mirror of https://github.com/zerotier/ZeroTierOne.git synced 2026-03-24 07:21:01 -07:00

History

Adam Ierymenko 0d4109a9f1 More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.		2016-09-09 08:43:58 -07:00
..
Address.hpp	Bunch more refactoring for an even more compact NetworkConfig representation, especially rules.	2016-04-26 17:11:25 -07:00
Array.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
AtomicCounter.hpp	Implement "weak pointer" behavior on Topology Path canonicalization hash table.	2016-09-02 12:34:02 -07:00
Buffer.hpp	Changes to how new-style binary network configs are detected, and a new-style binary serialized meta-data representation.	2016-05-06 13:29:10 -07:00
C25519.cpp
C25519.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
Capability.cpp	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	2016-08-04 11:40:38 -07:00
Capability.hpp	Think through and refine a few things in rules, especially edge case TEE and REDIRECT behavior and semantics.	2016-08-31 16:50:22 -07:00
CertificateOfMembership.cpp	.	2016-08-04 10:39:28 -07:00
CertificateOfMembership.hpp	Compute credential TTL et al.	2016-08-23 13:02:59 -07:00
Cluster.cpp	Cluster build fix.	2016-09-06 15:06:07 -07:00
Cluster.hpp	Tweak a few cluster params for higher perf / lower initial setup latency.	2016-02-08 09:57:46 -08:00
Constants.hpp	Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary pushes and simplify code.	2016-09-07 15:15:52 -07:00
Dictionary.hpp	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	2016-08-23 11:57:56 -07:00
Hashtable.hpp	Rework how paths are set as remote cluster preferred. The code is now clearer and cluster preference indications are now very sticky as they should be.	2016-09-06 12:45:28 -07:00
Identity.cpp	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	2016-08-02 13:36:17 -07:00
Identity.hpp	Sign Dictionary in doNETWORK_CONFIG_REQUEST.	2016-08-23 11:57:56 -07:00
IncomingPacket.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
IncomingPacket.hpp	Work in progress: Path canonicalization refactor.	2016-09-01 15:43:07 -07:00
InetAddress.cpp	More controller work -- it builds!	2016-08-16 14:05:17 -07:00
InetAddress.hpp	Bunch of rule JSON stuff.	2016-08-15 18:49:50 -07:00
MAC.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
Membership.cpp	Clean up handling of COMs, network access control, and fix a backward compatiblity issue.	2016-09-08 19:48:05 -07:00
Membership.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Multicaster.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Multicaster.hpp	It builds... almost ready to test some rules engine stuff.	2016-08-08 17:33:26 -07:00
MulticastGroup.hpp	Dead code removal.	2016-08-09 15:01:46 -07:00
Mutex.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
Network.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Network.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
NetworkConfig.cpp	Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.	2016-09-07 12:12:52 -07:00
NetworkConfig.hpp	Credential TTL (tags/capabilities) should be credential time max delta, since we could get pushed one that is newer.	2016-09-07 12:12:52 -07:00
NetworkController.hpp	Encode and decode of tags and capabilities in NetworkConfig.	2016-08-09 08:32:42 -07:00
Node.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Node.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
NonCopyable.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
OutboundMulticast.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
OutboundMulticast.hpp	Integrate Filter into OutboundMulticast properly.	2016-08-04 13:01:14 -07:00
Packet.cpp	Clean up handling of COMs, network access control, and fix a backward compatiblity issue.	2016-09-08 19:48:05 -07:00
Packet.hpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Path.cpp	Work in progress: Path canonicalization refactor.	2016-09-01 15:43:07 -07:00
Path.hpp	Use ECHO instead of HELLO where possible.	2016-09-07 12:01:03 -07:00
Peer.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Peer.hpp	Turns out we do not need to pass network to receive().	2016-09-07 15:24:53 -07:00
Poly1305.cpp
Poly1305.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
README.md	Docs and controller API version	2016-07-08 13:10:02 -07:00
RuntimeEnvironment.hpp	More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.	2016-08-04 11:40:38 -07:00
Salsa20.cpp
Salsa20.hpp
SelfAwareness.cpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	2016-09-07 11:13:17 -07:00
SelfAwareness.hpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	2016-09-07 11:13:17 -07:00
SHA512.cpp	boring doc stuff	2016-01-12 14:04:55 -08:00
SHA512.hpp	boring doc stuff	2016-01-12 14:04:55 -08:00
SharedPtr.hpp	Implement "weak pointer" behavior on Topology Path canonicalization hash table.	2016-09-02 12:34:02 -07:00
Switch.cpp	More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.	2016-09-09 08:43:58 -07:00
Switch.hpp	More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff).	2016-08-09 15:45:26 -07:00
Tag.cpp	.	2016-08-04 10:39:28 -07:00
Tag.hpp	Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.	2016-08-22 18:06:46 -07:00
Topology.cpp	Bunch more path refactoring. Peers no longer forget paths, but do not normally use expired paths. Expired paths might still be tried if nothing else is reachable.	2016-09-07 11:13:17 -07:00
Topology.hpp	Work in progress: Path canonicalization refactor.	2016-09-01 15:43:07 -07:00
Utils.cpp	More tweaks to path behavior.	2016-09-05 15:47:22 -07:00
Utils.hpp	Big refactor mostly builds. We now have a uniform backward compatible netconf.	2016-06-16 12:28:43 -07:00
World.hpp	Rules engine work: capability based security model with tags and capabilities, and some cleanup across other places.	2016-08-02 13:36:17 -07:00

README.md

ZeroTier Virtual Switch Core

This directory contains the real ZeroTier: a completely OS-independent global virtual Ethernet switch engine. This is where the magic happens.

Give it wire packets and it gives you Ethernet packets, and vice versa. The core contains absolutely no actual I/O, port configuration, or other OS-specific code (except Utils::getSecureRandom()). It provides a simple C API via /include/ZeroTierOne.h. It's designed to be small and maximally portable for future use on small embedded and special purpose systems.

Code in here follows these guidelines:

Keep it minimal, especially in terms of code footprint and memory use.
There should be no OS-dependent code here unless absolutely necessary (e.g. getSecureRandom).
If it's not part of the core virtual Ethernet switch it does not belong here.
No C++11 or C++14 since older and embedded compilers don't support it yet and this should be maximally portable.
Minimize the use of complex C++ features since at some point we might end up "minus-minus'ing" this code if doing so proves necessary to port to tiny embedded systems.