Paul Lorenz 18518041b7 Fix lock order inversion in ConnectionTracker. Fixes #4208 ...

- releases the per-identity lock before acquiring the cmap shard lock when the scan
  loop reaps an entry, establishing a single shard-lock-then-value-lock order
- extracts the entry removal into removeIfEmpty, which decides based on the value
  currently in the map, so an identity that reconnects after the scan decided to
  remove it is left alone
- takes the per-identity lock in the removal check, fixing an unsynchronized read of
  the router map
- documents the lock ordering invariant on identityConnections
- adds tests covering concurrent scanning and connect/disconnect handling, entry
  reaping, and reconnection between the scan's decision and the removal
- adds a Release 1.6.19 changelog entry

(cherry picked from commit 0451ca7ebc)

2026-07-31 14:08:53 -04:00

..

api_session_certificate_manager.go

fixes #2281 api session certificates now return a chain

2024-08-08 10:22:42 -04:00

api_session_certificate_model.go

Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.

2024-03-21 10:10:07 -04:00

api_session_heartbeats.go

Update deps and changelog

2025-09-19 16:47:48 -04:00

api_session_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

api_session_model.go

fix.3048.auth.events.impropert.chain.flag (#3050)

2025-05-21 11:49:39 -04:00

auth_policy_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

auth_policy_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

authenticator_manager.go

Add indexes for authenticator username and fingerprint. Fixes #3219 Also use externalId index in IdentityManager.

2025-09-02 21:55:01 -04:00

authenticator_mod_cert.go

fixed #3117 authenticators last auth to root, updatedAt, createdAt flags (#3118)

2025-06-18 09:18:13 -04:00

authenticator_mod_ext_jwt_test.go

fix ineffectual assignment to err golint

2024-09-12 10:29:50 -04:00

authenticator_mod_ext_jwt.go

fix.3048.auth.events.impropert.chain.flag (#3050)

2025-05-21 11:49:39 -04:00

authenticator_mod_updb.go

fix.3048.auth.events.impropert.chain.flag (#3050)

2025-05-21 11:49:39 -04:00

authenticator_model.go

fix.3048.auth.events.impropert.chain.flag (#3050)

2025-05-21 11:49:39 -04:00

authenticator.go

fix #3236 SDK/ENV info is not saved on OIDC auth (#3137)

2025-08-05 09:51:00 -04:00

base_manager.go

HA SDK terminators test. Fixes #2217. Fixes #2533

2024-11-12 18:45:08 -05:00

base_model.go

Update fabric imports

2023-09-28 23:34:28 -04:00

ca_manager.go

fix.3048.auth.events.impropert.chain.flag (#3050)

2025-05-21 11:49:39 -04:00

ca_model.go

backport openziti/ziti#3952 to v1.6 reject invalid externalIdClaim and stop enrollment panic (#3954)

2026-06-12 13:53:53 -04:00

ca_test.go

backport openziti/ziti#3952 to v1.6 reject invalid externalIdClaim and stop enrollment panic (#3954)

2026-06-12 13:53:53 -04:00

circuit_manager.go

Implement circuit validation API and CLI. Fixes #3098

2025-06-16 13:57:42 -04:00

command_test.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

command.go

ids used by circuits and ingress/egress can conflict in an HA setup. Fixes #3124

2025-06-18 11:24:16 -04:00

config_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

config_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

config_type_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

config_type_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

connection_tracker_test.go

Fix lock order inversion in ConnectionTracker. Fixes #4208

2026-07-31 14:08:53 -04:00

controller_manager.go

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

controller_model.go

HA SDK terminators test. Fixes #2217. Fixes #2533

2024-11-12 18:45:08 -05:00

create_terminator_cmd.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

edge_router_manager_test.go

Sort connected routers first for session ers. Increase er limit to 25. Fixes #2046

2024-07-12 15:33:17 -04:00

edge_router_manager.go

fixes #3239 router enrollment used identity expiration duration (#3240)

2025-08-26 09:28:54 -04:00

edge_router_model.go

Add support for tracking network interfaces on routers and identities. Fixes #3082. Add network discover to router. Fixes #3083

2025-06-17 09:32:51 -04:00

edge_router_policy_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

edge_router_policy_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

edge_service_manager.go

Migrated edge router tunneler code to use the router data model. Fixes #2121

2024-07-26 17:06:01 -04:00

edge_service_model.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

enrollment_manager.go

fixes #3239 router enrollment used identity expiration duration (#3240)

2025-08-26 09:28:54 -04:00

enrollment_mod_ca.go

fixes #3068 adds event dispatching for auto ca enrollment (#3069)

2025-05-29 16:05:33 -04:00

enrollment_mod_erott.go

fix #2996 add ability to flag cert authenticators for extension/key roll (#3025)

