Viktor Liu
b434cda062
[client] Refresh signal receive liveness when worker handoff drains ( #6594 )
2026-06-29 12:16:47 +02:00
Viktor Liu
4400372f37
[client] Forward non-address DNS record types through route forwarders ( #6455 )
2026-06-28 18:50:17 +02:00
Viktor Liu
5968cff242
[client] Keep signal stream alive while receive loop is blocked on worker handoff ( #6530 )
2026-06-28 15:33:30 +02:00
Viktor Liu
17b2044596
[client] Skip re-resolving cached management cache domains ( #6518 )
2026-06-23 17:55:57 +02:00
Viktor Liu
522b8ed969
[client] Surface DNS forwarder upstream failures via Extended DNS Errors ( #6441 )
2026-06-22 12:41:33 +02:00
Viktor Liu
58c79f5878
[client] Fix DNS custom zone teardown: handler leak and external CNAME resolution ( #6445 )
2026-06-19 17:33:09 +02:00
Viktor Liu
15a0504fb1
[client] Treat answering upstreams as reachable and widen DNS health grace window ( #6453 )
2026-06-19 17:32:49 +02:00
Viktor Liu
d3710d4bb2
[signal] Serialize concurrent sends to a peer signal stream ( #6463 )
2026-06-18 15:00:19 +02:00
Viktor Liu
5bd7c6c7ea
[client] Detect and recover from a stalled signal receive stream ( #6459 )
2026-06-17 18:48:09 +02:00
Viktor Liu
6fbc90b4d3
[client, relay] Expose relay transport and connection errors in status and metrics ( #6342 )
2026-06-17 15:41:48 +02:00
Viktor Liu
a44198fd77
[client] Add dialWebSocket method to WASM client ( #5980 )
2026-06-15 16:43:24 +02:00
Viktor Liu
b57f714350
[client] Drop signaling-side ICE candidate filter, drop overlay STUN at mux read-side instead ( #6142 )
2026-06-15 16:37:03 +02:00
Viktor Liu
f893abc41d
[client] Recover from tun device read/write panics and restart the client ( #6419 )
2026-06-15 16:36:00 +02:00
Viktor Liu
b19467e3af
[client] Answer NODATA when a host resolves without addresses of the requested family ( #6418 )
2026-06-12 14:50:46 +02:00
Viktor Liu
ed7a9363aa
[management] Emit IPv6 default permit firewall rule for exit node routes ( #6368 )
2026-06-09 13:26:43 +02:00
Viktor Liu
d56859dc5d
[client] Filter DNS fallback upstreams matching our server IP to prevent loops ( #6183 )
2026-06-09 12:26:03 +02:00
Viktor Liu
367d37050b
[relay, client] Fall back to WebSocket relay transport on oversized QUIC datagrams ( #6339 )
2026-06-09 10:25:46 +02:00
Viktor Liu
106527182f
[client] Snapshot iptables rule maps before persisting state ( #6345 )
2026-06-09 10:24:51 +02:00
Viktor Liu
8e1d5b78c2
[client] Preserve user deselect-all across management route sync ( #6363 )
2026-06-09 10:24:17 +02:00
Viktor Liu
a48c20d8d8
[client] Gate DNS forwarder on BlockInbound ( #6257 )
2026-06-03 11:33:29 +02:00
Viktor Liu
e7c9182ff9
[client] Offer injected ICMPv6 echo replies to packet capture ( #6321 )
2026-06-01 19:38:00 +02:00
Viktor Liu
43e041cf9f
[client] Apply netroute unspecified-destination workaround on android ( #6192 )
2026-05-29 15:15:22 +02:00
Viktor Liu
77e5693200
[client] Recognize NetBird DNS forwarder port in capture text format ( #6177 )
2026-05-29 15:14:32 +02:00
Viktor Liu
6771e35d57
[client] Release js.FuncOf callbacks in wasm ssh and rdp to prevent leaks ( #5982 )
2026-05-26 14:32:39 +02:00
Viktor Liu
e89b1e0596
[proxy, client] Bound embed client WireGuard per-Device memory ( #5962 )
2026-05-26 11:51:53 +02:00
Viktor Liu
4983b5cf17
[client] Match DNS wildcard handlers on label boundaries ( #6255 )
2026-05-25 18:38:48 +02:00
Viktor Liu
b3b0feb3b8
[client] Filter scoped/cloned default routes from BSD network monitor RTM_ADD ( #6208 )
2026-05-25 18:38:21 +02:00
Viktor Liu
0358be2313
[client] Revert "Clean up legacy 32-bit and HKCU registry entries on Windows install ( #6176 )" ( #6232 )
...
