Pascal Fischer
ad3f570e32
[management] validate the domain for the flock in proxy ( #7501 )
2026-09-11 13:51:03 +02:00
Pascal Fischer
1047df5fa2
[management] pass tls config for combined server ( #7499 )
2026-09-11 13:50:11 +02:00
Pascal Fischer
add8a75981
[management] validate peer existence when adding to group ( #7486 )
2026-09-11 13:49:20 +02:00
Pascal Fischer
269cbadfeb
[management] expire and disconnect peers while including offline peers ( #7467 )
2026-09-09 13:44:19 +02:00
Pascal Fischer
7a62d63a36
[management] fix delete of owner user ( #7456 )
2026-09-08 13:47:32 +02:00
Pascal Fischer
0bdfa4277e
[management] blocking sync requests for user peers sharing the same wireguard key ( #7427 )
2026-09-04 13:10:51 +02:00
Pascal Fischer
8a5e940c84
[management] remove old math rand lib ( #6836 )
2026-09-02 17:52:51 +02:00
Pascal Fischer
e3d6c3d0eb
[management] fix private services calc on new db path ( #7383 )
2026-09-01 20:20:30 +02:00
Pascal Fischer
353251d886
[management] fix posture check evaluation for direct peers in policy definition ( #7348 )
2026-08-28 16:46:42 +02:00
Pascal Fischer
611a9291cd
[management] fix posture check flip evaluation for affected peers calc ( #7347 )
2026-08-28 15:39:48 +02:00
Pascal Fischer and Dmitri Dolguikh
e06c17cf59
[management] network map from nmap data type ( #6919 )
...
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io >
Co-authored-by: Dmitri Dolguikh <dmitri.external@netbird.io >
2026-08-27 11:28:05 +02:00
Pascal Fischer
7d83a3902d
[proxy] validate header auth on proxy ( #7263 )
2026-08-25 13:46:26 +02:00
Pascal Fischer
2ee21d2b5c
[management] Affected peers for user updates ( #7099 )
2026-08-07 18:07:53 +02:00
Pascal Fischer
524b8b9718
[management] prewarm a posture check cache on network map generation ( #7093 )
2026-08-07 15:03:40 +02:00
Pascal Fischer
f9b412228e
[management] fix handling of empty network map during decode and encode ( #6987 )
2026-08-03 13:20:53 +02:00
Pascal Fischer
aad2702a14
[proxy] remove cluster tag from proxy metrics ( #6985 )
2026-07-31 16:56:41 +02:00
Pascal Fischer
0b7e6a9f46
[signal] make pprof configurable ( #6963 )
2026-07-29 16:54:01 +02:00
Pascal Fischer
dd2bdc0de3
[management] explicit accountID check when deleting a user ( #6944 )
2026-07-28 18:34:55 +02:00
Pascal Fischer
31ed241a1a
[management] component types ( #6866 )
2026-07-23 11:37:09 +02:00
Pascal Fischer
a59d7fba95
[management] propagate auth grant types for combined server ( #6817 )
2026-07-17 15:41:57 +02:00
Pascal Fischer
21fc5b81f6
[management] allow disabling device code flow when using dex ( #6809 )
2026-07-17 12:41:08 +02:00
Pascal Fischer
e1a24376ab
[management] build routes for peer cache on network map components ( #6780 )
2026-07-15 18:24:48 +02:00
Pascal Fischer
8f901f8899
[management] enable pprof via env var ( #6778 )
2026-07-15 12:05:40 +02:00
Pascal Fischer
62703ca23e
[management] add logs to ephemeral delete ( #6747 )
2026-07-13 19:06:22 +02:00
Pascal Fischer
2560c6bd6c
[management] add traffic filters for source and dest id ( #6697 )
2026-07-09 14:37:31 +02:00
Pascal Fischer
f4daf59bcd
[management] bring back client version check on login filter hash ( #6552 )
2026-06-26 16:36:50 +02:00
