Viktor Liu
7d844b9410
Add health checks
2026-02-04 22:18:45 +08:00
Eduard Gert
eeabc64a73
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-04 15:11:33 +01:00
Eduard Gert
5da2b0fdcc
Add error page
2026-02-04 15:11:22 +01:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
a89bb807a6
fix protos after merge
2026-02-04 11:56:34 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Alisdair MacLeod
0dd0c67b3b
Revert "add management oidc configuration for proxies"
...
This reverts commit 146774860b
2026-02-04 09:28:54 +00:00
Viktor Liu
ca33849f31
Use a 1:1 mapping of netbird client to netbird account
...
- Add debug endpoint for monitoring netbird clients
- Add types package with AccountID type
- Refactor netbird roundtrip to key clients by AccountID
- Multiple domains can share the same client per account
- Add status notifier for tunnel connection updates
- Add OIDC flags to CLI
- Add tests for netbird client management
2026-02-04 14:48:20 +08:00
Viktor Liu
18cd0f1480
Fix netstack detection and add wireguard port option
...
- Add WireguardPort option to embed.Options for custom port configuration
- Fix KernelInterface detection to account for netstack mode
- Skip SSH config updates when running in netstack mode
- Skip interface removal wait when running in netstack mode
- Use BindListener for netstack to avoid port conflicts on same host
2026-02-04 14:39:19 +08:00
Eduard Gert
733ea77c5c
Add proxy auth ui
2026-02-03 19:05:55 +01:00
pascal
92f72bfce6
add reverse proxy meta to api resp
2026-02-03 17:37:55 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
3af4543e80
check for domain ownership via subdomain rather than naked domain
2026-02-03 12:50:25 +00:00
Alisdair MacLeod
146774860b
add management oidc configuration for proxies
2026-02-03 12:39:16 +00:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
76a39c1dcb
Revert "add management side of OIDC authentication"
...
This reverts commit 02ce918114
2026-02-03 10:03:38 +00:00
Alisdair MacLeod
02ce918114
add management side of OIDC authentication
2026-02-03 09:42:40 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
3168afbfcb
clean up proxy reported urls when using them for validation
2026-02-02 15:59:24 +00:00
Alisdair MacLeod
a73ee47557
ignore ports when performing proxy mapping lookups
2026-02-02 14:39:13 +00:00
Alisdair MacLeod
fa6ff005f2
add validation logging
2026-02-02 10:53:46 +00:00
Alisdair MacLeod
095379fa60
add logging to domain validation
2026-02-02 10:27:20 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Alisdair MacLeod
3a6f364b03
use a defined logger
...
this should avoid issues with the embedded
client also attempting to use the same global logger
2026-01-30 16:31:32 +00:00
Alisdair MacLeod
5345d716ee
Merge branch 'main' into prototype/reverse-proxy
2026-01-30 14:46:08 +00:00
Alisdair MacLeod
f882c36e0a
simplify authentication
2026-01-30 14:08:52 +00:00
Viktor Liu
0c990ab662
[client] Add block inbound option to the embed client ( #5215 )
2026-01-30 10:42:39 +01:00
Viktor Liu
101c813e98
[client] Add macOS default resolvers as fallback ( #5201 )
2026-01-30 10:42:14 +01:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
Zoltan Papp
5333e55a81
Fix WG watcher missing initial handshake ( #5213 )
...
Start the WireGuard watcher before configuring the WG endpoint to ensure it captures the initial handshake timestamp.
Previously, the watcher was started after endpoint configuration, causing it to miss the handshake that occurred during setup.
2026-01-29 16:58:10 +01:00
pascal
0d480071b6
pass accountID
2026-01-29 14:47:22 +01:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Viktor Liu
81c11df103
[management] Streamline domain validation ( #5211 )
2026-01-29 13:51:44 +01:00
Alisdair MacLeod
f204da0d68
fix management reverseproxy proto mapping
2026-01-29 12:29:21 +00:00
Alisdair MacLeod
7d74904d62
add roundtripper debug log
2026-01-29 12:03:14 +00:00
Alisdair MacLeod
760ac5e07d
use the netbird client transport directly
2026-01-29 11:11:28 +00:00
Viktor Liu
f74bc48d16
[Client] Stop NetBird on firewall init failure ( #5208 )
2026-01-29 11:05:06 +01:00
Alisdair MacLeod
4352228797
allow setting the proxy url for autocert server name
2026-01-29 10:03:48 +00:00
Vlad
0169e4540f
[management] fix skip of ephemeral peers on deletion ( #5206 )
2026-01-29 10:58:45 +01:00
Alisdair MacLeod
74c770609c
fix access log context cancelled
2026-01-29 09:33:23 +00:00
Alisdair MacLeod
f4ca36ed7e
fix non-nil path assignment
2026-01-29 08:40:03 +00:00
mlsmaycon
c86da92fc6
update log init
2026-01-28 23:18:54 +01:00
mlsmaycon
3f0c577456
use util.InitLog
2026-01-28 22:59:08 +01:00
mlsmaycon
717da8c7b7
fix nil path
2026-01-28 22:40:39 +01:00
mlsmaycon
a0a61d4f47
add extra debug logs
2026-01-28 21:26:57 +01:00
Vlad
cead3f38ee
[management] fix ephemeral peers being not removed ( #5203 )
2026-01-28 18:24:12 +01:00
Alisdair MacLeod
5b1fced872
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-28 16:55:12 +00:00
Alisdair MacLeod
c98dcf5ef9
get all proxy endpoints when a proxy connects
2026-01-28 16:55:05 +00:00
pascal
57cb6bfccb
add log on broadcasting update
2026-01-28 17:52:38 +01:00
