Pascal Fischer
0fdf8138f2
fix expandPortsAndRanges
2025-10-30 16:13:53 +01:00
Pascal Fischer
5098410e66
remove unused network map field from update
2025-10-30 16:12:48 +01:00
crn4
9eda1ade4a
minor changes after conflicts resolution
2025-10-30 14:57:40 +01:00
Viktor Liu
43c9a51913
[client] Migrate deprecated grpc client code ( #4687 )
2025-10-30 10:14:27 +01:00
Viktor Liu
c530db1455
[client] Fix UI panic when switching profiles ( #4718 )
2025-10-29 17:27:18 +01:00
Viktor Liu
1ee575befe
[client] Use management-provided dns forwarder port on the client side ( #4712 )
2025-10-28 22:58:43 +01:00
Viktor Liu
d3a34adcc9
[client] Fix Connect/Disconnect buttons being enabled or disabled at the same time ( #4711 )
2025-10-28 21:21:40 +01:00
Zoltan Papp
d7321c130b
[client] The status cmd will not be blocked by the ICE probe ( #4597 )
...
The status cmd will not be blocked by the ICE probe
Refactor the TURN and STUN probe, and cache the results. The NetBird status command will indicate a "checking…" state.
2025-10-28 16:11:35 +01:00
Viktor Liu
404cab90ba
[client] Redirect dns forwarder port 5353 to new listening port 22054 ( #4707 )
...
- Port dnat changes from https://github.com/netbirdio/netbird/pull/4015 (nftables/iptables/userspace)
- For userspace: rewrite the original port to the target port
- Remember original destination port in conntrack
- Rewrite the source port back to the original port for replies
- Redirect incoming port 5353 to 22054 (tcp/udp)
- Revert port changes based on the network map received from management
- Adjust tracer to show NAT stages
2025-10-28 15:12:53 +01:00
Pascal Fischer
4545ab9a52
[management] rewire account manager to permissions manager ( #4673 )
2025-10-27 22:59:35 +01:00
Bethuel Mmbaga
7f08983207
Include expired and routing peers in DNS record filtering ( #4708 )
2025-10-27 22:16:17 +03:00
Viktor Liu
eddea14521
[client] Clean up bsd routes independently of the state file ( #4688 )
2025-10-27 18:54:00 +01:00
Viktor Liu
b9ef214ea5
[client] Fix macOS state-based dns cleanup ( #4701 )
2025-10-27 18:35:32 +01:00
Bethuel Mmbaga
709e24eb6f
[signal] Fix HTTP/WebSocket proxy not using custom certificates ( #4644 )
...
This pull request fixes a bug where the HTTP/WebSocket proxy server was not using custom TLS certificates when provided via --cert-file and --cert-key flags. Previously, only the gRPC server had TLS enabled with custom certificates, while the HTTP/WebSocket proxy ran without TLS.
2025-10-24 15:40:20 +03:00
Viktor Liu
6654e2dbf7
[client] Fix active profile name in debug bundle ( #4689 )
2025-10-23 17:07:52 +02:00
Bethuel Mmbaga
d80d47a469
[management] Add peer disapproval reason ( #4468 )
2025-10-22 12:46:22 +03:00
Maycon Santos
96f71ff1e1
[misc] Update tag name extraction in install.sh ( #4677 )
2025-10-21 19:23:11 +02:00
Viktor Liu
2fe2af38d2
[client] Clean up match domain reg entries between config changes ( #4676 )
2025-10-21 18:14:39 +02:00
Misha Bragin
cd9a867ad0
[client] Delete TURNConfig section from script ( #4639 )
2025-10-17 19:48:26 +02:00
Maycon Santos
0f9bfeff7c
[client] Security upgrade alpine from 3.22.0 to 3.22.2 #4618
2025-10-17 19:47:11 +02:00
Viktor Liu
f5301230bf
[client] Fix status showing P2P without connection ( #4661 )
2025-10-17 13:31:15 +02:00
Viktor Liu
429d7d6585
[client] Support BROWSER env for login ( #4654 )
2025-10-17 11:10:16 +02:00
Viktor Liu
3cdb10cde7
[client] Remove rule squashing ( #4653 )
2025-10-17 11:09:39 +02:00
Zoltan Papp
af95aabb03
Handle the case when the service has already been down and the status recorder is not available ( #4652 )
2025-10-16 17:15:39 +02:00
Viktor Liu
3abae0bd17
