Viktor Liu
79fed32f01
Add wg port configuration
2026-02-10 19:55:48 +08:00
Viktor Liu
73aa0785ba
Add cert health info to checks
2026-02-09 22:55:12 +08:00
Viktor Liu
53c1016a8e
Add graceful shutdown for Kubernetes
2026-02-09 22:55:12 +08:00
Viktor Liu
fd442138e6
Add cert hot reload and cert file locking
...
Adds file-watching certificate hot reload, cross-replica ACME
certificate lock coordination via flock (Unix) and Kubernetes lease
objects.
2026-02-09 22:55:12 +08:00
mlsmaycon
1c5ab7cb8f
add logger support to acme manager
2026-02-08 19:11:27 +01:00
Viktor Liu
780e9f57a5
Improve mgmt backoff
2026-02-09 01:51:53 +08:00
Viktor Liu
3b43c00d12
Use unique static path for auth assets to avoid collision with routes
2026-02-09 01:10:50 +08:00
Viktor Liu
3630ebb3ae
Add option to rewrite redirects
2026-02-09 00:44:47 +08:00
Viktor Liu
7b6294b624
Refuse to service a service if auth setup failed
2026-02-08 23:24:43 +08:00
Viktor Liu
51e63c246b
Add health status to debug
2026-02-08 21:04:46 +08:00
Viktor Liu
ed58659a01
Set forwarded headers from trusted proxies only
2026-02-08 17:49:03 +08:00
Viktor Liu
07e59b2708
Add reverse proxy header security and forwarding
...
- Rewrite Host header to backend target (configurable via pass_host_header per mapping)
- Strip and set X-Forwarded-For/X-Real-IP from direct connection (trust boundary)
- Set X-Forwarded-Host and X-Forwarded-Proto headers
- Strip nb_session cookie and session_token query param before forwarding
- Add --forwarded-proto flag (auto/http/https) for proto detection
- Fix OIDC redirect hardcoded https scheme
- Add pass_host_header to proto, API, and management model
2026-02-08 15:00:35 +08:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
pascal
e366fe340e
add log when listener is ready
2026-02-04 23:32:19 +01:00
pascal
b01809f8e3
use logger
2026-02-04 23:10:01 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Viktor Liu
907677f835
Set readiness false on disconnect right away
2026-02-04 22:28:53 +08:00
Viktor Liu
7d844b9410
Add health checks
2026-02-04 22:18:45 +08:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Viktor Liu
ca33849f31
Use a 1:1 mapping of netbird client to netbird account
...
- Add debug endpoint for monitoring netbird clients
- Add types package with AccountID type
- Refactor netbird roundtrip to key clients by AccountID
- Multiple domains can share the same client per account
- Add status notifier for tunnel connection updates
- Add OIDC flags to CLI
- Add tests for netbird client management
2026-02-04 14:48:20 +08:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Alisdair MacLeod
3a6f364b03
use a defined logger
...
this should avoid issues with the embedded
client also attempting to use the same global logger
2026-01-30 16:31:32 +00:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
pascal
0d480071b6
pass accountID
2026-01-29 14:47:22 +01:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Alisdair MacLeod
4352228797
allow setting the proxy url for autocert server name
2026-01-29 10:03:48 +00:00
mlsmaycon
a0a61d4f47
add extra debug logs
2026-01-28 21:26:57 +01:00
Alisdair MacLeod
3d116c9d33
add debug logs and switch to logrus for logs
2026-01-28 15:44:35 +00:00
Alisdair MacLeod
a9ce9f8d5a
add grpc TLS with selection inferred from management URL
2026-01-28 13:44:47 +00:00
Alisdair MacLeod
1daea35e4b
remove scheme information from management address when connecting via grpc
2026-01-28 12:36:13 +00:00
Alisdair MacLeod
a4c1362bff
pass proxy information to management on grpc connection
2026-01-28 10:50:35 +00:00
pascal
a103f69767
remove basic auth scheme
2026-01-27 17:53:59 +01:00
Alisdair MacLeod
703ef29199
start and stop netbird embedded clients in proxy
2026-01-27 08:33:44 +00:00
Alisdair MacLeod
1d8390b935
refactor layout and structure
2026-01-26 09:28:46 +00:00
