painless-security / trust-router

Moonshot Trust Router
0 stars 0 forks source link

Use peer labels instead of GSS names when considering updates #72

Closed jennifer-richards closed 6 years ago

jennifer-richards commented 6 years ago

The split horizon check for sending route updates was not working correctly. This was due to a mix-up between using the GSS name used to authenticate a connection versus the hostname/port of a peer when deciding whether a route's source was the peer we were about to announce a route to. This corrects that by consistently using the hostname/port.

This overlaps somewhat with #74 compared to the current milestone/monitoring. The first commit that is solely part of this pull request is b32a87b, so if #74 has been merged already, there's no need to look at anything before that one.