Viktor Liu
07e59b2708
Add reverse proxy header security and forwarding
...
- Rewrite Host header to backend target (configurable via pass_host_header per mapping)
- Strip and set X-Forwarded-For/X-Real-IP from direct connection (trust boundary)
- Set X-Forwarded-Host and X-Forwarded-Proto headers
- Strip nb_session cookie and session_token query param before forwarding
- Add --forwarded-proto flag (auto/http/https) for proto detection
- Fix OIDC redirect hardcoded https scheme
- Add pass_host_header to proto, API, and management model
2026-02-08 15:00:35 +08:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
mlsmaycon
2f263bf7e6
fix cluster logic for domains and reverse proxy
2026-02-07 11:43:01 +01:00
mlsmaycon
f65f4fc280
fix some conflicts regression
2026-02-06 20:39:17 +01:00
pascal
adbd7ab4c3
send account updates on proxy change
2026-02-06 17:03:18 +01:00
pascal
0419834482
add routed exposed services support in nmap
2026-02-06 15:42:13 +01:00
pascal
f797d2d9cb
fix cert dir name in docker file
2026-02-05 15:46:07 +01:00
pascal
5ae7efe8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-05 15:22:39 +01:00
pascal
d6e35bd0fe
fix merge conflicts
2026-02-05 15:22:23 +01:00
pascal
0e00f1c8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy-clusters' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/manager/manager.go
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/modules.go
# management/internals/shared/grpc/proxy.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-02-05 15:19:57 +01:00
Eduard Gert
4433f44a12
Add some other errors
2026-02-05 14:30:55 +01:00
Eduard Gert
7504e718d7
Add better error page
2026-02-05 14:00:51 +01:00
Viktor Liu
9b0387e7ee
Add /cert dir
2026-02-05 19:22:31 +08:00
mlsmaycon
5ccce1ab3f
add debug logging for proxy connections and domain resolution
...
- Log proxy address and cluster info when proxy connects
- Log connected proxy URLs when GetConnectedProxyURLs is called
- Log proxy allow list when GetDomains is called
- Helps debug issues with free domains not appearing in API response
2026-02-05 02:18:38 +01:00
pascal
e366fe340e
add log when listener is ready
2026-02-04 23:32:19 +01:00
pascal
b01809f8e3
use logger
2026-02-04 23:10:01 +01:00
pascal
790ef39187
log on debug
2026-02-04 22:43:40 +01:00
pascal
3af16cf333
add trace logs
2026-02-04 22:26:29 +01:00
pascal
d09c69f303
fix scan sql
2026-02-04 21:05:25 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
8fafde614a
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-04 16:52:42 +00:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Eduard Gert
b5b7dd4f53
Add other error pages
2026-02-04 17:12:26 +01:00
Viktor Liu
476785b122
Remove health check addr override
2026-02-04 22:32:46 +08:00
Viktor Liu
907677f835
Set readiness false on disconnect right away
2026-02-04 22:28:53 +08:00
Viktor Liu
7d844b9410
Add health checks
2026-02-04 22:18:45 +08:00
Eduard Gert
eeabc64a73
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-04 15:11:33 +01:00
Eduard Gert
5da2b0fdcc
Add error page
2026-02-04 15:11:22 +01:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
a89bb807a6
fix protos after merge
2026-02-04 11:56:34 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Alisdair MacLeod
0dd0c67b3b
Revert "add management oidc configuration for proxies"
...
This reverts commit 146774860b
2026-02-04 09:28:54 +00:00
Viktor Liu
ca33849f31
Use a 1:1 mapping of netbird client to netbird account
...
- Add debug endpoint for monitoring netbird clients
- Add types package with AccountID type
- Refactor netbird roundtrip to key clients by AccountID
- Multiple domains can share the same client per account
- Add status notifier for tunnel connection updates
- Add OIDC flags to CLI
- Add tests for netbird client management
2026-02-04 14:48:20 +08:00
Viktor Liu
18cd0f1480
Fix netstack detection and add wireguard port option
...
- Add WireguardPort option to embed.Options for custom port configuration
- Fix KernelInterface detection to account for netstack mode
- Skip SSH config updates when running in netstack mode
- Skip interface removal wait when running in netstack mode
- Use BindListener for netstack to avoid port conflicts on same host
2026-02-04 14:39:19 +08:00
mlsmaycon
b02982f6b1
add logs
2026-02-04 03:14:26 +01:00
mlsmaycon
4d89ae27ef
add clusters logic
2026-02-04 02:16:57 +01:00
Eduard Gert
733ea77c5c
Add proxy auth ui
2026-02-03 19:05:55 +01:00
pascal
92f72bfce6
add reverse proxy meta to api resp
2026-02-03 17:37:55 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
3af4543e80
check for domain ownership via subdomain rather than naked domain
2026-02-03 12:50:25 +00:00
Alisdair MacLeod
146774860b
add management oidc configuration for proxies
2026-02-03 12:39:16 +00:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
76a39c1dcb
Revert "add management side of OIDC authentication"
...
This reverts commit 02ce918114
2026-02-03 10:03:38 +00:00
Alisdair MacLeod
02ce918114
add management side of OIDC authentication
2026-02-03 09:42:40 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
3168afbfcb
clean up proxy reported urls when using them for validation
2026-02-02 15:59:24 +00:00
Alisdair MacLeod
a73ee47557
ignore ports when performing proxy mapping lookups
2026-02-02 14:39:13 +00:00
Alisdair MacLeod
fa6ff005f2
add validation logging
2026-02-02 10:53:46 +00:00
Alisdair MacLeod
095379fa60
add logging to domain validation
2026-02-02 10:27:20 +00:00
