Commit Graph

1206 Commits

Author SHA1 Message Date
Paul Lorenz ef8847b34e Delete expired api sessions in batches. Remove some unused methods 2021-06-09 15:40:42 -04:00
Paul Lorenz a3dd639981 Fix setting identity service costs/precedences when patching 2021-06-08 12:54:11 -04:00
Paul Lorenz 01ed7b8a1c Add policy engine start back in 2021-06-08 12:42:08 -04:00
Paul Lorenz afa651dd40 Fix Range bug where we only sent to one ER 2021-06-08 12:36:30 -04:00
Paul Lorenz df87ccc9f5 Merge pull request #680 from openziti/fix-router-tunneler-app-data
Make sure identity host data makes it to the tunneler
2021-06-07 09:26:48 -04:00
Paul Lorenz ad9f0f2d72 Make sure identity host data makes it to the tunneler 2021-06-04 16:41:23 -04:00
Andrew Martinez 09b60f3ed8 Debugf to Infof 2021-06-04 12:30:27 -04:00
Andrew Martinez a6e0f4e807 revert defensive logic 2021-06-04 12:24:57 -04:00
Andrew 0d9f609bab Merge pull request #677 from openziti/fix.controller.config.enrollment.defaults
fix durations w/ no units
2021-06-03 11:06:17 -04:00
Andrew Martinez 127de19ce1 remove re-Start() and re-Stop() capabilities 2021-06-03 10:36:49 -04:00
Andrew Martinez 177379aa8e fix durations w/ no units 2021-06-03 08:52:24 -04:00
Andrew Martinez 087c51dd74 fixes rtx double stop panic
- stopping status was being reset causing subsequent stops to panic
- remove stopping atomic bool
- change router disconnect logging from debug to info
2021-06-01 14:00:22 -04:00
Andrew Martinez 93bfce03c2 remove go routine and simply close 2021-05-25 18:19:19 -04:00
Andrew Martinez 5a5fefa092 fixes deadlocks when a router disconnects mid sync or update
- range() of rtx'ers no longer locks, snapshots then loops
- rtx.Send() now checks for stopped/disconnected
- rtx.Send() now respects closeNotify
2021-05-25 16:23:20 -04:00
Paul Lorenz e180d2fa7b Fix updating terminators when cost is omitted 2021-05-20 11:11:25 -04:00
Paul Lorenz 3f3c1318c7 Merge pull request #665 from openziti/fix-app-data-updates
Add appData to filtered jsonfields. Remove unused identity checker field
2021-05-19 13:37:58 -04:00
Paul Lorenz 9af29b5072 Add appData to filtered jsonfields. Remove unused identity checker field 2021-05-18 21:08:19 -04:00
Andrew Martinez 603fdbd772 set base posture check properties for process multi 2021-05-18 14:39:57 -04:00
Michael Quigley fa9da87419 Refactor ctrl_pb.Dial to support both LinkId and RouterId. (#238) 2021-05-14 14:35:12 -04:00
Andrew Martinez 6ee4f6a8a5 rework CaPems for ca store calculations 2021-05-11 14:18:08 -04:00
Andrew Martinez 74c9611996 add back reading the root identity 2021-05-11 11:16:21 -04:00
Andrew Martinez cc1574fdc9 update /version endpoint
- now reports all versions, api bindings, and api bind points from xweb
- now reports api base urls (http://<bindpoint>/<api path>
- now points 'edge' to 'edge-client' api binding
2021-05-07 10:46:24 -04:00
Andrew Martinez 6625084569 use xweb for Edge Client and Management APIs
- use xweb for run
- use xweb for api tests
- use time.ParseDuration for edge configuration
- use CORS defaults in Client/Management API handlers
2021-05-06 16:45:48 -04:00
Andrew Martinez ae85cbad0b adds xweb share config validation points, time.ParseDuration
- split xweb/config.go into multiple files by type
- allow api factories to validate shared config
- use time.ParseDuration for duration config values in core xweb options
- add interface documentation for api factories
- merge http.request context values for xweb
2021-05-06 15:22:03 -04:00
Paul Lorenz 18c513034b Ensure routers get full service list, not just first 10 2021-05-06 10:51:30 -04:00
Andrew Martinez 68c4d9a030 fixes xweb comments, fixes xweb startup
- fixes multi server startup would block on first server
- fixes comments, goland was complaining
- adds better output for what APIs are starting on what servers/bind
  points
- adds IsHandled() demuxer
2021-05-05 14:11:24 -04:00
Andrew Martinez b562fb5c07 splits API specs into composible modules
- splits Open API 2.0 (swagger) into client/management APIs
- uses go-swaggers flatten capabilities
- uses newer version of go-swagger (v0.27.0)
- introduces /edge/client/v1, /edge/management/v1
- non-prefixed URLs default to /edge/client/v1
- splits some shared management/client API handlers
- renames some REST models to "client" instead of "limited"
- passes all apitests, fails dataflow upd test (main fails this as well)
- updates generate rest script for powershell
- todo: test generate rest script for bash
- todo: use xweb (different branch)
2021-05-04 11:30:32 -04:00
Paul Lorenz 5fe0091db7 Need to set id on new terminator 2021-04-30 09:21:05 -04:00
Paul Lorenz 0173a633c6 Add nill check on terminator lookup. Fix spelling mistake 2021-04-29 18:56:04 -04:00
Paul Lorenz 57da48f142 Move terminator validation from xtv to control channel handler 2021-04-29 13:46:54 -04:00
Paul Lorenz 478d8c1e0b Remove eXtensible Terminator Validator framework (xtv) as it's now unused.
