Ivan Kozlovic
8458a093de
Merge pull request #1071 from nats-io/support_insecure_skip_verify
...
[FIXED] Allow TLS InsecureSkipVerify again
2019-07-12 14:29:21 -06:00
Ivan Kozlovic
9e09486e26
Use all caps for the production message
...
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2019-07-12 13:44:01 -06:00
Ivan Kozlovic
37d08a6c56
[FIXED] Allow TLS InsecureSkipVerify again
...
This has an effect only on connections created by the server,
so routes and gateways (explicit and implicit).
Make sure that an explicit warning is printed if the insecure
property is set, but otherwise allow it.
Resolves #1062
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2019-07-12 12:10:28 -06:00
Derek Collison
b3f6997bc0
Make sure to flush
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-11 17:37:07 -07:00
Derek Collison
d027ff7efd
Add leafnode usage test
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-11 17:30:01 -07:00
Derek Collison
3b785ed1e0
Add in additional vendor items
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-11 17:29:30 -07:00
Derek Collison
2cad1055c7
Update modules and vendor
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-11 11:34:32 -07:00
Derek Collison
b868e91c5e
Merge pull request #1064 from andyxning/check_for_monitor_server_start_error
...
check for monitor server start error
2019-07-10 21:00:23 -07:00
Derek Collison
00d8d087b7
Merge pull request #1070 from nats-io/leafcycle
...
Prevent multiple solicited leafnodes from forming cycles.
2019-07-10 20:49:00 -07:00
Andy Xie
c9221fd187
check for monitor server start error
2019-07-11 11:44:06 +08:00
Derek Collison
951ae49100
Prevent multiple solicited leafnodes from forming cycles.
...
When a solicited leafnode comes from multiple servers that themselves are a cluster, cycles were formed.
This change allows solicited leafnodes to behave similar to gateways in that each server of a cluster
is expected to have a solicted leafnode per destination account and cluster.
We no longer forward subscription interest or messages to a cluster from a server that has a solicited leafnode.
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-10 20:16:47 -07:00
Derek Collison
79e69640bc
Merge pull request #1069 from nats-io/mremotes
...
Convert leafnode solicited remotes to an array
2019-07-10 13:40:39 -07:00
Derek Collison
10d4f1ab7a
Convert leafnode solicited remotes to array
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-10 11:53:34 -07:00
Derek Collison
32cfde9720
Merge pull request #1068 from nats-io/stagln
...
Test for staggered leafnodes and sub/pub. Verifies fix for #1066
2019-07-10 10:11:12 -07:00
Derek Collison
a61d32a82c
Test for staggered leafnodes and sub/pub. Verifies fix for #1066
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-10 09:57:43 -07:00
Derek Collison
d997dea802
Merge pull request #1067 from restis/master
...
Make sure Sublist.All collect all subscriptions
2019-07-10 09:54:17 -07:00
antmanler
24ab33b879
Add a simple test for Sublist.All
2019-07-10 22:32:15 +08:00
antmanler
ca773bf07b
Make sure Sublist.All collect all subscriptions
2019-07-10 21:41:44 +08:00
Derek Collison
074c87d49e
Merge pull request #1060 from nats-io/gr
...
Make sure we route responses across leafnodes
2019-07-08 17:07:57 -07:00
Derek Collison
49707317a1
Make sure we route responses across leafnodes
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-08 16:20:40 -07:00
Derek Collison
c30b2ba75e
Merge pull request #1059 from nats-io/mp
...
MaxPayload async INFO updates
2019-07-08 16:05:17 -07:00
Derek Collison
f76a6b9a5c
When a bound account's maxpayload is not the same make sure we send it to clients that can do async INFO.
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-08 15:20:23 -07:00
Derek Collison
94071d32a9
Merge pull request #1055 from nats-io/sublist_cache
...
Allow sublist cache do be disabled globally for all accounts.
2019-07-02 09:45:04 -07:00
Derek Collison
d7e5554630
Grab opts under correct lock, make cache decision more explicit
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-02 09:31:54 -07:00
Derek Collison
8168aa1f81
Allow sublist cache do be disabled globally
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-02 07:34:02 -07:00
Derek Collison
d2986afd9c
Merge pull request #1054 from nats-io/sublist_stats
...
