Commit Graph

1206 Commits

Author SHA1 Message Date
Paul Lorenz 2b7db10913 Allow routers more control over link management (#318)
* Allow routers more control over link management
2022-03-07 12:22:17 -05:00
Geoff Berl b8e2fb4369 Merge pull request openziti/fabric#327 from openziti/add-global-constants
Added global constants for use in this and other projects
2022-03-03 15:14:50 -05:00
gberl002 a934a76732 Removing contstants files and placing them in respective existing files 2022-03-02 17:19:24 -05:00
Geoff Berl cbb0ad6f9e Merge pull request #906 from openziti/add-global-constants
Added global constants for use in this and other projects
2022-03-02 16:07:11 -05:00
gberl002 698806db0a Moving constants to the natively used file 2022-03-02 15:52:03 -05:00
Cam Otts 4dcd0281ab added handling for allow traversal flag (#905)
* added handling for allow traversal flag

* Refactor allowTraversal to be flipped to noTraversal

* updated fabric deps
2022-03-02 14:12:49 -06:00
Cam Otts 725afe13de added allow traversal flag (#326)
* added allow traversal flag

* Added test to verify a single router connection that is marked untraversable fails path creating

* Updated default cost to be one step above the threshold to avoid overflow.

* Updated checks to only care about middle routers. Fixed relevant unit tests and added test with untraversable middle router.

* Refactor allowTraversal to be flipped to noTraversal

* default noTraversal to false
2022-03-02 10:33:04 -06:00
Andrew Martinez 3e5f08c99f adds cert authenticator extension endpoint
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
  their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
Paul Lorenz 291c2df0c5 Allow service name for fabric service requests 2022-03-01 12:01:40 -05:00
Paul Lorenz 5fc81fbf18 Update to use channel trace 2022-02-28 15:39:27 -05:00
gberl002 0ed9828bd4 Added global constants files for use in this and other projects 2022-02-28 14:16:15 -05:00
gberl002 ce9dce27a3 Added global constants files for use in this and other projects 2022-02-28 13:51:23 -05:00
Cam Otts 141ef27526 Router cost (#899)
* Added cost to routers and handled in edge

* moved transit router cost to base

* updated fabric dependency

* removed some import changes and made cost required on update

* small whitespace diff
2022-02-25 09:27:26 -06:00
Paul Lorenz 6a21f127ff notify route strategy of failure on timeout 2022-02-25 08:43:56 -05:00
Paul Lorenz 0f782ce144 Address review comment 2022-02-24 11:56:39 -05:00
Paul Lorenz 3fd000a1bd Separate fabric and edge entity counts for parent/child stores 2022-02-24 11:26:44 -05:00
Cam Otts be30ee8026 Added cost to routers and relevant persistence and path checking. (#324)
* Added cost to routers and relevant persistence and path checking.

