Chelsea Komlo
|
687c26093c
|
Merge pull request #4269 from hashicorp/f-tls-remove-weak-standards
Configurable TLS cipher suites and versions; disallow weak ciphers
|
2018-05-11 08:11:46 -04:00 |
Preetha Appan
|
ca5758741b
|
Update serf to pick up graceful leave fix
|
2018-05-10 11:16:24 -05:00 |
Chelsea Holland Komlo
|
620558c107
|
log error if unable to create TLS configuration
|
2018-05-10 11:51:54 -04:00 |
Chelsea Holland Komlo
|
796bae6f1b
|
allow configurable cipher suites
disallow 3DES and RC4 ciphers
add documentation for tls_cipher_suites
|
2018-05-09 17:15:31 -04:00 |
Alex Dadgar
|
a510774451
|
Use UpdateAllocDesiredTransistion instead of UpsertEval but no transistions yet
|
2018-05-07 14:50:01 -05:00 |
Alex Dadgar
|
4a23307baf
|
Track all client connections
|
2018-04-26 13:22:09 -07:00 |
Alex Dadgar
|
7f28cfcdfe
|
small cleanup
|
2018-03-30 15:49:56 -07:00 |
Chelsea Holland Komlo
|
a77dd08dd9
|
prevent double close due to error in creating listener
|
2018-03-30 17:15:56 -04:00 |
Chelsea Holland Komlo
|
402a026c88
|
add further error handling for rpc connection handling
|
2018-03-30 17:03:36 -04:00 |
Chelsea Holland Komlo
|
58ada9bc42
|
return error when setting checksum; don't reload
|
2018-03-28 18:15:50 -04:00 |
Chelsea Holland Komlo
|
2d5af7ff4d
|
set TLS checksum when parsing config
Refactor checksum comparison, always set checksum if it is empty
|
2018-03-28 09:56:11 -04:00 |
Chelsea Holland Komlo
|
dd5f627feb
|
set server configuration checksum on reload
|
2018-03-27 18:03:52 -04:00 |
Chelsea Komlo
|
57e2cd04bd
|
Merge pull request #4025 from hashicorp/reload-http-tls
Allow TLS configurations for HTTP and RPC connections to be reloaded …
|
2018-03-26 18:00:30 -04:00 |
Michael Schurter
|
9898edfa90
|
Switch to drainerv2 impl
|
2018-03-21 16:51:44 -07:00 |
Alex Dadgar
|
e63bcb474d
|
Drainer
|
2018-03-21 16:51:44 -07:00 |
Michael Schurter
|
8b41e9b2e1
|
drainer: drainer should shutdown with server
|
2018-03-21 16:51:44 -07:00 |
Michael Schurter
|
0a17076ad2
|
refactor drainer into a subpkg
|
2018-03-21 16:51:44 -07:00 |
Chelsea Holland Komlo
|
66e44cdb73
|
Allow TLS configurations for HTTP and RPC connections to be reloaded separately
|
2018-03-21 17:51:08 -04:00 |
Alex Dadgar
|
b8607ad6d6
|
Heartbeat uses client rpc advertise and server defaults server rpc advertise addr
|
2018-03-16 16:47:08 -07:00 |
Alex Dadgar
|
52b7fb5361
|
Separate client and server rpc advertise addresses
|
2018-03-16 16:47:08 -07:00 |
Alex Dadgar
|
92cb552ff6
|
Always add core scheduler and detect invalid schedulers
|
2018-03-14 10:53:27 -07:00 |
Alex Dadgar
|
55e4f5cdc4
|
Require core scheduler
|
2018-03-14 10:37:49 -07:00 |
Josh Soref
|
173ce63fe9
|
spelling: transition
|
2018-03-11 19:06:05 +00:00 |
Josh Soref
|
258d76ec13
|
spelling: registry
|
2018-03-11 18:41:13 +00:00 |
Josh Soref
|
c9b86bbc2f
|
spelling: controls
|
2018-03-11 17:50:39 +00:00 |
Alex Dadgar
|
a1faab0e58
|
Server TLS
|
2018-02-15 15:03:12 -08:00 |
Alex Dadgar
|
d7029965ca
|
Server side impl + touch ups
|
2018-02-15 13:59:02 -08:00 |
Alex Dadgar
|
2f9d33f479
|
vet
|
2018-02-15 13:59:02 -08:00 |
Alex Dadgar
|
ce3674ea17
|
Server stat/list impl
|
2018-02-15 13:59:02 -08:00 |
Alex Dadgar
|
ddd67f5f11
|
Server streaming
|
2018-02-15 13:59:01 -08:00 |
Alex Dadgar
|
2c0ad26374
|
New RPC Modes and basic setup for streaming RPC handlers
|
2018-02-15 13:59:01 -08:00 |
Alex Dadgar
|
46770d57e5
|
Forwarding
|
2018-02-15 13:59:01 -08:00 |
Alex Dadgar
|
cfe9afc567
|
Store connection time
|
2018-02-15 13:59:01 -08:00 |
Alex Dadgar
|
6dd1c9f49d
|
Refactor
|
2018-02-15 13:59:00 -08:00 |
Alex Dadgar
|
ad7bc0c6bd
|
Server can forward ClientStats.Stats
|
2018-02-15 13:59:00 -08:00 |
Alex Dadgar
|
940a2df8a1
|
Pull inmem codec to helper
|
2018-02-15 13:59:00 -08:00 |
Alex Dadgar
|
13bbf3fbbb
|
Track client connections
|
2018-02-15 13:59:00 -08:00 |
Alex Dadgar
|
ba5ecb8c1a
|
Dynamic RPC servers with context
|
2018-02-15 13:59:00 -08:00 |
Alex Dadgar
|
288b3c0e05
|
Helper to populate RPC server endpoints
|
2018-02-15 13:59:00 -08:00 |
Kyle Havlovitz
|
709b693d39
|
Clean up some leftover autopilot differences from Consul
|
2018-02-08 10:27:26 -08:00 |
Kyle Havlovitz
|
2ccf565bf6
|
Refactor redundancy_zone/upgrade_version out of client meta
|
2018-01-29 20:03:38 -08:00 |
Kyle Havlovitz
|
a162b9ce14
|
Move server health loop into autopilot leader actions
|
2018-01-23 12:57:02 -08:00 |
Chelsea Komlo
|
d09cc2a69f
|
Merge pull request #3492 from hashicorp/f-client-tls-reload
Client/Server TLS dynamic reload
|
2018-01-23 05:51:32 -05:00 |
Chelsea Holland Komlo
|
7d3c240871
|
swap raft layer tls wrapper
|
2018-01-19 17:00:15 -05:00 |
Chelsea Holland Komlo
|
a8f655fbb3
|
allow for similar error messages for closed connections
|
2018-01-17 12:02:40 -05:00 |
Chelsea Holland Komlo
|
35466a331a
|
fixing up raft reload tests
close second goroutine in raft-net
|
2018-01-17 10:29:15 -05:00 |
Kyle Havlovitz
|
7b980c42d8
|
Add raft remove by id endpoint/command
|
2018-01-16 13:35:32 -08:00 |
Chelsea Holland Komlo
|
5f52e8e103
|
feedback from code review
|
2018-01-16 11:55:11 -05:00 |
Chelsea Holland Komlo
|
649f86f094
|
refactor creating a new tls configuration
|
2018-01-16 08:02:39 -05:00 |
Chelsea Holland Komlo
|
214d128eb9
|
reload raft transport layer
fix up linting
|
2018-01-08 14:52:28 -05:00 |