Commit Graph
100 Commits
Author SHA1 Message Date
Pascal Fischer afd5c6df6a [management] fix proxy conn lifecycle during acks (#8220) 2026-10-15 16:27:36 +02:00
Pascal Fischer dd830f0890 [management] clean nul byte strings in peer meta (#8219) 2026-10-15 16:26:04 +02:00
Pascal Fischer 89c1b47e9c [management] cancel peer expiration for account if account is gone (#8218) 2026-10-15 16:23:29 +02:00
Pascal Fischer 2299e3d5a7 [management] move is child account (#8195) 2026-10-14 13:46:35 +02:00
Pascal Fischer a394958160 [management] do in place expand of loaded snapshots (#8177) 2026-10-12 20:36:04 +02:00
Pascal Fischer 8c70f9ec71 [management] fix peer ip allocation test (#8173) 2026-10-12 16:13:03 +02:00
Pascal Fischer f6cfa775f8 [management] setting to return error on name collision during AddPeer (#8154) 2026-10-12 14:01:37 +02:00
Pascal Fischer 7006113897 [management] update reserved IP exclusion when generating peer IP (#8144) 2026-10-12 13:14:19 +02:00
Pascal Fischer 67c2041fb5 [management] update proxy mappings on peer IP change (#8139) 2026-10-09 16:40:17 +02:00
Pascal Fischerandmlsmaycon 53a14551c8 [client, management] implement certificate posture check (#7535)
Co-authored-by: mlsmaycon <mlsmaycon@gmail.com>
2026-10-09 14:57:00 +02:00
Pascal Fischer 01d828d732 [management] Fall back to the IdP for the proxy session email (#8112) 2026-10-08 16:28:56 +02:00
Pascal Fischer 06c4c20010 [management] Tear down only the peer session that owns the stream (#8057) 2026-10-08 16:17:23 +02:00
Pascal Fischer 2623feeb5b [management] remove ingress ports (#8062) 2026-10-06 16:35:31 +02:00
Pascal Fischer a816acd97c [management] fix the concurrency handling within the update message tests (#8000) 2026-10-06 14:53:16 +02:00
Pascal Fischer eb5a98c059 [management] add tenant delete endpoint to openapi (#8054) 2026-10-05 16:48:48 +02:00
Pascal Fischer 39de33ceca [management] handle db conn close on errpr (#7740) 2026-09-30 11:35:18 +02:00
Pascal Fischer 93cb226a5e [management] fix login filter (#7739) 2026-09-29 13:29:24 +02:00
Pascal Fischer 782c943410 [management] extract shared db conn + data repository (#7649)
* extract shared db conn + data repository

