Viktor Liu
47dcf8d68c
Fix forwarder IP source/destination ( #3463 )
2025-03-10 14:55:07 +01:00
Maycon Santos
8430139d80
fix missing method
2025-03-09 19:03:57 +01:00
Maycon Santos
16fffdb75b
sync changes from #3426
2025-03-09 18:48:48 +01:00
Maycon Santos
fd62665b1f
Merge branch 'main' into feature/flow
...
# Conflicts:
# client/cmd/testutil_test.go
# client/firewall/iptables/router_linux.go
# client/firewall/nftables/router_linux.go
# client/firewall/uspfilter/allow_netbird.go
# client/firewall/uspfilter/allow_netbird_windows.go
# client/firewall/uspfilter/uspfilter_test.go
# client/internal/engine.go
# client/internal/engine_test.go
# client/server/server_test.go
# go.mod
# go.sum
# management/client/client_test.go
# management/cmd/management.go
# management/proto/management.pb.go
# management/proto/management.proto
# management/server/account.go
# management/server/account_test.go
# management/server/dns_test.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/tools.go
# management/server/integrations/port_forwarding/controller.go
# management/server/management_proto_test.go
# management/server/management_test.go
# management/server/nameserver_test.go
# management/server/peer.go
# management/server/peer_test.go
# management/server/route_test.go
2025-03-09 17:42:16 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Viktor Liu
36da464413
Fix tracer test
2025-03-07 17:19:10 +01:00
Viktor Liu
cb16d0f45f
Align packet tracer behavior with actual code paths ( #3424 )
2025-03-07 14:03:45 +01:00
Viktor Liu
e8d8bd8f18
Add peer traffic rule IDs to allowed connections in flows ( #3442 )
2025-03-07 13:56:26 +01:00
Viktor Liu
8b07f21c28
Don't track intercepted packets ( #3448 )
2025-03-07 13:56:16 +01:00
Viktor Liu
3c3a454e61
Fix merge regression
2025-03-06 16:54:15 +01:00
Viktor Liu
5ff77b3595
Add flow userspace counters ( #3438 )
2025-03-06 16:52:56 +01:00
Viktor Liu
b180edbe5c
Track icmp with id only ( #3447 )
2025-03-06 14:51:23 +01:00
Viktor Liu
0a042ac36d
Fix merge conflict
2025-03-05 19:11:20 +01:00
Viktor Liu
e9f11fb11b
Replace net.IP with netip.Addr ( #3425 )
2025-03-05 18:28:05 +01:00
hakansa
419ed275fa
Handle TCP RST flag to transition connection state to closed ( #3432 )
2025-03-05 18:25:42 +01:00
Viktor Liu
8c81a823fa
Add flow ACL IDs ( #3421 )
2025-03-04 16:43:07 +01:00
Viktor Liu
1e10c17ecb
Fix tcp state ( #3431 )
2025-03-04 11:19:54 +01:00
Viktor Liu
bcc5824980
[client] Close userspace firewall properly ( #3426 )
2025-03-04 11:19:42 +01:00
Viktor Liu
96d5190436
Add icmp type and code to forwarder flow event ( #3413 )
2025-02-28 21:04:07 +01:00
Viktor Liu
d19c26df06
Fix log direction ( #3412 )
2025-02-28 21:03:40 +01:00
Viktor Liu
36e36414d9
Fix forwarder log displaying ( #3411 )
2025-02-28 20:53:01 +01:00
Viktor Liu
6ead0ff95e
Fix log format
2025-02-28 20:24:23 +01:00
Viktor Liu
0db65a8984
Add routed packet drop flow ( #3410 )
2025-02-28 20:04:59 +01:00
Viktor Liu
637c0c8949
Add icmp type and code ( #3409 )
2025-02-28 19:16:42 +01:00
Viktor Liu
c72e13d8e6
Add conntrack flows ( #3406 )
2025-02-28 19:16:29 +01:00
Maycon Santos
f6d7bccfa0
Add flow client with sender/receiver ( #3405 )
...
