Viktor Liu
8db91abfdf
Merge branch 'main' into ssh-rewrite
2025-11-05 12:44:17 +01:00
Viktor Liu
641eb5140b
[client] Allow INPUT traffic on the compat iptables filter table for nftables ( #4742 )
2025-11-04 21:56:53 +01:00
Viktor Liu
45c25dca84
[client] Clamp MSS on outbound traffic ( #4735 )
2025-11-04 17:18:51 +01:00
Viktor Liu
6f817cad6d
Remove duplicate code
2025-11-03 13:47:33 +01:00
Viktor Liu
e3bb8c1b7b
Merge branch 'main' into ssh-rewrite
2025-11-03 13:43:29 +01:00
Viktor Liu
86eff0d750
[client] Fix netstack dns forwarder ( #4727 )
2025-10-31 14:18:09 +01:00
Viktor Liu
a7a85d4dc8
Fix tests
2025-10-28 21:11:45 +01:00
Viktor Liu
6f14134988
Merge branch 'main' into ssh-rewrite
2025-10-28 16:50:23 +01:00
Viktor Liu
404cab90ba
[client] Redirect dns forwarder port 5353 to new listening port 22054 ( #4707 )
...
- Port dnat changes from https://github.com/netbirdio/netbird/pull/4015 (nftables/iptables/userspace)
- For userspace: rewrite the original port to the target port
- Remember original destination port in conntrack
- Rewrite the source port back to the original port for replies
- Redirect incoming port 5353 to 22054 (tcp/udp)
- Revert port changes based on the network map received from management
- Adjust tracer to show NAT stages
2025-10-28 15:12:53 +01:00
Viktor Liu
4386a21956
Merge branch 'main' into ssh-rewrite
2025-10-17 15:34:36 +02:00
Viktor Liu
3cdb10cde7
[client] Remove rule squashing ( #4653 )
2025-10-17 11:09:39 +02:00
Viktor Liu
5272fc2b18
Merge branch 'main' into ssh-rewrite
2025-09-25 11:12:47 +02:00
Viktor Liu
55126f990c
[client] Use native windows sock opts to avoid routing loops ( #4314 )
...
- Move `util/grpc` and `util/net` to `client` so `internal` packages can be accessed
- Add methods to return the next best interface after the NetBird interface.
- Use `IP_UNICAST_IF` sock opt to force the outgoing interface for the NetBird `net.Dialer` and `net.ListenerConfig` to avoid routing loops. The interface is picked by the new route lookup method.
- Some refactoring to avoid import cycles
- Old behavior is available through `NB_USE_LEGACY_ROUTING=true` env var
2025-09-20 09:31:04 +02:00
Viktor Liu
b43ef4f17b
Merge branch 'main' into ssh-rewrite
2025-08-26 20:09:47 +02:00
Viktor Liu
7cd5dcae59
[client] Fix rule order for deny rules in peer ACLs ( #4147 )
2025-08-18 11:17:00 +02:00
Viktor Liu
1d5e871bdf
[misc] Move shared components to shared directory ( #4286 )
...
Moved the following directories:
```
- management/client → shared/management/client
- management/domain → shared/management/domain
- management/proto → shared/management/proto
- signal/client → shared/signal/client
- signal/proto → shared/signal/proto
- relay/client → shared/relay/client
- relay/auth → shared/relay/auth
```
and adjusted import paths
2025-08-05 15:22:58 +02:00
Viktor Liu
71bb09d870
[client] Improve userspace filter logging performance ( #4221 )
2025-07-31 14:36:30 +02:00
Viktor Liu
a4b067553d
Merge branch 'main' into ssh-rewrite
2025-07-04 16:53:54 +02:00
Viktor Liu
77ec32dd6f
[client] Implement dns routes for Android ( #3989 )
2025-07-04 16:43:11 +02:00
Viktor Liu
4bbca28eb6
Fix lint
2025-07-02 20:23:23 +02:00
Viktor Liu
9d1554f9f7
Complete overhaul
2025-07-02 19:35:19 +02:00
Viktor Liu
c7884039b8
Revert "Fix errorf"
...