Pascal Fischer
e20b62ad65
[management] simplify affected peers ignore disabled ( #6540 )
2026-06-25 16:30:40 +02:00
Pascal Fischer
a400828b89
[management] move some logs to trace ( #6541 )
2026-06-25 15:16:54 +02:00
Pascal Fischer
e2bb328a34
[management] less strict metaHash when blocking peers ( #6531 )
2026-06-25 15:02:43 +02:00
Pascal Fischer
221b9c012c
[management] validate posture checks on meta change before account update ( #6527 )
2026-06-25 15:02:04 +02:00
Pascal Fischer
2ebf26006a
[management] empty file check in nmap on other posturechecks ( #6511 )
2026-06-22 19:54:38 +02:00
Pascal Fischer
211a26019a
[management] validate meta change against posture checks ( #6510 )
2026-06-22 19:42:04 +02:00
Pascal Fischer
6c26178ad5
[management] do not use meta diff for login ( #6502 )
2026-06-22 17:36:52 +02:00
Pascal Fischer
8511687270
[management] log peer meta diff ( #6468 )
2026-06-19 13:30:52 +02:00
Pascal Fischer
35b465fa4a
[management] reduce sync and login transaction ( #6472 )
2026-06-19 11:43:01 +02:00
Pascal Fischer
8c031ea6f0
[management] remove db calls in nested loops ( #6470 )
2026-06-18 22:12:59 +02:00
Pascal Fischer
60a9544656
[management] pass meta update for browser clients ( #6465 )
2026-06-18 17:22:42 +02:00
Pascal Fischer
e4397d4d46
[management] remove nmap calc from login ( #6449 )
2026-06-17 16:37:24 +02:00
Pascal Fischer
38ad2b67e8
[proxy] fix context for udprelay ( #6444 )
2026-06-16 14:41:17 +02:00
Pascal Fischer
01aa49433e
[management] delete targets when deleting exposed service ( #6442 )
2026-06-16 14:33:24 +02:00
Pascal Fischer
967e2d6864
[management] network map for affected peers ( #6105 )
2026-06-15 17:43:22 +02:00
Pascal Fischer
a40028092d
[management] log user agent and return request id ( #6380 )
2026-06-09 15:24:26 +02:00
Pascal Fischer
13200265d8
[proxy] Add no-blocking mapping updates ( #6369 )
2026-06-09 13:57:17 +02:00
Pascal Fischer
9189625487
[management] enrich context in permissions manager ( #6286 )
2026-05-29 16:36:38 +02:00
Pascal Fischer
944a258459
[management] extend nmap monitoring ( #6271 )
2026-05-27 16:56:02 +02:00
Pascal Fischer
1f9a829f2c
[management] update log levels ( #6266 )
2026-05-27 11:43:49 +02:00
Pascal Fischer
1fbb5e6d5d
[management] fix owner role update ( #6264 )
2026-05-26 16:37:58 +02:00
Pascal Fischer
454ff66518
[management] scope network router update call ( #6222 )
2026-05-20 18:24:00 +02:00
Pascal Fischer
6137a1fcc5
[proxy] concurrent proxy snapshot apply ( #6207 )
2026-05-20 18:21:22 +02:00
Pascal Fischer
39eac377e4
[management] add update reason to buffered calls ( #6103 )
2026-05-07 15:55:59 +02:00
Pascal Fischer
bfeb9b19ec
[management] remove permissions from geolocations api ( #6091 )
2026-05-06 13:07:01 +02:00
Pascal Fischer
b19b7464ea
[management] fix flaky invite token test ( #6077 )
2026-05-05 18:48:51 +02:00
Pascal Fischer
cfb1b3fe31
[proxy] consolidate mapping update ( #6072 )
2026-05-05 18:40:42 +02:00
Pascal Fischer
97db824929
[management] fix proxy reconnect ( #6063 )
2026-05-04 20:43:25 +02:00
Pascal Fischer
f29f5a0978
[management] add monitoring for nmap update source ( #6036 )
2026-04-30 14:52:54 +02:00
Pascal Fischer
fa0d58d093
