Viktor Liu
47dcf8d68c
Fix forwarder IP source/destination ( #3463 )
2025-03-10 14:55:07 +01:00
Maycon Santos
8430139d80
fix missing method
2025-03-09 19:03:57 +01:00
Maycon Santos
16fffdb75b
sync changes from #3426
2025-03-09 18:48:48 +01:00
Maycon Santos
fd62665b1f
Merge branch 'main' into feature/flow
...
# Conflicts:
# client/cmd/testutil_test.go
# client/firewall/iptables/router_linux.go
# client/firewall/nftables/router_linux.go
# client/firewall/uspfilter/allow_netbird.go
# client/firewall/uspfilter/allow_netbird_windows.go
# client/firewall/uspfilter/uspfilter_test.go
# client/internal/engine.go
# client/internal/engine_test.go
# client/server/server_test.go
# go.mod
# go.sum
# management/client/client_test.go
# management/cmd/management.go
# management/proto/management.pb.go
# management/proto/management.proto
# management/server/account.go
# management/server/account_test.go
# management/server/dns_test.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/tools.go
# management/server/integrations/port_forwarding/controller.go
# management/server/management_proto_test.go
# management/server/management_test.go
# management/server/nameserver_test.go
# management/server/peer.go
# management/server/peer_test.go
# management/server/route_test.go
2025-03-09 17:42:16 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Viktor Liu
36da464413
Fix tracer test
2025-03-07 17:19:10 +01:00
Viktor Liu
cb16d0f45f
Align packet tracer behavior with actual code paths ( #3424 )
2025-03-07 14:03:45 +01:00
Viktor Liu
e8d8bd8f18
Add peer traffic rule IDs to allowed connections in flows ( #3442 )
2025-03-07 13:56:26 +01:00
Viktor Liu
8b07f21c28
Don't track intercepted packets ( #3448 )
2025-03-07 13:56:16 +01:00
Viktor Liu
3c3a454e61
Fix merge regression
2025-03-06 16:54:15 +01:00
Viktor Liu
5ff77b3595
Add flow userspace counters ( #3438 )
2025-03-06 16:52:56 +01:00
Viktor Liu
b180edbe5c
Track icmp with id only ( #3447 )
2025-03-06 14:51:23 +01:00
Viktor Liu
0a042ac36d
Fix merge conflict
2025-03-05 19:11:20 +01:00
Viktor Liu
e9f11fb11b
Replace net.IP with netip.Addr ( #3425 )
2025-03-05 18:28:05 +01:00
hakansa
419ed275fa
Handle TCP RST flag to transition connection state to closed ( #3432 )
2025-03-05 18:25:42 +01:00
Viktor Liu
8c81a823fa
Add flow ACL IDs ( #3421 )
2025-03-04 16:43:07 +01:00
Viktor Liu
1e10c17ecb
Fix tcp state ( #3431 )
2025-03-04 11:19:54 +01:00
Viktor Liu
bcc5824980
[client] Close userspace firewall properly ( #3426 )
2025-03-04 11:19:42 +01:00
Viktor Liu
96d5190436
Add icmp type and code to forwarder flow event ( #3413 )
2025-02-28 21:04:07 +01:00
Viktor Liu
d19c26df06
Fix log direction ( #3412 )
2025-02-28 21:03:40 +01:00
Viktor Liu
36e36414d9
Fix forwarder log displaying ( #3411 )
2025-02-28 20:53:01 +01:00
Viktor Liu
6ead0ff95e
Fix log format
2025-02-28 20:24:23 +01:00
Viktor Liu
0db65a8984
Add routed packet drop flow ( #3410 )
2025-02-28 20:04:59 +01:00
Viktor Liu
637c0c8949
Add icmp type and code ( #3409 )
2025-02-28 19:16:42 +01:00
Viktor Liu
c72e13d8e6
Add conntrack flows ( #3406 )
2025-02-28 19:16:29 +01:00
Maycon Santos
f6d7bccfa0
Add flow client with sender/receiver ( #3405 )
...
add an initial version of receiver client and flow manager receiver and sender
2025-02-28 17:16:18 +00:00
Viktor Liu
fa748a7ec2
Add userspace flow implementation ( #3393 )
2025-02-28 11:08:35 +01:00
Viktor Liu
f8fd65a65f
Merge branch 'main' into feature/port-forwarding
2025-02-25 11:37:52 +01:00
Viktor Liu
a74208abac
[client] Fix udp forwarder deadline ( #3364 )
2025-02-21 18:51:52 +01:00
Viktor Liu
630edf2480
Remove unused var
2025-02-20 13:24:37 +01:00
Viktor Liu
ea469d28d7
Merge branch 'main' into feature/port-forwarding
2025-02-20 13:24:05 +01:00
Viktor Liu
631ef4ed28
[client] Add embeddable library ( #3239 )
2025-02-20 13:22:03 +01:00
Viktor Liu
8755211a60
Merge branch 'main' into feature/port-forwarding
2025-02-20 11:39:06 +01:00
Viktor Liu
b41de7fcd1
[client] Enable userspace forwarder conditionally ( #3309 )
...
