Commit Graph

2139 Commits

Author SHA1 Message Date
Ivan Kozlovic
8458a093de Merge pull request #1071 from nats-io/support_insecure_skip_verify
[FIXED] Allow TLS InsecureSkipVerify again
2019-07-12 14:29:21 -06:00
Ivan Kozlovic
9e09486e26 Use all caps for the production message
Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 13:44:01 -06:00
Ivan Kozlovic
37d08a6c56 [FIXED] Allow TLS InsecureSkipVerify again
This has an effect only on connections created by the server,
so routes and gateways (explicit and implicit).
Make sure that an explicit warning is printed if the insecure
property is set, but otherwise allow it.

Resolves #1062

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-12 12:10:28 -06:00
Derek Collison
b3f6997bc0 Make sure to flush
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:37:07 -07:00
Derek Collison
d027ff7efd Add leafnode usage test
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:30:01 -07:00
Derek Collison
3b785ed1e0 Add in additional vendor items
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 17:29:30 -07:00
Derek Collison
2cad1055c7 Update modules and vendor
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-11 11:34:32 -07:00
Derek Collison
b868e91c5e Merge pull request #1064 from andyxning/check_for_monitor_server_start_error
check for monitor server start error
2019-07-10 21:00:23 -07:00
Derek Collison
00d8d087b7 Merge pull request #1070 from nats-io/leafcycle
Prevent multiple solicited leafnodes from forming cycles.
2019-07-10 20:49:00 -07:00
Andy Xie
c9221fd187 check for monitor server start error 2019-07-11 11:44:06 +08:00
Derek Collison
951ae49100 Prevent multiple solicited leafnodes from forming cycles.
When a solicited leafnode comes from multiple servers that themselves are a cluster, cycles were formed.
This change allows solicited leafnodes to behave similar to gateways in that each server of a cluster
is expected to have a solicted leafnode per destination account and cluster.

We no longer forward subscription interest or messages to a cluster from a server that has a solicited leafnode.

Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 20:16:47 -07:00
Derek Collison
79e69640bc Merge pull request #1069 from nats-io/mremotes
Convert leafnode solicited remotes to an array
2019-07-10 13:40:39 -07:00
Derek Collison
10d4f1ab7a Convert leafnode solicited remotes to array
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 11:53:34 -07:00
Derek Collison
32cfde9720 Merge pull request #1068 from nats-io/stagln
Test for staggered leafnodes and sub/pub. Verifies fix for #1066
2019-07-10 10:11:12 -07:00
Derek Collison
a61d32a82c Test for staggered leafnodes and sub/pub. Verifies fix for #1066
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-10 09:57:43 -07:00
Derek Collison
d997dea802 Merge pull request #1067 from restis/master
Make sure Sublist.All collect all subscriptions
2019-07-10 09:54:17 -07:00
antmanler
24ab33b879 Add a simple test for Sublist.All 2019-07-10 22:32:15 +08:00
antmanler
ca773bf07b Make sure Sublist.All collect all subscriptions 2019-07-10 21:41:44 +08:00
Derek Collison
074c87d49e Merge pull request #1060 from nats-io/gr
Make sure we route  responses across leafnodes
2019-07-08 17:07:57 -07:00
Derek Collison
49707317a1 Make sure we route responses across leafnodes
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-08 16:20:40 -07:00
Derek Collison
c30b2ba75e Merge pull request #1059 from nats-io/mp
MaxPayload async INFO updates
2019-07-08 16:05:17 -07:00
Derek Collison
f76a6b9a5c When a bound account's maxpayload is not the same make sure we send it to clients that can do async INFO.
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-08 15:20:23 -07:00
Derek Collison
94071d32a9 Merge pull request #1055 from nats-io/sublist_cache
Allow sublist cache do be disabled globally for all accounts.
2019-07-02 09:45:04 -07:00
Derek Collison
d7e5554630 Grab opts under correct lock, make cache decision more explicit
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 09:31:54 -07:00
Derek Collison
8168aa1f81 Allow sublist cache do be disabled globally
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 07:34:02 -07:00
Derek Collison
d2986afd9c Merge pull request #1054 from nats-io/sublist_stats
Protect stats when no cache is present
2019-07-02 06:14:25 -07:00
Derek Collison
3c3e97f729 Fold under cache conditional
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 06:06:53 -07:00
Derek Collison
acc1031705 Protect stats when no cache is present
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-02 05:47:39 -07:00
Ivan Kozlovic
a171864ae7 Merge pull request #1053 from nats-io/mpay_overrun
[FIXED] Check of maxpayload could be bypassed if size overruns int32
2019-07-01 15:27:51 -06:00
Ivan Kozlovic
156511bba7 [FIXED] Check of maxpayload could be bypassed if size overruns int32
One could craft a PUB protocol to cause server to panic. This can
happen if the size in the PUB protocol overruns an int32.

