 Adam Ierymenko
|
4436824faf
ipauth characteristic now works with ARP
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
9d7ff26f25
Helps if you actually add the ipauth mask to the characteristics mask.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
72653e54f9
Finish wiring up ipauth and macauth to Network filter.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
b679ebde3b
Ad-hoc networks, a cool and easy to implement little feature that allows controllerless networks. These only allow IPv6 6plane, no multicast, and the network ID encodes the allowed port range.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
cdc289fa9c
Tags work.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
672f17c6e9
Add a mask and value range to the IP tos rule field. This allows TOS to be matched more usefully. This will break anyone using tos in the beta, but nobody seems to be and its pre-release so now is the time.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
78d548458b
Capabilities basically work but need to refactor a bit for performance reasons.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
9ddc2a4331
Add a break action to rules engine to make capabilities easier to use.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
5dbebc513a
Minor send path refactor to make packet I/O work on clusters if they are members of networks. Also fix a crash if compiled in cluster mode but no cluster is enabled.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
ed31cb76d6
Fix to cluster network configs.
|
%!s(int64=8) %!d(string=hai) anos |
|
Adam Ierymenko
|
0b3b994241
Relay policy can now be computed.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
c8554504f3
.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
6b12d86209
Add a workaround for an edge case in TEE/REDIRECT if we are the inbound destination and teeing is only being done on the outbound side.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
fe530548bb
Fix MATCH_RANDOM in controller.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
2eaff6d484
Fix to characteristcs in rules engine.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
27d997a2e5
.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
6469aa9df9
typo
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
ce6b5bc6f5
.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
4f3775bb86
Fix ICMP match.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
8850a8610a
Fix filter trace.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
e53f63ca87
Broke down and added an OR to the rules engine. It is now possible to have a series of MATCHes that are ORed.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
45c4ccb153
Add a tags both equal match.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
adeb7e7da0
Make capability flags match more user-friendly and appropriate since "match any flag" is generally what we want.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
988049f39b
Add new rule to rules engine: random match.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
9eaa3756f8
Fix deadlock-causing regression in Network.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
4fe9a4fe83
Fix memory leak.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
9f550292fe
Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
cc4bacc199
Cleanup, and implement compression disable flag for networks.
|
%!s(int64=9) %!d(string=hai) anos |
|
Adam Ierymenko
|
15c07c58b6
Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit).
|
%!s(int64=9) %!d(string=hai) anos |
