Viktor Liu
b12c084a50
[client] Fall through dns chain for custom dns zones ( #5081 )
2026-01-12 13:56:39 +01:00
Viktor Liu
394ad19507
[client] Chase CNAMEs in local resolver to ensure musl compatibility ( #5046 )
2026-01-12 12:35:38 +01:00
Viktor Liu
0ad0c81899
[client] Reorder userspace ACL checks to fail faster for better performance ( #4226 )
2026-01-09 09:13:04 +01:00
Viktor Liu
e8863fbb55
[client] Add non-root ICMP support to userspace firewall forwarder ( #4792 )
2026-01-09 02:53:37 +08:00
Viktor Liu
f012fb8592
[client] Add port forwarding to ssh proxy ( #5031 )
...
* Implement port forwarding for the ssh proxy
* Allow user switching for port forwarding
2026-01-07 12:18:04 +08:00
Viktor Liu
fc4932a23f
[client] Fix Linux UI flickering on state updates ( #4886 )
2025-12-24 11:06:13 +01:00
Viktor Liu
3f4f825ec1
[client] Fix DNS forwarder returning broken records on 4 to 6 mapped IP addresses ( #4887 )
2025-12-05 17:42:49 +01:00
Viktor Liu
f538e6e9ae
[client] Use setsid to avoid the parent process from being killed via HUP by login ( #4900 )
2025-12-05 03:29:27 +01:00
Viktor Liu
9bdc4908fb
[client] Passthrough all non-NetBird chains to prevent them from dropping NetBird traffic ( #4899 )
2025-12-04 19:16:38 +01:00
Viktor Liu
02200d790b
[client] Open browser for ssh automatically ( #4838 )
2025-11-26 16:06:47 +01:00
Viktor Liu
131d7a3694
[client] Make mss clamping optional for nftables ( #4843 )
2025-11-22 18:57:07 +01:00
Viktor Liu
1311364397
[client] Increase ssh detection timeout ( #4827 )
2025-11-20 17:09:22 +01:00
Viktor Liu
60f4d5f9b0
[client] Revert migrate deprecated grpc client code #4805
2025-11-18 12:41:17 +01:00
Viktor Liu
d71a82769c
[client,management] Rewrite the SSH feature ( #4015 )
2025-11-17 17:10:41 +01:00
Viktor Liu and coderabbitai[bot]
e4b41d0ad7
[client] Replace ipset lib ( #4777 )
...
* Replace ipset lib
* Update .github/workflows/check-license-dependencies.yml
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
* Ignore internal licenses
* Ignore dependencies from AGPL code
* Use exported errors
* Use fixed version
---------
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-11-14 00:25:00 +01:00
Viktor Liu
9cc9462cd5
[client] Use stdnet with a context to avoid DNS deadlocks ( #4781 )
2025-11-13 20:16:45 +01:00
Viktor Liu
27957036c9
[client] Fix shutdown blocking on stuck ICE agent close ( #4780 )
2025-11-13 13:24:51 +01:00
Viktor Liu
07cf9d5895
[client] Create networkd.conf.d if it doesn't exist ( #4764 )
2025-11-08 10:54:37 +01:00
Viktor Liu
229e0038ee
[client] Add dns config to debug bundle ( #4704 )
2025-11-05 17:30:17 +01:00
Viktor Liu
75327d9519
[client] Add login_hint to oidc flows ( #4724 )
2025-11-05 17:00:20 +01:00
Viktor Liu
c92e6c1b5f
[client] Block on all subsystems on shutdown ( #4709 )
2025-11-05 12:15:37 +01:00
Viktor Liu
641eb5140b
[client] Allow INPUT traffic on the compat iptables filter table for nftables ( #4742 )
2025-11-04 21:56:53 +01:00
Viktor Liu
45c25dca84
[client] Clamp MSS on outbound traffic ( #4735 )
2025-11-04 17:18:51 +01:00
Viktor Liu
679c58ce47
[client] Set up networkd to ignore ip rules ( #4730 )
2025-11-04 17:06:35 +01:00
Viktor Liu
86eff0d750
[client] Fix netstack dns forwarder ( #4727 )
2025-10-31 14:18:09 +01:00
Viktor Liu
43c9a51913
[client] Migrate deprecated grpc client code ( #4687 )
2025-10-30 10:14:27 +01:00
Viktor Liu
c530db1455
[client] Fix UI panic when switching profiles ( #4718 )
2025-10-29 17:27:18 +01:00
Viktor Liu
1ee575befe
[client] Use management-provided dns forwarder port on the client side ( #4712 )
2025-10-28 22:58:43 +01:00
Viktor Liu
d3a34adcc9
[client] Fix Connect/Disconnect buttons being enabled or disabled at the same time ( #4711 )
2025-10-28 21:21:40 +01:00
Viktor Liu
404cab90ba
[client] Redirect dns forwarder port 5353 to new listening port 22054 ( #4707 )
...
