Adam Ierymenko 5b6d27e659 Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.		10 years ago
..
Address.hpp	Bunch more refactoring for an even more compact NetworkConfig representation, especially rules.	10 years ago
Array.hpp	boring doc stuff	10 years ago
AtomicCounter.hpp	Implement "weak pointer" behavior on Topology Path canonicalization hash table.	10 years ago
Buffer.hpp	Changes to how new-style binary network configs are detected, and a new-style binary serialized meta-data representation.	10 years ago
C25519.cpp	More little stuff in crypto code.	12 years ago
C25519.hpp	boring doc stuff	10 years ago
Capability.cpp	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	10 years ago
Capability.hpp	Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.	10 years ago
CertificateOfMembership.cpp	.	10 years ago
CertificateOfMembership.hpp	Compute credential TTL et al.	10 years ago
Cluster.cpp	Cluster build fix.	10 years ago
Cluster.hpp	Tweak a few cluster params for higher perf / lower initial setup latency.	10 years ago
Constants.hpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Dictionary.hpp	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	10 years ago
Hashtable.hpp	Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be.	10 years ago
Identity.cpp	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	10 years ago
Identity.hpp	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	10 years ago
IncomingPacket.cpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
IncomingPacket.hpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
InetAddress.cpp	More controller work -- it builds!	10 years ago
InetAddress.hpp	Bunch of rule JSON stuff.	10 years ago
MAC.hpp	boring doc stuff	10 years ago
Membership.cpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
Membership.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	10 years ago
MulticastGroup.hpp	Dead code removal.	10 years ago
Multicaster.cpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
Multicaster.hpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
Mutex.hpp	boring doc stuff	10 years ago
Network.cpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
Network.hpp	(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.	10 years ago
NetworkConfig.cpp	Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.	10 years ago
NetworkConfig.hpp	Fix gating of multicast GATHER replies since these can come from upstream, etc., and fix an issue with sending ECHO to recheck marginal paths.	10 years ago
NetworkController.hpp	Encode and decode of tags and capabilities in NetworkConfig.	10 years ago
Node.cpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Node.hpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
NonCopyable.hpp	boring doc stuff	10 years ago
OutboundMulticast.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	10 years ago
OutboundMulticast.hpp	Integrate Filter into OutboundMulticast properly.	10 years ago
Packet.cpp	Clean up handling of COMs, network access control, and fix a backward compatiblity issue.	10 years ago
Packet.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	10 years ago
Path.cpp	Work in progress: Path canonicalization refactor.	10 years ago
Path.hpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Peer.cpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Peer.hpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Poly1305.cpp	Only enable 128-bit Poly1305 on X86_64 right now. Has compilation issues on ARM, but the 64-bit version should be fine.	11 years ago
Poly1305.hpp	boring doc stuff	10 years ago
README.md	Docs and controller API version	10 years ago
RuntimeEnvironment.hpp	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	10 years ago
SHA512.cpp	boring doc stuff	10 years ago
SHA512.hpp	boring doc stuff	10 years ago
Salsa20.cpp	Unroll Salsa20 fully for a little more speed (non-SSE now almost as fast as SSE)	11 years ago
Salsa20.hpp	Add uint16_t key to Hashtable, and make Salsa20 zero its keyspace on destruction.	11 years ago
SelfAwareness.cpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	10 years ago
SelfAwareness.hpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	10 years ago
SharedPtr.hpp	Implement "weak pointer" behavior on Topology Path canonicalization hash table.	10 years ago
Switch.cpp	Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.	10 years ago
Switch.hpp	More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff).	10 years ago
Tag.cpp	.	10 years ago
Tag.hpp	Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.	10 years ago
Topology.cpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	10 years ago
Topology.hpp	Work in progress: Path canonicalization refactor.	10 years ago
Utils.cpp	More tweaks to path behavior.	10 years ago
Utils.hpp	Big refactor mostly builds. We now have a uniform backward compatible netconf.	10 years ago
World.hpp	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	10 years ago

README.md

ZeroTier Virtual Switch Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

Keep it minimal, especially in terms of code footprint and memory use.
There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
If it's not part of the core virtual Ethernet switch it does not belong here.
No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.