Commit Graph

1190 Commits

Author SHA1 Message Date
Paul Lorenz 0ec0dec58d Update changelog, deps and make the tls handshake rate limiter off by default 2024-04-10 14:09:48 -04:00
Paul Lorenz ff8d70e418 Move rate limiter logging to debug 2024-04-09 19:48:25 -04:00
Paul Lorenz 8f4f9944f5 Add TLS handshake rate limiter. Fixes #1904 2024-04-09 17:25:35 -04:00
Paul Lorenz 3d81cc39a4 Load test for controller with links, terminators, clients and traffic 2024-04-09 16:58:18 -04:00
Shawn Carey 4dfdabff8c respect service policies for admin identities (#1919)
respect service policies for admin identities
2024-04-09 14:34:15 -04:00
Paul Lorenz 6be77e96a5 Merge pull request #1903 from openziti/use-cmap-itercb
Use cmap IterCB instead of IterBuffered where possible. Fixes #1902
2024-04-09 13:25:44 -04:00
Paul Lorenz 3a12eee5ad Merge pull request #1901 from openziti/better-link-mgmt-backwards-compat
Improve link mgmt backwards compatibility. Fixes #1900
2024-04-09 13:24:55 -04:00
Paul Lorenz a6ec19f0c7 Merge pull request #1915 from openziti/fix-ha-ctrl-panic
Fix ha ctrl panics
2024-04-08 14:16:12 -04:00
Paul Lorenz 3bdf2634cc Fix panic on first ha controller startup. Fixes #1911 2024-04-08 12:31:35 -04:00
Paul Lorenz 84711f460a Fix panic in PeerConnected. Fixes #1914 2024-04-08 12:31:18 -04:00
Paul Lorenz d62e3cb71f Use cmap IterCB instead of IterBuffered where possible. Fixes #1902 2024-04-04 21:27:38 -04:00
Paul Lorenz ad779ed118 Improve link mgmt backwards compatibility. Fixes #1900
* We're sending peer change messages to older routers that don't understand them.
* We should probably use the older controller link management code for routers without the link management stability fixes
* Includes a few minor cleanups
2024-04-04 19:07:24 -04:00
Paul Lorenz 8d11af3d97 Optimize network run loop. Fixes #1897
* When routers change (connect/disconnect), we re-check the mesh. We are passing in the routers to the channel and they can build up, which is unnecessary. We only need to signal once for all the routers that change since the last time we checked, that the mesh needs to be checked.
* We pass link changes through the run method, which is unnecessary since we pass it to a new goroutine. This inefficiency should be fixed.
* We're evaluating all faulted links for rerouting, even if they were still pending. Only reroute connected links.
* We're using time.After in each for loop, which can accumulate timers. Use a single Ticker instead.
2024-04-04 18:46:50 -04:00
Paul Lorenz aaceb84a0f Don't save old link statues in memory, the info is in link events. Fixes #1896 2024-04-04 18:18:35 -04:00
Andrew Martinez e59f9b8d66 fix LoadOneById name change 2024-03-26 11:00:15 -04:00
Andrew Martinez 8c7b3b2e84 reduces prerms from admin to authenticated on list controllers
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
Paul Lorenz b5e96dbeea Merge pull request #1851 from openziti/posture-check-optimization
Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576
2024-03-25 10:37:30 -04:00
Paul Lorenz 58b80488bf Merge pull request #1855 from openziti/fix-unroute-panic
Fix panic if router is disconnected in unroute. Fixes #1854
2024-03-21 13:51:19 -04:00
Paul Lorenz 3cdb009aea Merge pull request #1853 from openziti/fix-db-validation
Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.