- Port dnat changes from https://github.com/netbirdio/netbird/pull/4015 (nftables/iptables/userspace)
- For userspace: rewrite the original port to the target port
- Remember original destination port in conntrack
- Rewrite the source port back to the original port for replies
- Redirect incoming port 5353 to 22054 (tcp/udp)
- Revert port changes based on the network map received from management
- Adjust tracer to show NAT stages
2025-10-28 15:12:53 +01:00
Viktor Liu
eddea14521
[client] Clean up bsd routes independently of the state file ( #4688 )
2025-10-27 18:54:00 +01:00
Viktor Liu
b9ef214ea5
[client] Fix macOS state-based dns cleanup ( #4701 )
2025-10-27 18:35:32 +01:00
Viktor Liu
6654e2dbf7
[client] Fix active profile name in debug bundle ( #4689 )
2025-10-23 17:07:52 +02:00
Viktor Liu
2fe2af38d2
[client] Clean up match domain reg entries between config changes ( #4676 )
2025-10-21 18:14:39 +02:00
Viktor Liu
f5301230bf
[client] Fix status showing P2P without connection ( #4661 )
2025-10-17 13:31:15 +02:00
Viktor Liu
429d7d6585
[client] Support BROWSER env for login ( #4654 )
2025-10-17 11:10:16 +02:00
Viktor Liu
3cdb10cde7
[client] Remove rule squashing ( #4653 )
2025-10-17 11:09:39 +02:00
Viktor Liu
3abae0bd17
[client] Set default wg port for new profiles ( #4651 )
2025-10-16 16:16:51 +02:00
Viktor Liu
8252ff41db
[client] Add bind activity listener to bypass udp sockets ( #4646 )
2025-10-16 15:58:29 +02:00
Viktor Liu
277aa2b7cc
[client] Fix missing flag values in profiles ( #4650 )
2025-10-16 15:13:41 +02:00
Viktor Liu
000e99e7f3
[client] Force TLS1.2 for RDP with Win11/Server2025 for CredSSP compatibility ( #4617 )
2025-10-13 17:50:16 +02:00
Viktor Liu
88467883fc
[management,signal] Remove ws-proxy read deadline ( #4598 )
2025-10-06 22:05:48 +02:00
Viktor Liu
954f40991f
[client,management,signal] Handle grpc from ws proxy internally instead of via tcp ( #4593 )
2025-10-06 21:22:19 +02:00
Viktor Liu
e7b5537dcc
Add websocket paths including relay to nginx template ( #4573 )
2025-10-02 13:51:39 +02:00
Viktor Liu
4d7e59f199
[client,signal,management] Adjust browser client ws proxy paths ( #4565 )
2025-10-02 00:10:47 +02:00
Viktor Liu
b5daec3b51
[client,signal,management] Add browser client support ( #4415 )
2025-10-01 20:10:11 +02:00
Viktor Liu
5853b5553c
[client] Skip interface for route lookup if it doesn't exist ( #4524 )
2025-09-22 14:32:00 +02:00
Viktor Liu
55126f990c
[client] Use native windows sock opts to avoid routing loops ( #4314 )
...
- Move `util/grpc` and `util/net` to `client` so `internal` packages can be accessed
- Add methods to return the next best interface after the NetBird interface.
- Use `IP_UNICAST_IF` sock opt to force the outgoing interface for the NetBird `net.Dialer` and `net.ListenerConfig` to avoid routing loops. The interface is picked by the new route lookup method.