This reverts commit 26fc32f1be
2025-06-25 15:17:31 +02:00
Viktor Liu
26fc32f1be
Fix errorf
2025-06-25 15:03:55 +02:00
Viktor Liu
9468e69c8c
Extract static error
2025-06-17 21:47:05 +02:00
Viktor Liu
f51ce7cee5
Remove nil checks
2025-06-17 21:41:58 +02:00
Viktor Liu
471f90e8db
Rename methods
2025-06-17 15:52:34 +02:00
Viktor Liu
1a3b04d2fe
Swap tracking and nat order
2025-06-17 15:45:22 +02:00
Viktor Liu
51b9e93eb9
Merge branch 'main' into android-dns-routes
2025-06-17 15:12:05 +02:00
Viktor Liu
2952669e97
Fix lint
2025-06-17 14:16:59 +02:00
Viktor Liu
7cd44a9a3c
Improve nat perf
2025-06-17 13:55:57 +02:00
Viktor Liu
8684981b57
Add tests
2025-06-17 13:41:06 +02:00
Viktor Liu
8e94d85d14
Rename test files
2025-06-17 12:46:17 +02:00
Viktor Liu
631b77dc3c
Remove some allocations
2025-06-17 12:44:52 +02:00
Viktor Liu
bb74e903cd
Implement dns routes for Android
2025-06-17 02:48:13 +02:00
Viktor Liu
bfa5c21d2d
[client] Improve icmp conntrack log ( #3963 )
2025-06-16 10:12:59 +02:00
Viktor Liu
609654eee7
[client] Allow userspace local forwarding to internal interfaces if requested ( #3884 )
2025-06-04 18:12:48 +02:00
Viktor Liu
ea4d13e96d
[client] Use platform-native routing APIs for freeBSD, macOS and Windows
2025-06-04 16:28:58 +02:00
Viktor Liu
1ce4ee0cef
[client] Add block inbound flag to disallow inbound connections of any kind ( #3897 )
2025-06-03 10:53:27 +02:00
Viktor Liu
41cd4952f1
[client] Apply return traffic rules only if firewall is stateless ( #3895 )
2025-06-02 12:11:54 +02:00
hakansa
84bfecdd37
[client] add byte counters & ruleID for routed traffic on userspace ( #3653 )
...
* [client] add byte counters for routed traffic on userspace
* [client] add allowed ruleID for routed traffic on userspace
2025-04-28 10:10:41 +03:00
Viktor Liu
3cf87b6846
[client] Run container tests more generically ( #3737 )
2025-04-25 18:50:44 +02:00
Viktor Liu
ef8b8a2891
[client] Ensure dst-type local marks can overwrite nat marks ( #3738 )
2025-04-25 12:43:20 +02:00
Viktor Liu
4a9049566a
[client] Set up firewall rules for dns routes dynamically based on dns response ( #3702 )
2025-04-24 17:37:28 +02:00
Viktor Liu
85f92f8321
[client] Add more userspace filter ACL test cases ( #3730 )
2025-04-24 12:57:46 +02:00
Viktor Liu
192c97aa63
[client] Support IP fragmentation in userspace ( #3639 )
2025-04-08 12:49:14 +02:00
Viktor Liu
6162aeb82d
[client] Mark netbird data plane traffic to identify interface traffic correctly ( #3623 )
2025-04-07 13:14:56 +02:00
Viktor Liu
df9c1b9883
[client] Improve TCP conn tracking ( #3572 )
2025-04-05 11:42:15 +02:00
Viktor Liu
5752bb78f2
[client] Fix missing inbound flows in Linux userspace mode with native router ( #3624 )
...
* Fix missing inbound flows in Linux userspace mode with native router
* Fix route enable/disable order for userspace mode
2025-04-05 11:41:31 +02:00
Viktor Liu
48ffec95dd
Improve local ip lookup ( #3551 )
...
- lower memory footprint in most cases
- increase accuracy
2025-03-31 10:05:57 +02:00
Viktor Liu
29a6e5be71
[client] Stop flow grpc receiver properly ( #3596 )
2025-03-28 16:08:31 +01:00
