Commit Graph

474 Commits

Author SHA1 Message Date
Paul Lorenz f14ff5e0ed Update xgress edge to updated channel library/api 2022-01-31 22:24:38 -05:00
Andrew ddd383ef23 Merge pull request #874 from openziti/add.enforcer.metrics
adds metrics for api session and service policy enforcers
2022-01-31 10:04:07 -05:00
Paul Lorenz 5be9095e60 Update to use channel library 2022-01-28 11:35:15 -05:00
Andrew Martinez 1680a7d898 switch to meter for deletes 2022-01-24 13:16:43 -05:00
Andrew Martinez b36c890c42 fix gauges 2022-01-24 11:24:15 -05:00
Andrew Martinez 2fba1293af adds metrics for api session and service policy enforcers 2022-01-24 11:22:05 -05:00
Paul Lorenz 3f69bfdd43 Update for control channel API changes 2022-01-19 08:37:40 -05:00
Andrew Martinez 236babd62c adds start/end times for events 2022-01-18 14:19:52 -05:00
Andrew Martinez 1f784d89ce adds asynchronous eventer to controller
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
  transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00
Andrew 9bd955127c Merge pull request #866 from openziti/broker.async.bbolt.tx
move broker event handlers to go routines
2022-01-18 09:27:17 -05:00
Paul Lorenz f1709586a2 Merge pull request #864 from openziti/cache-tunnel-sessions
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-18 09:15:05 -05:00
Andrew Martinez 9b05d4e49b move broker event handlers to go routines 2022-01-17 13:59:33 -05:00
Andrew Martinez 4be50ea143 adds zero start time check 2022-01-17 10:24:00 -05:00
Andrew Martinez 050b0b086e moves metric endpoint logging lower in the stack
- endpoint url/path -> name remains the same
- start timing on request context before we start processing
- log metrics in IsAllowed which is called by all endpoint after routing
- logging before routing to a handler would log all probe attacks
2022-01-17 10:12:59 -05:00
Paul Lorenz fd866e7f3d Cache tunnel sessions in LRU cache to avoid creating extraneous sessions 2022-01-13 12:38:54 -05:00
Andrew 9a42304511 Merge pull request #858 from openziti/add.router.re-enroll.logic
Add.router.reenroll.logic
2022-01-07 08:53:03 -05:00
Andrew c8facce38f Merge pull request #861 from openziti/add.metrics.for.all.endpoints
adds metrics for endpoints with keys of path[method]
2022-01-06 14:46:29 -05:00
Andrew Martinez 8b20f0278a normalize URL ids for metric names 2022-01-06 14:42:31 -05:00
Andrew Martinez 65702f502a swap from brackets to period seperators 2022-01-06 14:11:01 -05:00
Andrew Martinez dfa0f7c6ab adds metrics for endpoints with keys of path[method] 2022-01-06 14:02:36 -05:00
Paul Lorenz 7b1ee2893d Add identity refresh meter 2022-01-06 13:45:18 -05:00
Andrew Martinez cf20c2dfa8 adds api tests 2022-01-03 15:54:51 -05:00
Andrew Martinez 770c7bcd06 adds re-enrollment logic for edge-routers 2022-01-03 09:06:33 -05:00
Andrew Martinez 97773f5917 update log messages w/ router context 2021-12-20 09:20:10 -05:00
Andrew Martinez 37f5f88944 remove unused REST API 2021-12-20 09:19:14 -05:00
Andrew Martinez dae084f61c alters router/controller enrollment extension logic
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
Paul Lorenz 0d66f75eb8 Add additional fields and make field names more consistent 2021-12-14 09:58:24 -05:00
Paul Lorenz 31107eb4d4 Update for removing custom bbolt version with trace support 2021-12-11 00:34:40 -05:00
Paul Lorenz bfcb037783 Initial pass at fabric rest api working (#838)
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
Paul Lorenz f1af4df5d8 Merge pull request #837 from openziti/fix-panic
Fix panic caused by missing return on error
2021-11-17 10:34:23 -05:00
Paul Lorenz 66ed64d749 Fix panic caused by missing return on error 2021-11-17 10:22:56 -05:00
Paul Lorenz 96cdde0227 Enrolment -> Enrollment in spec 2021-11-10 13:19:08 -05:00
Paul Lorenz de45dc0554 Remove some unused types. Fix version map 2021-11-09 09:18:15 -05:00
Andrew Martinez 027f8673ce patch client cert instead of using verify options 2021-11-05 10:47:45 -04:00
Andrew Martinez ece9e8222a formating directive fix 2021-11-05 10:27:00 -04:00
Andrew Martinez 1f9ca6878a changes client cert validation
- adds test for client cert validation expectations
- adds certificat authenticator create
2021-11-05 10:10:17 -04:00
Paul Lorenz 24ae6dbb19 Fix panic on session view 2021-11-02 16:40:22 -04:00
Andrew 8e53e50fd9 Merge pull request #818 from openziti/identity.enrollment.extension
adds identity cert extension endpoint to client/man API
2021-11-02 13:24:29 -04:00
Andrew 62ae85539f Merge pull request #819 from openziti/gosec.improvements
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
Paul Lorenz 2d4260e76e Allow using a specific bolt db file for tests 2021-10-26 14:19:24 -04:00
Andrew Martinez c8de8a8fac fixes gosec output of a few items 2021-10-21 17:40:52 -04:00
Andrew Martinez a1f7a48cdc adds identity cert extension endpoint to client/man API
- now supports POST /current-identity/authenticators/{id}/extend for
  cert authenticators
- adds test for cert extension endpoint
2021-10-21 15:12:30 -04:00
Paul Lorenz 7d483a822b Merge pull request #817 from openziti/fix-panic-on-invalid-service
Fix panic on invalid service. Error wasn't getting saved
2021-10-20 13:47:30 -04:00
Paul Lorenz 40389c1f88 Fix panic on invalid service. Error wasn't getting saved 2021-10-20 13:37:56 -04:00
Andrew Martinez 050d5eb0dc fix possible formatting error 2021-10-19 11:31:31 -04:00
Andrew Martinez 6612ad9c14 fix startup timing issues 2021-10-19 10:58:59 -04:00
Andrew Martinez 45158ff864 updates to newest foundation/fabric/sdk-golang 2021-10-18 16:07:33 -04:00
Andrew Martinez 49006ab9f6 fixes posture check timeouts that sit at 0 after endpoint states 2021-10-07 10:22:57 -04:00
Andrew Martinez 6b80d444a0 remove old dgrijalva jwt ref 2021-10-01 11:17:00 -04:00
Paul Lorenz 0c8206b8d4 Don't allow hashtags or at symbols on role attributes. Fixes #786 2021-09-22 10:31:01 -04:00