re6stnet:9e6ece7ab7927a597d913381eaa75c9fe156ef74 commitshttps://lab.nexedi.com/nexedi/re6stnet/-/commits/9e6ece7ab7927a597d913381eaa75c9fe156ef742018-08-07T18:30:11+02:00https://lab.nexedi.com/nexedi/re6stnet/-/commit/9e6ece7ab7927a597d913381eaa75c9fe156ef74Log signals that are sent to kill subprocesses and increase default log level2018-08-07T18:30:11+02:00Julien Muchembledjm@nexedi.com
We currently have issues with OpenVPN hook scripts that aren't always killed
at exit. Such orphan processes prevent re6st from starting again (EADDRINUSE).
We want to know if it's an OpenVPN that does not exit cleanly on TERM,
or if it sometimes does not exit at all after 5s (then re6st sends a KILL
signal and at that point we should indeed make sure that any subprocess is
also KILLed).https://lab.nexedi.com/nexedi/re6stnet/-/commit/29d7fc03d6e56167179ed32b3f40e0a510a0e751Fix restart when json network parameters change2018-08-01T19:10:20+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/20f89677ae6cb05abc9de0814b96983c54b50312Update comments2018-08-01T19:10:20+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/2938a7c626ffa91b94cefef0e3d4757f779991e1Fix crash caused by buggy UPnP2018-08-01T19:08:59+02:00Julien Muchembledjm@nexedi.com
gaierror: [Errno -2] Name or service not known
Traceback (most recent call last):
File "re6st/cli/node.py", line 271, in main
remote_gateway, config.disable_proto, config.neighbour)
File "re6st/tunnel.py", line 663, in __init__
cache, cert, address)
File "re6st/tunnel.py", line 236, in __init__
self._updateCountry(address)
File "re6st/tunnel.py", line 643, in _updateCountry
family, ip = resolve(*address)
File "re6st/tunnel.py", line 30, in resolve
for x in socket.getaddrinfo(ip, port, family, 0, proto))
where ip is '-a'https://lab.nexedi.com/nexedi/re6stnet/-/commit/4fda2dc7045b35fb99f236383a6487e95cce687eFix wrong WARNING when own ip is unknown at startup2018-07-03T10:53:52+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/d7a4d73f739cf7372a7766ea35f29c9aa4a8061cNew option to prevent tunnelling accross borders of listed countries2018-07-02T21:08:15+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/6b45d7ead7a1d0d5bbd4a783b978098fa0b7fd2bFix verification of expired certificates with recent OpenSSL2018-07-02T11:35:51+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/44ec03af8a4ae2415e6b7ee114a2a3a20f644befdebian: add examples2018-07-02T11:35:51+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/3009b42050fbaa0b4966f51c4119c12e52506c8bregistry: new SMTP options for authentication and starttls2018-06-29T19:43:50+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/5e30be771a347f506efba363441e78776f784288doc: fix fw example: iptables does not have REJECT policy.2018-06-26T19:11:22+02:00Arnaud Fontainearnaud.fontaine@nexedi.com
/reviewed-on <a href="https://lab.nexedi.com/nexedi/re6stnet/merge_requests/4" data-original="https://lab.nexedi.com/nexedi/re6stnet/merge_requests/4" data-link="false" data-link-reference="true" data-project="206" data-merge-request="2129" data-project-path="nexedi/re6stnet" data-iid="4" data-mr-title="doc: fix fw example: iptables does not have REJECT policy." data-reference-type="merge_request" data-container="body" data-placement="top" data-html="true" title="" class="gfm gfm-merge_request">nexedi/re6stnet!4</a>https://lab.nexedi.com/nexedi/re6stnet/-/commit/522ec5a9bd8a634647a2ffd8364177f7e5a62a3bsetup.py: add a workaround to prevent the following error in build with old s...2018-06-01T12:16:27+02:00Kazuhiko Shiozakikazuhiko@nexedi.com
error: [Errno 21] Is a directory: 're6st/cli'https://lab.nexedi.com/nexedi/re6stnet/-/commit/33ac246194a3a2e8580a2b952a96b1f9ca3507e1Document UPnP server configuration and add details about firewall configuration2018-03-15T21:38:32+01:00Arnaud Fontainearnaud.fontaine@nexedi.com
/reviewed-on <a href="https://lab.nexedi.com/nexedi/re6stnet/merge_requests/3" data-original="https://lab.nexedi.com/nexedi/re6stnet/merge_requests/3" data-link="false" data-link-reference="true" data-project="206" data-merge-request="1874" data-project-path="nexedi/re6stnet" data-iid="3" data-mr-title="Document UPnP server configuration and add details about firewall configuration" data-reference-type="merge_request" data-container="body" data-placement="top" data-html="true" title="" class="gfm gfm-merge_request">nexedi/re6stnet!3</a>https://lab.nexedi.com/nexedi/re6stnet/-/commit/7ea5aa2a74f1fb8e9ad1e852d4d9db3fd76a2104doc: extend fw example to warn about --interface and --ipv42018-03-13T12:27:29+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/3a89d3d9b84c7e096979d0498463d4e6ab3c368adoc: clarify firewall section in the manpage.2018-03-13T08:18:31+09:00Arnaud Fontainearnaud.fontaine@nexedi.com
Also, add iptables/ip6tables example configuration.https://lab.nexedi.com/nexedi/re6stnet/-/commit/029bdaffd0d69790054d23e6e1ef25617e000cf5Fix too many NewSessionError when nodes are in different timezones2018-03-12T15:48:21+01:00Julien Muchembledjm@nexedi.com
Using datetime objects was a bad idea anyway. Its extra accuracy for
microseconds is lost because datime.utcnow() is slower than time.time().https://lab.nexedi.com/nexedi/re6stnet/-/commit/ced915a1356eda117f14bdd34486ccacf5316dfedoc: document UPnP server configuration in manpage.2018-02-27T08:16:26+09:00Arnaud Fontainearnaud.fontaine@nexedi.com
Required to share the connectivity with others.https://lab.nexedi.com/nexedi/re6stnet/-/commit/9751e221756e50fe07968551b438a5699d5a4cb1Log unexpected duplicate neighbour, instead of crashing with KeyError2018-01-05T15:03:47+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/8a1c74d003862ecbe6b1aa935b19f316bd078325Lower again MTU for UDPv4 tunnels2017-10-23T22:58:01+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/d2a8d5eff403212fa0018d92ae98582867579489demo: fix UnboundLocalError when the registry is down2017-07-20T20:36:09+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/c97ab3d770bd97e4f4625a85e36ef19df74a8b56Fix broadcast of new network parameters in LAN with only "light" nodes2017-07-20T20:10:35+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/0ed6077dbea0d941d794800776b264948e7d29b7registry: new --authorized-origin option2017-03-07T19:33:04+01:00Rafael Monneratrafael@nexedi.com
The list of authorized IPs for private RPCs is now configurable.
