Paul Lorenz
387d54adb1
Handles changes to UpdatedFields and EntityManager. Consolidate bolt
...
sink/source to edgeEntity. Make patch conversion method optional
2022-07-27 11:33:37 -04:00
Paul Lorenz
8500702b6c
Track edge session in terminator when hosting to allow assigning usage to hosting endpoints. Fixes #1081
2022-07-18 10:29:00 -04:00
Paul Lorenz
3e7f44aa49
Track router IP when creating api sessions for embedded tunneler. Fixes #1090
2022-07-15 23:26:19 -04:00
Paul Lorenz
bae7e40b61
Update for foundation changes
2022-07-01 15:55:30 -04:00
Paul Lorenz
12df770d04
Update copyright
2022-06-30 17:45:08 -04:00
Paul Lorenz
91ea3816b8
Update for terminator terminology changes
2022-06-22 16:24:01 -04:00
Paul Lorenz
2f6a3bc828
Update handler -> manager for base types and config
2022-06-02 00:05:54 -04:00
Paul Lorenz
7cf9dc135d
Initial support for raft and command style architecture
2022-06-01 23:52:07 -04:00
Andrew Martinez
7381423974
use cmap generics, update fabric
2022-05-27 11:02:51 -04:00
Andrew Martinez
c5f156dd9e
adds x509 claims support for external ids to CAs
...
- adds REST API CA external id field
- adds rest api for external fields
- refactors authentication interfaces for federation
- alters authentication moduels to return AuthResult interfaces
- allows AuthResults to provide external x509 certs as session certs
2022-05-23 13:08:16 -04:00
Cam Otts
e5d1982785
threaded timeout from fabric ( #974 )
...
* threaded timeout from fabric
* pr comments
* fix timing
* removed utc on deadline check
* small updates
* updated fabric version and add zero check to timeoutdeadline
* fix wrong fabric version
* Update deps
Co-authored-by: Cam Otts <cam@Cams-MacBook-Pro.local >
Co-authored-by: Paul Lorenz <paul.lorenz@netfoundry.io >
2022-05-13 11:11:25 -05:00
Paul Lorenz
b690993263
Update to latest protobuf library
2022-05-10 14:55:54 -04:00
Paul Lorenz
01bea19e1f
Update to use transport and storage libs. Use fabric config instead of foundation/config
2022-03-30 22:49:46 -04:00
Paul Lorenz
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
Paul Lorenz
3f69bfdd43
Update for control channel API changes
2022-01-19 08:37:40 -05:00
Paul Lorenz
fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
Andrew Martinez
97773f5917
update log messages w/ router context
2021-12-20 09:20:10 -05:00
Andrew Martinez
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz
0d66f75eb8
Add additional fields and make field names more consistent
2021-12-14 09:58:24 -05:00
Paul Lorenz
40389c1f88
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:37:56 -04:00
Paul Lorenz
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
Paul Lorenz
84d36337ad
Fix panic when service not found
2021-09-08 15:59:35 -04:00
Paul Lorenz
df73dd15b0
Merge pull request #767 from openziti/fix-host-after-session-expiration
...
Allow ERT to gracefully handle api session/session removal. Can happe…
2021-09-03 13:50:54 -04:00
Paul Lorenz
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
Paul Lorenz
05fb2e155a
Merge pull request #764 from openziti/fix-service-poll-time-check-add-tests
...
Fix time check on list tunnel. Add policy enforcer test. Add update s…
2021-09-02 11:48:03 -04:00
Paul Lorenz
782f43cb26
Fix time check on list tunnel. Add policy enforcer test. Add update session test
2021-09-01 16:20:43 -04:00
Andrew Martinez
7e2b97c425
fixes posture check timeouts, tests, service updates
...
- fixes timeout calculation bugs
- adds timeout calculation unit/api tests
- adds posture response service events
- fixes 0 to -1 values for timeout settings
- fixes abnormally high service updates
2021-08-30 09:05:46 -04:00
Paul Lorenz
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
Paul Lorenz
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
Paul Lorenz
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
Paul Lorenz
8a44f37344
Simplify poll logic
2021-08-03 14:32:47 -04:00
Paul Lorenz
4205482e58
If we create a new session but don't have a chance to return it, delete it before sending error
2021-08-03 13:16:34 -04:00
Paul Lorenz
53c9c228dc
Fix error message
2021-08-03 12:04:24 -04:00
Paul Lorenz
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
Paul Lorenz
3151d31b7f
Handle xweb import change ( #697 )
...
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
Paul Lorenz
ad9f0f2d72
Make sure identity host data makes it to the tunneler
2021-06-04 16:41:23 -04:00
Paul Lorenz
18c513034b
Ensure routers get full service list, not just first 10
2021-05-06 10:51:30 -04:00
Paul Lorenz
5fe0091db7
Need to set id on new terminator
2021-04-30 09:21:05 -04:00
Paul Lorenz
57da48f142
Move terminator validation from xtv to control channel handler
2021-04-29 13:46:54 -04:00
Paul Lorenz
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
Andrew Martinez
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
Paul Lorenz
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
Paul Lorenz
39626472e3
Support for intercept.v1 config type ( #618 )
...
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
Paul Lorenz
0731731bba
Set LastActivityAt on api sessions when creating them for router/tunnelers
2021-03-25 16:18:21 -04:00
Paul Lorenz
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
Paul Lorenz
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
Paul Lorenz
71a3a1643e
Pass FieldChecker to toBoltEntityForPatch. Add some ReadByName methods. Move some code to allow re-use
2021-03-17 10:41:21 -04:00
Andrew Martinez
5841f6fa70
use batch for api access last updates
2021-03-15 11:14:45 -04:00
Paul Lorenz
560137fb65
Fix fabric session client id. should be edge session id not token. Add test for events.
2021-02-26 09:38:13 -05:00
Paul Lorenz
155bbd8217
Validate sessions on controller instead of edge router
2021-02-17 20:38:13 -05:00