Derek Collison
095a83bc2a
Make sure to suppress duplicate create/delete audit events
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-31 09:16:16 -08:00
Derek Collison
230c17ee48
Bumped Beta version
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-30 17:24:52 -08:00
Derek Collison
2b0717bde2
Make debug not error since we recover
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-30 14:00:26 -08:00
Derek Collison
9b20d5c888
Fixed bug on raft inline cacthup when apply channel was full.
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-30 13:22:27 -08:00
Derek Collison
be393995a4
Bumped Beta Version
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 19:40:15 -08:00
Derek Collison
5490c4969b
Fixed a bug that on restore of single streams in clustered mode would subscribe to the stream subjects twice.
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 19:37:30 -08:00
Derek Collison
36c4de874a
Merge pull request #1868 from nats-io/js-breaks-imports-fix
...
[FIXED] Fix for #1864
2021-01-29 19:15:32 -07:00
Derek Collison
302ea010b7
Fix for data race
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 18:12:57 -08:00
Derek Collison
e763d90496
Merge pull request #1861 from nats-io/js-list-request-fix
...
js: consumer list request fix
2021-01-29 19:00:34 -07:00
Derek Collison
8bd290c77a
Fix for #1864 .
...
When trying to make sure we properly created all subs for service imports we would check the internal client to see if we should process.
With JS enabled on the server we would place system imports that would break that check and orphan other service imports.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 17:51:14 -08:00
Derek Collison
457ca3b9cf
Suppress additional advisories on server restart and leadership changes.
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 15:08:22 -08:00
Matthias Hanel
2761bbf29a
added test demonstrating how js breaks imports
...
Signed-off-by: Matthias Hanel <mh@synadia.com >
2021-01-29 14:29:04 -05:00
Ivan Kozlovic
e8fd49edb8
Bump version to beta.60
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-29 11:55:36 -07:00
Ivan Kozlovic
a0fb39fb7e
Merge pull request #1862 from nats-io/varz-jwt
...
[added] field to varz output containing the operator jwt
2021-01-29 11:53:20 -07:00
Ivan Kozlovic
06c63b5f57
Merge pull request #1858 from nats-io/ln_ws
...
[ADDED] Websocket for Leaf Node connections
2021-01-29 11:35:26 -07:00
Matthias Hanel
f487429d9e
incorporated comments
...
Signed-off-by: Matthias Hanel <mh@synadia.com >
2021-01-29 13:25:02 -05:00
Ivan Kozlovic
9587bf8cd4
Changed option to make masking the default and option to disable it
...
This will allow a better experience if there is a load balancer
in between and expects websocket frames to be masked.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-29 11:22:22 -07:00
Derek Collison
3c49f087a0
Merge pull request #1859 from nats-io/jsc_ai
...
Extended AccountInfo to track API calls and errors.
2021-01-29 10:44:42 -07:00
Derek Collison
c889321a83
Change to API.Total and API.Errors
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 09:42:20 -08:00
Matthias Hanel
2a34f0daee
[added] field to varz output containing the operator jwt/claim
...
Signed-off-by: Matthias Hanel <mh@synadia.com >
2021-01-29 12:32:40 -05:00
Derek Collison
d2a92221fb
Duplicate leader elect and lost advisories to the system account as well.
...
Also suppress lost quorums to at most once every 10 secs.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-29 08:51:20 -08:00
Derek Collison
0a3124e27d
Track API calls per account. Track success and errors.
...
These tracking data are ephemeral per server. so on restart they reset.
That should be ok since these will most likely be used more for rates.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-28 17:16:50 -08:00
Ivan Kozlovic
e0487b95cc
[FIXED] Return no match result if subject contains empty token
...
A subject such as `foo..bar` is invalid, but if it is published
from a connection that has disabled pedantic, then the message
is matched against subscriptions and will be delivered.
This change causes Sublist.Match() to return no result.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-28 17:43:22 -07:00
Waldemar Quevedo
fccdb8caa2
js: consumer list request fix
...
Signed-off-by: Waldemar Quevedo <wally@synadia.com >
2021-01-28 16:17:01 -08:00
Derek Collison
6480a45fc4
Fix for data race, don't need to check here
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-28 13:20:15 -08:00
Ivan Kozlovic
2b8c6e0124
Support for Websocket Leafnode connections
...