[management] exclude peers for expiration job that have already been marked expired ( #5970 )
2026-04-23 16:01:54 +02:00
Pascal Fischer
46fc8c9f65
[proxy] direct redirect to SSO ( #5874 )
2026-04-14 13:47:02 +02:00
Pascal Fischer
c5623307cc
[management] add context cancel monitoring ( #5879 )
2026-04-14 12:49:18 +02:00
Pascal Fischer
5259e5df51
[management] add domain and service cleanup migration ( #5850 )
2026-04-11 12:00:40 +02:00
Pascal Fischer
cf86b9a528
[management] enable access log cleanup by default ( #5842 )
2026-04-10 17:07:27 +02:00
Pascal Fischer
ee588e1536
Revert "[management] allow local routing peer resource ( #5814 )" ( #5847 )
2026-04-10 14:53:47 +02:00
Pascal Fischer
2a8aacc5c9
[management] allow local routing peer resource ( #5814 )
2026-04-10 13:08:21 +02:00
Pascal Fischer
15709bc666
[management] update account delete with proper proxy domain and service cleanup ( #5817 )
2026-04-10 13:08:04 +02:00
Pascal Fischer
789b4113fe
[misc] update dashboards ( #5840 )
2026-04-10 12:15:58 +02:00
Pascal Fischer
ee343d5d77
[management] use sql null vars ( #5844 )
2026-04-09 18:12:38 +02:00
Pascal Fischer
c1d1229ae0
[management] use NullBool for terminated flag ( #5829 )
2026-04-08 21:08:43 +02:00
Pascal Fischer
14b3b77bda
[management] validate permissions on groups read with name ( #5749 )
2026-04-07 14:13:09 +02:00
Pascal Fischer
cd8c686339
[misc] add path traversal and file size protections ( #5755 )
2026-04-01 14:23:24 +02:00
Pascal Fischer
f5c41e3018
[misc] set permissions on env file for getting started scripts ( #5761 )
2026-04-01 14:13:53 +02:00
Pascal Fischer
2477f99d89
[proxy] Add pprof ( #5764 )
2026-04-01 14:10:41 +02:00
Pascal Fischer
c238f5425f
[management] proper module permission validation for posture check delete ( #5742 )
2026-03-31 16:43:49 +02:00
Pascal Fischer
3c3097ea74
[management] add target user account validation ( #5741 )
2026-03-31 16:43:16 +02:00
Pascal Fischer
be6fd119d8
[management] no events for temporary peers ( #5719 )
2026-03-30 10:08:02 +02:00
Pascal Fischer
7abf730d77
[management] update to latest grpc version ( #5716 )
2026-03-27 15:22:23 +01:00
Pascal Fischer
ec96c5ecaf
[management] Extend blackbox tests ( #5699 )
2026-03-26 16:59:49 +01:00
Pascal Fischer
7e1cce4b9f
[management] add terminated field to service ( #5700 )
2026-03-26 16:59:08 +01:00
Pascal Fischer
a1858a9cb7
[management] recover proxies after cleanup if heartbeat is still running ( #5617 )
2026-03-18 11:48:38 +01:00
Pascal Fischer
80a8816b1d
[misc] Add image build after merge to main ( #5605 )
2026-03-16 18:00:23 +01:00
Pascal Fischer
2e1aa497d2
[proxy] add log-level flag ( #5594 )
2026-03-13 15:28:25 +01:00
Pascal Fischer
d86875aeac
[management] Exclude proxy from peer approval ( #5588 )
2026-03-13 15:01:59 +01:00
Pascal Fischer
e50e124e70
[proxy] Fix domain switching update ( #5585 )
2026-03-12 17:12:26 +01:00
Pascal Fischer
c545689448
[proxy] Wildcard certificate support ( #5583 )
2026-03-12 16:00:28 +01:00
Pascal Fischer
d3d6a327e0
[proxy] read cert from disk if available instead of cert manager ( #5574 )
...
* **New Features**
* Asynchronous certificate prefetch that races live issuance with periodic on-disk cache checks to surface certificates faster.