* extract repository interface

* protect against nested transactions

* fix mysql and db conn creation

* fix context management

* remove query warpper

* remove withContext and withLock wrapper

* remove context from function call

* remove in memory mode

* fix nested transaction handling

* use db directly

* remove leftover test

* remove pool close on error during conn creation
2026-09-29 00:45:55 +02:00
Pascal Fischer 5d92c89227 [management] move rate limiter to shared package (#7727) 2026-09-28 15:44:52 +02:00
Pascal Fischer 15a13bc99b [management] split store by table (#7646) 2026-09-24 16:58:37 +02:00
Pascal Fischer 7009add7a9 [management,signal,proxy] add pyroscope profiling (#7536) 2026-09-23 18:01:35 +02:00
Pascal Fischer 40dffc69ae [management] record proxy version on connect (#7630) 2026-09-23 17:59:58 +02:00
Pascal Fischer 9a5395d314 [management] add store support to filter by public id (#7208) 2026-09-22 15:16:57 +02:00
Pascal Fischer ee2344502e [management] fix group resource validation (#7608) 2026-09-21 17:26:52 +02:00
Pascal Fischer 771d81b72a [management] Add proxy credentials limiter on management (#7569) 2026-09-21 15:55:56 +02:00
Pascal Fischer 6c6298f2ab [proxy] add proxy rate limiter (#7568) 2026-09-21 15:55:20 +02:00
Pascal Fischer ad3f570e32 [management] validate the domain for the flock in proxy (#7501) 2026-09-11 13:51:03 +02:00
Pascal Fischer 1047df5fa2 [management] pass tls config for combined server (#7499) 2026-09-11 13:50:11 +02:00
Pascal Fischer add8a75981 [management] validate peer existence when adding to group (#7486) 2026-09-11 13:49:20 +02:00
Pascal Fischer 269cbadfeb [management] expire and disconnect peers while including offline peers (#7467) 2026-09-09 13:44:19 +02:00
Pascal Fischer 7a62d63a36 [management] fix delete of owner user (#7456) 2026-09-08 13:47:32 +02:00
Pascal Fischer 0bdfa4277e [management] blocking sync requests for user peers sharing the same wireguard key (#7427) 2026-09-04 13:10:51 +02:00
Pascal Fischer 8a5e940c84 [management] remove old math rand lib (#6836) 2026-09-02 17:52:51 +02:00
Pascal Fischer e3d6c3d0eb [management] fix private services calc on new db path (#7383) 2026-09-01 20:20:30 +02:00
Pascal Fischer 353251d886 [management] fix posture check evaluation for direct peers in policy definition (#7348) 2026-08-28 16:46:42 +02:00
Pascal Fischer 611a9291cd [management] fix posture check flip evaluation for affected peers calc (#7347) 2026-08-28 15:39:48 +02:00
Pascal FischerandDmitri Dolguikh e06c17cf59 [management] network map from nmap data type (#6919)
Signed-off-by: Dmitri Dolguikh <dmitri.external@netbird.io>
Co-authored-by: Dmitri Dolguikh <dmitri.external@netbird.io>
2026-08-27 11:28:05 +02:00
Pascal Fischer 7d83a3902d [proxy] validate header auth on proxy (#7263) 2026-08-25 13:46:26 +02:00
Pascal Fischer 2ee21d2b5c [management] Affected peers for user updates (#7099) 2026-08-07 18:07:53 +02:00
Pascal Fischer 524b8b9718 [management] prewarm a posture check cache on network map generation (#7093) 2026-08-07 15:03:40 +02:00
Pascal Fischer f9b412228e [management] fix handling of empty network map during decode and encode (#6987) 2026-08-03 13:20:53 +02:00
Pascal Fischer aad2702a14 [proxy] remove cluster tag from proxy metrics (#6985) 2026-07-31 16:56:41 +02:00
Pascal Fischer 0b7e6a9f46 [signal] make pprof configurable (#6963) 2026-07-29 16:54:01 +02:00
Pascal Fischer dd2bdc0de3 [management] explicit accountID check when deleting a user (#6944) 2026-07-28 18:34:55 +02:00
Pascal Fischer 31ed241a1a [management] component types (#6866) 2026-07-23 11:37:09 +02:00
Pascal Fischer a59d7fba95 [management] propagate auth grant types for combined server (#6817) 2026-07-17 15:41:57 +02:00
Pascal Fischer 21fc5b81f6 [management] allow disabling device code flow when using dex (#6809) 2026-07-17 12:41:08 +02:00
Pascal Fischer e1a24376ab [management] build routes for peer cache on network map components (#6780) 2026-07-15 18:24:48 +02:00
Pascal Fischer 8f901f8899 [management] enable pprof via env var (#6778) 2026-07-15 12:05:40 +02:00
Pascal Fischer 62703ca23e [management] add logs to ephemeral delete (#6747) 2026-07-13 19:06:22 +02:00
Pascal Fischer 2560c6bd6c [management] add traffic filters for source and dest id (#6697) 2026-07-09 14:37:31 +02:00
Pascal Fischer f4daf59bcd [management] bring back client version check on login filter hash (#6552) 2026-06-26 16:36:50 +02:00
Pascal Fischer e20b62ad65 [management] simplify affected peers ignore disabled (#6540) 2026-06-25 16:30:40 +02:00
Pascal Fischer a400828b89 [management] move some logs to trace (#6541) 2026-06-25 15:16:54 +02:00
Pascal Fischer e2bb328a34 [management] less strict metaHash when blocking peers (#6531) 2026-06-25 15:02:43 +02:00
Pascal Fischer 221b9c012c [management] validate posture checks on meta change before account update (#6527) 2026-06-25 15:02:04 +02:00
