pascal
9e5fa11792
handle multiple path
2026-02-09 19:25:30 +01:00
pascal
1ff75acb31
handle default ports
2026-02-09 19:23:39 +01:00
pascal
1754160686
handle default ports
2026-02-09 19:21:43 +01:00
pascal
423f6266fb
handle default ports
2026-02-09 18:18:53 +01:00
pascal
16d1b4a14a
handle default ports
2026-02-09 18:15:26 +01:00
pascal
7c14056faf
fix resource lookup
2026-02-09 17:58:28 +01:00
pascal
62e37dc2e2
fix host resolution
2026-02-09 17:56:38 +01:00
pascal
9a67a8e427
send updates on changes
2026-02-09 17:06:04 +01:00
pascal
be5f30225a
fix embedded exception
2026-02-09 15:28:48 +01:00
pascal
7467e9fb8c
use portrange
2026-02-09 14:46:23 +01:00
pascal
2390c2e46e
change network map calc to inject proxy policies
2026-02-09 14:41:22 +01:00
mlsmaycon
778c223176
fix api handler path
2026-02-09 02:30:06 +01:00
mlsmaycon
36cd0dd85c
temp fix import cycle
2026-02-09 02:10:21 +01:00
mlsmaycon
09a1d5a02d
rename endpoint
2026-02-09 01:48:51 +01:00
mlsmaycon
7c996ac9b5
add AuthCallbackURL
2026-02-09 01:18:49 +01:00
mlsmaycon
cf9fd5d960
add AuthClientID
2026-02-08 19:41:52 +01:00
Viktor Liu
2f390e1794
Conflate default ports
2026-02-09 00:57:08 +08:00
Viktor Liu
3630ebb3ae
Add option to rewrite redirects
2026-02-09 00:44:47 +08:00
Viktor Liu
260c46df04
Fix broken auth redirect
2026-02-09 00:02:54 +08:00
Viktor Liu
7f11e3205d
Validate target id
2026-02-08 23:44:31 +08:00
Viktor Liu
1c8f92a96f
Fix management nil pointer
2026-02-08 23:29:16 +08:00
Viktor Liu
2cf00dba58
Fix missing route
2026-02-08 21:36:55 +08:00
Viktor Liu
d2a7f3ae36
Fix pass host header
2026-02-08 21:33:48 +08:00
Viktor Liu
dc26a5a436
Merge branch 'main' into prototype/reverse-proxy
2026-02-08 17:50:16 +08:00
Viktor Liu
7c647dd160
Add peer firewall to the receiving peer
2026-02-08 17:49:03 +08:00
Viktor Liu
07e59b2708
Add reverse proxy header security and forwarding
...
- Rewrite Host header to backend target (configurable via pass_host_header per mapping)
- Strip and set X-Forwarded-For/X-Real-IP from direct connection (trust boundary)
- Set X-Forwarded-Host and X-Forwarded-Proto headers
- Strip nb_session cookie and session_token query param before forwarding
- Add --forwarded-proto flag (auto/http/https) for proto detection
- Fix OIDC redirect hardcoded https scheme
- Add pass_host_header to proto, API, and management model
2026-02-08 15:00:35 +08:00
Viktor Liu
0a3a9f977d
Add proxy <-> management authentication
2026-02-08 14:33:27 +08:00
mlsmaycon
2f263bf7e6
fix cluster logic for domains and reverse proxy
2026-02-07 11:43:01 +01:00
mlsmaycon
f65f4fc280
fix some conflicts regression
2026-02-06 20:39:17 +01:00
Zoltan Papp
3be16d19a0
[management] Feature/grpc debounce msgtype ( #5239 )
...
* Add gRPC update debouncing mechanism
Implements backpressure handling for peer network map updates to
efficiently handle rapid changes. First update is sent immediately,
subsequent rapid updates are coalesced, ensuring only the latest
update is sent after a 1-second quiet period.
* Enhance unit test to verify peer count synchronization with debouncing and timeout handling
* Debounce based on type
* Refactor test to validate timer restart after pending update dispatch
* Simplify timer reset for Go 1.23+ automatic channel draining
Remove manual channel drain in resetTimer() since Go 1.23+ automatically
drains the timer channel when Stop() returns false, making the
select-case pattern unnecessary.
2026-02-06 19:47:38 +01:00
Vlad
af8f730bda
[management] check stream start time for connecting peer ( #5267 )
2026-02-06 18:00:43 +01:00
pascal
adbd7ab4c3
send account updates on proxy change
2026-02-06 17:03:18 +01:00
pascal
0419834482
add routed exposed services support in nmap
2026-02-06 15:42:13 +01:00
pascal
d6e35bd0fe
fix merge conflicts
2026-02-05 15:22:23 +01:00
pascal
0e00f1c8f7
Merge remote-tracking branch 'origin/prototype/reverse-proxy-clusters' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/manager/manager.go
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/modules.go
# management/internals/shared/grpc/proxy.go
# management/server/http/handler.go
# management/server/http/testing/testing_tools/channel/channel.go
2026-02-05 15:19:57 +01:00
mlsmaycon
5ccce1ab3f
add debug logging for proxy connections and domain resolution
...
- Log proxy address and cluster info when proxy connects
- Log connected proxy URLs when GetConnectedProxyURLs is called
- Log proxy allow list when GetDomains is called
- Helps debug issues with free domains not appearing in API response
2026-02-05 02:18:38 +01:00
pascal
d09c69f303
fix scan sql
2026-02-04 21:05:25 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Vlad
d488f58311
[management] fix set disconnected status for connected peer ( #5247 )
2026-02-04 11:44:46 +01:00
Alisdair MacLeod
0dd0c67b3b
Revert "add management oidc configuration for proxies"
...
This reverts commit 146774860b
2026-02-04 09:28:54 +00:00
mlsmaycon
b02982f6b1
add logs
2026-02-04 03:14:26 +01:00
mlsmaycon
4d89ae27ef
add clusters logic
2026-02-04 02:16:57 +01:00
pascal
92f72bfce6
add reverse proxy meta to api resp
2026-02-03 17:37:55 +01:00
Pascal Fischer
6fdc00ff41
[management] adding account id validation to accessible peers handler ( #5246 )
2026-02-03 17:30:02 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
3af4543e80
check for domain ownership via subdomain rather than naked domain
2026-02-03 12:50:25 +00:00