terminator validation can be done in custom control channel handlers instead
2021-04-29 12:45:07 -04:00
Andrew Martinez 1919b6b5a4 Merge branch 'main' into posture.multi.process 2021-04-28 11:08:28 -04:00
Andrew Martinez 41ff14688d add PROCESS_MULTI to posture check types 2021-04-28 11:02:55 -04:00
Paul Lorenz d313d39a80 When empty router name specified, return 4xx error instead of 5xx error 2021-04-23 14:18:40 -04:00
Shawn Carey deef2bba6a Fix issues with host.v1 config type schema (#640)
- require "low", "high" properties in portRange
- fixed allowedAddresses item type in json schema docs
2021-04-23 09:39:29 -04:00
Paul Lorenz 14c632c862 Add events for router online/offline 2021-04-22 11:27:10 -04:00
Andrew Martinez 54af8801e7 adds posture check type PROCESS_MULTI
- adds a new posture check for dealing with multiple processes
- supports anyOf and allOf semantics
- does not require new posture responses, current process responses
  suffice
- tests
2021-04-20 08:52:23 -04:00
Paul Lorenz 2a2e380cb7 Add error code reporting to control channel requests 2021-04-19 14:22:07 -04:00
Paul Lorenz 503e320b58 Fix file name 2021-04-14 16:10:22 -04:00
Paul Lorenz fa56d0f487 Add test for cursor on-delete issue 2021-04-14 16:10:21 -04:00
Andrew Martinez deb46432e1 initial xweb implementation
- adds config structures
- adds server structures
- simplifies interfaces
- removed unused remnants
- refactor work
- adds doc
2021-04-14 13:19:39 -04:00
Andrew Martinez 4a9b226f0e adds the ability for router to extend their enrollment
- routers can now opt to extend their enrollment at any time with a
  previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
Andrew Martinez b278f611d0 add policyType to posture query sets
- also fixes policy ids being set as the same value due to pointer in
  for loop reference
2021-04-13 15:26:17 -04:00
Shawn Carey 0c281d998b corrected definitions in host.v1 2021-04-13 08:01:12 -04:00
Shawn Carey 2110aba5c1 host.v1 configuration type schema changes (#631)
- Rename host.v1 dialIntercepted* properties to forward*
- Add allowed* properties to whitelist destinations that are dialed via forward*
- Add allowedSourceAddresses, which serves as a whitelist for source IPs/CIDRs and informs the hosting tunneler of the local routes to establish when hosting a service
2021-04-13 07:48:47 -04:00
Andrew Martinez 4d9ea4e504 update cache instead of clearing 2021-04-08 16:00:42 -04:00
Andrew Martinez b9b624a0a0 add ability to clear the cached state of a router from bbolt
Will be used for enrollment extension where the fingerprint has been
updated
2021-04-08 16:00:41 -04:00
Paul Lorenz 34c91e480c Propagate router renames to fabric. Lookup identity by id, not name 2021-04-08 12:52:21 -04:00
Paul Lorenz 270fd077b1 Allow way to notify router of rename 2021-04-07 21:29:25 -04:00
Paul Lorenz b493cce490 Add app data to identity and edge router. Add isSystem to ERP 2021-04-06 10:07:57 -04:00