Paul Lorenz
f02d31aed8
Update deps and adjust for update channel API
2022-03-11 13:20:17 -05:00
Paul Lorenz
ce3b70ce2f
Update for link changes
2022-03-07 14:23:35 -05:00
gberl002
ada7cdd348
Updating test to work with the latest global config constants
2022-03-03 15:14:19 -05:00
Paul Lorenz
abec09180f
Fix cert checker tests to account for daylight savings time
2022-02-17 13:44:13 -05:00
Paul Lorenz
f14ff5e0ed
Update xgress edge to updated channel library/api
2022-01-31 22:24:38 -05:00
Paul Lorenz
a6428df622
Update for channel api and xgress api updates
2022-01-31 15:55:19 -05:00
Paul Lorenz
3b75094429
Update router side to use channel library for control channel
2022-01-28 15:48:15 -05:00
Paul Lorenz
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
Andrew Martinez
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz
66638077b4
More logging tidying around terminators
2021-12-15 13:05:55 -05:00
Paul Lorenz
c5c2af9737
Only match terminator if the id also matches
2021-12-11 00:35:24 -05:00
Andrew Martinez
58fa1887a9
remove debug flag
2021-10-18 16:11:01 -04:00
Andrew Martinez
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
Paul Lorenz
202fbce026
Update missed hop id. Save hopIds for entity ids
2021-10-12 09:37:37 -04:00
Paul Lorenz
846aae9ec3
Update deps. Only use hopId for entity ids
2021-10-11 22:28:55 -04:00
Paul Lorenz
d0de60901c
Add xgress control/traceroute support
2021-10-11 22:28:53 -04:00
Paul Lorenz
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
Paul Lorenz
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
Paul Lorenz
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
Paul Lorenz
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
Paul Lorenz
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
Paul Lorenz
ace44b4e75
Fix panic. Fix generate rest script. Add metric for unknown api session tokens
2021-06-21 15:17:46 -04:00
Paul Lorenz
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
Andrew Martinez
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
Andrew Martinez
ba1427d2d9
add posture check disconnect test
2021-03-26 09:38:14 -04:00
Paul Lorenz
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
Paul Lorenz
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
Michael Quigley
38525530e7
Tests.
2021-03-12 15:17:26 -05:00
Paul Lorenz
8e0b7d021d
Update for metrics api changes
2021-03-09 14:34:06 -05:00
Paul Lorenz
8a160d93b1
Fix update terminator. Add test for terminator updates. Remove unused store_events
2021-02-26 09:04:32 -05:00
Paul Lorenz
155bbd8217
Validate sessions on controller instead of edge router
2021-02-17 20:38:13 -05:00
Andrew Martinez
ad03b24546
shutdown go routines, log messages
...
- shut down go routines for handlers on HandleClose
- fix log messages and add more states to sync tracking
- remove nil sync fail output
2021-02-15 13:22:07 -05:00
Andrew Martinez
d07618c9d5
modular edge router sync
...
- edge router sync is now modular and can have different strategies
- plans to make this configurabe in the future with multiple strat
- legacy strategy is called "instant" and is the only option
- instant strat now supports control signaling and resync requests
- edge routers now do not remove connections till after a full sync
- added the ability for the controller to report the er sync status
- added er syn status to GET /edge-routers list and detail
- improved log output in sync logic
2021-02-15 13:22:07 -05:00
Paul Lorenz
208036d29c
Merge pull request #509 from openziti/fix-router-crash
...
Fix router crash caused by concurrent access to map
2021-02-05 12:20:43 -05:00
Paul Lorenz
f61faf0d54
Fix router crash caused by concurrent access to map
2021-02-05 10:13:26 -05:00
Curt Tudor
2c6814aaa4
edge router enhancements for browZer support ( #499 )
2021-02-04 06:09:46 -05:00
Paul Lorenz
92024b0d10
Fix close stall by moving notify after seq close
2021-01-27 16:11:54 -05:00
Paul Lorenz
bca8d657fc
Clean up xgress edge abstractions and close logic
2021-01-26 10:43:02 -05:00
Paul Lorenz
cdba8994ff
Add timeout to api session lookup. Make api-session/session lookup timeouts configurable
2021-01-25 16:54:23 -05:00
Michael Quigley
2b2d013fbb
Update for configurable xgress.GetSession timeouts. Fabric v0.15.10.
2021-01-21 14:58:14 -05:00
Eugene K
dc33830592
avoid setting empty PublicKeyHeader
2021-01-12 09:11:01 -05:00
Andrew
84e617dcc5
Merge pull request #452 from openziti/session.certs
...
adds support of API Session Certificates
2021-01-07 13:29:03 -05:00
Andrew Martinez
252bcdc1c6
improves logging output from edge routers for invalid api session conns
2021-01-06 15:09:13 -05:00
Andrew Martinez
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
Paul Lorenz
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
Paul Lorenz
4f5dfd93cc
Support router provided connection ids
2020-12-15 17:35:43 -05:00
Paul Lorenz
73383f0992
Update for fabric API changes ( #442 )
2020-12-07 15:02:00 -05:00
Paul Lorenz
ced4df53c3
Use copy-on-write muxer. Use no-op sequencer. Fix AT bug related to dots in generated ids. ( #438 )
...
* Fix intermittent AT failure. Use noop sequencer
* Use copy-on-write msg mux impl
* Try with non-zero queue depth
2020-11-30 19:08:01 -05:00
Shawn Carey
316ba81559
Pass AppData header through peer data ( #390 )
...
* added id for appdata header
* get sdk-golang v0.14.6
2020-11-04 08:37:48 -05:00
Shawn Carey
4bb404e953
Ziti tunnel.cfgtype.v2.0 ( #357 )
...
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00