Added two options in the remote leaf node configuration
- compress, for websocket only at the moment
- ws_masking, to force remote leafnode connections to mask websocket
frames (default is no masking since it is communication between
server to server)
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-28 13:13:11 -07:00
Ivan Kozlovic
131be1cb33
Make TLS client/server handshake helpers function
...
This reduces code duplication
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-28 13:13:11 -07:00
Matthias Hanel
c9e0eb6c3a
[added] cluster/gateway/leafnode tls required/verify/timeout to varz ( #1854 )
...
Signed-off-by: Matthias Hanel <mh@synadia.com >
2021-01-28 14:08:58 -05:00
Derek Collison
67dc580a39
Removed stream state for advisories
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-28 09:52:56 -08:00
Derek Collison
9d4951d2bb
Updated lost quorum signalling to be less fragile.
...
We will now alert when the old leader detects a lost quorum just as before, but also detect if a candidate is flapping and failing to get votes because of no quorum.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-28 09:27:17 -08:00
Derek Collison
8b79114168
Add in advisories for leader elected and quorum lost advisories.
...
Note that quorum lost only fires if the old leader steps down.
If the leader itself fails and that causes the loss of quorum currently no advisory is sent.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-28 08:37:54 -08:00
Derek Collison
6d27307453
Fix for broken stream restore functionality
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-27 17:44:42 -08:00
Derek Collison
4f62724fcd
Bumped Beta Version
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-27 16:27:23 -08:00
Derek Collison
132a4e7f7d
Allow memory store for clustering
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-27 15:54:39 -08:00
Derek Collison
a9b8948abe
Add in tracking for quorum in raft and do auto stepdown.
...
Also added in API responses when no leader is present for meta, streams and consumers.
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-27 13:34:00 -08:00
Derek Collison
c0ae719629
Don't load entry for snapshot, fix data race
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-26 19:26:03 -08:00
Derek Collison
b4a804986a
Bumped Beta Version
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-26 16:51:32 -08:00
Ivan Kozlovic
33694762b1
Merge pull request #1850 from nats-io/max_control_line
...
[CHANGED] Enforce max_control_line for client connections only
2021-01-26 16:25:28 -07:00
Derek Collison
fa972cf31f
Merge pull request #1851 from nats-io/split_bug
...
Fix for split vote bug
2021-01-26 16:18:07 -07:00
Derek Collison
054319a662
Fix for split vote bug
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-26 14:59:13 -08:00
Ivan Kozlovic
b07e176b30
Fixed typo in new const name
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-26 15:55:00 -07:00
Matthias Hanel
dea9effa8d
[added] support for StrictSigningKeyUsage and updated jwt library ( #1845 )
...
This will cause the server to not trust accounts/user signed by an
identity key
The boot strapping system account will assume the account is issued by
the operator.
If this is not desirable, the system account can be provided right away
as resolver_preload.
[fixes] crash when the system account uses signing keys and an update changes that key set.
Signed-off-by: Matthias Hanel <mh@synadia.com >
2021-01-26 17:49:58 -05:00
Ivan Kozlovic
dce814009b
[CHANGED] Enforce max_control_line for client connections only
...
Only check limit for CLIENT connection types, however, the check
is done for CLIENT in all conditions, not only in the case of a
split buffer as it was the case so far.
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-26 15:33:39 -07:00
Derek Collison
3e8d295239
Make sure to not go backwards on applied or commit indexes
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-26 14:07:52 -08:00
Derek Collison
df0228f076
Change up for banner
...
Signed-off-by: Derek Collison <derek@nats.io >
2021-01-26 14:06:50 -08:00
Ivan Kozlovic
9716aa8b4c
Merge pull request #1846 from nats-io/ln_save_tls_name
...
[FIXED] LeafNode: save hostname that may be used during TLS handshake
2021-01-26 14:51:11 -07:00
Waldemar Quevedo
2a944423b2
Merge pull request #1847 from wallyqs/server-name-flag
...
Add --server_name flag to set server name
2021-01-26 13:41:12 -08:00
Ivan Kozlovic
af57f55738
Fixing some flappers (leafnode and mqtt)
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2021-01-26 14:23:49 -07:00
Waldemar Quevedo
dbbf4fdf96
Add --server_name flag to set server name
...
Signed-off-by: Waldemar Quevedo <wally@synadia.com >
2021-01-26 12:16:31 -08:00
Ivan Kozlovic
0fe9209b52
Merge pull request #1840 from angiglesias/allow-mqtt_bearer_token
...
[ADDED] Allow bearer token as mqtt authentication method
2021-01-26 12:14:03 -07:00