Paul Lorenz e0fcd86991 Re-test a dead link candidate before retiring it ...

The scan walks the link table and removes from it in a second pass, and on a
large table the gap between them is wide enough for a dialer to reconnect and
re-announce its links. Acting on the first pass's answer removes a link the
controller has just been told about, and a router announces its set only on
reconnect, so it does not say so again until it next connects. A soak run lost
53 links this way.

- re-tests each candidate immediately before removing it, and skips one whose dialer returned mid-scan
- takes a keep predicate, so a caller can spare links whose dialer does not re-announce them
- records whether a retired link's dialer is connected under a different object, which distinguishes a router that is genuinely away from a link still pointing at a connection that has been replaced; the second is a stale pointer rather than a dead dialer and wants a different fix

2026-10-17 16:52:41 -04:00

..

api_session_certificate_manager.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

api_session_certificate_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_heartbeats.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

auth_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

auth_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator_manager.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

authenticator_mod_cert.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

authenticator_mod_ext_jwt_test.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator_mod_ext_jwt.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_updb.go

fixes two issues

2026-02-25 09:34:59 -05:00

authenticator_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

base_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

base_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

ca_manager_cert_pop_test.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

ca_manager.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

ca_model.go

fixes #3952 reject invalid externalIdClaim and stop enrollment panic (#3953)

2026-06-12 13:52:54 -04:00

ca_test.go

fixes #3952 reject invalid externalIdClaim and stop enrollment panic (#3953)

2026-06-12 13:52:54 -04:00

circuit_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

command_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

command.go

fixes openziti/ziti#4094 accept first-party certs issued by a separat… (#4140)

2026-08-26 14:07:31 -04:00

config_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

config_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

config_type_manager.go

Add target field to config types. Fixes #3744

2026-05-27 13:17:06 -04:00

config_type_model.go

Add target field to config types. Fixes #3744

2026-05-27 13:17:06 -04:00

connection_tracker_test.go

Fix lock order inversion in ConnectionTracker. Fixes #4206

2026-07-31 14:08:08 -04:00

controller_manager.go

fixes openziti/ziti#4094 accept first-party certs issued by a separat… (#4140)

2026-08-26 14:07:31 -04:00

controller_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

create_terminator_cmd.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

edge_router_manager_test.go

Make ER/T terminator create failures diagnosable. Fixes #4193

2026-08-03 15:43:30 -04:00

edge_router_manager.go

Make ER/T terminator create failures diagnosable. Fixes #4193

2026-08-03 15:43:30 -04:00

edge_router_model.go

fixes openziti/ziti#3990 push service and posture changes to subscrib… (#4057)

2026-07-22 11:52:39 -04:00

edge_router_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

edge_router_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

edge_service_manager.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

edge_service_model.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

enrollment_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

enrollment_mod_ca.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_erott.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

enrollment_mod_ott.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

enrollment_mod_ottca.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_mod_token.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_mod_trott.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_updb.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_model.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

enrollment.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

env.go

Order peer state across controllers by the store index it rests on

2026-10-17 16:48:39 -04:00

external_jwt_signer_manager.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

external_jwt_signer_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

fabric_only_service_test.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

hash.go

Optimize imports

2026-01-28 15:01:35 -05:00

identity_manager_test.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

identity_manager.go

Fix lock order inversion in ConnectionTracker. Fixes #4206

2026-07-31 14:08:08 -04:00

identity_model.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

identity_type_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

identity_type_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

interface_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

jwks_resolver_test.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

jwks_resolver.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

link_manager_test.go

Index links by router id, and serialize the two structures that index. Fixes #4246

2026-09-10 19:55:32 -04:00

link_manager.go

Re-test a dead link candidate before retiring it

2026-10-17 16:52:41 -04:00

link_model.go

Index links by router id, and serialize the two structures that index. Fixes #4246

2026-09-10 19:55:32 -04:00

managers.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

mfa_manager.go

Replicate admin MFA removal across HA cluster members (#4284)

2026-08-24 14:46:51 -04:00

mfa_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

path.go

Set empty path when reserving circuit, to avoid panics. Fixes #3777

2026-04-07 09:25:55 -04:00

pbutils.go

Optimize imports

2026-01-28 15:01:35 -05:00

policy_advisor.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_check_model_mac.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_mfa_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_mfa.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_os_test.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_os.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_multi_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process_multi.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_windows_domain.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_check_type_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_type_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_response_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_manager.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

posture_response_model_domain.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_endpoint_state.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_model_mac.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

posture_response_model_mfa.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_os.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_process.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

posture_response_model.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

revocation_manager.go

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

revocation_model.go

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

role_attribute_usage_test.go

Add role-attribute usage queries. Fixes #1593

2026-06-10 12:39:26 -04:00

role_attribute_usage.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

router_manager_test.go

Serialize router control-channel connect/disconnect. Fixes #4196

2026-08-13 23:54:40 -04:00

router_manager.go

Serialize router control-channel connect/disconnect. Fixes #4196

2026-08-13 23:54:40 -04:00

router_model.go

Only retire a disconnected router's unpublished links when it will not prune them itself

2026-10-17 16:42:04 -04:00

service_edge_router_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_edge_router_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_model.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

service_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_manager_test.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

terminator_manager.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

terminator_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

testing.go

Order peer state across controllers by the store index it rests on

2026-10-17 16:48:39 -04:00

token_provider_cache_test.go

fixes GHSA-4h58-w989-xgg4 enforce issuer and audience in ext-jwt token enrollment

2026-08-20 15:15:26 -04:00

token_provider_cache.go

Merge commit from fork

2026-08-20 15:27:56 -04:00

transit_router_manager.go

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00

transit_router_model.go

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00