- Some refactoring to avoid import cycles
- Old behavior is available through `NB_USE_LEGACY_ROUTING=true` env var
2025-09-20 09:31:04 +02:00
Viktor Liu
71e944fa57
[relay] Let relay accept any origin ( #4426 )
2025-09-01 19:51:06 +02:00
Viktor Liu
d4c067f0af
[client] Don't deactivate upstream resolvers on failure ( #4128 )
2025-08-29 17:40:05 +02:00
Viktor Liu
aa595c3073
[client] Fix shared sock buffer allocation ( #4409 )
2025-08-28 13:25:16 +02:00
Viktor Liu
f063866ce8
[client] Add flag to configure MTU ( #4213 )
2025-08-26 16:00:14 +02:00
Viktor Liu
7cd5dcae59
[client] Fix rule order for deny rules in peer ACLs ( #4147 )
2025-08-18 11:17:00 +02:00
Viktor Liu
160b811e21
[client] Distinguish between NXDOMAIN and NODATA in the dns forwarder ( #4321 )
2025-08-12 15:59:42 +02:00
Viktor Liu
5e607cf4e9
[client] Skip dns upstream servers pointing to our dns server IP to prevent loops ( #4330 )
2025-08-12 15:41:23 +02:00
Viktor Liu
0fdb944058
[client] Create NRPT rules separately per domain ( #4329 )
2025-08-12 15:40:37 +02:00
Viktor Liu
1022a5015c
[client] Eliminate upstream server strings in dns code ( #4267 )
2025-08-11 11:57:21 +02:00
Viktor Liu
82937ba184
[client] Increase logout timeout ( #4311 )
2025-08-08 19:16:48 +02:00
Viktor Liu
bef99d48f8
[client] Rename logout to deregister ( #4307 )
2025-08-08 15:48:30 +02:00
Viktor Liu
3d19468b6c
[client] Add windows arm64 build ( #4206 )
2025-08-07 11:30:19 +02:00
Viktor Liu
abd152ee5a
[misc] Separate shared code dependencies ( #4288 )
...
* Separate shared code dependencies
* Fix import
* Test respective shared code
* Update openapi ref
* Fix test
* Fix test path
2025-08-05 18:34:41 +02:00
Viktor Liu
1d5e871bdf
[misc] Move shared components to shared directory ( #4286 )
...
Moved the following directories:
```
- management/client → shared/management/client
- management/domain → shared/management/domain
- management/proto → shared/management/proto
- signal/client → shared/signal/client
- signal/proto → shared/signal/proto
- relay/client → shared/relay/client
- relay/auth → shared/relay/auth
```
and adjusted import paths
2025-08-05 15:22:58 +02:00
Viktor Liu
3d3c4c5844
[client] Add full sync response to debug bundle ( #4287 )
2025-08-05 14:55:50 +02:00
Viktor Liu
beb66208a0
[management, client] Add API to change the network range ( #4177 )
2025-08-04 16:45:49 +02:00
Viktor Liu
58eb3c8cc2
[client] Increase ip rule priorities to avoid conflicts ( #4273 )
2025-08-04 11:20:43 +02:00
Viktor Liu
b5ed94808c
[management, client] Add logout feature ( #4268 )
2025-08-04 10:17:36 +02:00
Viktor Liu
71bb09d870
[client] Improve userspace filter logging performance ( #4221 )
2025-07-31 14:36:30 +02:00
Viktor Liu
5de61f3081
[client] Fix dns ipv6 upstream ( #4257 )
2025-07-30 20:28:19 +02:00
Viktor Liu
980a6eca8e
[client] Disable the dns host manager properly if disabled through management ( #4241 )
2025-07-29 19:37:18 +02:00
Viktor Liu
e0d9306b05
[client] Add detailed routes and resolved IPs to debug bundle ( #4141 )
2025-07-25 15:31:06 +02:00
Viktor Liu
2c4ac33b38
[client] Remove and deprecate the admin url functionality ( #4218 )
2025-07-25 15:15:38 +02:00
Viktor Liu
cb85d3f2fc
[client] Always register NetBird with plain Linux DNS and use original servers as upstream ( #3967 )
2025-07-25 11:46:04 +02:00
Viktor Liu
459c9ef317
[client] Add env and status flags for netbird service command ( #3975 )
2025-07-24 13:34:55 +02:00
Viktor Liu
e5e275c87a
[client] Fix legacy routing exclusion routes in kernel mode ( #4167 )
2025-07-24 13:34:36 +02:00
Viktor Liu
d6ed9c037e
[client] Fix bind exclusion routes ( #4154 )
2025-07-21 12:13:21 +02:00
Viktor Liu
a7ea881900
[client] Add rotated logs flag for debug bundle generation ( #4100 )
2025-07-10 16:13:53 +02:00
Viktor Liu
77ec32dd6f
[client] Implement dns routes for Android ( #3989 )
2025-07-04 16:43:11 +02:00
Viktor Liu
9afbecb7ac
[client] Use unique sequence numbers for bsd routes ( #4081 )
...
