Vitaliy Filippov
9a5fabddb4
Implement direct AES-256-GCM with a static key for benchmark
2026-04-18 20:41:49 +03:00
Vitaliy Filippov
088e85a423
Make sure to send all TLS data before continuing
2026-04-18 14:22:42 +03:00
Vitaliy Filippov
43f1d58f29
Parse standard TLS record headers
2026-04-17 21:22:47 +03:00
Vitaliy Filippov
a6b29a01a2
Omit msgr_tls_record_hdr_t for non-tls data
2026-04-17 21:22:47 +03:00
Vitaliy Filippov
5d65d87dfb
Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption)
2026-04-17 21:22:47 +03:00
Vitaliy Filippov
ddf28feaf8
Implement OSD TLS support
2026-04-17 21:22:47 +03:00
Vitaliy Filippov
a57049be63
Allow to skip checksums for headers
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
7f53e315c5
Implement protocol-level checksums (xxhash3)
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
48756520dd
Include xxhash3 x86dispatch
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
4f23b242f3
Do not use scrap_buffer in the client (it would block protocol checksum support)
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
c371b74e12
Support TLS CN authentication and per-image permissions in vitastor-cli serve
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
c014d20fca
Add VitastorAuthFilter
2026-04-17 13:53:41 +03:00
Vitaliy Filippov
9b2480d552
Implement vitastor-cli ls-user, modify-user, remove-user commands
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
1ae10c21ca
Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter)
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
4698009b59
Add security parameter documentation
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
d0e0b70f81
Support inline (string PEM) certificates and pkeys
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
914f42da5c
Show encryption keys (only IDs) in the listing
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
273b641820
Support storing image encryption keys in Vault
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
4f9de7a6fb
Prefer local etcd addresses and correctly cycle over them even when they need resolving
...
Seems slightly overcomplicated...
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
d3c529abd7
Support DNS resolving via libc-ares
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
a8e19ba28a
Batch handle_immediate_ops more
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
64a8cd1f4b
Add vitastor-cli create & modify --enc-key parameter
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
cc6e531410
Support reading from snapshots encrypted with different keys
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
ca608d0b87
Support decryption with multiple keys
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
0e095d2347
Allow to return chain_info in response to reads
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
4fe2a0a3eb
Add basic AES-XTS client-side encryption support
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
1a4d275616
Rework msgr send/receive to allow encryption support
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
803c870493
Move fromhexstr() to str_util
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
0d97fba466
Add openapi description
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
41100260ec
Slightly fix API return and input types
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
07c9606594
Implement vitastor-cli serve command to serve simple HTTP API
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
4ba361d83d
Implement HTTP server support O_o
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
662fb86eae
Rename http_response_t to http_message_t
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
1df8b51abb
Extract common HTTP context
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
d2d01e5183
Support xxhash 32-bit checksums (data_csum_type=xxh3_32)
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
3d96c3907e
Detect block checksums using csum_block_size, not data_csum_type
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
fb483185ff
Add client certificate support
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
d6eb00e18e
Do not re-initialize TLS context every connection
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
34d47bd62a
Add https support to antietcd
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
2846eba3af
Implement etcd SSL support via OpenSSL
...
Maybe I should remove all of this and use libwebsockets :)
2026-04-17 13:53:40 +03:00
Vitaliy Filippov
a76d5ccc0d
Wakeup callers in rm-data
2026-04-17 13:53:32 +03:00
Vitaliy Filippov
8ed1e180e0
Clear inode_stats in mon
2026-04-14 02:44:46 +03:00
Vitaliy Filippov
8832fc3b14
Fix print to stdout in client
2026-04-14 02:43:50 +03:00
Vitaliy Filippov
0134934c99
Do not skip garbage entries on start (rollback change from 3.0.4)
2026-04-11 12:05:02 +03:00
Vitaliy Filippov
2e36f292bd
Fix buffer alignment during metadata clearing on init
2026-04-10 21:56:12 +03:00
Vitaliy Filippov
bcc6419760
Auto-select the only RDMA device/port if there is only one
2026-04-08 15:46:10 +03:00
Vitaliy Filippov
dd5941b9a4
Release 3.0.9
...
- Fix broken garbage collection in the new store leading to very high memory usage
- Make the new store do full garbage collection on OSD startup by default (can be turned off with a new gc_on_start parameter)
- Make startup logging with the new store more informative, allow to log amount of garbage with log_level > 1
- Fix clients reading from snapshots incorrectly on retries (for example when OSDs were restarted during read)
- Fix a possible "send-after-free" in OSD which could probably also affect snapshot reads
- Fix OSD crashing when handling a read_bitmap operation from a deleted object with the new store
v3.0.9
2026-04-04 18:38:40 +03:00
Vitaliy Filippov
4005b88865
Do not use node_type
2026-04-04 17:37:47 +03:00
Vitaliy Filippov
280b5cd675
Add gc_on_start docs
2026-04-04 17:19:32 +03:00
Vitaliy Filippov
e5c505eaf4
Write 1 entry to blocks to collect garbage
2026-04-03 18:08:12 +00:00