This reverts commit d927ef468a .
2026-05-21 16:27:12 +02:00
Viktor Liu
37052fd5bc
[client] Fix nil channel panic in external chain monitor stop ( #6224 )
2026-05-20 18:46:51 +02:00
Viktor Liu
4955c345d5
Clean up README header, key features table, and self-hosted quickstart ( #6178 )
2026-05-20 16:25:56 +02:00
Viktor Liu
9192b4f029
[client] Bump macOS sleep callback timeout to 20s ( #6220 )
2026-05-20 13:09:22 +02:00
Viktor Liu
3f91f49277
Clean up legacy 32-bit and HKCU registry entries on Windows install ( #6176 )
2026-05-16 16:52:57 +02:00
Viktor Liu
22e2519d71
[management] Avoid peer IP reallocation when account settings update preserves the network range ( #6173 )
2026-05-16 15:51:48 +02:00
Viktor Liu
9ed2e2a5b4
[client] Drop DNS probes for passive health projection ( #5971 )
2026-05-15 17:07:38 +02:00
Viktor Liu
2ccae7ec47
[client] Mirror v4 exit selection onto v6 pair and honour SkipAutoApply per route ( #6150 )
2026-05-15 16:58:47 +02:00
Viktor Liu
07e5450117
[management] Bracket IPv6 reverse-proxy target hosts when building URL Host field ( #6141 )
2026-05-14 16:42:40 +02:00
Viktor Liu
3f914090cb
[client] Bracket IPv6 in embed listeners, expand debug bundle ( #6134 )
2026-05-14 16:22:53 +02:00
Viktor Liu
ea9fab4396
[management] Allocate and preserve IPv6 overlay addresses for embedded proxy peers ( #6132 )
2026-05-14 16:05:33 +02:00
Viktor Liu
9126a192ca
[client] Set 0644 perms on SSH client config after os.CreateTemp ( #6126 )
2026-05-12 15:05:53 +02:00
Viktor Liu
1224d6e1ee
[client] Persist management URL and pre-shared key overrides on login ( #6065 )
2026-05-12 14:52:56 +02:00
Viktor Liu
946ce4c3da
[client] Fix --config flag default to point at profile path ( #6122 )
2026-05-11 17:48:21 +02:00
Viktor Liu
a4114a5e45
[client] Skip DNS upstream failover on definitive EDE ( #6089 )
2026-05-11 10:00:23 +02:00
Viktor Liu
6b08e89c7b
[relay] Preserve non-standard port in WS dialer URL prep ( #6061 )
2026-05-11 09:59:33 +02:00
Viktor Liu
a852b3bd34
[client, proxy] Harden uspfilter conntrack and share TCP relay ( #5936 )
2026-05-11 09:59:13 +02:00
Viktor Liu
afb83b3049
[client] Use unique temp file and clean up on failure when writing ssh config ( #6064 )
2026-05-11 09:58:49 +02:00
Viktor Liu
205ebcfda2
[management, client] Add IPv6 overlay support ( #5631 )
2026-05-07 11:33:37 +02:00
Viktor Liu
f532976e05
[client] Add public key to debug bundle config.txt ( #6092 )
2026-05-06 13:42:47 +02:00
Viktor Liu
71a400f90f
[client] Include MTU and SSH auth/JWT cache config in debug bundle ( #6071 )
2026-05-06 13:23:43 +02:00
Viktor Liu
31395f8bd2
[client] Use fwmark-aware route lookup for raw socket UDP checksum source ( #6070 )
...
