99 commits

Author	SHA1	Message	Date
abhishek9686	9ee0530ea6	check for service type and protocol on bi directional policies	2025-05-05 09:52:41 +05:30
abhishek9686	fc32e324b3	check if node is getting failedovered	2025-04-22 12:58:47 +04:00
abhishek9686	134b525ea6	bypass acl policy for failover peer	2025-04-22 12:55:53 +04:00
abhishek9686	35edcd01de	bypass acl policy	2025-04-22 12:33:04 +04:00
Abhishek K	e2a0ceccf6	fix egress policies acls comms (#3420)	2025-04-14 15:21:06 +04:00
abhishek9686	8a0998bcc1	remove duplicate func	2025-03-28 16:25:33 +04:00
abhishek9686	137303a687	resolve merge conflicts	2025-03-28 16:14:07 +04:00
abhishek9686	c318c939f4	sort the acl rules	2025-03-27 23:54:38 +04:00
abhishek9686	d55baebac5	add metric route to ext client addrs	2025-03-27 15:59:33 +04:00
abhishek9686	982ee3f4f2	fix tag nil point error	2025-03-25 15:06:02 +04:00
Abhishek K	8a1f36ee8e	Net 1990 (#3386) ... * add peerkey to network egress routes model * add peerkey to network egress routes model * filter out conflicting routes from node * add support for egress HA on relay * add support for egress HA on relay * add support for egress HA on relay * skip if curr node is relay node of the peer * skip if curr node is relay node of the peer * fix failover egress HA * add network to egress route model * clone before modifying * check for user policies on uni direction check * add all network fwd rule * delete all network policies and tags on network deletion	2025-03-25 00:42:14 +04:00
Abhishek K	5e1ef5e366	Net 1990 (#3385) ... * add peerkey to network egress routes model * add peerkey to network egress routes model * filter out conflicting routes from node * add support for egress HA on relay * add support for egress HA on relay * add support for egress HA on relay * skip if curr node is relay node of the peer * skip if curr node is relay node of the peer * fix failover egress HA * add network to egress route model * clone before modifying * check for user policies on uni direction check * add all network fwd rule	2025-03-25 00:29:35 +04:00
Abhishek K	8c19fc602d	Net 1990 (#3384) ... * add peerkey to network egress routes model * add peerkey to network egress routes model * filter out conflicting routes from node * add support for egress HA on relay * add support for egress HA on relay * add support for egress HA on relay * skip if curr node is relay node of the peer * skip if curr node is relay node of the peer * fix failover egress HA * add network to egress route model * clone before modifying * check for user policies on uni direction check	2025-03-24 17:15:44 +04:00
Abhishek K	3d765f9cf1	NET-1910: Acl controls for Egress Traffic (#3377) ... * add support for egress ranges on acl policy * add egress ranges to acl rules * add egress ranges to acl policies * Add egress ranges to acl rules * add egress ranges to fw update * fetch acl rules for egress networks * apply egress policies for devices * configure user policies for egresss routes * fix gw tag name migration * fix egress acl rules for static nodes * add egress ranges for static nodes on ingress gw * fileter acl IPs to be unique * cleanup IOT logic from peer update * make acl Rule Dst List * cleanup egress ranges from acl policies * create user group default acl policy for gateways * remove remote access name ids * rm egress ranges removal from acl policies * simplify user permissions on nodes * add additional nameservers to extclient dns * remove debug logs * fix static checks	2025-03-18 13:25:55 +04:00