2024-03-21 13:51:02 -04:00
Paul Lorenz 5c7f53918b Merge pull request #1850 from openziti/fix-session-sync-block
Don't allow session sync to block channel. Fixes #1849
2024-03-21 13:50:45 -04:00
Paul Lorenz 881ec14b63 Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method. 2024-03-21 10:10:07 -04:00
Paul Lorenz 3c3bfb69f7 Fix panic if router is disconnected in unroute. Fixes #1854 2024-03-21 10:02:39 -04:00
Paul Lorenz a089ca7c36 Return dummy values in service list for posture checks if no posture checks are defined. Fixes #1576 2024-03-20 14:23:15 -04:00
Paul Lorenz 1e17a70d3f Don't allow session sync to block channel. Fixes #1849 2024-03-20 14:02:18 -04:00
Paul Lorenz aad1ad57cf Add api session cert index to fix lookup perf. Fixes #1846 2024-03-20 09:05:53 -04:00
Paul Lorenz 0085e92ad4 Update HA smoketest for HA changes 2024-03-18 16:38:29 -04:00
Andrew Martinez 36ced919ae Merge branch 'main' into ha-staging 2024-03-14 08:38:57 -04:00
Paul Lorenz fab81e4cd4 Add terminator chaos testing and fix issues found. Fixes #1794 Fixes #1369 2024-03-12 10:31:36 -04:00
Andrew Martinez 9cfc8e07fc update sdk/edge-api deps 2024-03-12 09:45:55 -04:00
Andrew Martinez 96ed30a200 fix store entity type copy-pasta 2024-03-06 10:18:02 -05:00
Andrew Martinez e4207d9f9f lint fixes 2024-03-05 10:25:24 -05:00
Andrew Martinez a3c3da870f pr changes, fixes revocation events 2024-03-05 09:48:13 -05:00
Andrew Martinez bfee741b20 more codespell errors 2024-02-29 10:08:37 -05:00
Andrew Martinez 401de61bbc spelling errors 2024-02-29 10:06:22 -05:00
Andrew Martinez 09542c7728 consolidated ha changes 2024-02-29 09:27:56 -05:00
dovholuknf 8d2b239db9 actually undo unexpected refactor 2024-02-27 20:43:58 -05:00
dovholuknf a7a6c82a0a initializing 2024-02-27 20:28:13 -05:00
dovholuknf e8080bdd1b minor refactor 2024-02-27 20:26:16 -05:00
dovholuknf 5b2d67e80b rearrange where the zac handler goes and keep spa handler separate 2024-02-27 20:24:39 -05:00
dovholuknf 1f94fd5ebe fix refactor gone awry 2024-02-27 18:31:33 -05:00
dovholuknf 26698531c4 rename from NewZitiAdminConsoleFactory to NewSinglePageAppFactory 2024-02-27 18:18:59 -05:00
gberl002 261e12043c Changing xweb to SPA for clarification
Signed-off-by: gberl002 <geoff.berl@netfoundry.io>
2024-02-27 14:34:02 -05:00
gberl002 20a8c30cba Merging latest from release-next 2024-02-27 13:14:41 -05:00
Andrew Martinez 935c89bb7d fixes 1354 adds hostname/domain to env info 2024-02-22 14:32:00 -05:00
gberl002 c7dd1757a3 renamed the handler to a more generic name
updated the controller config to have a zac binding in place by default

Signed-off-by: gberl002 <geoff.berl@netfoundry.io>
2024-02-12 15:31:17 -05:00
Paul Lorenz 744ae68bbd Fix controller crash. Fixes #1736 2024-02-08 21:55:48 -05:00
Paul Lorenz 3aace85a97 Refactor terminator state machine to be more like links state machine. Fixes #1733 Fixes #1734 2024-02-08 21:55:48 -05:00
Paul Lorenz 0900e24600 Fix entity event processing panic. Fixes #1725 2024-02-05 18:30:42 -05:00
Andrew f31b4ce3c3 Merge pull request #1708 from openziti/fix.1691.er.re.enrollment
fixes 1691 multiple er re-enrolls creates multiple enrollments
2024-01-31 11:56:39 -05:00
Paul Lorenz 8423a8dd6a Fix link management race conditions found by chaos testing. Fixes #1709 2024-01-29 17:23:51 -05:00