refactor settings for local dial info filter
This commit is contained in:
@@ -966,8 +966,8 @@ impl RPCProcessor {
|
||||
}
|
||||
|
||||
// filter out attempts to pass non-public addresses in for peers
|
||||
let address_filter = self.config.get().network.address_filter;
|
||||
if address_filter {
|
||||
let enable_local_peer_scope = self.config.get().network.enable_local_peer_scope;
|
||||
if !enable_local_peer_scope {
|
||||
for di in &peer_info.dial_infos {
|
||||
if !di.is_global() {
|
||||
// non-public address causes rejection
|
||||
@@ -983,7 +983,7 @@ impl RPCProcessor {
|
||||
.map_err(map_error_string!())?;
|
||||
|
||||
// find N nodes closest to the target node in our routing table
|
||||
let peer_scope = if address_filter {
|
||||
let peer_scope = if !enable_local_peer_scope {
|
||||
PeerScope::Global
|
||||
} else {
|
||||
PeerScope::All
|
||||
@@ -1454,7 +1454,7 @@ impl RPCProcessor {
|
||||
safety_route: Option<&SafetyRouteSpec>,
|
||||
respond_to: RespondTo,
|
||||
) -> Result<FindNodeAnswer, RPCError> {
|
||||
let address_filter = self.config.get().network.address_filter;
|
||||
let enable_local_peer_scope = self.config.get().network.enable_local_peer_scope;
|
||||
let find_node_q_msg = {
|
||||
let mut find_node_q_msg = ::capnp::message::Builder::new_default();
|
||||
let mut question = find_node_q_msg.init_root::<veilid_capnp::operation::Builder>();
|
||||
@@ -1467,11 +1467,13 @@ impl RPCProcessor {
|
||||
encode_public_key(&key, &mut node_id_builder)?;
|
||||
let mut peer_info_builder = fnq.reborrow().init_peer_info();
|
||||
|
||||
let own_peer_info = self.routing_table().get_own_peer_info(if address_filter {
|
||||
PeerScope::Global
|
||||
} else {
|
||||
PeerScope::All
|
||||
});
|
||||
let own_peer_info =
|
||||
self.routing_table()
|
||||
.get_own_peer_info(if !enable_local_peer_scope {
|
||||
PeerScope::Global
|
||||
} else {
|
||||
PeerScope::All
|
||||
});
|
||||
if own_peer_info.dial_infos.is_empty() {
|
||||
return Err(rpc_error_internal("No valid public dial info for own node"));
|
||||
}
|
||||
@@ -1520,7 +1522,7 @@ impl RPCProcessor {
|
||||
let peer_info = decode_peer_info(&p)?;
|
||||
|
||||
// reject attempts to include non-public addresses in results
|
||||
if address_filter {
|
||||
if !enable_local_peer_scope {
|
||||
for di in &peer_info.dial_infos {
|
||||
if !di.is_global() {
|
||||
// non-public address causes rejection
|
||||
|
@@ -184,7 +184,7 @@ pub fn config_callback(key: String) -> Result<Box<dyn core::any::Any>, String> {
|
||||
"network.dht.validate_dial_info_receipt_time" => Ok(Box::new(5000000u64)),
|
||||
"network.upnp" => Ok(Box::new(false)),
|
||||
"network.natpmp" => Ok(Box::new(false)),
|
||||
"network.address_filter" => Ok(Box::new(true)),
|
||||
"network.enable_local_peer_scope" => Ok(Box::new(false)),
|
||||
"network.restricted_nat_retries" => Ok(Box::new(3u32)),
|
||||
"network.tls.certificate_path" => Ok(Box::new(get_certfile_path())),
|
||||
"network.tls.private_key_path" => Ok(Box::new(get_keyfile_path())),
|
||||
@@ -279,7 +279,7 @@ pub async fn test_config() {
|
||||
|
||||
assert_eq!(inner.network.upnp, false);
|
||||
assert_eq!(inner.network.natpmp, false);
|
||||
assert_eq!(inner.network.address_filter, true);
|
||||
assert_eq!(inner.network.enable_local_peer_scope, false);
|
||||
assert_eq!(inner.network.restricted_nat_retries, 3u32);
|
||||
assert_eq!(inner.network.tls.certificate_path, get_certfile_path());
|
||||
assert_eq!(inner.network.tls.private_key_path, get_keyfile_path());
|
||||
|
@@ -130,7 +130,7 @@ pub struct VeilidConfigNetwork {
|
||||
pub dht: VeilidConfigDHT,
|
||||
pub upnp: bool,
|
||||
pub natpmp: bool,
|
||||
pub address_filter: bool,
|
||||
pub enable_local_peer_scope: bool,
|
||||
pub restricted_nat_retries: u32,
|
||||
pub tls: VeilidConfigTLS,
|
||||
pub application: VeilidConfigApplication,
|
||||
@@ -232,7 +232,7 @@ impl VeilidConfig {
|
||||
get_config!(inner.network.rpc.max_route_hop_count);
|
||||
get_config!(inner.network.upnp);
|
||||
get_config!(inner.network.natpmp);
|
||||
get_config!(inner.network.address_filter);
|
||||
get_config!(inner.network.enable_local_peer_scope);
|
||||
get_config!(inner.network.restricted_nat_retries);
|
||||
get_config!(inner.network.tls.certificate_path);
|
||||
get_config!(inner.network.tls.private_key_path);
|
||||
|
Reference in New Issue
Block a user