Commit Graph

55 Commits

Author SHA1 Message Date
Paul Lorenz 76e207fe28 Add cost/precedence back to host configs. Fixes #931 2022-03-16 12:04:17 -04:00
Eugene K ae1ef93d95 normalize DNS message JSON 2022-03-10 08:44:46 -05:00
Eugene K 841d726a80 copyright notice 2022-02-25 15:07:46 -05:00
Eugene K fa7b7237c7 fix remote resolve of supported records 2022-02-23 12:54:02 -05:00
Eugene K 0a2550565a checkpoint 2022-02-22 09:49:16 -05:00
Eugene K 05b849f8a0 fix inconsistent handling of TCP vs UDP intercept listeners 2021-11-26 09:45:33 -05:00
Paul Lorenz 68a17e73d2 Reduce logging from UDP tunneler 2021-10-27 14:19:39 -04:00
Eugene K 8f8c033780 implement wildcard DNS intercepts 2021-10-04 12:29:48 -04:00
Eugene K 3c73d18731 refactor 2021-10-01 15:51:42 -04:00
Paul Lorenz 43597bf6b1 Cleanup DNS entries when services are stopped 2021-07-21 13:50:52 -04:00
Paul Lorenz fe830a7f5c Don't remove ipt chains unless all services are removed. Don't use dns resolved address if it's a tunneler assigned addr. Fixes GH-712 2021-07-15 10:24:19 -04:00
Paul Lorenz 58dfb11786 Fix address remove from loopback on shutdown. Fixes GH-670 2021-06-15 16:49:46 -04:00
Paul Lorenz ad9f0f2d72 Make sure identity host data makes it to the tunneler 2021-06-04 16:41:23 -04:00
Paul Lorenz 4b370e1522 Implement dialoption identity template 2021-05-04 15:34:37 -04:00
Paul Lorenz 228d23bf67 Implement identity templates in tunneler 2021-04-30 14:00:44 -04:00
Paul Lorenz 10515bae53 If dialing udp with source addr, make source addr a UDP addr 2021-04-28 10:51:06 -04:00
Shawn Carey 2110aba5c1 host.v1 configuration type schema changes (#631)
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
Paul Lorenz 6ccfa76673 Fix tproxy win/mac apis 2021-04-06 11:25:18 -04:00
Paul Lorenz 8f6234842e Add per-service identity hosting precedence/costs 2021-04-06 09:51:22 -04:00
Paul Lorenz 39626472e3 Support for intercept.v1 config type (#618)
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
Shawn Carey 520d34df39 Rename tunneler app_data properties (#617)
* rename tunneler_app_data keys: intercepted_ --> src_
* parse source_addr into ip and port
* rename source_ip --> source_addr
2021-04-01 08:54:12 -04:00
Paul Lorenz 038e9bdd91 Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events. 2021-03-25 15:43:07 -04:00
Paul Lorenz 208f500bce Add tproxy empty imples for darwin and windows so router will build (#601)
* Add tproxy empty imples for darwin and windows so router will build

* Add support for tproxy lanIf option
2021-03-22 16:54:26 -04:00
Paul Lorenz 680852f80e Allow tunnel to run over xgress directly 2021-03-22 14:33:54 -04:00
Paul Lorenz 00114b55a1 Set router status online. Allow ziti-tunnel proxy to work without config 2021-03-09 15:48:06 -05:00
Paul Lorenz 9d074154c0 Extract minimal sdk that tunneler needs 2021-03-01 18:45:10 -05:00
Paul Lorenz 975a47bfad Don't use half close with udp connections 2021-02-15 18:32:46 -05:00
Shawn Carey 2dea2f7d4a ziti-tunnel: allow inbound connections for intercepted addresses (#520)
* support `lanIf`
2021-02-09 11:09:44 -05:00
Shawn Carey a8b5a3e8d8 use previousService to get removed service config (#518) 2021-02-08 16:28:01 -05:00
Paul Lorenz f485d4e8c3 Update service poller to use service update callback 2021-01-29 15:32:51 -05:00
Paul Lorenz 4882da1970 Add service list timer. Fix tunneler leak 2021-01-20 09:29:33 -05:00
Paul Lorenz 5efbbf0942 Add health check implementation for tunnelers and add default hosting precedence and cost to identity 2021-01-12 11:00:43 -05:00
Paul Lorenz 7329106691 Use manual start for tunnel hosting 2020-12-16 11:08:06 -05:00
Eugene K a6b657ea14 implement CloseWrite() on packet connection 2020-10-20 23:14:57 -04:00
Eugene K d3bb89a5b0 pass select edge headers through fabric
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
Shawn Carey b352ecbfae Support configurable ip range for unresolvable hostnames in client configurations (#339)
* use shared network IP range for services that are configured with unresolvable hostnames

* parameterize dns intercept IP range

* reuse utils.incIP

closes #339
2020-10-12 09:39:53 -04:00
Andrew Martinez fe99e8e60d remove golang nocopy ignore 2020-10-05 07:29:24 -04:00
Andrew Martinez d9a76390ab work around noCopy lock 2020-10-05 07:25:46 -04:00
Shawn Carey cba62ee053 run hosted session in goroutine (#324) 2020-10-02 13:28:40 -04:00
Shawn Carey 70f7811f8a better logging when UDP read/event loops are stopped. (#319) 2020-09-30 08:39:47 -04:00
Shawn Carey e19b0e4568 close the server conn when hosting a service and the client closes (#312) 2020-09-28 10:51:42 -04:00
Shawn Carey f608d04ad1 Avoid tun read failing with "not pollable" (#271)
Avoid "tun not pollable": https://github.com/golang/go/issues/38618
2020-08-07 11:28:00 -04:00
Michael Quigley ae78fa17f3 Better max UDP packet size naming. 2020-07-31 11:19:52 -04:00
Michael Quigley 1132c44455 Changes for udp.MaxPacketSize -> info.MaxPacketSize. 2020-07-29 13:43:29 -04:00
Andrew M 3087972172 all conversion work
- remove old JSON schema, unsused code
- remove unused variables from base router functions
- rework all API entities
- rework all links
- fix lint issues
- adds error conversion logic
- update tests as needed
- fix up go test
- fix backwards compat w/ non json enroller
2020-06-09 14:11:23 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00
Paul Lorenz 7d60e03b65 Remove copyright date from header 2020-03-19 13:47:42 -04:00
dovholuknf 3db81622cb didn't i do this once already? 2020-02-25 14:29:08 -05:00
Paul Lorenz 2bbb8aa32f Merge pull request #71 from netfoundry/feature-0.9
Feature 0.9
2020-01-31 20:14:40 -05:00
dovholuknf c3b74a01ae add the service name in the message to make it easier to know what service wasn't specified 2020-01-28 11:29:06 -05:00