fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
97773f5917
update log messages w/ router context
2021-12-20 09:20:10 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
66638077b4
More logging tidying around terminators
2021-12-15 13:05:55 -05:00
c5c2af9737
Only match terminator if the id also matches
2021-12-11 00:35:24 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
91badfd2e8
make xgress_geneve compile on MacOS ( #820 )
2021-10-22 13:57:41 -04:00
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
9c89cb08c2
fix enrollment issues if no previous enrollment exists
2021-10-19 11:25:56 -04:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
a829f3ae27
fix bad merges w/ build flags on geneve
2021-10-18 16:13:17 -04:00
58fa1887a9
remove debug flag
2021-10-18 16:11:01 -04:00
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
99f3102c27
linux filename update
2021-10-13 23:50:50 -04:00
57ff51ff78
added empty gemeve listener for darwin and windows
2021-10-13 23:48:03 -04:00
202fbce026
Update missed hop id. Save hopIds for entity ids
2021-10-12 09:37:37 -04:00
846aae9ec3
Update deps. Only use hopId for entity ids
2021-10-11 22:28:55 -04:00
d0de60901c
Add xgress control/traceroute support
2021-10-11 22:28:53 -04:00
7863a75913
added geneve proxy xgress ( #799 )
...
* added geneve proxy xgress
2021-10-11 12:39:05 -04:00
9fe3898b59
Merge pull request #776 from openziti/set.min.tls.for.enrollment.request
...
sets the min tls version to 1.2 for enrollment
2021-09-14 09:41:23 -04:00
507ab8aaa2
sets the min tls version to 1.2 for enrollment
2021-09-13 09:38:50 -04:00
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
5baee1a3f2
Remove unused api session fields
2021-08-03 16:02:36 -04:00
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
8a1b118ed2
Fix init example and add log on successful terminator create
2021-07-29 09:27:02 -04:00
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
3151d31b7f
Handle xweb import change ( #697 )
...
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
ace44b4e75
Fix panic. Fix generate rest script. Add metric for unknown api session tokens
2021-06-21 15:17:46 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
ad9f0f2d72
Make sure identity host data makes it to the tunneler
2021-06-04 16:41:23 -04:00
025cfc204d
Move service list handler invoke out of decode loop
2021-05-06 13:00:48 -04:00
4b370e1522
Implement dialoption identity template
2021-05-04 15:34:37 -04:00
369ea5de0f
listener.close already cleaned up interceptor. don't need to do it again
2021-04-30 09:31:26 -04:00
881a0a45b2
Handle tunneler cleanup on shutdown
2021-04-29 16:37:26 -04:00
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
4a9b226f0e
adds the ability for router to extend their enrollment
...
- routers can now opt to extend their enrollment at any time with a
previous or new key
- adds tests for router enrollment
- adds tests for router enrollment extension
2021-04-14 09:21:59 -04:00
34c91e480c
Propagate router renames to fabric. Lookup identity by id, not name
2021-04-08 12:52:21 -04:00
98789b0b82
Don't remove values inside cmap iter loop
2021-04-06 10:36:26 -04:00
39626472e3
Support for intercept.v1 config type ( #618 )
...
* Support for intercept.v1 config type
2021-04-05 11:52:12 -04:00
ba1427d2d9
add posture check disconnect test
2021-03-26 09:38:14 -04:00
038e9bdd91
Add support for host.v1. Add health checks to host.v1. Add host.v2 (multiple terminators). Add support for health events.
2021-03-25 15:43:07 -04:00
208f500bce
Add tproxy empty imples for darwin and windows so router will build ( #601 )
...
* Add tproxy empty imples for darwin and windows so router will build
* Add support for tproxy lanIf option
2021-03-22 16:54:26 -04:00
680852f80e
Allow tunnel to run over xgress directly
2021-03-22 14:33:54 -04:00
38525530e7
Tests.
2021-03-12 15:17:26 -05:00
6adfbc6345
Log local address for successful dials in xgress_edge_transport
2021-03-10 14:04:13 -05:00
Paul Lorenz