Adam Ierymenko 8a2ff0b31e Actual documentation. 9 jaren geleden
..
Address.hpp b9dba97fdb Bunch more refactoring for an even more compact NetworkConfig representation, especially rules. 9 jaren geleden
Array.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
AtomicCounter.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 jaren geleden
Buffer.hpp 8f2a42d1ad allow user to specify arbitrary allowed IP networks in allowManaged 9 jaren geleden
C25519.cpp 38433e85bf More little stuff in crypto code. 11 jaren geleden
C25519.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
Capability.cpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 jaren geleden
Capability.hpp e53f63ca87 Broke down and added an OR to the rules engine. It is now possible to have a series of MATCHes that are ORed. 9 jaren geleden
CertificateOfMembership.cpp 56febbf2ba . 9 jaren geleden
CertificateOfMembership.hpp 32fa061700 Compute credential TTL et al. 9 jaren geleden
Cluster.cpp 9284e4edfe agree() must be called on our identity, the one with the secret 9 jaren geleden
Cluster.hpp 29ec7bf3a2 Add more specific check in source==self case instead of dumping it. 9 jaren geleden
Constants.hpp 471108f2e4 Slightly increase thread stack size for safety (primary Alpine related) possibly GitHub #443 9 jaren geleden
Dictionary.hpp 15c07c58b6 Refactored network config chunking to sign every chunk to prevent stupid DOS attack potential, and implement network config fast propagate (though we probably will not use this for a bit). 9 jaren geleden
Hashtable.hpp 8a2e8bd585 Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be. 9 jaren geleden
Identity.cpp ecc1324bb0 Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places. 9 jaren geleden
Identity.hpp 7036831203 Sign Dictionary in doNETWORK_CONFIG_REQUEST. 9 jaren geleden
IncomingPacket.cpp ed31cb76d6 Fix to cluster network configs. 9 jaren geleden
IncomingPacket.hpp d5528e4e9a Wire up VERB_USER_MESSAGE in core. 9 jaren geleden
InetAddress.cpp 6a50291aa2 Fix the case for InetAddress::containsAddress for IPv6 route of :: 9 jaren geleden
InetAddress.hpp 25f9c294dc Small bug fix and warning removal. 9 jaren geleden
MAC.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
Membership.cpp 8ffae313fd add new files & remove old ones from VS project. Now builds & runs on Windows again 9 jaren geleden
Membership.hpp eac3667ec1 Bunch more refactoring and work on revocations, etc. 9 jaren geleden
MulticastGroup.hpp dbf3e6c3c9 Dead code removal. 9 jaren geleden
Multicaster.cpp 1615ef1114 Rename getBestRoot() etc. 9 jaren geleden
Multicaster.hpp 1346e31a8e Windows build fixes, Software update fix, warning removal. 9 jaren geleden
Mutex.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
Network.cpp 5dbebc513a Minor send path refactor to make packet I/O work on clusters if they are members of networks. Also fix a crash if compiled in cluster mode but no cluster is enabled. 9 jaren geleden
Network.hpp ed31cb76d6 Fix to cluster network configs. 9 jaren geleden
NetworkConfig.cpp c9ee8612e4 Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer. 9 jaren geleden
NetworkConfig.hpp 0b3b994241 Relay policy can now be computed. 9 jaren geleden
NetworkController.hpp 226123ca08 Refactor controller to permit sending of pushes as well as just replies to config requests. 9 jaren geleden
Node.cpp 9e7c778cc8 Fix deadlock. 9 jaren geleden
Node.hpp 9f7919f71f Add comments to join ("orbit") moons. 9 jaren geleden
NonCopyable.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
OutboundMulticast.cpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 jaren geleden
OutboundMulticast.hpp cc4bacc199 Cleanup, and implement compression disable flag for networks. 9 jaren geleden
Packet.cpp 0995c1dcaa Encapsulate LZ4 in Packet.cpp to eliminate dependency. 9 jaren geleden
Packet.hpp f102fd7f92 Extend in-band world updates to handle moons too. 9 jaren geleden
Path.cpp a3bdae9735 Work in progress: Path canonicalization refactor. 9 jaren geleden
Path.hpp 5b6d27e659 Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected. 9 jaren geleden
Peer.cpp 9f7919f71f Add comments to join ("orbit") moons. 9 jaren geleden
Peer.hpp 60ff280dcb Another tweak to cluster I/O rules. 9 jaren geleden
Poly1305.cpp c952fbbd8d Only enable 128-bit Poly1305 on X86_64 right now. Has compilation issues on ARM, but the 64-bit version should be fine. 10 jaren geleden
Poly1305.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
README.md 8a2ff0b31e Actual documentation. 9 jaren geleden
Revocation.cpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 jaren geleden
Revocation.hpp eac3667ec1 Bunch more refactoring and work on revocations, etc. 9 jaren geleden
RuntimeEnvironment.hpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 jaren geleden
SHA512.cpp 4e4fd51117 boring doc stuff 10 jaren geleden
SHA512.hpp 4e4fd51117 boring doc stuff 10 jaren geleden
Salsa20.cpp 0c498556d5 Unroll Salsa20 fully for a little more speed (non-SSE now almost as fast as SSE) 10 jaren geleden
Salsa20.hpp 719233617c Add uint16_t key to Hashtable, and make Salsa20 zero its keyspace on destruction. 10 jaren geleden
SelfAwareness.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 jaren geleden
SelfAwareness.hpp b5c86b6ba4 Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable. 9 jaren geleden
SharedPtr.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 jaren geleden
Switch.cpp 9284e4edfe agree() must be called on our identity, the one with the secret 9 jaren geleden
Switch.hpp 5dbebc513a Minor send path refactor to make packet I/O work on clusters if they are members of networks. Also fix a crash if compiled in cluster mode but no cluster is enabled. 9 jaren geleden
Tag.cpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 jaren geleden
Tag.hpp 1f74dd4589 Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network. 9 jaren geleden
Topology.cpp 77a1dd4737 Dead code removal, fix minor issue in upstream endpoint check. 9 jaren geleden
Topology.hpp 9e7c778cc8 Fix deadlock. 9 jaren geleden
Utils.cpp fa2bb91ae5 Kill some old debug code. 9 jaren geleden
Utils.hpp 0fb3d1d582 Add a build version for software update use so we can do very minor updates within a version. 9 jaren geleden
World.hpp 5fa1d9796c zerotier-idtool commands to init and generate moons 9 jaren geleden

README.md

ZeroTier Network Hypervisor Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

  • Keep it minimal, especially in terms of code footprint and memory use.
  • There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
  • If it's not part of the core virtual Ethernet switch it does not belong here.
  • No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
  • Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.