11 Commits

Include renames

Author	SHA1	Message	Date
steven	d1239867ae	Add support for timeout action ... There is also capability of performing another new authentic knock sequence to refresh their timeout timer so they can remain open	2024-04-20 15:41:26 -06:00
steven	a52f3f0d43	fix incorrect logic in rotateSequence ... This was introduced in the previous few commits when adding support for multiple secrets in knockd. The logic to push and pop entries from the knockSequences slice needed to be adjusted to cound for the number of secrets that are loaded by hypd.	2024-04-20 13:27:00 -06:00
steven	2951c1f684	add support for multiple secrets (independent agents) on the knock daemon ... This allows you to generate more than one pre-shared secret on the knock daemon so that you can distribute the secret and control revocation at a more granular level. Each additional secret creates one more concurrent authentic knock sequence.	2024-04-19 22:04:00 -06:00
steven	05e37193b4	Make the success action configurable ... Instead of using the hardcoded proof of concept for iptables, the success action is now read from the hypd configuration file and whatever is defined there is executed.	2024-04-18 11:22:03 -06:00
steven	344d874c02	minor formatting changes	2024-04-18 09:39:05 -06:00
steven	1ffadf5c86	BREAKING: Interface name is now specified by configuration file ... The syntax for the hypd server command has changed. Now instead of specifying an interface name as an argument to the server command, you instead specify a configuration file path. Example: ./hypd server hypdconfig.json	2024-04-17 19:41:24 -06:00
steven	e95b4972da	add scaffolding for configuration file	2024-04-17 19:12:01 -06:00
steven	5f10c27b0f	add knock sequence timeout ... This provides another layer of additional protection against sweep attacks by ensuring the correct sequence be entered rapidly, within 3 seconds by default. It also prevents a client from sitting stuck forever part way through an old knock sequence.	2024-04-14 18:14:24 -06:00
steven	0ad3e2b0d4	enter eBPF, libpcap and CGO = bloat	2024-04-13 21:22:22 -06:00
steven	ead7578544	change pcap snaplen to 126 bytes ... We really only care getting as far as the UDP header and can discard the rest. This should reduce load, and perhaps enable full pcap with ports on the BPF filter UDP header = 8 bytes IPv4 max size = 60 bytes IPv6 fixed size = 40 bytes Ethernet header size = 18 bytes	2024-04-11 15:21:48 -06:00
steven	291cbaabd4	BREAKING: changes to CLI interface, moved to cobra CLI ... To better support configuration and user friendliness, migrated to cobra based CLI. The source tree structure has also changed to single go module, the server has been renamed hypd and client has been named hyp. The original structure came into being organically, but now that the vision is more complete it's best to make these adjustments now.	2024-04-10 21:42:38 -06:00