Andrew Martinez
e01944aba2
fix #3241 fix unsafe nil fingerprint dereference ( #3242 )
...
* fix #3241 fix unsafe nil fingerprint dereference
- panic when a router connects and disconnects quickly or fails to
authenticate
- add safe access
- add an additional safe deref during connect
2025-09-04 14:45:49 -04:00
Paul Lorenz
e647d67325
Update to channel/v4
2025-04-02 15:28:59 -04:00
Paul Lorenz
f79f777d33
Fix router data model 'create public key' related errors. Fixes #2932
2025-03-28 23:57:39 -04:00
Paul Lorenz
ec57c80ff7
ER/T Hosting HA chaos test and fixes ( #2806 )
...
* Add ERT hosting chaos test. Also add ert terminator validation utility. Fixes #2288
* Rework ER/T terminator management based on SDK terminator management code
* Update deps
* Make sdk/ert-terminators into a constant
2025-02-25 17:02:21 -05:00
Paul Lorenz
03870760c3
Ensure restores and migrations work properly with RDM. Add restore from db for HA Clusters. Fixes #2549 . Fixes #2649 . Fixes #2707
2025-01-31 13:57:43 -05:00
Paul Lorenz
5429ce5064
Separate leader updates from controller cluster member updates
2025-01-09 16:18:34 -05:00
Paul Lorenz
84fba8a3e5
Logging tweaks and add missing code in factory_wrapper
2025-01-08 15:48:45 -05:00
Paul Lorenz
a4d66f863b
Switch router storage to serialized protobuf, rather than json
2025-01-07 19:23:06 -05:00
Paul Lorenz
b9ed77e706
Fix concurrency issues. Add posture check verification.
2025-01-07 19:22:47 -05:00
Paul Lorenz
c404a3a5bd
Add config/config type tests for router data model
2025-01-07 19:22:47 -05:00
Paul Lorenz
d84292cfd9
Fix tests
2025-01-07 19:22:47 -05:00
Paul Lorenz
37a80da89b
Add RDM config, including a ctrl side disable flag. Fixes #2596
2025-01-07 19:22:47 -05:00
Paul Lorenz
a34478bb06
Fix controller endpoint updates and update deps. Test RDM with HA.
2025-01-07 19:22:46 -05:00
Paul Lorenz
6517a7c22f
Move routers to a subscription model where they subcribe to model data from one controller for a limited time. Fixes #2599
2025-01-07 19:21:53 -05:00
Paul Lorenz
e16f97a7ea
Router data model fixes. Add standard error when no leader is present. Fixes #2232
2025-01-07 19:21:53 -05:00
Paul Lorenz
e09c56867c
Remove HA config from router. Fixes #2566
2025-01-07 19:21:53 -05:00
Paul Lorenz
29a199ce12
Add router data model chaos test. Fixes #2550
2025-01-07 19:21:53 -05:00
Paul Lorenz
16f0a858e6
Add controller connect events. Fixes #1835 . Fixes #2234
2024-11-01 15:21:01 -04:00
Paul Lorenz
cccf0c06af
Update to channel/v3. Fixes #2390
2024-09-09 12:23:25 -04:00
Paul Lorenz
f731405ac0
Re-enable xgress MTU, with 0 disabling chunking. Implement frame when chunked. Fixes #2336
2024-08-21 12:24:00 -04:00
Paul Lorenz
0945427320
Migrated edge router tunneler code to use the router data model. Fixes #2121
2024-07-26 17:06:01 -04:00
Paul Lorenz
77d27ca781
Enhance the router data model with config information, fixes #2010 Add subscription model to router data model, fixes #1990
2024-07-17 14:31:39 -04:00
Paul Lorenz
c3b43133d1
Merge fabric and controller model code. Fixes #2205
2024-07-09 16:11:01 -04:00
Andrew Martinez
9cb11be544
fixes standalone OIDC where the server JWT signer token was not added
2024-06-11 14:06:06 -04:00
Paul Lorenz
898e41ae2a
Implement router data model changesets. Fixes #1966
2024-04-23 11:56:10 -04:00
Paul Lorenz
32d743ff11
Update router data model with: add service policy type, flesh out identity. Fixes #1950 Fixes #1951
2024-04-17 14:57:20 -04:00
Paul Lorenz
d62e3cb71f
Use cmap IterCB instead of IterBuffered where possible. Fixes #1902
2024-04-04 21:27:38 -04:00
Andrew Martinez
e59f9b8d66
fix LoadOneById name change
2024-03-26 11:00:15 -04:00
Andrew Martinez
8c7b3b2e84
reduces prerms from admin to authenticated on list controllers
...
- updated public key sync to use controller list data instead of mesh peer
- fixes perms on controller list to not be admin only
2024-03-26 10:55:50 -04:00
Paul Lorenz
3cdb009aea
Merge pull request #1853 from openziti/fix-db-validation
...
Fix validation perf. Fixes #1428 . Remove duplicate LoadOneById method.
2024-03-21 13:51:02 -04:00
Paul Lorenz
881ec14b63
Fix validation perf. Fixes #1428 . Remove duplicate LoadOneById method.
2024-03-21 10:10:07 -04:00
Paul Lorenz
1e17a70d3f
Don't allow session sync to block channel. Fixes #1849
2024-03-20 14:02:18 -04:00
Andrew Martinez
a3c3da870f
pr changes, fixes revocation events
2024-03-05 09:48:13 -05:00
Andrew Martinez
401de61bbc
spelling errors
2024-02-29 10:06:22 -05:00
Andrew Martinez
09542c7728
consolidated ha changes
2024-02-29 09:27:56 -05:00
Paul Lorenz
a84369a6e9
Consolidate fabric and edge persistence code. Fixes #1555
2023-12-06 17:36:37 -05:00
Paul Lorenz
b270d18faf
Add additional logging. Remove unnecessary router lookups. May address #1460
2023-10-31 14:57:06 -04:00
Paul Lorenz
f3d67b7f49
Update fabric imports
2023-09-28 23:34:28 -04:00
Paul Lorenz
07da3cd513
Merge remote-tracking branch 'edge/main' into merge-edge
...
Updated package names
Merged golangci-lint configurations
2023-09-27 16:54:53 -04:00
Paul Lorenz
5b59ae13ee
Update for moved packages in fabric
2023-08-23 09:40:05 -04:00
Paul Lorenz
dba0fb6f7c
Move protobufs to common
2023-08-04 17:01:15 -04:00
Paul Lorenz
8b3092a3d9
Merge pull request #1566 from openziti/prep-for-ziti-merge-p2
...
Move eid to common
2023-08-04 16:35:26 -04:00
Paul Lorenz
1f5eed5956
Move eid to common
2023-08-04 11:46:53 -04:00
Andrew Martinez
8c8709ea72
Merge branch 'main' into jwt.auth
2023-07-24 15:42:46 -04:00
Andrew Martinez
414cff49d7
adds support OIDC authentication, api access, and ER connections
2023-07-20 09:41:12 -04:00
Paul Lorenz
62b73c231c
Fix panic in router disconnect when fingerprint is nil. Fixes #1548
2023-07-13 12:03:38 -04:00
Andrew Martinez
2f51b4acd7
reworks broker/sync connect/disconnect logic
...
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
Paul Lorenz
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
Paul Lorenz
fe93c5fac6
Fix panic when improperly parsing protocol ports from ER hello. Fixes #1253
2022-11-22 11:46:27 -05:00
Andrew Martinez
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00