[client] Set default wg port for new profiles ( #4651 )
2025-10-16 16:16:51 +02:00
Viktor Liu
8252ff41db
[client] Add bind activity listener to bypass udp sockets ( #4646 )
2025-10-16 15:58:29 +02:00
Viktor Liu
277aa2b7cc
[client] Fix missing flag values in profiles ( #4650 )
2025-10-16 15:13:41 +02:00
John Conley
bb37dc89ce
[management] feat: Basic PocketID IDP integration ( #4529 )
2025-10-16 10:46:29 +02:00
Viktor Liu
000e99e7f3
[client] Force TLS1.2 for RDP with Win11/Server2025 for CredSSP compatibility ( #4617 )
2025-10-13 17:50:16 +02:00
Maycon Santos
0d2e67983a
[misc] Add service definition for netbird-signal ( #4620 )
2025-10-10 19:16:48 +02:00
Pascal Fischer
5151f19d29
[management] pass temporary flag to validator ( #4599 )
2025-10-10 16:15:51 +02:00
Kostya Leschenko
bedd3cabc9
[client] Explicitly disable DNSOverTLS for systemd-resolved ( #4579 )
2025-10-10 15:24:24 +02:00
hakansa
d35a845dbd
[management] sync all other peers on peer add/remove ( #4614 )
2025-10-09 21:18:00 +02:00
hakansa
4e03f708a4
fix dns forwarder port update ( #4613 )
...
fix dns forwarder port update (#4613 )
2025-10-09 17:39:02 +03:00
Ashley
654aa9581d
[client,gui] Update url_windows.go to offer arm64 executable download ( #4586 )
2025-10-08 21:27:32 +02:00
Zoltan Papp
9021bb512b
[client] Recreate agent when receive new session id ( #4564 )
...
When an ICE agent connection was in progress, new offers were being ignored. This was incorrect logic because the remote agent could be restarted at any time.
In this change, whenever a new session ID is received, the ongoing handshake is closed and a new one is started.
2025-10-08 17:14:24 +02:00
hakansa
768332820e
[client] Implement DNS query caching in DNSForwarder ( #4574 )
...
implements DNS query caching in the DNSForwarder to improve performance and provide fallback responses when upstream DNS servers fail. The cache stores successful DNS query results and serves them when upstream resolution fails.
- Added a new cache component to store DNS query results by domain and query type
- Integrated cache storage after successful DNS resolutions
- Enhanced error handling to serve cached responses as fallback when upstream DNS fails
2025-10-08 16:54:27 +02:00
hakansa
229c65ffa1
Enhance showLoginURL to include connection status check and auto-close functionality ( #4525 )
2025-10-08 12:42:15 +02:00
Zoltan Papp
4d33567888
[client] Remove endpoint address on peer disconnect, retain status for activity recording ( #4228 )
...
* When a peer disconnects, remove the endpoint address to avoid sending traffic to a non-existent address, but retain the status for the activity recorder.
2025-10-08 03:12:16 +02:00
crn4
274711a37e
pprof
2025-10-07 15:01:19 +01:00
crn4
53e24ae7f7
panic fix
2025-10-07 11:12:39 +01:00
crn4
fbc02343e9
Merge branch 'main' into refactor/nmap
2025-10-07 10:07:58 +01:00
crn4
ffed4b38ef
minor fixes after tests
2025-10-07 10:07:14 +01:00
Viktor Liu
88467883fc
[management,signal] Remove ws-proxy read deadline ( #4598 )
2025-10-06 22:05:48 +02:00
Viktor Liu
954f40991f
[client,management,signal] Handle grpc from ws proxy internally instead of via tcp ( #4593 )
2025-10-06 21:22:19 +02:00
Maycon Santos
34341d95a9
Adjust signal port for websocket connections ( #4594 )
2025-10-06 15:22:02 -03:00
crn4
e926ca34b5
Merge branch 'main' into refactor/nmap
2025-10-06 12:35:17 +01:00
crn4
5d1c61369d
added env for account ids enabling new network map builder
2025-10-06 12:34:36 +01:00
crn4
fd9e21a5f3
get rid of direct get account calls
2025-10-02 14:41:58 +02:00
Viktor Liu
e7b5537dcc
Add websocket paths including relay to nginx template ( #4573 )
2025-10-02 13:51:39 +02:00
