Commit Graph

2160 Commits

Author SHA1 Message Date
Derek Collison
495a1a7ec3 Allow dynamic publish permissions based on reply subjects of received msgs
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-25 13:17:26 -07:00
Derek Collison
9cf534bc5e Merge pull request #1079 from nats-io/leaksubs
Fix for #1065 (leaked subscribers from dq subs across routes)
2019-07-23 08:32:25 -07:00
Derek Collison
df29be11ed Changes based on PR comments
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-22 18:37:40 -07:00
Derek Collison
1d6c58074f Fix for #1065 (leaked subscribers from dq subs across routes)
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-22 17:17:43 -07:00
Derek Collison
d749954b7f Merge pull request #1078 from nats-io/fix-leaf-user-signer
leafnode user jwt with signer fails to authenticate on solicit
2019-07-17 16:15:33 -07:00
Alberto Ricart
273e5af0a8 Fixed an issue where the leaf authentication was not checking for account/signers, so user JWTs signed by a signer failed authentication. 2019-07-17 16:03:55 -04:00
Ivan Kozlovic
6a40503f97 Merge pull request #1077 from nats-io/release_2_0_2
Release 2.0.2
v2.0.2
2019-07-15 10:24:18 -06:00
Ivan Kozlovic
b61744aa17 Release 2.0.2
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-15 09:49:00 -06:00
Derek Collison
965f8fe8b2 Merge pull request #1076 from andyxning/add_ut_for_tracemsg
add ut for tracemsg
2019-07-15 08:26:46 -07:00
Andy Xie
2f99b144aa add ut for tracemsg 2019-07-15 14:02:02 +08:00
Derek Collison
7a3fb4ebe0 Merge pull request #1057 from andyxning/allow_limits_to_traced_message
allow limit to traced message
2019-07-14 21:34:31 -07:00
Andy Xie
cd214fca89 allow limit to traced message 2019-07-15 11:39:00 +08:00
Derek Collison
0e4e5c648b Merge pull request #1075 from nats-io/parse
If we read data and have an error, still process and parse data.
2019-07-13 09:25:07 -07:00
Derek Collison
8262082289 If we read data and have an error, still process and parse data.
This is helpful for clients who send data and close the connection.
Also helpful to process errors like auth for solicited leafnodes.

Signed-off-by: Derek Collison <derek@nats.io>
2019-07-13 05:19:35 -07:00
Ivan Kozlovic
253263cfac Merge pull request #1074 from nats-io/fix_ln_urls_in_info
[FIXED] LeafNode urls may be missing in INFO sent to LN connections
2019-07-12 19:31:23 -06:00
Ivan Kozlovic
0873b46f67 [FIXED] LeafNode urls may be missing in INFO sent to LN connections
When a cluster of servers are having routes to each other, there
is a chance that the list of leafnode URLs maintained on each
server is not complete. This would result in LN servers connecting
to this cluster to not get the full list of possible URLs the
server could reconnect to.

Also fixed a DATA RACE that appeared when running the updated
TestLeafNodeInfoURLs test. Fixed the race and added specific
test that easily demonstrated the race: TestLeafNodeNoRaceGeneratingNonce

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 19:15:30 -06:00
Ivan Kozlovic
8d46d37d58 Merge pull request #1073 from nats-io/add_warn_for_leafnode_tls_insecure
Add warning for TLS insecure setting on LeafNodes
2019-07-12 18:08:32 -06:00
Ivan Kozlovic
0a72993d80 Add warning for TLS insecure setting on LeafNodes
Also fix for #1071 in that we need to check remote gateways TLS
config even if main gateway section is not configured with TLS.

Related to #1071

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 17:22:57 -06:00
Derek Collison
7766f27616 Bump version to RC2 [ci skip]
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-12 14:29:07 -07:00
Derek Collison
18a2c357e4 Merge pull request #1072 from nats-io/handshake
Report authorization error and use TLS hostname for IPs on leafnodes.
2019-07-12 14:11:53 -07:00
Derek Collison
a795920dc3 Report authorization error and use TLS hostname for IPs on leafnodes.
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-12 13:57:16 -07:00
Ivan Kozlovic
8458a093de Merge pull request #1071 from nats-io/support_insecure_skip_verify
[FIXED] Allow TLS InsecureSkipVerify again
2019-07-12 14:29:21 -06:00
Ivan Kozlovic
9e09486e26 Use all caps for the production message
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 13:44:01 -06:00
Ivan Kozlovic
37d08a6c56 [FIXED] Allow TLS InsecureSkipVerify again
This has an effect only on connections created by the server,
so routes and gateways (explicit and implicit).
Make sure that an explicit warning is printed if the insecure
property is set, but otherwise allow it.