* Centralized recording and notification when certificates become available.
* New on-disk certificate reading and validation to allow immediate use of cached certs.
* **Bug Fixes & Performance**
* Optimized retrieval by polling disk while fetching in background to reduce latency.
* Added cancellation and timeout handling to fail stalled certificate operations reliably.
2026-03-11 19:18:37 +01:00
Pascal Fischer
11f891220e
[management] create a shallow copy of the account when buffering ( #5572 )
2026-03-11 13:01:13 +01:00
Pascal Fischer
5585adce18
[management] add activity events for domains ( #5548 )
...
* add activity events for domains
* fix test
* update activity codes
* update activity codes
2026-03-09 19:04:04 +01:00
Pascal Fischer
f884299823
[proxy] refactor metrics and add usage logs ( #5533 )
...
* **New Features**
* Access logs now include bytes_upload and bytes_download (API and schemas updated, fields required).
* Certificate issuance duration is now recorded as a metric.
* **Refactor**
* Metrics switched from Prometheus client to OpenTelemetry-backed meters; health endpoint now exposes OpenMetrics via OTLP exporter.
* **Tests**
* Metric tests updated to use OpenTelemetry Prometheus exporter and MeterProvider.
2026-03-09 18:45:45 +01:00
Pascal Fischer
11eb725ac8
[management] only count login request duration for successful logins ( #5545 )
2026-03-09 14:56:46 +01:00
Pascal Fischer
30c02ab78c
[management] use the cache for the pkce state ( #5516 )
2026-03-09 12:23:06 +01:00
Pascal Fischer
5c20f13c48
[management] fix domain uniqueness ( #5529 )
2026-03-07 10:46:37 +01:00
Pascal Fischer
e6587b071d
[management] use realip for proxy registration ( #5525 )
2026-03-06 16:11:44 +01:00
Pascal Fischer
a7f3ba03eb
[management] aggregate grpc metrics by accountID ( #5486 )
2026-03-05 22:10:45 +01:00
Pascal Fischer and mlsmaycon
d7c8e37ff4
[management] Store connected proxies in DB ( #5472 )
...
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com >
2026-03-03 18:39:46 +01:00
Pascal Fischer
82da606886
[management] Add explicit target delete on service removal ( #5420 )
2026-03-02 18:25:44 +01:00
Pascal Fischer
9d123ec059
[proxy] add pre-shared key support ( #5377 )
2026-02-23 16:31:29 +01:00
Pascal Fischer
5d171f181a
[proxy] Send proxy updates on account delete ( #5375 )
2026-02-23 16:08:28 +01:00
Pascal Fischer
5ca1b64328
[management] access log sorting ( #5378 )
2026-02-20 00:11:55 +01:00
Pascal Fischer
36752a8cbb
[proxy] add access log cleanup ( #5376 )
2026-02-20 00:11:28 +01:00
Pascal Fischer
e9b2a6e808
[managment] add flag to disable the old legacy grpc endpoint ( #5372 )
2026-02-17 19:53:14 +01:00
Pascal Fischer
2cdab6d7b7
[proxy] remove unused oidc config flags ( #5369 )
2026-02-17 18:04:30 +01:00
f53155562f
[management, reverse proxy] Add reverse proxy feature ( #5291 )
...
* implement reverse proxy
---------
Co-authored-by: Alisdair MacLeod <git@alisdairmacleod.co.uk >
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com >
Co-authored-by: Eduard Gert <kontakt@eduardgert.de >
Co-authored-by: Viktor Liu <viktor@netbird.io >
Co-authored-by: Diego Noguês <diego.sure@gmail.com >
Co-authored-by: Diego Noguês <49420+diegocn@users.noreply.github.com >
Co-authored-by: Bethuel Mmbaga <bethuelmbaga12@gmail.com >
Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com >
Co-authored-by: Ashley Mensah <ashleyamo982@gmail.com >
2026-02-13 19:37:43 +01:00
Pascal Fischer