Pascal Fischer 2ebf26006a [management] empty file check in nmap on other posturechecks (#6511) 2026-06-22 19:54:38 +02:00
Pascal Fischer 211a26019a [management] validate meta change against posture checks (#6510) 2026-06-22 19:42:04 +02:00
Pascal Fischer 6c26178ad5 [management] do not use meta diff for login (#6502) 2026-06-22 17:36:52 +02:00
Pascal Fischer 8511687270 [management] log peer meta diff (#6468) 2026-06-19 13:30:52 +02:00
Pascal Fischer 35b465fa4a [management] reduce sync and login transaction (#6472) 2026-06-19 11:43:01 +02:00
Pascal Fischer 8c031ea6f0 [management] remove db calls in nested loops (#6470) 2026-06-18 22:12:59 +02:00
Pascal Fischer 60a9544656 [management] pass meta update for browser clients (#6465) 2026-06-18 17:22:42 +02:00
Pascal Fischer e4397d4d46 [management] remove nmap calc from login (#6449) 2026-06-17 16:37:24 +02:00
Pascal Fischer 38ad2b67e8 [proxy] fix context for udprelay (#6444) 2026-06-16 14:41:17 +02:00
Pascal Fischer 01aa49433e [management] delete targets when deleting exposed service (#6442) 2026-06-16 14:33:24 +02:00
Pascal Fischer 967e2d6864 [management] network map for affected peers (#6105) 2026-06-15 17:43:22 +02:00
Pascal Fischer a40028092d [management] log user agent and return request id (#6380) 2026-06-09 15:24:26 +02:00
Pascal Fischer 13200265d8 [proxy] Add no-blocking mapping updates (#6369) 2026-06-09 13:57:17 +02:00
Pascal Fischer 9189625487 [management] enrich context in permissions manager (#6286) 2026-05-29 16:36:38 +02:00
Pascal Fischer 944a258459 [management] extend nmap monitoring (#6271) 2026-05-27 16:56:02 +02:00
Pascal Fischer 1f9a829f2c [management] update log levels (#6266) 2026-05-27 11:43:49 +02:00
Pascal Fischer 1fbb5e6d5d [management] fix owner role update (#6264) 2026-05-26 16:37:58 +02:00
Pascal Fischer 454ff66518 [management] scope network router update call (#6222) 2026-05-20 18:24:00 +02:00
Pascal Fischer 6137a1fcc5 [proxy] concurrent proxy snapshot apply (#6207) 2026-05-20 18:21:22 +02:00
Pascal Fischer 39eac377e4 [management] add update reason to buffered calls (#6103) 2026-05-07 15:55:59 +02:00
Pascal Fischer bfeb9b19ec [management] remove permissions from geolocations api (#6091) 2026-05-06 13:07:01 +02:00
Pascal Fischer b19b7464ea [management] fix flaky invite token test (#6077) 2026-05-05 18:48:51 +02:00
Pascal Fischer cfb1b3fe31 [proxy] consolidate mapping update (#6072) 2026-05-05 18:40:42 +02:00
Pascal Fischer 97db824929 [management] fix proxy reconnect (#6063) 2026-05-04 20:43:25 +02:00
Pascal Fischer f29f5a0978 [management] add monitoring for nmap update source (#6036) 2026-04-30 14:52:54 +02:00
Pascal Fischer fa0d58d093 [management] exclude peers for expiration job that have already been marked expired (#5970) 2026-04-23 16:01:54 +02:00
Pascal Fischer 46fc8c9f65 [proxy] direct redirect to SSO (#5874) 2026-04-14 13:47:02 +02:00
Pascal Fischer c5623307cc [management] add context cancel monitoring (#5879) 2026-04-14 12:49:18 +02:00
Pascal Fischer 5259e5df51 [management] add domain and service cleanup migration (#5850) 2026-04-11 12:00:40 +02:00
Pascal Fischer cf86b9a528 [management] enable access log cleanup by default (#5842) 2026-04-10 17:07:27 +02:00
Pascal Fischer ee588e1536 Revert "[management] allow local routing peer resource (#5814)" (#5847) 2026-04-10 14:53:47 +02:00
Pascal Fischer 2a8aacc5c9 [management] allow local routing peer resource (#5814) 2026-04-10 13:08:21 +02:00
Pascal Fischer 15709bc666 [management] update account delete with proper proxy domain and service cleanup (#5817) 2026-04-10 13:08:04 +02:00
Pascal Fischer 789b4113fe [misc] update dashboards (#5840) 2026-04-10 12:15:58 +02:00
Pascal Fischer ee343d5d77 [management] use sql null vars (#5844) 2026-04-09 18:12:38 +02:00
Pascal Fischer c1d1229ae0 [management] use NullBool for terminated flag (#5829) 2026-04-08 21:08:43 +02:00
Pascal Fischer 14b3b77bda [management] validate permissions on groups read with name (#5749) 2026-04-07 14:13:09 +02:00
Pascal Fischer cd8c686339 [misc] add path traversal and file size protections (#5755) 2026-04-01 14:23:24 +02:00
Pascal Fischer f5c41e3018 [misc] set permissions on env file for getting started scripts (#5761) 2026-04-01 14:13:53 +02:00
Pascal Fischer 2477f99d89 [proxy] Add pprof (#5764) 2026-04-01 14:10:41 +02:00
Pascal Fischer c238f5425f [management] proper module permission validation for posture check delete (#5742) 2026-03-31 16:43:49 +02:00
Pascal Fischer 3c3097ea74 [management] add target user account validation (#5741) 2026-03-31 16:43:16 +02:00
Pascal Fischer be6fd119d8 [management] no events for temporary peers (#5719) 2026-03-30 10:08:02 +02:00
Pascal Fischer 7abf730d77 [management] update to latest grpc version (#5716) 2026-03-27 15:22:23 +01:00