2025-05-01 17:41:00 -04:00

enrollment_mod_ott.go

fix #2996 add ability to flag cert authenticators for extension/key roll (#3025)

2025-05-01 17:41:00 -04:00

enrollment_mod_ottca.go

fix #2996 add ability to flag cert authenticators for extension/key roll (#3025)

2025-05-01 17:41:00 -04:00

enrollment_mod_trott.go

fix #2996 add ability to flag cert authenticators for extension/key roll (#3025)

2025-05-01 17:41:00 -04:00

enrollment_mod_updb.go

Fix.api.session.synth.jwt (#2935)

2025-03-26 11:24:17 -04:00

enrollment_model.go

fixes #3239 router enrollment used identity expiration duration (#3240)

2025-08-26 09:28:54 -04:00

enrollment.go

fixes #2796 generated clients for enrollment do not work (#2883)

2025-03-17 10:05:15 -04:00

env.go

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

external_jwt_signer_manager.go

fixes #2681 adds targetToken support for ext jwt signers (#2686)

2025-02-07 14:21:49 -05:00

external_jwt_signer_model.go

fixes #2681 adds targetToken support for ext jwt signers (#2686)

2025-02-07 14:21:49 -05:00

hash.go

Reorganize code in preparation for merging to ziti repo, first pass.

2023-08-04 09:48:06 -04:00

identity_manager_test.go

Fix identity service config overrides referential integrity issue. Fixes #2506

2024-10-29 11:49:37 -04:00

identity_manager.go

Fix lock order inversion in ConnectionTracker. Fixes #4208

2026-07-31 14:08:53 -04:00

identity_model.go

Add support for tracking network interfaces on routers and identities. Fixes #3082. Add network discover to router. Fixes #3083

2025-06-17 09:32:51 -04:00

identity_type_manager.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

identity_type_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

interface_model.go

Add support for tracking network interfaces on routers and identities. Fixes #3082. Add network discover to router. Fixes #3083

2025-06-17 09:32:51 -04:00

link_manager_test.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

link_manager.go

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

link_model.go

Support multi-underlay links. Fixes #3134

2025-07-11 20:56:11 -04:00

managers.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3764

2026-04-03 18:29:56 -04:00

mfa_manager.go

fix #3178 apis missing from controllers (#3180)

2025-08-05 09:15:27 -04:00

mfa_model.go

Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.

2024-03-21 10:10:07 -04:00

path.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

pbutils.go

Update fabric imports

2023-09-28 23:34:28 -04:00

policy_advisor.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

posture_check_manager.go

Posture check PUTs fail to do update. Fixes #2672

2025-02-07 15:17:42 -05:00

posture_check_model_mac.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_mfa_test.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_check_model_mfa.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_os_test.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_os.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_process_multi_test.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

posture_check_model_process_multi.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_process_test.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_check_model_process.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_windows_domain.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

posture_check_type_manager.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

posture_check_type_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

posture_response_manager_test.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

posture_response_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

posture_response_model_domain.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_endpoint_state.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_mac.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_mfa.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_os.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_process.go

Add linter and fix issues found by linter

2022-10-10 16:56:51 -04:00

posture_response_model.go

Allow disabling posture checks. Fixes #3063

2025-05-29 12:40:00 -04:00

revocation_manager.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3764

2026-04-03 18:29:56 -04:00

revocation_model.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

router_manager.go

Add support for tracking network interfaces on routers and identities. Fixes #3082. Add network discover to router. Fixes #3083

2025-06-17 09:32:51 -04:00

router_model.go

Add support for tracking network interfaces on routers and identities. Fixes #3082. Add network discover to router. Fixes #3083

2025-06-17 09:32:51 -04:00

service_edge_router_policy_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

service_edge_router_policy_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

service_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

service_model.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

service_policy_manager.go

Merge fabric and controller model code. Fixes #2205

2024-07-09 16:11:01 -04:00

service_policy_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

session_manager_test.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00

session_manager.go

Add edge session events for JWT edge sessions. Fixes #3225

2025-09-02 15:37:02 -04:00

session_model.go

Fix validation perf. Fixes #1428. Remove duplicate LoadOneById method.

2024-03-21 10:10:07 -04:00

terminator_manager.go

Update to channel/v4

2025-04-02 15:28:59 -04:00

terminator_model.go

HA SDK terminators test. Fixes #2217. Fixes #2533

2024-11-12 18:45:08 -05:00

testing.go

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

transit_router_manager.go

fixes #3239 router enrollment used identity expiration duration (#3240)

2025-08-26 09:28:54 -04:00

transit_router_model.go

Consolidate fabric and edge persistence code. Fixes #1555

2023-12-06 17:36:37 -05:00