Commit Graph

25 Commits

Author SHA1 Message Date
Eugene K 05b849f8a0 fix inconsistent handling of TCP vs UDP intercept listeners 2021-11-26 09:45:33 -05:00
Paul Lorenz 68a17e73d2 Reduce logging from UDP tunneler 2021-10-27 14:19:39 -04:00
Eugene K 8f8c033780 implement wildcard DNS intercepts 2021-10-04 12:29:48 -04:00
Paul Lorenz fe830a7f5c Don't remove ipt chains unless all services are removed. Don't use dns resolved address if it's a tunneler assigned addr. Fixes GH-712 2021-07-15 10:24:19 -04:00
Paul Lorenz 58dfb11786 Fix address remove from loopback on shutdown. Fixes GH-670 2021-06-15 16:49:46 -04:00
Paul Lorenz 4b370e1522 Implement dialoption identity template 2021-05-04 15:34:37 -04:00
Shawn Carey 2110aba5c1 host.v1 configuration type schema changes (#631)
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
Paul Lorenz 6ccfa76673 Fix tproxy win/mac apis 2021-04-06 11:25:18 -04:00
Paul Lorenz 39626472e3 Support for intercept.v1 config type (#618)
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
Paul Lorenz 208f500bce Add tproxy empty imples for darwin and windows so router will build (#601)
* Add tproxy empty imples for darwin and windows so router will build

* Add support for tproxy lanIf option
2021-03-22 16:54:26 -04:00
Paul Lorenz 9d074154c0 Extract minimal sdk that tunneler needs 2021-03-01 18:45:10 -05:00
Paul Lorenz 975a47bfad Don't use half close with udp connections 2021-02-15 18:32:46 -05:00
Shawn Carey 2dea2f7d4a ziti-tunnel: allow inbound connections for intercepted addresses (#520)
* support `lanIf`
2021-02-09 11:09:44 -05:00
Eugene K d3bb89a5b0 pass select edge headers through fabric
implement passing edge flags
add test for edge.Conn.CloseWrite()
use CloseWrite() on proxied connections
2020-10-20 11:33:11 -04:00
Shawn Carey 70f7811f8a better logging when UDP read/event loops are stopped. (#319) 2020-09-30 08:39:47 -04:00
Shawn Carey e19b0e4568 close the server conn when hosting a service and the client closes (#312) 2020-09-28 10:51:42 -04:00
Michael Quigley ae78fa17f3 Better max UDP packet size naming. 2020-07-31 11:19:52 -04:00
Michael Quigley 1132c44455 Changes for udp.MaxPacketSize -> info.MaxPacketSize. 2020-07-29 13:43:29 -04:00
Andrew M b6d9efaf8c fixed #183, move to openziti 2020-05-26 17:37:35 -04:00
Paul Lorenz 7d60e03b65 Remove copyright date from header 2020-03-19 13:47:42 -04:00
dovholuknf 3db81622cb didn't i do this once already? 2020-02-25 14:29:08 -05:00
Paul Lorenz d1bdaae857 Move tunneler configuration into config entities (#61)
* Move tunneler configuration into config entities. Fixes GH-46
2020-01-24 09:09:09 -05:00
Shawn Carey bf4df59138 Track shared routes (#24)
* handle signals from within the service poller to enable selective route cleanup

* update iptables dependency

* use refcounts to track shared addresses

* add single entry to intercept LUT per service

* tidy

* don't panic when intercept address isn't in LUT

* deal with multiple intercept addresses per service.

* don't preallocate array.

* use syscall package for all signals.
2020-01-03 16:46:37 -05:00
Paul Lorenz 1b734f68ff Remove sdk and example code which has moved to ziti-sdk-golang. Fixes GH-9 (#11) 2019-12-09 10:28:26 -05:00
Michael Quigley 58fdd03351 Initial migration from internal repositories. 2019-12-03 12:13:27 -05:00