83 Commits

Author SHA1 Message Date
Andrew Martinez e01944aba2 fix #3241 fix unsafe nil fingerprint dereference (#3242)
* fix #3241 fix unsafe nil fingerprint dereference

- panic when a router connects and disconnects quickly or fails to
  authenticate
- add safe access
- add an additional safe deref during connect
2025-09-04 14:45:49 -04:00
Paul Lorenz e647d67325 Update to channel/v4 2025-04-02 15:28:59 -04:00
Paul Lorenz f79f777d33 Fix router data model 'create public key' related errors. Fixes #2932 2025-03-28 23:57:39 -04:00
Paul Lorenz ec57c80ff7 ER/T Hosting HA chaos test and fixes (#2806)
* Add ERT hosting chaos test. Also add ert terminator validation utility. Fixes #2288

* Rework ER/T terminator management based on SDK terminator management code

* Update deps

* Make sdk/ert-terminators into a constant
2025-02-25 17:02:21 -05:00
Paul Lorenz 03870760c3 Ensure restores and migrations work properly with RDM. Add restore from db for HA Clusters. Fixes #2549. Fixes #2649. Fixes #2707 2025-01-31 13:57:43 -05:00
Paul Lorenz 5429ce5064 Separate leader updates from controller cluster member updates 2025-01-09 16:18:34 -05:00
Paul Lorenz 84fba8a3e5 Logging tweaks and add missing code in factory_wrapper 2025-01-08 15:48:45 -05:00
Paul Lorenz a4d66f863b Switch router storage to serialized protobuf, rather than json 2025-01-07 19:23:06 -05:00
Paul Lorenz b9ed77e706 Fix concurrency issues. Add posture check verification. 2025-01-07 19:22:47 -05:00
Paul Lorenz c404a3a5bd Add config/config type tests for router data model 2025-01-07 19:22:47 -05:00
Paul Lorenz d84292cfd9 Fix tests 2025-01-07 19:22:47 -05:00
Paul Lorenz 37a80da89b Add RDM config, including a ctrl side disable flag. Fixes #2596 2025-01-07 19:22:47 -05:00
Paul Lorenz a34478bb06 Fix controller endpoint updates and update deps. Test RDM with HA. 2025-01-07 19:22:46 -05:00
Paul Lorenz 6517a7c22f Move routers to a subscription model where they subcribe to model data from one controller for a limited time. Fixes #2599 2025-01-07 19:21:53 -05:00
Paul Lorenz e16f97a7ea Router data model fixes. Add standard error when no leader is present. Fixes #2232 2025-01-07 19:21:53 -05:00
Paul Lorenz e09c56867c Remove HA config from router. Fixes #2566 2025-01-07 19:21:53 -05:00
Paul Lorenz 29a199ce12 Add router data model chaos test. Fixes #2550 2025-01-07 19:21:53 -05:00
Paul Lorenz 16f0a858e6 Add controller connect events. Fixes #1835. Fixes #2234 2024-11-01 15:21:01 -04:00
Paul Lorenz cccf0c06af Update to channel/v3. Fixes #2390 2024-09-09 12:23:25 -04:00
Paul Lorenz f731405ac0 Re-enable xgress MTU, with 0 disabling chunking. Implement frame when chunked. Fixes #2336 2024-08-21 12:24:00 -04:00
Paul Lorenz 0945427320 Migrated edge router tunneler code to use the router data model. Fixes #2121 2024-07-26 17:06:01 -04:00
Paul Lorenz 77d27ca781 Enhance the router data model with config information, fixes #2010 Add subscription model to router data model, fixes #1990 2024-07-17 14:31:39 -04:00
Paul Lorenz c3b43133d1 Merge fabric and controller model code. Fixes #2205 2024-07-09 16:11:01 -04:00
Andrew Martinez 9cb11be544 fixes standalone OIDC where the server JWT signer token was not added 2024-06-11 14:06:06 -04:00
Paul Lorenz 898e41ae2a Implement router data model changesets. Fixes #1966 2024-04-23 11:56:10 -04:00
Paul Lorenz 32d743ff11 Update router data model with: add service policy type, flesh out identity. Fixes #1950 Fixes #1951 2024-04-17 14:57:20 -04:00
Paul Lorenz d62e3cb71f Use cmap IterCB instead of IterBuffered where possible. Fixes #1902 2024-04-04 21:27:38 -04:00
Andrew Martinez e59f9b8d66 fix LoadOneById name change 2024-03-26 11:00:15 -04:00
Andrew Martinez 8c7b3b2e84 reduces prerms from admin to authenticated on list controllers
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
Paul Lorenz 3cdb009aea Merge pull request #1853 from openziti/fix-db-validation
Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.
2024-03-21 13:51:02 -04:00
Paul Lorenz 881ec14b63 Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method. 2024-03-21 10:10:07 -04:00
Paul Lorenz 1e17a70d3f Don't allow session sync to block channel. Fixes #1849 2024-03-20 14:02:18 -04:00
Andrew Martinez a3c3da870f pr changes, fixes revocation events 2024-03-05 09:48:13 -05:00
Andrew Martinez 401de61bbc spelling errors 2024-02-29 10:06:22 -05:00
Andrew Martinez 09542c7728 consolidated ha changes 2024-02-29 09:27:56 -05:00
Paul Lorenz a84369a6e9 Consolidate fabric and edge persistence code. Fixes #1555 2023-12-06 17:36:37 -05:00
Paul Lorenz b270d18faf Add additional logging. Remove unnecessary router lookups. May address #1460 2023-10-31 14:57:06 -04:00
Paul Lorenz f3d67b7f49 Update fabric imports 2023-09-28 23:34:28 -04:00
Paul Lorenz 07da3cd513 Merge remote-tracking branch 'edge/main' into merge-edge
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz 5b59ae13ee Update for moved packages in fabric 2023-08-23 09:40:05 -04:00
Paul Lorenz dba0fb6f7c Move protobufs to common 2023-08-04 17:01:15 -04:00
Paul Lorenz 8b3092a3d9 Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz 1f5eed5956 Move eid to common 2023-08-04 11:46:53 -04:00
Andrew Martinez 8c8709ea72 Merge branch 'main' into jwt.auth 2023-07-24 15:42:46 -04:00
Andrew Martinez 414cff49d7 adds support OIDC authentication, api access, and ER connections 2023-07-20 09:41:12 -04:00
Paul Lorenz 62b73c231c Fix panic in router disconnect when fingerprint is nil. Fixes #1548 2023-07-13 12:03:38 -04:00
Andrew Martinez 2f51b4acd7 reworks broker/sync connect/disconnect logic
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
Paul Lorenz 2509f9b575 update CODEOWNERS to sig-core and update MM notifications 2022-11-30 14:34:10 -05:00
Paul Lorenz fe93c5fac6 Fix panic when improperly parsing protocol ports from ER hello. Fixes #1253 2022-11-22 11:46:27 -05:00
Andrew Martinez 5dc8a66fe9 addresses #1226 api session certificate issues w/ 3rd party cas
- events during a multi-step transaction were immediately emitting events
  causing out of order and incomplete events to be received,
  specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
  did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00