add an initial version of receiver client and flow manager receiver and sender
2025-02-28 17:16:18 +00:00
Viktor Liu
fa748a7ec2
Add userspace flow implementation ( #3393 )
2025-02-28 11:08:35 +01:00
Viktor Liu
f8fd65a65f
Merge branch 'main' into feature/port-forwarding
2025-02-25 11:37:52 +01:00
Viktor Liu
a74208abac
[client] Fix udp forwarder deadline ( #3364 )
2025-02-21 18:51:52 +01:00
Viktor Liu
630edf2480
Remove unused var
2025-02-20 13:24:37 +01:00
Viktor Liu
ea469d28d7
Merge branch 'main' into feature/port-forwarding
2025-02-20 13:24:05 +01:00
Viktor Liu
631ef4ed28
[client] Add embeddable library ( #3239 )
2025-02-20 13:22:03 +01:00
Viktor Liu
8755211a60
Merge branch 'main' into feature/port-forwarding
2025-02-20 11:39:06 +01:00
Viktor Liu
b41de7fcd1
[client] Enable userspace forwarder conditionally ( #3309 )
...
* Enable userspace forwarder conditionally
* Move disable/enable logic
2025-02-12 11:10:49 +01:00
Viktor Liu
05415f72ec
[client] Add experimental support for userspace routing ( #3134 )
2025-02-07 14:11:53 +01:00
Zoltan Papp
1b011a2d85
[client] Manage the IP forwarding sysctl setting in global way ( #3270 )
...
Add new package ipfwdstate that implements reference counting for IP forwarding
state management. This allows multiple usage to safely request IP forwarding
without interfering with each other.
2025-02-03 12:27:18 +01:00
Pascal Fischer
a76ca8c565
Merge branch 'main' into feature/port-forwarding
2025-01-29 22:28:10 +01:00
Zoltan Papp
26693e4ea8
Feature/port forwarding client ingress ( #3242 )
...
Client-side forward handling
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
2025-01-29 16:04:33 +01:00
Viktor Liu
e20be2397c
[client] Add missing peer ACL flush ( #3247 )
2025-01-28 23:25:22 +01:00
Viktor Liu
5c05131a94
[client] Support port ranges in peer ACLs ( #3232 )
2025-01-27 13:51:57 +01:00
Viktor Liu
eb2ac039c7
[client] Mark redirected traffic early to match input filters on pre-DNAT ports ( #3205 )
2025-01-23 18:00:51 +01:00
Viktor Liu
5a82477d48
[client] Remove outbound chains ( #3157 )
2025-01-15 16:57:41 +01:00
Viktor Liu
d9905d1a57
[client] Add disable system flags ( #3153 )
2025-01-07 20:38:18 +01:00
Viktor Liu
abbdf20f65
[client] Allow inbound rosenpass port ( #3109 )
2024-12-31 14:08:48 +01:00
Viktor Liu
b3c87cb5d1
[client] Fix inbound tracking in userspace firewall ( #3111 )
...
* Don't create state for inbound SYN
* Allow final ack in some cases
* Relax state machine test a little
2024-12-26 00:51:27 +01:00
Viktor Liu
ad9f044aad
[client] Add stateful userspace firewall and remove egress filters ( #3093 )
...
- Add stateful firewall functionality for UDP/TCP/ICMP in userspace firewalll
- Removes all egress drop rules/filters, still needs refactoring so we don't add output rules to any chains/filters.
- on Linux, if the OUTPUT policy is DROP then we don't do anything about it (no extra allow rules). This is up to the user, if they don't want anything leaving their machine they'll have to manage these rules explicitly.
2024-12-23 18:22:17 +01:00
Viktor Liu
8866394eb6
[client] Don't choke on non-existent interface in route updates ( #2922 )
2024-12-03 15:33:41 +01:00
Viktor Liu
5142dc52c1
[client] Persist route selection ( #2810 )
2024-12-02 17:55:02 +01:00
Viktor Liu
0ecd5f2118
[client] Test nftables for incompatible iptables rules ( #2948 )
2024-11-25 15:11:56 +01:00
Viktor Liu
940d0c48c6
[client] Don't return error in userspace mode without firewall ( #2924 )
2024-11-25 15:11:31 +01:00