* Use fwmark-aware route lookup for raw socket UDP checksum source
* Guard nil raw socket in sharedsock WriteTo
2026-05-05 16:18:22 +02:00
Viktor Liu
cd8e71002f
[client] Bump go-netroute to v0.4.0 and drop fork ( #6062 )
2026-05-05 15:26:27 +02:00
Viktor Liu
77a0992dc2
[misc] Disable govet inline analyzer and tidy go.mod ( #6066 )
2026-05-05 02:59:41 +09:00
Viktor Liu
50b58a6828
[client, relay] Advertise relay server IP via signal for foreign-relay fallback dial ( #6004 )
2026-05-04 11:40:25 +02:00
Viktor Liu
057d651d2e
[client, proxy] Add packet capture to debug bundle and CLI ( #5891 )
2026-05-04 11:28:56 +02:00
Viktor Liu
ed828b7af4
Tolerate EEXIST when adding macOS scoped default routes ( #6027 )
2026-04-29 16:08:47 +02:00
Viktor Liu
11ac2af2f5
Use BindListener for all userspace bind in lazyconn activity ( #6028 )
2026-04-29 16:07:33 +02:00
Viktor Liu
28fe26637b
[client] Fix Windows installer upgrade detection for pre-0.70.1 installs ( #6025 )
2026-04-29 11:01:07 +02:00
Viktor Liu
407e9d304b
[client] Move macOS sleep detection into the daemon (purego) ( #5926 )
2026-04-29 08:09:55 +02:00
Viktor Liu
e5474e199f
[client] Use WinRT COM for Windows toasts ( #6013 )
...
* Use WinRT COM for Windows toasts instead of fyne's PowerShell path
* Quote autostart path and split HKCU registry into per-user component
2026-04-28 20:54:06 +02:00
Viktor Liu
801de8c68d
[client] Add TTL-based refresh to mgmt DNS cache via handler chain ( #5945 )
2026-04-22 15:10:14 +02:00
Viktor Liu
a822a33240
[self-hosted] Use cscli lapi status for CrowdSec readiness in installer ( #5949 )
2026-04-22 10:35:22 +02:00
Viktor Liu
064ec1c832
[client] Trust wg interface in firewalld to bypass owner-flagged chains ( #5928 )
2026-04-21 17:57:16 +02:00
Viktor Liu
75e408f51c
[client] Prefer systemd-resolved stub over file mode regardless of resolv.conf header ( #5935 )
2026-04-21 17:56:56 +02:00
Viktor Liu
95213f7157
[client] Use Match host+exec instead of Host+Match in SSH client config ( #5903 )
2026-04-20 10:24:11 +02:00
Viktor Liu
2e0e3a3601
[client] Replace exclusion routes with scoped default + IP_BOUND_IF on macOS ( #5918 )
2026-04-20 10:01:01 +02:00
Viktor Liu
a39787d679
[infrastructure] Add CrowdSec LAPI container to self-hosted setup script ( #5880 )
2026-04-16 18:06:38 +02:00
Viktor Liu
633dde8d1f
[client] Reconnect conntrack netlink listener on error ( #5885 )
2026-04-16 22:30:36 +09:00
Viktor Liu
d4c61ed38b
[client] Add mangle FORWARD guard to prevent Docker DNAT bypass of ACL rules ( #5697 )
2026-04-16 14:02:52 +02:00
Viktor Liu
6b540d145c
[client] Add --disable-networks flag to block network selection ( #5896 )
2026-04-16 14:02:31 +02:00
Viktor Liu
95bc01e48f
[client] Allow clearing saved service env vars with --service-env "" ( #5893 )
2026-04-15 19:22:08 +02:00
Viktor Liu
0d86de47df
[client] Add PCP support ( #5219 )
2026-04-15 11:43:16 +02:00
Viktor Liu
e804a705b7
[infrastructure] Update sign pipeline version to v0.1.2 ( #5884 )
2026-04-14 17:08:35 +02:00
Viktor Liu
d7ad908962
[misc] Add CI check for proto version string changes ( #5854 )
...
* Add CI check for proto version string changes
* Handle pagination and missing patch data in proto version check
2026-04-14 13:36:26 +02:00
Viktor Liu
0a30b9b275
[management, proxy] Add CrowdSec IP reputation integration for reverse proxy ( #5722 )
2026-04-14 12:14:58 +02:00
Viktor Liu
4eed459f27
[client] Fix DNS resolution with userspace WireGuard and kernel firewall ( #5873 )
2026-04-13 16:23:57 +02:00
Viktor Liu
d2cdc0efec
[client] Use native firewall for peer ACLs in userspace WireGuard mode ( #5668 )
2026-04-10 09:12:13 +08:00
Viktor Liu
94a36cb53e
[client] Handle UPnP routers that only support permanent leases ( #5826 )
2026-04-08 17:59:59 +02:00
Viktor Liu
c7ba931466
[client] Populate network addresses in FreeBSD system info ( #5827 )
2026-04-08 17:14:16 +02:00
Viktor Liu
413d95b740
[client] Include service.json in debug bundle ( #5825 )
...