(note that if authorization is enabled, the user would need to
authenticate first, limiting the impact).

Thank you to Aviv Sasson and Ariel Zelivansky from Twistlock
for the security report!

Signed-off-by: Ivan Kozlovic <ivan@synadia.com>
2019-07-01 15:06:08 -06:00
Derek Collison
e83e0a7f5c Merge pull request #1048 from nats-io/ping
Stager first ping from server and suppress pings if a ping was received.
2019-07-01 12:06:32 -07:00
Derek Collison
a6cef5b584 spaces fix
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-01 12:03:45 -07:00
Derek Collison
e11a959584 Send ping when RTT update needed
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-01 11:58:06 -07:00
Derek Collison
eb3777cc0b Merge pull request #1052 from nats-io/ro
Make ReadOperatorJWT public for embedded use case. Fixes #1050
2019-07-01 11:18:49 -07:00
Derek Collison
ce22bc87a4 Make ReadOperatorJWT public for embedded use case. Fixes #1050
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-01 11:14:21 -07:00
Derek Collison
769f9e44b4 Merge pull request #1049 from nats-io/lndp
Leafnode updates
2019-07-01 09:55:30 -07:00
Derek Collison
5a89c14eb9 Change to JoinHostPort
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-01 09:37:03 -07:00
Derek Collison
8a3db71ad5 Updates from comments
Signed-off-by: Derek Collison <derek@nats.io>
2019-07-01 08:47:13 -07:00
Derek Collison
0f20592fb3 Made leafnode connect a Debugf to be consistent, added first connect Noticef.
Signed-off-by: Derek Collison <derek@nats.io>
2019-06-29 19:11:02 -07:00
Derek Collison
100d0d2b02 Use default port for leafnode remote if not specified
Signed-off-by: Derek Collison <derek@nats.io>
2019-06-29 17:50:21 -07:00
Derek Collison
ebd4deb8b9 Stager first ping from server and suppress pings if a ping was received.
Signed-off-by: Derek Collison <derek@nats.io>
2019-06-29 15:43:15 -07:00
Derek Collison
7d11d9288f Merge pull request #1047 from andyxning/add_log_date_field_check
add log date field check
2019-06-28 06:18:07 -07:00
Andy Xie
f77bdfd0bd add log date field check 2019-06-28 20:07:29 +08:00
Derek Collison
2db76bde33 version bump [ci skip]
Signed-off-by: Derek Collison <derek@nats.io>
2019-06-24 17:17:13 -07:00
Derek Collison
54fefe36c6 Merge pull request #1045 from nats-io/opjwt
Allow operator to be inline JWTs. Changes to Preload's validations.
2019-06-24 17:14:17 -07:00
Derek Collison
5b42b99dc1 Allow operator to be inline JWT. Also preloads just warn on validation issues, do not stop starting or reloads.
We issue validation warnings now to the log.

Signed-off-by: Derek Collison <derek@nats.io>
2019-06-24 16:46:22 -07:00
Derek Collison
6f49f76efb Fix for #1043 [ci skip]
Signed-off-by: Derek Collison <derek@nats.io>
2019-06-21 08:58:18 -07:00
Waldemar Quevedo
1bd5cedee7 Merge pull request #1042 from nats-io/leafnode-tls-timeout
Allow updating TLS timeout for leafnode remotes
2019-06-14 13:06:36 -07:00
Waldemar Quevedo
8147adc1b0 Add support to extend leafnodes remote tls timeout
Bump default TLS timeout for leafnode connections

Add checks for when cert_file or key_file are missing in TLS config

Signed-off-by: Waldemar Quevedo <wally@synadia.com>
2019-06-14 08:04:44 -07:00
Derek Collison
436d955fc4 Merge pull request #1040 from nats-io/ldq
Messages not distributed evenly when sourced from leafnode.
2019-06-12 00:13:20 -07:00