Resolves #1062

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 12:10:28 -06:00
Derek Collison
b3f6997bc0 Make sure to flush
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:37:07 -07:00
Derek Collison
d027ff7efd Add leafnode usage test
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:30:01 -07:00
Derek Collison
3b785ed1e0 Add in additional vendor items
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:29:30 -07:00
Derek Collison
2cad1055c7 Update modules and vendor
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 11:34:32 -07:00
Derek Collison
b868e91c5e Merge pull request #1064 from andyxning/check_for_monitor_server_start_error
check for monitor server start error
2019-07-10 21:00:23 -07:00
Derek Collison
00d8d087b7 Merge pull request #1070 from nats-io/leafcycle
Prevent multiple solicited leafnodes from forming cycles.
2019-07-10 20:49:00 -07:00
Andy Xie
c9221fd187 check for monitor server start error 2019-07-11 11:44:06 +08:00
Derek Collison
951ae49100 Prevent multiple solicited leafnodes from forming cycles.
When a solicited leafnode comes from multiple servers that themselves are a cluster, cycles were formed.
This change allows solicited leafnodes to behave similar to gateways in that each server of a cluster
is expected to have a solicted leafnode per destination account and cluster.

We no longer forward subscription interest or messages to a cluster from a server that has a solicited leafnode.

Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 20:16:47 -07:00
Derek Collison
79e69640bc Merge pull request #1069 from nats-io/mremotes
Convert leafnode solicited remotes to an array
2019-07-10 13:40:39 -07:00
Derek Collison
10d4f1ab7a Convert leafnode solicited remotes to array
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 11:53:34 -07:00
Derek Collison
32cfde9720 Merge pull request #1068 from nats-io/stagln
Test for staggered leafnodes and sub/pub. Verifies fix for #1066
2019-07-10 10:11:12 -07:00
Derek Collison
a61d32a82c Test for staggered leafnodes and sub/pub. Verifies fix for #1066
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 09:57:43 -07:00
Derek Collison
d997dea802 Merge pull request #1067 from restis/master
Make sure Sublist.All collect all subscriptions
2019-07-10 09:54:17 -07:00
antmanler
24ab33b879 Add a simple test for Sublist.All 2019-07-10 22:32:15 +08:00
antmanler
ca773bf07b Make sure Sublist.All collect all subscriptions 2019-07-10 21:41:44 +08:00
Derek Collison
074c87d49e Merge pull request #1060 from nats-io/gr
Make sure we route  responses across leafnodes
2019-07-08 17:07:57 -07:00
Derek Collison
49707317a1 Make sure we route responses across leafnodes
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-08 16:20:40 -07:00
Derek Collison
c30b2ba75e Merge pull request #1059 from nats-io/mp
MaxPayload async INFO updates
2019-07-08 16:05:17 -07:00
Derek Collison
f76a6b9a5c When a bound account's maxpayload is not the same make sure we send it to clients that can do async INFO.
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-08 15:20:23 -07:00
Derek Collison
94071d32a9 Merge pull request #1055 from nats-io/sublist_cache
Allow sublist cache do be disabled globally for all accounts.
2019-07-02 09:45:04 -07:00
Derek Collison
d7e5554630 Grab opts under correct lock, make cache decision more explicit
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 09:31:54 -07:00
Derek Collison
8168aa1f81 Allow sublist cache do be disabled globally
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 07:34:02 -07:00
Derek Collison
d2986afd9c Merge pull request #1054 from nats-io/sublist_stats
Protect stats when no cache is present
2019-07-02 06:14:25 -07:00
Derek Collison
3c3e97f729 Fold under cache conditional
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 06:06:53 -07:00
Derek Collison
acc1031705 Protect stats when no cache is present
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 05:47:39 -07:00
Ivan Kozlovic
a171864ae7 Merge pull request #1053 from nats-io/mpay_overrun
[FIXED] Check of maxpayload could be bypassed if size overruns int32
2019-07-01 15:27:51 -06:00