Commit Graph

53 Commits

Author SHA1 Message Date
Paul Lorenz f02d31aed8 Update deps and adjust for update channel API 2022-03-11 13:20:17 -05:00
Paul Lorenz ce3b70ce2f Update for link changes 2022-03-07 14:23:35 -05:00
gberl002 ada7cdd348 Updating test to work with the latest global config constants 2022-03-03 15:14:19 -05:00
Paul Lorenz abec09180f Fix cert checker tests to account for daylight savings time 2022-02-17 13:44:13 -05:00
Paul Lorenz f14ff5e0ed Update xgress edge to updated channel library/api 2022-01-31 22:24:38 -05:00
Paul Lorenz a6428df622 Update for channel api and xgress api updates 2022-01-31 15:55:19 -05:00
Paul Lorenz 3b75094429 Update router side to use channel library for control channel 2022-01-28 15:48:15 -05:00
Paul Lorenz 5be9095e60 Update to use channel library 2022-01-28 11:35:15 -05:00
Andrew Martinez dae084f61c alters router/controller enrollment extension logic
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz 66638077b4 More logging tidying around terminators 2021-12-15 13:05:55 -05:00
Paul Lorenz c5c2af9737 Only match terminator if the id also matches 2021-12-11 00:35:24 -05:00
Andrew Martinez 58fa1887a9 remove debug flag 2021-10-18 16:11:01 -04:00
Andrew Martinez 45158ff864 updates to newest foundation/fabric/sdk-golang 2021-10-18 16:07:33 -04:00
Paul Lorenz 202fbce026 Update missed hop id. Save hopIds for entity ids 2021-10-12 09:37:37 -04:00
Paul Lorenz 846aae9ec3 Update deps. Only use hopId for entity ids 2021-10-11 22:28:55 -04:00
Paul Lorenz d0de60901c Add xgress control/traceroute support 2021-10-11 22:28:53 -04:00
Paul Lorenz de54568423 More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set 2021-08-10 13:18:24 -04:00
Paul Lorenz 23c98c2d5a Add more tracing and allow enabling debug for specific identities for path selection/establishment 2021-08-09 11:20:51 -04:00
Paul Lorenz b82b92684b Rename fabric session to circuit 2021-08-04 14:39:27 -04:00
Paul Lorenz 2a56ce2380 Update test for api changes 2021-08-03 09:16:22 -04:00
Paul Lorenz d7c1dc038d Allow searching on role sets 2021-07-15 09:35:41 -04:00
Paul Lorenz ace44b4e75 Fix panic. Fix generate rest script. Add metric for unknown api session tokens 2021-06-21 15:17:46 -04:00
Paul Lorenz 2a2e380cb7 Add error code reporting to control channel requests 2021-04-19 14:22:07 -04:00
Andrew Martinez 4a9b226f0e adds the ability for router to extend their enrollment
- routers can now opt to extend their enrollment at any time with a
  previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
Andrew Martinez ba1427d2d9 add posture check disconnect test 2021-03-26 09:38:14 -04:00
Paul Lorenz 038e9bdd91 Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events. 2021-03-25 15:43:07 -04:00
Paul Lorenz 680852f80e Allow tunnel to run over xgress directly 2021-03-22 14:33:54 -04:00
Michael Quigley 38525530e7 Tests. 2021-03-12 15:17:26 -05:00
Paul Lorenz 8e0b7d021d Update for metrics api changes 2021-03-09 14:34:06 -05:00
Paul Lorenz 8a160d93b1 Fix update terminator. Add test for terminator updates. Remove unused store_events 2021-02-26 09:04:32 -05:00
Paul Lorenz 155bbd8217 Validate sessions on controller instead of edge router 2021-02-17 20:38:13 -05:00
Andrew Martinez ad03b24546 shutdown go routines, log messages
- shut down go routines for handlers on HandleClose
- fix log messages and add more states to sync tracking
- remove nil sync fail output
2021-02-15 13:22:07 -05:00
Andrew Martinez d07618c9d5 modular edge router sync
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
2021-02-15 13:22:07 -05:00
Paul Lorenz 208036d29c Merge pull request #509 from openziti/fix-router-crash
Fix router crash caused by concurrent access to map
2021-02-05 12:20:43 -05:00
Paul Lorenz f61faf0d54 Fix router crash caused by concurrent access to map 2021-02-05 10:13:26 -05:00
Curt Tudor 2c6814aaa4 edge router enhancements for browZer support (#499) 2021-02-04 06:09:46 -05:00
Paul Lorenz 92024b0d10 Fix close stall by moving notify after seq close 2021-01-27 16:11:54 -05:00
Paul Lorenz bca8d657fc Clean up xgress edge abstractions and close logic 2021-01-26 10:43:02 -05:00
Paul Lorenz cdba8994ff Add timeout to api session lookup. Make api-session/session lookup timeouts configurable 2021-01-25 16:54:23 -05:00
Michael Quigley 2b2d013fbb Update for configurable xgress.GetSession timeouts. Fabric v0.15.10. 2021-01-21 14:58:14 -05:00
Eugene K dc33830592 avoid setting empty PublicKeyHeader 2021-01-12 09:11:01 -05:00
Andrew 84e617dcc5 Merge pull request #452 from openziti/session.certs
adds support of API Session Certificates
2021-01-07 13:29:03 -05:00
Andrew Martinez 252bcdc1c6 improves logging output from edge routers for invalid api session conns 2021-01-06 15:09:13 -05:00
Andrew Martinez a3789c063a adds support of API Session Certificates
- adds ability for any authenticated API Session to create ephemeral
 certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
  controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Paul Lorenz 7329106691 Use manual start for tunnel hosting 2020-12-16 11:08:06 -05:00
Paul Lorenz 4f5dfd93cc Support router provided connection ids 2020-12-15 17:35:43 -05:00
Paul Lorenz 73383f0992 Update for fabric API changes (#442) 2020-12-07 15:02:00 -05:00
Paul Lorenz ced4df53c3 Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. (#438)
* Fix intermittent AT failure. Use noop sequencer

* Use copy-on-write msg mux impl

* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
Shawn Carey 316ba81559 Pass AppData header through peer data (#390)
* added id for appdata header

* get sdk-golang v0.14.6
2020-11-04 08:37:48 -05:00
Shawn Carey 4bb404e953 Ziti tunnel.cfgtype.v2.0 (#357)
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00