Adam Ierymenko 45c4ccb153 Add a tags both equal match. 9 ani în urmă
..
Address.hpp b9dba97fdb Bunch more refactoring for an even more compact NetworkConfig representation, especially rules. 9 ani în urmă
Array.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
AtomicCounter.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 ani în urmă
Buffer.hpp 529515d1d1 Changes to how new-style binary network configs are detected, and a new-style binary serialized meta-data representation. 9 ani în urmă
C25519.cpp 38433e85bf More little stuff in crypto code. 11 ani în urmă
C25519.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
Capability.cpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 ani în urmă
Capability.hpp 45c4ccb153 Add a tags both equal match. 9 ani în urmă
CertificateOfMembership.cpp 56febbf2ba . 9 ani în urmă
CertificateOfMembership.hpp 32fa061700 Compute credential TTL et al. 9 ani în urmă
Cluster.cpp f2d2df2b11 Cluster build fix. 9 ani în urmă
Cluster.hpp a963810e02 Tweak a few cluster params for higher perf / lower initial setup latency. 9 ani în urmă
Constants.hpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 ani în urmă
Dictionary.hpp 15c07c58b6 Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 9 ani în urmă
Hashtable.hpp 8a2e8bd585 Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be. 9 ani în urmă
Identity.cpp ecc1324bb0 Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places. 9 ani în urmă
Identity.hpp 7036831203 Sign Dictionary in doNETWORK_CONFIG_REQUEST. 9 ani în urmă
IncomingPacket.cpp 7e90ab3534 TRACE verbosity increase on exceptions in NETWORK_CREDENTIALS. 9 ani în urmă
IncomingPacket.hpp 9f550292fe Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics. 9 ani în urmă
InetAddress.cpp b08ca49580 More controller work -- it builds! 9 ani în urmă
InetAddress.hpp 01129d02b3 hashCode() for InetAddress 9 ani în urmă
MAC.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
Membership.cpp 5ba7ca91c0 TRACE build fix. 9 ani în urmă
Membership.hpp eac3667ec1 Bunch more refactoring and work on revocations, etc. 9 ani în urmă
MulticastGroup.hpp dbf3e6c3c9 Dead code removal. 9 ani în urmă
Multicaster.cpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
Multicaster.hpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
Mutex.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
Network.cpp 45c4ccb153 Add a tags both equal match. 9 ani în urmă
Network.hpp 9f550292fe Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics. 9 ani în urmă
NetworkConfig.cpp c9ee8612e4 Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer. 9 ani în urmă
NetworkConfig.hpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
NetworkController.hpp 2ba9343607 Encode and decode of tags and capabilities in NetworkConfig. 9 ani în urmă
Node.cpp 7e4b6b594b It now builds. 9 ani în urmă
Node.hpp 0b44919ba2 Clusters can send multiple OKs so we must allow this. 9 ani în urmă
NonCopyable.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
OutboundMulticast.cpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
OutboundMulticast.hpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
Packet.cpp eac3667ec1 Bunch more refactoring and work on revocations, etc. 9 ani în urmă
Packet.hpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 ani în urmă
Path.cpp a3bdae9735 Work in progress: Path canonicalization refactor. 9 ani în urmă
Path.hpp 5b6d27e659 Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected. 9 ani în urmă
Peer.cpp 9f550292fe Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics. 9 ani în urmă
Peer.hpp 9f550292fe Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics. 9 ani în urmă
Poly1305.cpp c952fbbd8d Only enable 128-bit Poly1305 on X86_64 right now. Has compilation issues on ARM, but the 64-bit version should be fine. 10 ani în urmă
Poly1305.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
README.md 6d8de214eb Docs and controller API version 9 ani în urmă
Revocation.cpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 ani în urmă
Revocation.hpp eac3667ec1 Bunch more refactoring and work on revocations, etc. 9 ani în urmă
RuntimeEnvironment.hpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 ani în urmă
SHA512.cpp 4e4fd51117 boring doc stuff 9 ani în urmă
SHA512.hpp 4e4fd51117 boring doc stuff 9 ani în urmă
Salsa20.cpp 0c498556d5 Unroll Salsa20 fully for a little more speed (non-SSE now almost as fast as SSE) 10 ani în urmă
Salsa20.hpp 719233617c Add uint16_t key to Hashtable, and make Salsa20 zero its keyspace on destruction. 10 ani în urmă
SelfAwareness.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 ani în urmă
SelfAwareness.hpp b5c86b6ba4 Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable. 9 ani în urmă
SharedPtr.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 ani în urmă
Switch.cpp d5f4d381d0 Go ahead and loop back packets whose destination is self. Some OSes require this since they aactually follow the full network path even for local IPs. 9 ani în urmă
Switch.hpp e1310a764a More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff). 9 ani în urmă
Tag.cpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 ani în urmă
Tag.hpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 ani în urmă
Topology.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 ani în urmă
Topology.hpp a3bdae9735 Work in progress: Path canonicalization refactor. 9 ani în urmă
Utils.cpp d7f2287ce9 More tweaks to path behavior. 9 ani în urmă
Utils.hpp e09c1a1c11 Big refactor mostly builds. We now have a uniform backward compatible netconf. 9 ani în urmă
World.hpp 740b34124f Naming... 9 ani în urmă

README.md

ZeroTier Virtual Switch Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

  • Keep it minimal, especially in terms of code footprint and memory use.
  • There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
  • If it's not part of the core virtual Ethernet switch it does not belong here.
  • No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
  • Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.