Adam Ierymenko d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
..
Address.hpp b9dba97fdb Bunch more refactoring for an even more compact NetworkConfig representation, especially rules. 9 yıl önce
Array.hpp 4e4fd51117 boring doc stuff 9 yıl önce
AtomicCounter.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 yıl önce
Buffer.hpp 529515d1d1 Changes to how new-style binary network configs are detected, and a new-style binary serialized meta-data representation. 9 yıl önce
C25519.cpp 38433e85bf More little stuff in crypto code. 11 yıl önce
C25519.hpp 4e4fd51117 boring doc stuff 9 yıl önce
Capability.cpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 yıl önce
Capability.hpp 74afef8eb1 Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics. 9 yıl önce
CertificateOfMembership.cpp 56febbf2ba . 9 yıl önce
CertificateOfMembership.hpp 32fa061700 Compute credential TTL et al. 9 yıl önce
Cluster.cpp f2d2df2b11 Cluster build fix. 9 yıl önce
Cluster.hpp a963810e02 Tweak a few cluster params for higher perf / lower initial setup latency. 9 yıl önce
Constants.hpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Dictionary.hpp 7036831203 Sign Dictionary in doNETWORK_CONFIG_REQUEST. 9 yıl önce
Hashtable.hpp 8a2e8bd585 Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be. 9 yıl önce
Identity.cpp ecc1324bb0 Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places. 9 yıl önce
Identity.hpp 7036831203 Sign Dictionary in doNETWORK_CONFIG_REQUEST. 9 yıl önce
IncomingPacket.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
IncomingPacket.hpp ab9afbc749 (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 9 yıl önce
InetAddress.cpp b08ca49580 More controller work -- it builds! 9 yıl önce
InetAddress.hpp bd15262e54 Bunch of rule JSON stuff. 9 yıl önce
MAC.hpp 4e4fd51117 boring doc stuff 9 yıl önce
Membership.cpp ab9afbc749 (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 9 yıl önce
Membership.hpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
MulticastGroup.hpp dbf3e6c3c9 Dead code removal. 9 yıl önce
Multicaster.cpp ab9afbc749 (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 9 yıl önce
Multicaster.hpp ab9afbc749 (1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup. 9 yıl önce
Mutex.hpp 4e4fd51117 boring doc stuff 9 yıl önce
Network.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Network.hpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
NetworkConfig.cpp c9ee8612e4 Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer. 9 yıl önce
NetworkConfig.hpp 68e549233d Revise bearer token code in controller, and add relay policy as a meta-data item presented to controller by nodes (to facilitate future meshiness). 9 yıl önce
NetworkController.hpp 2ba9343607 Encode and decode of tags and capabilities in NetworkConfig. 9 yıl önce
Node.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Node.hpp 5b6d27e659 Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected. 9 yıl önce
NonCopyable.hpp 4e4fd51117 boring doc stuff 9 yıl önce
OutboundMulticast.cpp 0d4109a9f1 More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions. 9 yıl önce
OutboundMulticast.hpp 37d139177d Integrate Filter into OutboundMulticast properly. 9 yıl önce
Packet.cpp 16df2c3363 Clean up handling of COMs, network access control, and fix a backward compatiblity issue. 9 yıl önce
Packet.hpp 0d4109a9f1 More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions. 9 yıl önce
Path.cpp a3bdae9735 Work in progress: Path canonicalization refactor. 9 yıl önce
Path.hpp 5b6d27e659 Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected. 9 yıl önce
Peer.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Peer.hpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Poly1305.cpp c952fbbd8d Only enable 128-bit Poly1305 on X86_64 right now. Has compilation issues on ARM, but the 64-bit version should be fine. 10 yıl önce
Poly1305.hpp 4e4fd51117 boring doc stuff 9 yıl önce
README.md 6d8de214eb Docs and controller API version 9 yıl önce
RuntimeEnvironment.hpp 98152d974a More cleanup and removal of DeferredPackets, will do the latter in a more elegant way. 9 yıl önce
SHA512.cpp 4e4fd51117 boring doc stuff 9 yıl önce
SHA512.hpp 4e4fd51117 boring doc stuff 9 yıl önce
Salsa20.cpp 0c498556d5 Unroll Salsa20 fully for a little more speed (non-SSE now almost as fast as SSE) 10 yıl önce
Salsa20.hpp 719233617c Add uint16_t key to Hashtable, and make Salsa20 zero its keyspace on destruction. 10 yıl önce
SelfAwareness.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
SelfAwareness.hpp b5c86b6ba4 Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable. 9 yıl önce
SharedPtr.hpp 4931e44998 Implement "weak pointer" behavior on Topology Path canonicalization hash table. 9 yıl önce
Switch.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Switch.hpp e1310a764a More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff). 9 yıl önce
Tag.cpp 56febbf2ba . 9 yıl önce
Tag.hpp 9a3c652a51 Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity. 9 yıl önce
Topology.cpp d3524f3609 Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later. 9 yıl önce
Topology.hpp a3bdae9735 Work in progress: Path canonicalization refactor. 9 yıl önce
Utils.cpp d7f2287ce9 More tweaks to path behavior. 9 yıl önce
Utils.hpp e09c1a1c11 Big refactor mostly builds. We now have a uniform backward compatible netconf. 9 yıl önce
World.hpp 740b34124f Naming... 9 yıl önce

README.md

ZeroTier Virtual Switch Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

  • Keep it minimal, especially in terms of code footprint and memory use.
  • There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
  • If it's not part of the core virtual Ethernet switch it does not belong here.
  • No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
  • Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.