pascal
fef41f0fe4
refactor AddPeer
2026-02-13 12:50:48 +01:00
pascal
6f2f0f9ae4
exclude proxy peers on peers api
2026-02-12 13:49:05 +01:00
pascal
08ab1e3478
rename reverse proxy to services
2026-02-11 21:39:51 +01:00
pascal
0cb02bd906
fix path handling + extract targets to separate table + guard resource/peer deletion
2026-02-10 17:12:34 +01:00
pascal
a803f47685
add network map support for clustering
2026-02-10 14:29:20 +01:00
Viktor Liu
dc26a5a436
Merge branch 'main' into prototype/reverse-proxy
2026-02-08 17:50:16 +08:00
Vlad
af8f730bda
[management] check stream start time for connecting peer ( #5267 )
2026-02-06 18:00:43 +01:00
pascal
0419834482
add routed exposed services support in nmap
2026-02-06 15:42:13 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Vlad
cead3f38ee
[management] fix ephemeral peers being not removed ( #5203 )
2026-01-28 18:24:12 +01:00
Vlad
737d6061bf
[management] ephemeral peers track on login ( #5165 )
2026-01-23 18:05:22 +01:00
Zoltan Papp
58daa674ef
[Management/Client] Trigger debug bundle runs from API/Dashboard ( #4592 ) ( #4832 )
...
This PR adds the ability to trigger debug bundle generation remotely from the Management API/Dashboard.
2026-01-19 11:22:16 +01:00
Bethuel Mmbaga
20d6beff1b
[management] Increment network serial on peer update ( #5051 )
...
Increment the serial on peer update and prevent double serial increments and account updates when updating a user while there are peers set to expire
2026-01-07 14:59:49 +03:00
Bethuel Mmbaga
d35b7d675c
[management] Refactor integrated peer deletion ( #5042 )
2026-01-07 14:00:39 +03:00
Bethuel Mmbaga
7bb4fc3450
[management] Refactor integrated peer validator ( #5035 )
2026-01-05 20:55:22 +03:00
Zoltan Papp
67f7b2404e
[client, management] Feature/ssh fine grained access ( #4969 )
...
Add fine-grained SSH access control with authorized users/groups
2025-12-29 12:50:41 +01:00
Pascal Fischer
44851e06fb
[management] cleanup logs ( #4933 )
2025-12-10 19:26:51 +01:00
Pascal Fischer
7193bd2da7
[management] Refactor network map controller ( #4789 )
2025-12-02 12:34:28 +01:00
Pascal Fischer
cc97cffff1
[management] move network map logic into new design ( #4774 )
2025-11-13 12:09:46 +01:00
Pascal Fischer
7df49e249d
[management ] remove timing logs ( #4761 )
2025-11-07 20:14:52 +01:00
Vlad
6aa4ba7af4
[management] incremental network map builder ( #4753 )
2025-11-07 10:44:46 +01:00
Pascal Fischer
5151f19d29
[management] pass temporary flag to validator ( #4599 )
2025-10-10 16:15:51 +02:00
hakansa
d35a845dbd
[management] sync all other peers on peer add/remove ( #4614 )
2025-10-09 21:18:00 +02:00
hakansa
9bcd3ebed4
[management,client] Make DNS ForwarderPort Configurable & Change Well Known Port ( #4479 )
...
makes the DNS forwarder port configurable in the management and client components, while changing the well-known port from 5454 to 22054. The change includes version-aware port assignment to ensure backward compatibility.
- Adds a configurable `ForwarderPort` field to the DNS configuration protocol
- Implements version-based port computation that returns the new port (22054) only when all peers support version 0.59.0 or newer
- Updates the client to dynamically restart the DNS forwarder when the port changes
2025-10-02 01:02:10 +02:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Maycon Santos
d39fcfd62a
[management] Add user approval ( #4411 )
...
This PR adds user approval functionality to the management system, allowing administrators to manually approve new users joining via domain matching. When enabled, users are blocked with pending approval status until explicitly approved by an admin.