* Include service.json in debug bundle
* Add tests for service params sanitization logic
2026-04-08 21:10:31 +08:00
Viktor Liu
332c624c55
[client] Don't abort UI debug bundle when up/down fails ( #5780 )
2026-04-08 10:33:46 +02:00
Viktor Liu
dc160aff36
[client] Fix SSH proxy stripping shell quoting from forwarded commands ( #5669 )
2026-04-08 10:25:57 +02:00
Viktor Liu
d33cd4c95b
[client] Add NAT-PMP/UPnP support ( #5202 )
2026-04-08 15:29:32 +08:00
Viktor Liu
cb73b94ffb
[client] Add TCP DNS support for local listener ( #5758 )
2026-04-08 07:40:36 +02:00
Viktor Liu
1d920d700c
[client] Fix SSH server Stop() deadlock when sessions are active ( #5717 )
2026-04-07 17:56:54 +02:00
Viktor Liu
bb85eee40a
[client] Skip down interfaces in network address collection for posture checks ( #5768 )
2026-04-07 17:56:48 +02:00
Viktor Liu
aba5d6f0d2
[client] Error out on netbird expose when block inbound is enabled ( #5818 )
2026-04-07 17:55:35 +02:00
Viktor Liu
0588d2dbe1
[management] Load missing service columns in pgx account loader ( #5816 )
2026-04-07 14:56:56 +02:00
Viktor Liu
28fbf96b2a
[client] Fix flaky TestServiceLifecycle/Restart on FreeBSD ( #5786 )
2026-04-02 21:45:49 +02:00
Viktor Liu
5bf2372c4d
[management] Fix L4 service creation deadlock on single-connection databases ( #5779 )
2026-04-02 14:46:14 +02:00
Viktor Liu
6553ce4cea
[client] Mock management client in TestUpdateOldManagementURL to fix CI flakiness ( #5703 )
2026-03-31 10:49:06 +02:00
Viktor Liu
a62d472bc4
[client] Include fake IP block routes in Android TUN rebuilds ( #5739 )
2026-03-31 10:36:27 +02:00
Viktor Liu
04dcaadabf
[client] Persist service install parameters across reinstalls ( #5732 )
2026-03-30 16:25:14 +02:00
Viktor Liu
0765352c99
[management] Persist proxy capabilities to database ( #5720 )
2026-03-30 13:03:42 +02:00
Viktor Liu
145d82f322
[client] Replace iOS DNS IsPrivate heuristic with route manager check ( #5694 )
2026-03-26 18:11:05 +08:00
Viktor Liu
a8b9570700
[client] Enable RPM package signature verification in install script ( #5676 )
2026-03-26 09:50:43 +01:00
Viktor Liu
6ff6d84646
[client] Bump go-m1cpu to v0.2.1 to fix segfault on macOS 26 / M5 chips ( #5701 )
2026-03-26 09:49:02 +01:00
Viktor Liu
9aaa05e8ea
Replace discontinued LocalStack image with MinIO in S3 test ( #5680 )
2026-03-25 15:51:29 +08:00
Viktor Liu
0fc63ea0ba
[management] Allow multiple header auths with same header name ( #5678 )
2026-03-24 16:18:21 +01:00
Viktor Liu
5b85edb753
[management] Omit proxy_protocol from API response when false ( #5656 )
...
The internal Target model uses a plain bool for ProxyProtocol,
which was always serialized to the API response as false even
when not configured. Only set the API field when true so it
gets omitted via omitempty when unset.
2026-03-23 17:53:17 +01:00
Viktor Liu
2313494e0e
[client] Don't abort debug for command when up/down fails ( #5657 )
2026-03-23 14:04:03 +01:00
Viktor Liu
fd9d430334
[client] Simplify entrypoint by running netbird up unconditionally ( #5652 )
2026-03-23 09:39:32 +01:00