Commit Graph

483 Commits

Author SHA1 Message Date
Paul Lorenz 0f782ce144 Address review comment 2022-02-24 11:56:39 -05:00
Paul Lorenz 3fd000a1bd Separate fabric and edge entity counts for parent/child stores 2022-02-24 11:26:44 -05:00
Paul Lorenz e18e4a16fb Add back in commented out test code 2022-02-17 19:33:16 -05:00
Paul Lorenz dbac831bee Add edge router events test 2022-02-17 15:58:25 -05:00
Paul Lorenz 06679b93a9 Remove fabric callback that are no longer needed 2022-02-17 11:13:15 -05:00
Andrew Martinez d40f53d486 update comments, add patch updatedAt test 2022-02-10 11:06:54 -05:00
Andrew Martinez 52b0c7acab alters posture query updateAt to also indicate query state changes
- formerly posture queries only had an updatedAt time copied from the
  source posture check which. For MFA posture checks this is only
  correct when not using promptOnWake/Unlock
- prompt timer reductions due to wake/unlock now update postureQuery
  updatedAt values
- subsequent reconfigurations to the posture check (i.e. patching a
  posture check) is also taken into account - latest time.Time wins
- test for MFA posture check no longer use gabs and instead use the
  relevant input/output rest_model.* structures
2022-02-09 16:30:54 -05:00
Andrew Martinez 6d48a962de adds criteria output to service request failures for MFA posture checks
- adds all criteria for mfa evaluation to failure for model/REST API
2022-02-04 15:23:39 -05:00
Paul Lorenz 5aacc4b247 Split scan from evaluate in posture cache to avoid nested view. Fixes #886 2022-02-02 18:02:16 -05:00
Paul Lorenz f14ff5e0ed Update xgress edge to updated channel library/api 2022-01-31 22:24:38 -05:00
Andrew ddd383ef23 Merge pull request #874 from openziti/add.enforcer.metrics
adds metrics for api session and service policy enforcers
2022-01-31 10:04:07 -05:00
Paul Lorenz 5be9095e60 Update to use channel library 2022-01-28 11:35:15 -05:00
Andrew Martinez 1680a7d898 switch to meter for deletes 2022-01-24 13:16:43 -05:00
Andrew Martinez b36c890c42 fix gauges 2022-01-24 11:24:15 -05:00
Andrew Martinez 2fba1293af adds metrics for api session and service policy enforcers 2022-01-24 11:22:05 -05:00
Paul Lorenz 3f69bfdd43 Update for control channel API changes 2022-01-19 08:37:40 -05:00
Andrew Martinez 236babd62c adds start/end times for events 2022-01-18 14:19:52 -05:00
Andrew Martinez 1f784d89ce adds asynchronous eventer to controller
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
  transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
Andrew 9bd955127c Merge pull request #866 from openziti/broker.async.bbolt.tx
move broker event handlers to go routines
2022-01-18 09:27:17 -05:00
Paul Lorenz f1709586a2 Merge pull request #864 from openziti/cache-tunnel-sessions
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-18 09:15:05 -05:00
Andrew Martinez 9b05d4e49b move broker event handlers to go routines 2022-01-17 13:59:33 -05:00
Andrew Martinez 4be50ea143 adds zero start time check 2022-01-17 10:24:00 -05:00
Andrew Martinez 050b0b086e moves metric endpoint logging lower in the stack
- endpoint url/path -> name remains the same
- start timing on request context before we start processing
- log metrics in IsAllowed which is called by all endpoint after routing
- logging before routing to a handler would log all probe attacks
2022-01-17 10:12:59 -05:00
Paul Lorenz fd866e7f3d Cache tunnel sessions in LRU cache to avoid creating extraneous sessions 2022-01-13 12:38:54 -05:00
Andrew 9a42304511 Merge pull request #858 from openziti/add.router.re-enroll.logic
Add.router.reenroll.logic
2022-01-07 08:53:03 -05:00
Andrew c8facce38f Merge pull request #861 from openziti/add.metrics.for.all.endpoints
adds metrics for endpoints with keys of path[method]
2022-01-06 14:46:29 -05:00
Andrew Martinez 8b20f0278a normalize URL ids for metric names 2022-01-06 14:42:31 -05:00
Andrew Martinez 65702f502a swap from brackets to period seperators 2022-01-06 14:11:01 -05:00
Andrew Martinez dfa0f7c6ab adds metrics for endpoints with keys of path[method] 2022-01-06 14:02:36 -05:00
Paul Lorenz 7b1ee2893d Add identity refresh meter 2022-01-06 13:45:18 -05:00
Andrew Martinez cf20c2dfa8 adds api tests 2022-01-03 15:54:51 -05:00
Andrew Martinez 770c7bcd06 adds re-enrollment logic for edge-routers 2022-01-03 09:06:33 -05:00
Andrew Martinez 97773f5917 update log messages w/ router context 2021-12-20 09:20:10 -05:00
Andrew Martinez 37f5f88944 remove unused REST API 2021-12-20 09:19:14 -05:00
Andrew Martinez dae084f61c alters router/controller enrollment extension logic
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz 0d66f75eb8 Add additional fields and make field names more consistent 2021-12-14 09:58:24 -05:00
Paul Lorenz 31107eb4d4 Update for removing custom bbolt version with trace support 2021-12-11 00:34:40 -05:00
Paul Lorenz bfcb037783 Initial pass at fabric rest api working (#838)
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
Paul Lorenz f1af4df5d8 Merge pull request #837 from openziti/fix-panic
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz 66ed64d749 Fix panic caused by missing return on error 2021-11-17 10:22:56 -05:00
Paul Lorenz 96cdde0227 Enrolment -> Enrollment in spec 2021-11-10 13:19:08 -05:00
Paul Lorenz de45dc0554 Remove some unused types. Fix version map 2021-11-09 09:18:15 -05:00
Andrew Martinez 027f8673ce patch client cert instead of using verify options 2021-11-05 10:47:45 -04:00
Andrew Martinez ece9e8222a formating directive fix 2021-11-05 10:27:00 -04:00
Andrew Martinez 1f9ca6878a changes client cert validation
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz 24ae6dbb19 Fix panic on session view 2021-11-02 16:40:22 -04:00
Andrew 8e53e50fd9 Merge pull request #818 from openziti/identity.enrollment.extension
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew 62ae85539f Merge pull request #819 from openziti/gosec.improvements
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz 2d4260e76e Allow using a specific bolt db file for tests 2021-10-26 14:19:24 -04:00
Andrew Martinez c8de8a8fac fixes gosec output of a few items 2021-10-21 17:40:52 -04:00