The dashboard needs to know which peers have opted out of remote jobs so
it can reflect that in the UI, the same way it surfaces the SSH server
flag. Report RemoteJobsAllowed as peer system-info: the client sets it on
the reported flags (like ServerSSHAllowed), the proto Flags message
carries it, and management decodes it onto the peer meta and exposes it
on the peers API as remote_jobs_allowed.
Kept out of the components/network-map path: unlike ServerSSHAllowed it
does not participate in firewall-rule calculation, so it only rides the
reporting flags, not ComponentPeer.
Embed Dex as a built-in IdP to simplify self-hosting setup.
Adds an embedded OIDC Identity Provider (Dex) with local user management and optional external IdP connectors (Google/GitHub/OIDC/SAML), plus device-auth flow for CLI login. Introduces instance onboarding/setup endpoints (including owner creation), field-level encryption for sensitive user data, a streamlined self-hosting provisioning script, and expanded APIs + test coverage for IdP management.
more at https://github.com/netbirdio/netbird/pull/5008#issuecomment-3718987393
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
* [client] Support Extra DNS Labels for Peer Addressing
* [management] Support Extra DNS Labels for Peer Addressing
---------
Co-authored-by: Viktor Liu <17948409+lixmal@users.noreply.github.com>
mlsmaycon