* removed router cost from config

* changed cost to be required on update

* removed some import reorderings and added fingerprint to be required

* missed one line
2022-02-23 10:14:00 -06:00
Paul Lorenz db9e66e222 Merge pull request openziti/fabric#323 from openziti/circuit-event-refactor
Refactor circuit events. All circuit events now show all circuit data…
2022-02-22 13:33:22 -05:00
Paul Lorenz e18e4a16fb Add back in commented out test code 2022-02-17 19:33:16 -05:00
Paul Lorenz dbac831bee Add edge router events test 2022-02-17 15:58:25 -05:00
Paul Lorenz 883312255f address review comments 2022-02-17 15:47:47 -05:00
Paul Lorenz 91585a84b7 Refactor circuit events. All circuit events now show all circuit data. Fixes openziti/fabric#322 2022-02-17 15:37:53 -05:00
Paul Lorenz 5eaa60e236 Use RemoveCB to update cache atomically. Do uncached lookup when updating cache 2022-02-17 15:35:57 -05:00
Paul Lorenz 06679b93a9 Remove fabric callback that are no longer needed 2022-02-17 11:13:15 -05:00
Paul Lorenz 01fa63e716 Use updated store events. Fixes openziti/fabric#319 2022-02-17 10:41:38 -05:00
Paul Lorenz 76e139a26d Remove deprecated management channel operations 2022-02-15 15:45:32 -05:00
Andrew Martinez d40f53d486 update comments, add patch updatedAt test 2022-02-10 11:06:54 -05:00
Paul Lorenz 675b16ef98 Don't call message sends in control channel bind 2022-02-10 09:20:23 -05:00
Andrew Martinez 52b0c7acab alters posture query updateAt to also indicate query state changes
- formerly posture queries only had an updatedAt time copied from the
  source posture check which. For MFA posture checks this is only
  correct when not using promptOnWake/Unlock
- prompt timer reductions due to wake/unlock now update postureQuery
  updatedAt values
- subsequent reconfigurations to the posture check (i.e. patching a
  posture check) is also taken into account - latest time.Time wins
- test for MFA posture check no longer use gabs and instead use the
  relevant input/output rest_model.* structures
2022-02-09 16:30:54 -05:00
Andrew Martinez 6d48a962de adds criteria output to service request failures for MFA posture checks
- adds all criteria for mfa evaluation to failure for model/REST API
2022-02-04 15:23:39 -05:00
Paul Lorenz 5aacc4b247 Split scan from evaluate in posture cache to avoid nested view. Fixes #886 2022-02-02 18:02:16 -05:00
Paul Lorenz f14ff5e0ed Update xgress edge to updated channel library/api 2022-01-31 22:24:38 -05:00
Paul Lorenz 3cfea85bf7 Update links to use channel library 2022-01-31 15:52:10 -05:00
Andrew ddd383ef23 Merge pull request #874 from openziti/add.enforcer.metrics
adds metrics for api session and service policy enforcers
2022-01-31 10:04:07 -05:00
Paul Lorenz e9133f4a94 Update router side of control channel to use channel library 2022-01-28 12:38:26 -05:00
Paul Lorenz 5be9095e60 Update to use channel library 2022-01-28 11:35:15 -05:00
Paul Lorenz 93ba2f460f Merge remote-tracking branch 'origin/main' into update-channel 2022-01-28 11:09:47 -05:00
Andrew Martinez 27c9aaf2ed add host/san validation 2022-01-28 10:01:49 -05:00
Paul Lorenz 84ae5576e1 Update to use channel library 2022-01-27 16:46:21 -05:00
Andrew Martinez 58f2268f35 add doc 2022-01-27 11:17:27 -05:00
Andrew Martinez 08e658514a adds newListener and newAddress options for controller ip/hostname move
- ctrl section for fabric now supports newListener addresses, sent on
  router connect
- xweb bindPoints now support newAddress, sent as a header on every
  response
2022-01-27 10:17:53 -05:00
Andrew Martinez 1680a7d898 switch to meter for deletes 2022-01-24 13:16:43 -05:00
Paul Lorenz 4f5e7b3591 check idle circuits against path 2022-01-24 13:07:14 -05:00
Andrew Martinez b36c890c42 fix gauges 2022-01-24 11:24:15 -05:00
Andrew Martinez 2fba1293af adds metrics for api session and service policy enforcers 2022-01-24 11:22:05 -05:00
Paul Lorenz c425cc84a8 Move some events/metrics code from foundation to fabric 2022-01-20 17:22:50 -05:00
Paul Lorenz 3f69bfdd43 Update for control channel API changes 2022-01-19 08:37:40 -05:00
Paul Lorenz e781e3c713 Update control channel to new channel API 2022-01-19 08:15:33 -05:00
Andrew Martinez 236babd62c adds start/end times for events 2022-01-18 14:19:52 -05:00
Andrew Martinez 1f784d89ce adds asynchronous eventer to controller
- emits events for processing progress/state for metric instrumentation
- emits events for eventual event backlog state for metrics
- alters Trigger() to return a channel that can be waited upon
- adds ability to add eventual events within a specific bbolt
  transaction
- splits session lookup and delete into view/update transactions
- add eventual event gauge
- use CascadeCreateUpdate
- adds named functions
- documentation for 500us timeout
- grammar fixes
2022-01-18 14:19:36 -05:00