abhishek9686
|
225bf37e02
|
resolve merge conflicts
|
2025-02-28 12:18:38 +04:00 |
|
abhishek9686
|
46eea43397
|
add mutex for target nodes
|
2025-02-25 19:41:57 +04:00 |
|
abhishek9686
|
ce50b965d4
|
add peer mutex
|
2025-02-19 23:04:50 +04:00 |
|
abhishek9686
|
92698363cd
|
add node mutex to model
|
2025-02-19 22:17:40 +04:00 |
|
Abhishek K
|
ee6bea117f
|
Merge branch 'develop' into master
|
2025-02-19 01:14:06 +04:00 |
|
abhishek9686
|
7dd4c048c3
|
add mutex around peer tags
|
2025-02-18 22:10:03 +04:00 |
|
Abhishek K
|
f028a6374d
|
Merge pull request #3332 from gravitl/master
Master
|
2025-02-17 18:10:19 +04:00 |
|
abhishek9686
|
252de61aa7
|
clone node tags
|
2025-02-17 17:55:53 +04:00 |
|
Abhishek K
|
689b9b6b52
|
NET-1941: failover signaling optimized, new endpoint for metrics peer info (#3322)
* optimise acl cache with network map
* fix mutex clash
* fix acl mutex
* add new endpoint for metrics peer info
* fix static check
* add new endpoint for metrics peer info
* fix host peer info api params
* cache failover data
* add json tag
* avoid duplicate calls to failover
* add failover check ctx
* add failover check ctx
* fix failover debug log
* optimise failover operations
* remove debug logs
* rm unused model
* rm unused model
|
2025-02-14 16:06:26 +04:00 |
|
abhishek9686
|
bee1f4dda4
|
remove debug log, fix concurrent map write issue
|
2025-02-13 22:53:05 +04:00 |
|
abhishek9686
|
73eed6e583
|
add service type to default acl polices
|
2024-12-18 16:18:24 +04:00 |
|
abhishek9686
|
56f979bba9
|
fix peer list on interface
|
2024-12-16 22:26:09 +04:00 |
|
abhishek9686
|
f14d916936
|
for any service set defaults
|
2024-12-12 02:32:36 +04:00 |
|
abhishek9686
|
effb7eb5d7
|
fix all resources rules
|
2024-12-12 02:30:32 +04:00 |
|
Abhishek K
|
7093373c77
|
NET-1784: Migrate All Policies (#3245)
* migrate all policies
* migrate all policies
* add acl policy type for any traffic
* use any service type for migration
|
2024-12-10 11:55:37 +04:00 |
|
Abhishek K
|
f124b10c35
|
NET-1784: Adv Acl Rules (#3239)
* define direction on acl req
* define protocol types and rule model
* get rules for node
* fetch acl rule for a node
* redine acl firewall model
* add json tags
* update port,protocol, and direction
* add json tags to acl options
* convert protocol to string
* simplify acl map
* add json tags to acl rules
* add networks to fw update
* add acls rules
* NET-1784: add allow all field
* add allow all field on fw udpate
* remove debug logs
* fix port and protocol types
* migrate default acl policies
* define constants for service types
* add adv options for user rules on ingress gw
* debug log
* allow whole network
* add static nodes to acl rules
* replace peers on acl updates
* initiliase rule map
* add user acl rules on target node
* revert acl check on extclient
* handle static node rules on ingress gw
* update multiple policies for users
* check allowed direction
* remove debug logs
|
2024-12-10 11:21:14 +04:00 |
|
Yabin Ma
|
5f21c8bb1d
|
NET-1778: scale test code changes (#3203)
* comment ACL call and add debug message
* add cache for network nodes
* fix load node to network cache issue
* add peerUpdate call 1 min limit
* add debug log for scale test
* release maps
* avoid default policy for node
* 1 min limit for peerUpdate trigger
* mq options
* Revert "mq options"
This reverts commit 10b93d0118.