Protect stats when no cache is present
2019-07-02 06:14:25 -07:00
Derek Collison
3c3e97f729
Fold under cache conditional
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-02 06:06:53 -07:00
Derek Collison
acc1031705
Protect stats when no cache is present
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-02 05:47:39 -07:00
Ivan Kozlovic
a171864ae7
Merge pull request #1053 from nats-io/mpay_overrun
...
[FIXED] Check of maxpayload could be bypassed if size overruns int32
2019-07-01 15:27:51 -06:00
Ivan Kozlovic
156511bba7
[FIXED] Check of maxpayload could be bypassed if size overruns int32
...
One could craft a PUB protocol to cause server to panic. This can
happen if the size in the PUB protocol overruns an int32.
(note that if authorization is enabled, the user would need to
authenticate first, limiting the impact).
Thank you to Aviv Sasson and Ariel Zelivansky from Twistlock
for the security report!
Signed-off-by: Ivan Kozlovic <ivan@synadia.com >
2019-07-01 15:06:08 -06:00
Derek Collison
e83e0a7f5c
Merge pull request #1048 from nats-io/ping
...
Stager first ping from server and suppress pings if a ping was received.
2019-07-01 12:06:32 -07:00
Derek Collison
a6cef5b584
spaces fix
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-01 12:03:45 -07:00
Derek Collison
e11a959584
Send ping when RTT update needed
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-01 11:58:06 -07:00
Derek Collison
eb3777cc0b
Merge pull request #1052 from nats-io/ro
...
Make ReadOperatorJWT public for embedded use case. Fixes #1050
2019-07-01 11:18:49 -07:00
Derek Collison
ce22bc87a4
Make ReadOperatorJWT public for embedded use case. Fixes #1050
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-01 11:14:21 -07:00
Derek Collison
769f9e44b4
Merge pull request #1049 from nats-io/lndp
...
Leafnode updates
2019-07-01 09:55:30 -07:00
Derek Collison
5a89c14eb9
Change to JoinHostPort
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-01 09:37:03 -07:00
Derek Collison
8a3db71ad5
Updates from comments
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-07-01 08:47:13 -07:00
Derek Collison
0f20592fb3
Made leafnode connect a Debugf to be consistent, added first connect Noticef.
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-29 19:11:02 -07:00
Derek Collison
100d0d2b02
Use default port for leafnode remote if not specified
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-29 17:50:21 -07:00
Derek Collison
ebd4deb8b9
Stager first ping from server and suppress pings if a ping was received.
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-29 15:43:15 -07:00
Derek Collison
7d11d9288f
Merge pull request #1047 from andyxning/add_log_date_field_check
...
add log date field check
2019-06-28 06:18:07 -07:00
Andy Xie
f77bdfd0bd
add log date field check
2019-06-28 20:07:29 +08:00
Derek Collison
2db76bde33
version bump [ci skip]
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-24 17:17:13 -07:00
Derek Collison
54fefe36c6
Merge pull request #1045 from nats-io/opjwt
...
Allow operator to be inline JWTs. Changes to Preload's validations.
2019-06-24 17:14:17 -07:00
Derek Collison
5b42b99dc1
Allow operator to be inline JWT. Also preloads just warn on validation issues, do not stop starting or reloads.
...
We issue validation warnings now to the log.
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-24 16:46:22 -07:00
Derek Collison
6f49f76efb
Fix for #1043 [ci skip]
...
Signed-off-by: Derek Collison <derek@nats.io >
2019-06-21 08:58:18 -07:00
Waldemar Quevedo
1bd5cedee7
Merge pull request #1042 from nats-io/leafnode-tls-timeout
...
Allow updating TLS timeout for leafnode remotes
2019-06-14 13:06:36 -07:00
Waldemar Quevedo
8147adc1b0
Add support to extend leafnodes remote tls timeout
...
Bump default TLS timeout for leafnode connections
Add checks for when cert_file or key_file are missing in TLS config
Signed-off-by: Waldemar Quevedo <wally@synadia.com >
2019-06-14 08:04:44 -07:00
Derek Collison
436d955fc4
Merge pull request #1040 from nats-io/ldq
...
Messages not distributed evenly when sourced from leafnode.
2019-06-12 00:13:20 -07:00