updates the route manager on Unix to use a unique, incrementing sequence number for each route message instead of a fixed value.
Replace the static Seq: 1 with a call to r.getSeq()
Add an atomic seq field and the getSeq method in SysOps
2025-07-03 09:02:53 +02:00
Viktor Liu
d897365abc
[client] Don't open cmd.exe during MSI actions ( #4041 )
2025-06-24 21:32:37 +02:00
Viktor Liu
f37aa2cc9d
[misc] Specify netbird binary location in Dockerfiles ( #4024 )
2025-06-23 10:09:02 +02:00
Viktor Liu
2a51609436
[client] Handle lazy routing peers that are part of HA groups ( #3943 )
...
* Activate new lazy routing peers if the HA group is active
* Prevent lazy peers going to idle if HA group members are active (#3948 )
2025-06-20 18:07:19 +02:00
Viktor Liu
23b5d45b68
[client] Fix port range squashing ( #4007 )
2025-06-18 18:56:48 +02:00
Viktor Liu
0e5dc9d412
[client] Add more Android advanced settings ( #4001 )
2025-06-18 17:23:23 +02:00
Viktor Liu
de7384e8ea
[client] Tighten allowed domains for dns forwarder ( #3978 )
2025-06-17 14:03:00 +02:00
Viktor Liu
75c1be69cf
[client] Prioritze the local resolver in the dns handler chain ( #3965 )
2025-06-17 14:02:30 +02:00
Viktor Liu
d4a800edd5
[client] Fix status recorder panic ( #3988 )
2025-06-17 01:20:26 +02:00
Viktor Liu
8df8c1012f
[client] Support wildcard DNS on iOS ( #3979 )
2025-06-16 18:33:51 +02:00
Viktor Liu
bfa5c21d2d
[client] Improve icmp conntrack log ( #3963 )
2025-06-16 10:12:59 +02:00
Viktor Liu
04a3765391
[client] Fix unncessary UI updates ( #3785 )
2025-06-13 20:38:50 +02:00
Viktor Liu
3e43298471
[client] Fix local resolver returning error for existing domains with other types ( #3959 )
2025-06-11 21:08:45 +02:00
Viktor Liu
e71383dcb9
[client] Add missing client meta flags ( #3898 )
2025-06-10 14:27:58 +02:00
Viktor Liu
e002a2e6e8
[client] Add more advanced settings to UI ( #3941 )
2025-06-10 14:27:06 +02:00
Viktor Liu
6127a01196
[client] Remove strings from allowed IPs ( #3920 )
2025-06-10 14:26:28 +02:00
Viktor Liu
3c535cdd2b
[client] Add lazy connections to routed networks ( #3908 )
2025-06-08 14:10:34 +02:00
Viktor Liu
64f111923e
[client] Increase stun status probe timeout ( #3930 )
2025-06-05 15:22:59 +02:00
Viktor Liu
84354951d3
[client] Add systemd netbird logs to debug bundle ( #3917 )
2025-06-05 13:54:15 +02:00
Viktor Liu
55957a1960
[client] Run registerdns before flushing ( #3926 )
...
* Run registerdns before flushing
* Disable WINS, dynamic updates and registration
2025-06-05 12:40:23 +02:00
Viktor Liu
df82a45d99
[client] Improve dns match trace log ( #3928 )
2025-06-05 12:39:58 +02:00
Viktor Liu
609654eee7
[client] Allow userspace local forwarding to internal interfaces if requested ( #3884 )
2025-06-04 18:12:48 +02:00
Viktor Liu
ea4d13e96d
[client] Use platform-native routing APIs for freeBSD, macOS and Windows
2025-06-04 16:28:58 +02:00