This is required when the registry is not bound to localhost.https://lab.nexedi.com/nexedi/re6stnet/-/commit/5a377d05dceccdc58abf7c1a2b427bf693b1810dregistry: add some IPv4/IPv6 helper API2017-03-07T19:33:04+01:00Rafael Monneratrafael@nexedi.com
With this API, a client can query IPv6/IPv4 information outside re6stnet/babel
for reporting.
The API considers that the email is unique, else it returns the first
occurrence. For SlapOS integration, it is more than enough to consider
that email will not be repeated.https://lab.nexedi.com/nexedi/re6stnet/-/commit/10f22751008fcd66c14532ee13ff9f955b385fd3registry: Add API for add/delete/is a specific Token2017-03-07T19:33:04+01:00Rafael Monneratrafael@nexedi.com
addToken, isToken and DeleteToken are introduced to manage tokens created
by other system (like SlapOS for example).
If token is present, raise conflict instead loop until timeout.https://lab.nexedi.com/nexedi/re6stnet/-/commit/834959b9893b65a489c49740a566e743d7e22dcfMove iterRoutes helper from draft/ to re6st.ctl module2017-03-07T19:33:04+01:00Rafael Monneratrafael@nexedi.com
This is a useful class that can be used for other reasons.https://lab.nexedi.com/nexedi/re6stnet/-/commit/96104548aa0ecf4d10969879cd04f76ffdd28d78registry: new @rpc_private decorator2017-03-07T19:33:04+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/e92ca5863a3a9cb605bbe66ff63e604129608c64Update TODO2016-12-16T20:26:30+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/d59d65759f0aae42782906e2d4f0563979a59ffeREADME: rephrasing2016-12-12T11:28:12+01:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/4e9332f99b18eeb7aed1acb8e04b506b05d810e3Document how to pronunce're6st'2016-10-24T15:12:38+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/cabd1afdef8f43bcfa3b7448a1ae26b6741ed330Clarify occasional harmless debug logs just after babeld is started2016-10-11T18:40:49+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/6569cf1e3f4f0fa2f7b855e00358e2bd37e35cbarina: fix a case where enrollment was not retried2016-09-29T12:52:54+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/128edb8378fddf1b87b23269b28a41b4ebeb0031rina: recover from cases where normal.DIF is already registered at startup2016-09-23T17:14:36+02:00Julien Muchembledjm@nexedi.com
Which happens when only re6stnet is restarted. The DIF must even be recreated
if the local certificate has changed, so that we can reconfigure the shim DIF.https://lab.nexedi.com/nexedi/re6stnet/-/commit/3e1a6244003d804e384ebbecd610f6ba74aa880crina: prefix logged exceptions with "RINA:"2016-09-23T14:14:08+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/596050eb3f88a432216e4ecda10438ad673e2c74Experimental support of RINA2016-09-19T18:42:39+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/674cad325677d9ae411a8bc4bcd8ea1222c26bc7demo: enable --console for all nodes2016-09-15T18:13:59+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/9fed6b3a0061780928cebe4693ab80ff845b162cdebian: fix DistributionNotFound error when python-miniupnpc is not installed2016-09-14T20:39:35+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/8e3cc1ea2ba6941d1ddddd0eee8f4469436b1e8eClarify description of protocol between nodes2016-08-31T16:35:43+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/9be8cf800d130b5e3cd26cd9d301b25975141105registry: fix --db when path does not contain a directory part2016-08-22T18:14:43+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/1d82935d6241968716ee574c89d7fe5622ec8061Ignore ENOMEM when checking routing cache2016-08-12T15:11:36+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/f2363823af7dcd34ecb950a3deabdd1d191844aaNew --console option2016-08-12T15:11:36+02:00Julien Muchembledjm@nexedi.comhttps://lab.nexedi.com/nexedi/re6stnet/-/commit/f3d45f8ebaeaf369866ac74a946043a336997fe8registry: make registration by email optional2016-08-12T15:11:36+02:00Julien Muchembledjm@nexedi.com