Commit Graph
2686 Commits
Author SHA1 Message Date
Vitaliy Filippov 9a5fabddb4 Implement direct AES-256-GCM with a static key for benchmark 2026-04-18 20:41:49 +03:00
Vitaliy Filippov 088e85a423 Make sure to send all TLS data before continuing 2026-04-18 14:22:42 +03:00
Vitaliy Filippov 43f1d58f29 Parse standard TLS record headers 2026-04-17 21:22:47 +03:00
Vitaliy Filippov a6b29a01a2 Omit msgr_tls_record_hdr_t for non-tls data 2026-04-17 21:22:47 +03:00
Vitaliy Filippov 5d65d87dfb Allow 2 and 4 byte per block chain_info (allow more than 255 snapshots with encryption) 2026-04-17 21:22:47 +03:00
Vitaliy Filippov ddf28feaf8 Implement OSD TLS support 2026-04-17 21:22:47 +03:00
Vitaliy Filippov a57049be63 Allow to skip checksums for headers 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 7f53e315c5 Implement protocol-level checksums (xxhash3) 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 48756520dd Include xxhash3 x86dispatch 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 4f23b242f3 Do not use scrap_buffer in the client (it would block protocol checksum support) 2026-04-17 13:53:41 +03:00
Vitaliy Filippov c371b74e12 Support TLS CN authentication and per-image permissions in vitastor-cli serve 2026-04-17 13:53:41 +03:00
Vitaliy Filippov c014d20fca Add VitastorAuthFilter 2026-04-17 13:53:41 +03:00
Vitaliy Filippov 9b2480d552 Implement vitastor-cli ls-user, modify-user, remove-user commands 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1ae10c21ca Add image owner/owner_group/reader_group support (for antietcd VitastorAuthFilter) 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4698009b59 Add security parameter documentation 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d0e0b70f81 Support inline (string PEM) certificates and pkeys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 914f42da5c Show encryption keys (only IDs) in the listing 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 273b641820 Support storing image encryption keys in Vault 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4f9de7a6fb Prefer local etcd addresses and correctly cycle over them even when they need resolving
Seems slightly overcomplicated...
2026-04-17 13:53:40 +03:00
Vitaliy Filippov d3c529abd7 Support DNS resolving via libc-ares 2026-04-17 13:53:40 +03:00
Vitaliy Filippov a8e19ba28a Batch handle_immediate_ops more 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 64a8cd1f4b Add vitastor-cli create & modify --enc-key parameter 2026-04-17 13:53:40 +03:00
Vitaliy Filippov cc6e531410 Support reading from snapshots encrypted with different keys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov ca608d0b87 Support decryption with multiple keys 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 0e095d2347 Allow to return chain_info in response to reads 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4fe2a0a3eb Add basic AES-XTS client-side encryption support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1a4d275616 Rework msgr send/receive to allow encryption support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 803c870493 Move fromhexstr() to str_util 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 0d97fba466 Add openapi description 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 41100260ec Slightly fix API return and input types 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 07c9606594 Implement vitastor-cli serve command to serve simple HTTP API 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 4ba361d83d Implement HTTP server support O_o 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 662fb86eae Rename http_response_t to http_message_t 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 1df8b51abb Extract common HTTP context 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d2d01e5183 Support xxhash 32-bit checksums (data_csum_type=xxh3_32) 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 3d96c3907e Detect block checksums using csum_block_size, not data_csum_type 2026-04-17 13:53:40 +03:00
Vitaliy Filippov fb483185ff Add client certificate support 2026-04-17 13:53:40 +03:00
Vitaliy Filippov d6eb00e18e Do not re-initialize TLS context every connection 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 34d47bd62a Add https support to antietcd 2026-04-17 13:53:40 +03:00
Vitaliy Filippov 2846eba3af Implement etcd SSL support via OpenSSL
Maybe I should remove all of this and use libwebsockets :)
2026-04-17 13:53:40 +03:00
Vitaliy Filippov a76d5ccc0d Wakeup callers in rm-data 2026-04-17 13:53:32 +03:00
Vitaliy Filippov 8ed1e180e0 Clear inode_stats in mon 2026-04-14 02:44:46 +03:00
Vitaliy Filippov 8832fc3b14 Fix print to stdout in client 2026-04-14 02:43:50 +03:00
Vitaliy Filippov 0134934c99 Do not skip garbage entries on start (rollback change from 3.0.4) 2026-04-11 12:05:02 +03:00
Vitaliy Filippov 2e36f292bd Fix buffer alignment during metadata clearing on init 2026-04-10 21:56:12 +03:00
Vitaliy Filippov bcc6419760 Auto-select the only RDMA device/port if there is only one 2026-04-08 15:46:10 +03:00
Vitaliy Filippov dd5941b9a4 Release 3.0.9
- Fix broken garbage collection in the new store leading to very high memory usage
- Make the new store do full garbage collection on OSD startup by default (can be turned off with a new gc_on_start parameter)
- Make startup logging with the new store more informative, allow to log amount of garbage with log_level > 1
- Fix clients reading from snapshots incorrectly on retries (for example when OSDs were restarted during read)
- Fix a possible "send-after-free" in OSD which could probably also affect snapshot reads
- Fix OSD crashing when handling a read_bitmap operation from a deleted object with the new store
v3.0.9
2026-04-04 18:38:40 +03:00
Vitaliy Filippov 4005b88865 Do not use node_type 2026-04-04 17:37:47 +03:00
Vitaliy Filippov 280b5cd675 Add gc_on_start docs 2026-04-04 17:19:32 +03:00
Vitaliy Filippov e5c505eaf4 Write 1 entry to blocks to collect garbage 2026-04-03 18:08:12 +00:00