76e207fe28
Add cost/precedence back to host configs. Fixes #931
2022-03-16 12:04:17 -04:00
ae1ef93d95
normalize DNS message JSON
2022-03-10 08:44:46 -05:00
841d726a80
copyright notice
2022-02-25 15:07:46 -05:00
fa7b7237c7
fix remote resolve of supported records
2022-02-23 12:54:02 -05:00
0a2550565a
checkpoint
2022-02-22 09:49:16 -05:00
05b849f8a0
fix inconsistent handling of TCP vs UDP intercept listeners
2021-11-26 09:45:33 -05:00
68a17e73d2
Reduce logging from UDP tunneler
2021-10-27 14:19:39 -04:00
63d37ffe2f
implement support of wildcard domain on hosting side
2021-10-04 16:49:22 -04:00
8f8c033780
implement wildcard DNS intercepts
2021-10-04 12:29:48 -04:00
3c73d18731
refactor
2021-10-01 15:51:42 -04:00
70617f11a3
add resolver support for wildcard domains
2021-10-01 15:50:15 -04:00
c273b23a2e
add dst_hostname
2021-10-01 15:36:56 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
43597bf6b1
Cleanup DNS entries when services are stopped
2021-07-21 13:50:52 -04:00
fe830a7f5c
Don't remove ipt chains unless all services are removed. Don't use dns resolved address if it's a tunneler assigned addr. Fixes GH-712
2021-07-15 10:24:19 -04:00
012158b94c
Add actual error to error log
2021-06-25 10:41:16 -04:00
48eb8348c3
tolower any dns lookup/adds
2021-06-16 16:36:15 -04:00
58dfb11786
Fix address remove from loopback on shutdown. Fixes GH-670
2021-06-15 16:49:46 -04:00
ad9f0f2d72
Make sure identity host data makes it to the tunneler
2021-06-04 16:41:23 -04:00
4b370e1522
Implement dialoption identity template
2021-05-04 15:34:37 -04:00
228d23bf67
Implement identity templates in tunneler
2021-04-30 14:00:44 -04:00
10515bae53
If dialing udp with source addr, make source addr a UDP addr
2021-04-28 10:51:06 -04:00
deef2bba6a
Fix issues with host.v1 config type schema ( #640 )
...
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
29156c7154
Fix udp protocol type. Fix UDP tunneler code. Add UDP proxy test
2021-04-14 16:10:22 -04:00
2110aba5c1
host.v1 configuration type schema changes ( #631 )
...
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
6ccfa76673
Fix tproxy win/mac apis
2021-04-06 11:25:18 -04:00
8f6234842e
Add per-service identity hosting precedence/costs
2021-04-06 09:51:22 -04:00
39626472e3
Support for intercept.v1 config type ( #618 )
...
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
520d34df39
Rename tunneler app_data properties ( #617 )
...
* rename tunneler_app_data keys: intercepted_ --> src_
* parse source_addr into ip and port
* rename source_ip --> source_addr
2021-04-01 08:54:12 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
208f500bce
Add tproxy empty imples for darwin and windows so router will build ( #601 )
...
* Add tproxy empty imples for darwin and windows so router will build
* Add support for tproxy lanIf option
2021-03-22 16:54:26 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
00114b55a1
Set router status online. Allow ziti-tunnel proxy to work without config
2021-03-09 15:48:06 -05:00
9d074154c0
Extract minimal sdk that tunneler needs
2021-03-01 18:45:10 -05:00
975a47bfad
Don't use half close with udp connections
2021-02-15 18:32:46 -05:00
012c6f1be7
Fix UDP connection leak in tunneler
2021-02-14 08:45:45 -05:00
2dea2f7d4a
ziti-tunnel: allow inbound connections for intercepted addresses ( #520 )
...
* support `lanIf`
2021-02-09 11:09:44 -05:00
a8b5a3e8d8
use previousService to get removed service config ( #518 )
2021-02-08 16:28:01 -05:00
f485d4e8c3
Update service poller to use service update callback
2021-01-29 15:32:51 -05:00
4882da1970
Add service list timer. Fix tunneler leak
2021-01-20 09:29:33 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
a6b657ea14
implement CloseWrite() on packet connection
2020-10-20 23:14:57 -04:00
d3bb89a5b0
pass select edge headers through fabric
...
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
b352ecbfae
Support configurable ip range for unresolvable hostnames in client configurations ( #339 )
...
* use shared network IP range for services that are configured with unresolvable hostnames
* parameterize dns intercept IP range
* reuse utils.incIP
closes #339
2020-10-12 09:39:53 -04:00
fe99e8e60d
remove golang nocopy ignore
2020-10-05 07:29:24 -04:00
d9a76390ab
work around noCopy lock
2020-10-05 07:25:46 -04:00
898a10fbc3
shrink copyBuf to avoid chunking UDP payloads when sending to tunnelers with smaller (16k) mtu. ( #325 )
2020-10-02 16:32:03 -04:00
cba62ee053
run hosted session in goroutine ( #324 )
2020-10-02 13:28:40 -04:00
70f7811f8a
better logging when UDP read/event loops are stopped. ( #319 )
2020-09-30 08:39:47 -04:00
Paul Lorenz