Maycon Santos
ebc259e30b
[management,client] Gate remote jobs behind an admin opt-in with MDM support ( #7153 )
...
This introduces a disabled-by-default allow-remote-jobs setting that
controls whether the management server may run jobs (such as debug
bundles) on a peer. The flag propagates end to end: through client
configuration, the daemon SetConfig and Login requests, authentication,
and system info, up to management, where it is stored on the peer and
exposed on the peers API as remote_jobs_allowed. The client refuses any
management-requested job unless the peer has opted in. Because enabling
remote jobs crosses the user-to-root boundary, turning it on requires
privilege, mirroring the SSH-server gate. Administrators can enforce the
setting through MDM policy on both macOS and Windows, and MDM can also
override the debug-bundle upload URL. The change ships policy
documentation and generated profile templates, and adds configuration,
conflict, and enforcement tests covering the opt-in, privilege, and MDM
paths.
2026-09-01 17:53:41 +02:00
Pascal Fischer and Dmitri Dolguikh
e06c17cf59
[management] network map from nmap data type ( #6919 )
...
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
Co-authored-by: Dmitri Dolguikh <dmitri.external@netbird.io >
2026-08-27 11:28:05 +02:00
Pascal Fischer
31ed241a1a
[management] component types ( #6866 )
2026-07-23 11:37:09 +02:00
Pascal Fischer
e4397d4d46
[management] remove nmap calc from login ( #6449 )
2026-06-17 16:37:24 +02:00
Pascal Fischer
9189625487
[management] enrich context in permissions manager ( #6286 )
2026-05-29 16:36:38 +02:00
Viktor Liu
205ebcfda2
[management, client] Add IPv6 overlay support ( #5631 )
2026-05-07 11:33:37 +02:00
Vlad
154b81645a
[management] removed legacy network map code ( #5565 )
2026-04-27 16:02:54 +02:00
f53155562f
[management, reverse proxy] Add reverse proxy feature ( #5291 )
...
* implement reverse proxy
---------
Co-authored-by: Alisdair MacLeod <git@alisdairmacleod.co.uk >
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com >
Co-authored-by: Eduard Gert <kontakt@eduardgert.de >
Co-authored-by: Viktor Liu <viktor@netbird.io >
Co-authored-by: Diego Noguês <diego.sure@gmail.com >
Co-authored-by: Diego Noguês <49420+diegocn@users.noreply.github.com >
Co-authored-by: Bethuel Mmbaga <bethuelmbaga12@gmail.com >
Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com >
Co-authored-by: Ashley Mensah <ashleyamo982@gmail.com >
2026-02-13 19:37:43 +01:00
Bethuel Mmbaga
7ebf37ef20
[management] Enforce access control on accessible peers ( #5301 )
2026-02-13 12:46:43 +03:00
Pascal Fischer
6fdc00ff41
[management] adding account id validation to accessible peers handler ( #5246 )
2026-02-03 17:30:02 +01:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Bethuel Mmbaga
d80d47a469
[management] Add peer disapproval reason ( #4468 )
2025-10-22 12:46:22 +03:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Pascal Fischer
e14c6de203
[management] fix ephemeral flag on peer batch response ( #4420 )
2025-08-29 17:41:20 +02:00
hakansa
d00a226556
[management] Add CreatedAt field to Peer and PeerBatch models ( #4371 )
...
[management] Add CreatedAt field to Peer and PeerBatch models (#4371 )
2025-08-19 16:02:11 +03:00
Viktor Liu
abd152ee5a
[misc] Separate shared code dependencies ( #4288 )
...
* Separate shared code dependencies
* Fix import
* Test respective shared code
* Update openapi ref
* Fix test
* Fix test path
2025-08-05 18:34:41 +02:00
Viktor Liu
beb66208a0
[management, client] Add API to change the network range ( #4177 )
2025-08-04 16:45:49 +02:00
Pascal Fischer
b45284f086
[management] export ephemeral peer flag on api ( #4004 )
2025-06-19 16:46:56 +02:00
Pascal Fischer
312bfd9bd7
[management] support custom domains per account ( #3726 )
2025-04-23 19:36:53 +02:00
Pascal Fischer
5ea2806663
[management] use permission modules ( #3622 )
2025-04-10 11:06:52 +02:00
Pedro Maia Costa
cbec7bda80
[management] permission manager validate account access ( #3444 )
2025-03-30 17:08:22 +02:00
Maycon Santos
c02e236196
[client,management] add netflow support to client and update management ( #3414 )
...
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
2025-03-20 17:05:48 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Pedro Maia Costa
77e40f41f2
[management] refactor auth ( #3296 )
2025-02-20 20:24:40 +00:00
hakansa and Viktor Liu
39986b0e97
[client, management] Support DNS Labels for Peer Addressing ( #3252 )
...
* [client] Support Extra DNS Labels for Peer Addressing
* [management] Support Extra DNS Labels for Peer Addressing
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
2025-02-20 13:43:20 +03:00
Bethuel Mmbaga
1ad2cb5582
[management] Refactor peers to use store methods ( #2893 )
2025-01-20 18:41:46 +01:00
Bethuel Mmbaga
02a3feddb8
[management] Add MySQL Support ( #3108 )
...
* Add mysql store support
* Add support to disable activity events recording
2025-01-06 13:38:30 +01:00
ddc365f7a0
[client, management] Add new network concept ( #3047 )
...
---------
Co-authored-by: Pascal Fischer <32096965+pascal-fischer@users.noreply.github.com >
Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com >
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com >
2024-12-20 11:30:28 +01:00
Pascal Fischer
6142828a9c
[management] restructure api files ( #3013 )
2024-12-10 15:59:25 +01:00
Maycon Santos