* Enable userspace forwarder conditionally
* Move disable/enable logic
2025-02-12 11:10:49 +01:00
Viktor Liu
05415f72ec
[client] Add experimental support for userspace routing ( #3134 )
2025-02-07 14:11:53 +01:00
Zoltan Papp
26693e4ea8
Feature/port forwarding client ingress ( #3242 )
...
Client-side forward handling
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com >
2025-01-29 16:04:33 +01:00
Viktor Liu
5c05131a94
[client] Support port ranges in peer ACLs ( #3232 )
2025-01-27 13:51:57 +01:00
Viktor Liu
5a82477d48
[client] Remove outbound chains ( #3157 )
2025-01-15 16:57:41 +01:00
Viktor Liu
d9905d1a57
[client] Add disable system flags ( #3153 )
2025-01-07 20:38:18 +01:00
Viktor Liu
b3c87cb5d1
[client] Fix inbound tracking in userspace firewall ( #3111 )
...
* Don't create state for inbound SYN
* Allow final ack in some cases
* Relax state machine test a little
2024-12-26 00:51:27 +01:00
Viktor Liu
ad9f044aad
[client] Add stateful userspace firewall and remove egress filters ( #3093 )
...
- Add stateful firewall functionality for UDP/TCP/ICMP in userspace firewalll
- Removes all egress drop rules/filters, still needs refactoring so we don't add output rules to any chains/filters.
- on Linux, if the OUTPUT policy is DROP then we don't do anything about it (no extra allow rules). This is up to the user, if they don't want anything leaving their machine they'll have to manage these rules explicitly.
2024-12-23 18:22:17 +01:00
Viktor Liu
940d0c48c6
[client] Don't return error in userspace mode without firewall ( #2924 )
2024-11-25 15:11:31 +01:00
Viktor Liu
940f8b4547
[client] Remove legacy forwarding rules in userspace mode ( #2782 )
2024-10-28 12:29:29 +01:00
Viktor Liu
8016710d24
[client] Cleanup firewall state on startup ( #2768 )
2024-10-24 14:46:24 +02:00
Zoltan Papp
fd67892cb4
[client] Refactor/iface pkg ( #2646 )
...
Refactor the flat code structure
2024-10-02 18:24:22 +02:00
Bethuel Mmbaga
ff7863785f
[management, client] Add access control support to network routes ( #2100 )
2024-10-02 13:41:00 +02:00
Maycon Santos
926e11b086
Remove default allow for UDP on unmatched packet ( #2300 )
...
This fixes an issue where UDP rules were ineffective for userspace clients (Windows/macOS)
2024-07-22 15:35:17 +02:00
Bethuel Mmbaga
263abe4862
Fix windows route exec path ( #1946 )
...
* Enable release workflow on PR and upload binaries
add GetSystem32Command to validate if a command is in the path
it will fall back to the full system32, assuming the OS driver is C
---------
Co-authored-by: Maycon Santos <mlsmaycon@gmail.com >
2024-05-09 13:48:15 +02:00
Zoltan Papp
006ba32086
Fix/acl for forward ( #1305 )
...
Fix ACL on routed traffic and code refactor
2023-12-08 10:48:21 +01:00
Yury Gargay
e37a337164
Add gosec linter ( #1342 )
...
This PR adds `gosec` linter with the following checks disabled:
- G102: Bind to all interfaces
- G107: Url provided to HTTP request as taint input
- G112: Potential slowloris attack
- G114: Use of net/http serve function that has no support for setting timeouts
- G204: Audit use of command execution
- G401: Detect the usage of DES, RC4, MD5 or SHA1
- G402: Look for bad TLS connection settings
- G404: Insecure random number source (rand)
- G501: Import blocklist: crypto/md5
- G505: Import blocklist: crypto/sha1
We have complaints related to the checks above. They have to be addressed separately.
2023-12-04 13:34:06 +01:00