Adds UserApprovalRequired setting to control manual user approval requirement
Introduces user approval and rejection endpoints with corresponding business logic
Prevents pending approval users from adding peers or logging in
2025-09-01 18:00:45 +02:00
Pascal Fischer
4d3dc3475d
[management] remove duplicated removal of groups on peer delete ( #4421 )
2025-08-30 12:47:13 +02:00
Pascal Fischer
3488a516c9
[management] Move increment network serial as last step of each transaction ( #4397 )
2025-08-25 17:27:07 +02:00
Pascal Fischer
5e273c121a
[management] Remove store locks 3 ( #4390 )
2025-08-21 20:47:28 +02:00
Pascal Fischer
28bef26537
[management] Remove Store Locks 2 ( #4385 )
2025-08-21 12:23:49 +02:00
Pascal Fischer
0d2845ea31
[management] optimize proxy network map ( #4324 )
2025-08-20 19:04:19 +02:00
Pascal Fischer
f9d64a06c2
[management] Remove all store locks from grpc side ( #4374 )
2025-08-20 12:41:14 +02:00
Bethuel Mmbaga
a4e8647aef
[management] Enable flow groups ( #4230 )
...
Adds the ability to limit traffic events logging to specific peer groups
2025-08-13 00:00:40 +03:00
Pascal Fischer
a942e4add5
[management] use readlock on add peer ( #4308 )
2025-08-11 15:21:26 +02:00
Pascal Fischer
5860e5343f
[management] Rework DB locks ( #4291 )
2025-08-06 18:55:14 +02:00
Viktor Liu
abd152ee5a
[misc] Separate shared code dependencies ( #4288 )
...
* Separate shared code dependencies
* Fix import
* Test respective shared code
* Update openapi ref
* Fix test
* Fix test path
2025-08-05 18:34:41 +02:00
Viktor Liu
1d5e871bdf
[misc] Move shared components to shared directory ( #4286 )
...
Moved the following directories:
```
- management/client → shared/management/client
- management/domain → shared/management/domain
- management/proto → shared/management/proto
- signal/client → shared/signal/client
- signal/proto → shared/signal/proto
- relay/client → shared/relay/client
- relay/auth → shared/relay/auth
```
and adjusted import paths
2025-08-05 15:22:58 +02:00
Pascal Fischer
d1e0b7f4fb
[management] get peer groups without lock ( #4280 )
2025-08-05 01:11:44 +02:00
Pascal Fischer
552dc60547
[management] migrate group peers into seperate table ( #4096 )
2025-08-01 12:22:07 +02:00
Pascal Fischer
c435c2727f
[management] Log BufferUpdateAccountPeers caller ( #4217 )
2025-07-24 18:33:58 +02:00
Pascal Fischer
04fae00a6c
[management] Log UpdateAccountPeers caller ( #4216 )
2025-07-24 17:44:48 +02:00
Pedro Maia Costa
0ea5d020a3
[management] extra settings integrated validator ( #4136 )
2025-07-24 16:12:29 +01:00
a76c8eafb4
[management] sync calls to UpdateAccountPeers from BufferUpdateAccountPeers ( #4137 )
...
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
Co-authored-by: Pedro Costa <550684+pnmcosta@users.noreply.github.com >
2025-07-11 12:37:14 +03:00
Pedro Maia Costa
2b9f331980
always suffix ephemeral peer name ( #4138 )
2025-07-11 10:29:10 +01:00
8632dd15f1
[management] added cleanupWindow for collecting several ephemeral peers to delete ( #4130 )
...
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
Co-authored-by: Pedro Costa <550684+pnmcosta@users.noreply.github.com >
2025-07-10 15:21:01 +02:00
Bethuel Mmbaga
969f1ed59a
[management] Remove deleted user peers from groups on user deletion ( #4121 )
...
Refactors peer deletion to centralize group cleanup logic, ensuring deleted peers are consistently removed from all groups in one place.
- Removed redundant group removal code from DefaultAccountManager.DeletePeer
- Added group removal logic inside deletePeers to handle both single and multiple peer deletions
2025-07-09 10:14:10 +03:00
Krzysztof Nazarewski (kdn)
996b8c600c
[management] replace invalid user with a clear error message about mismatched logins ( #4097 )
2025-07-03 16:36:36 +02:00
Pascal Fischer
551cb4e467
[management] expect specific error types on registration with setup key ( #4094 )
2025-07-02 20:04:28 +02:00
Pascal Fischer
22678bce7f
[management] add uniqueness constraint for peer ip and label and optimize generation ( #4042 )
2025-07-02 18:13:10 +02:00
Pascal Fischer
1b73fae46e
[management] add breakdown of network map calculation metrics ( #4020 )
2025-06-25 11:46:35 +02:00
pascal