ierymenko
cd70fefc5e
Clean up some credential push stuff.
4 years ago
Adam Ierymenko
877f86a896
build fix
4 years ago
Adam Ierymenko
912036b260
Push credentials always if updated (client-side) and some controller-side cleanup that should be logically irrelevant but will prevent unnecessary DB lookups.
4 years ago
Adam Ierymenko
a4e8847664
Restore sending of rejections but move it exclusively to a thread, widen netconf window to 30 minutes.
4 years ago
Joseph Henry
7e4da53c0b
Check reference to failover path before use in active-backup scenario
4 years ago
Adam Ierymenko
55a99f34d0
Tighten certificate window and deprecate sending of revocations for ordinary SSO timeouts. Revocations should only be for deliberate deauth to kick people off networks. Cert window should now stay within refresh window for SSO so normal cert expiration should handle it just fine.
4 years ago
Joseph Henry
99df637aae
Improve relationship between QOS timers and bucket sizes
4 years ago
Adam Ierymenko
a7dcfa18a2
Oops forgot last part of that fix for MAC errors.
4 years ago
Adam Ierymenko
4389b9feff
Likely fix for invalid MAC problem.
4 years ago