abhishek9686	f3fd10326f	migrate remote access gw tags	2025-03-11 00:50:44 +04:00
abhishek9686	aca11049c9	fix untagged extclient comms for user	2025-03-10 13:17:33 +04:00
abhishek9686	0e4f163f1f	fix merge conflicts	2025-03-06 22:48:46 +04:00
abhishek9686	bb25739bd9	resolve merge conflicts	2025-03-06 22:41:56 +04:00
abhishek9686	984db44c78	fix extclient comms to gws	2025-03-05 23:06:38 +04:00
abhishek9686	b45a926649	optimise static node rules, fix traffic flows for static nodes	2025-03-05 14:26:35 +04:00
abhishek9686	225bf37e02	resolve merge conflicts	2025-02-28 12:18:38 +04:00
abhishek9686	46eea43397	add mutex for target nodes	2025-02-25 19:41:57 +04:00
abhishek9686	ce50b965d4	add peer mutex	2025-02-19 23:04:50 +04:00
abhishek9686	92698363cd	add node mutex to model	2025-02-19 22:17:40 +04:00
abhishek9686	9590f9e5a4	resolve merge conflicts	2025-02-19 09:33:23 +04:00
Abhishek K	ee6bea117f	Merge branch 'develop' into master	2025-02-19 01:14:06 +04:00
abhishek9686	98606bc2dc	fix static node ingress rules	2025-02-19 00:52:40 +04:00
abhishek9686	7dd4c048c3	add mutex around peer tags	2025-02-18 22:10:03 +04:00
abhishek9686	d22a6a39e3	resolve merge conflicts	2025-02-17 20:29:29 +04:00
Abhishek K	f028a6374d	Merge pull request #3332 from gravitl/master ... Master	2025-02-17 18:10:19 +04:00
abhishek9686	252de61aa7	clone node tags	2025-02-17 17:55:53 +04:00
abhishek9686	9812b5c428	remove deleted users from acl policy	2025-02-14 21:05:31 +04:00
abhishek9686	ed1f48a4b4	remove node id from acls when deleted	2025-02-14 19:59:58 +04:00
abhishek9686	41fa0b1bce	resolve merge conflicts	2025-02-14 18:24:56 +04:00
Abhishek K	689b9b6b52	NET-1941: failover signaling optimized, new endpoint for metrics peer info (#3322) ... * optimise acl cache with network map * fix mutex clash * fix acl mutex * add new endpoint for metrics peer info * fix static check * add new endpoint for metrics peer info * fix host peer info api params * cache failover data * add json tag * avoid duplicate calls to failover * add failover check ctx * add failover check ctx * fix failover debug log * optimise failover operations * remove debug logs * rm unused model * rm unused model	2025-02-14 16:06:26 +04:00
abhishek9686	bee1f4dda4	remove debug log, fix concurrent map write issue	2025-02-13 22:53:05 +04:00
abhishek9686	28af1156e6	fix static node id policy	2025-02-09 12:26:46 +04:00
abhishek9686	fabc9f2920	optimise firewall rules	2025-02-08 20:57:09 +04:00
abhishek9686	3bdb7fb5e3	fix src policy check	2025-02-05 22:39:13 +04:00
abhishek9686	46d79ee512	support static nodes in standalone device policies	2025-02-03 16:02:42 +04:00
abhishek9686	9a40717b5b	fix single device policies	2025-02-01 16:54:43 +04:00
abhishek9686	2c720d022b	fix user acl device policy	2025-01-29 11:07:44 +05:30
abhishek9686	9ba818ffa9	add node acl rules to fw update	2025-01-27 14:26:03 +05:30
abhishek9686	1db150c65b	fix node id acl validation	2025-01-27 12:25:35 +05:30
abhishek9686	8de1f4f6ca	single node acl group	2025-01-20 17:43:13 +05:30
abhishek9686	021023d999	allow single devices in the acl policies	2025-01-17 15:58:40 +05:30
abhishek9686	73eed6e583	add service type to default acl polices	2024-12-18 16:18:24 +04:00
abhishek9686	56f979bba9	fix peer list on interface	2024-12-16 22:26:09 +04:00
abhishek9686	f14d916936	for any service set defaults	2024-12-12 02:32:36 +04:00
abhishek9686	effb7eb5d7	fix all resources rules	2024-12-12 02:30:32 +04:00