* set peerUpdate run in sequence
* update for emqx 5.8.2
* remove batch peer update
* change the sleep to 10 millisec to avoid timeout
* add compress and change encrypt for peerUpdate message
* add mem profiling and automaxprocs
* add failover ctx mutex
* ignore request to failover peer
* remove code without called
* remove debug logs
* update emqx to v5.8.2
* change broker keepalive
* add OLD_ACL_SUPPORT setting
* add host version check for message encrypt
* remove debug message
* remove peerUpdate call control
---------
Co-authored-by: abhishek9686 <abhi281342@gmail.com>
|
2024-12-10 10:15:31 +04:00 |
|
Max Ma
|
e8d3e80b08
|
initialize cache in startup
|
2024-11-29 11:35:34 +01:00 |
|
abhishek9686
|
64f730f6f0
|
list cache
|
2024-11-27 15:05:08 +04:00 |
|
abhishek9686
|
698032a4dc
|
load acls into cache
|
2024-11-27 12:57:48 +04:00 |
|
abhishek9686
|
7df8196aba
|
initiliase acl cache
|
2024-11-27 12:28:08 +04:00 |
|
abhishek9686
|
8a948187bb
|
block tag deletion if used by a acl policy
|
2024-11-15 15:39:36 +04:00 |
|
abhishek9686
|
574598a2a3
|
fix acls cache
|
2024-11-07 21:55:19 +04:00 |
|
abhishek9686
|
163bc9e620
|
cache new acls
|
2024-11-07 19:32:20 +04:00 |
|
abhishek9686
|
f973d3d9e1
|
cache acls v1
|
2024-11-07 18:25:26 +04:00 |
|
abhishek9686
|
16b693815f
|
add cpu profiling endpoint
|
2024-11-07 18:18:08 +04:00 |
|
abhishek9686
|
c07b32d167
|
fix all networks user grp
|
2024-11-04 16:58:03 +04:00 |
|
abhishek9686
|
df3662f0cc
|
check for custom all policies
|
2024-10-31 15:13:29 +04:00 |
|
abhishek9686
|
7fa87219c1
|
fix static check
|
2024-10-30 20:41:56 +04:00 |
|
abhishek9686
|
b85585ab9e
|
check for custom allow all
|
2024-10-30 19:40:41 +04:00 |
|
abhishek9686
|
167d29a96b
|
remove * on default grp, add admins to admin net groups by default
|
2024-10-30 19:22:05 +04:00 |
|
abhishek9686
|
ebc3e90301
|
add extclient egress ranges
|
2024-10-29 12:41:40 +04:00 |
|
abhishek9686
|
2cc54d949c
|
remove user role from policy types
|
2024-10-29 08:51:27 +04:00 |
|
abhishek9686
|
f7b78ccad6
|
remove user role from acl policy types
|
2024-10-28 11:39:16 +04:00 |
|
abhishek9686
|
20302f7701
|
fix default policy check on static node network
|
2024-10-28 09:41:09 +04:00 |
|
abhishek9686
|
541bec71de
|
fix default policy check
|
2024-10-23 15:55:04 +04:00 |
|
abhishek9686
|
d4da1774ff
|
check default user policy
|
2024-10-23 15:29:47 +04:00 |
|
abhishek9686
|
c0f107b302
|
remove userips usage, add allow all to fwupdate
|
2024-10-23 14:15:13 +04:00 |
|
abhishek9686
|
ffb75fa6c1
|
add allow rules for nodes
|
2024-10-23 13:19:16 +04:00 |
|
abhishek9686
|
6c52b68214
|
fix ingress firewall updates
|
2024-10-22 19:54:23 +04:00 |
|
abhishek9686
|
3994183fe8
|
implement extclient to extclient acls
|
2024-10-21 16:49:30 +04:00 |
|
abhishek9686
|
6b93163bd5
|
fix user policy acls
|
2024-10-19 13:50:54 +04:00 |
|
abhishek9686
|
57378d255a
|
fix user policies
|
2024-10-19 13:16:52 +04:00 |
|
abhishek9686
|
c37cf2b7e3
|
create default user policies
|
2024-10-18 16:53:39 +04:00 |
|
abhishek9686
|
f347ca1121
|
user policy acl func
|
2024-10-18 14:16:05 +04:00 |
|
abhishek9686
|
aea26dfdf6
|
check acl policy on ext client
|
2024-10-18 11:21:32 +04:00 |
|
abhishek9686
|
4e4ffac787
|
fix acls peer update logic
|
2024-10-17 13:07:46 +04:00 |
|
abhishek9686
|
be086ee872
|
update traffic direction of default remote access acl to Bi
|
2024-10-17 11:37:32 +04:00 |
|
abhishek9686
|
7d80274ff8
|
create default acl for remote access gw
|
2024-10-17 11:04:43 +04:00 |
|
abhishek9686
|
f3b0bb60f0
|
fix acl update
|
2024-09-28 19:40:26 +04:00 |
|