pascal
c084386b88
add docker file
2026-01-27 11:42:51 +01:00
Alisdair MacLeod
6889047350
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-01-27 09:58:28 +00:00
Alisdair MacLeod
245bbb4acf
move domain validation to management
2026-01-27 09:58:14 +00:00
pascal
2b2fc02d83
update openapi specs
2026-01-27 10:42:19 +01:00
Alisdair MacLeod
703ef29199
start and stop netbird embedded clients in proxy
2026-01-27 08:33:44 +00:00
Alisdair MacLeod
b0b60b938a
add initial setup key provisioning
2026-01-26 16:15:24 +00:00
Alisdair MacLeod
e3a026bf1c
connect proxy grpc server to database
2026-01-26 15:28:50 +00:00
Alisdair MacLeod
94503465ee
stub out management proxy server database connection
2026-01-26 14:47:49 +00:00
Alisdair MacLeod
8d959b0abc
update management proxy gRPC server
2026-01-26 14:02:27 +00:00
Alisdair MacLeod
1d8390b935
refactor layout and structure
2026-01-26 09:28:46 +00:00
pascal
2851e38a1f
add management API to store
2026-01-16 16:16:29 +01:00
pascal
51261fe7a9
proxy service proto
2026-01-16 14:48:33 +01:00
pascal
304321d019
put grpc endpoint on management and send test exposed service
2026-01-16 14:24:39 +01:00
pascal
f8c3295645
Merge branch 'main' into prototype/reverse-proxy
2026-01-16 13:07:52 +01:00
Misha Bragin
1ff7abe909
[management, client] Fix SSH server audience validator ( #5105 )
...
* **New Features**
* SSH server JWT validation now accepts multiple audiences with backward-compatible handling of the previous single-audience setting and a guard ensuring at least one audience is configured.
* **Tests**
* Test suites updated and new tests added to cover multiple-audience scenarios and compatibility with existing behavior.
* **Other**
* Startup logging enhanced to report configured audiences for JWT auth.
2026-01-16 12:28:17 +01:00
pascal
183619d1e1
cleanup
2026-01-16 12:01:52 +01:00
Bethuel Mmbaga
067c77e49e
[management] Add custom dns zones ( #4849 )
2026-01-16 12:12:05 +03:00
pascal
3b832d1f21
discard client logs
2026-01-15 17:59:07 +01:00
pascal
fcb849698f
add cert manager with self signed cert support
2026-01-15 17:54:16 +01:00
Maycon Santos
291e640b28
[client] Change priority between local and dns route handlers ( #5106 )
...
* Change priority between local and dns route handlers
* update priority tests
2026-01-15 17:30:10 +01:00
pascal
7527e0ebdb
use embedded netbird agent for tunneling
2026-01-15 17:03:27 +01:00
Pascal Fischer
efb954b7d6
[management] adapt ratelimiting ( #5080 )
2026-01-15 16:39:14 +01:00
pascal
ed5f98da5b
cleanup
2026-01-15 14:54:33 +01:00
pascal
12b38e25da
using go http reverseproxy with OIDC auth
2026-01-14 23:53:55 +01:00
pascal
626e892e3b
trying embedded caddy reverse proxy
2026-01-14 17:16:42 +01:00
Vlad
cac9326d3d
[management] fetch all users data from external cache in one request ( #5104 )
...
---------
Co-authored-by: pascal <pascal@netbird.io >
2026-01-14 17:09:17 +01:00
Viktor Liu
520d9c66cf
[client] Fix netstack upstream dns and add wasm debug methods ( #4648 )
2026-01-14 13:56:16 +01:00
Misha Bragin
ff10498a8b
Feature/embedded STUN ( #5062 )
2026-01-14 13:13:30 +01:00
Zoltan Papp
00b747ad5d
Handle fallback for invalid loginuid in ui-post-install.sh. ( #5099 )
2026-01-14 09:53:14 +01:00
Zoltan Papp
d9118eb239
[client] Fix WASM peer connection to lazy peers ( #5097 )
...
WASM peers now properly initiate relay connections instead of waiting for offers that lazy peers won't send.
2026-01-13 13:33:15 +01:00
Nima Sadeghifard
94de656fae
[misc] Add hiring announcement with link to careers.netbird.io ( #5095 )
2026-01-12 19:06:28 +01:00
Misha Bragin
37abab8b69
[management] Check config compatibility ( #5087 )
...
* Enforce HttpConfig overwrite when embeddedIdp is enabled
* Disable offline_access scope in dashboard by default
* Add group propagation foundation to embedded idp
* Require groups scope in dex config for okt and pocket
* remove offline_access from device default scopes
2026-01-12 17:09:03 +01:00
Viktor Liu
b12c084a50
[client] Fall through dns chain for custom dns zones ( #5081 )
2026-01-12 13:56:39 +01:00
Viktor Liu
394ad19507
[client] Chase CNAMEs in local resolver to ensure musl compatibility ( #5046 )
2026-01-12 12:35:38 +01:00
Misha Bragin
614e7d5b90
Validate OIDC issuer when creating or updating ( #5074 )
2026-01-09 09:45:43 -05:00
Misha Bragin
f7967f9ae3
Feature/resolve local jwks keys ( #5073 )
2026-01-09 09:41:27 -05:00
Vlad
684fc0d2a2
[management] fix the issue with duplicated peers with the same key ( #5053 )
2026-01-09 11:49:26 +01:00
Viktor Liu
0ad0c81899
[client] Reorder userspace ACL checks to fail faster for better performance ( #4226 )
2026-01-09 09:13:04 +01:00
Viktor Liu
e8863fbb55
[client] Add non-root ICMP support to userspace firewall forwarder ( #4792 )
2026-01-09 02:53:37 +08:00
Zoltan Papp
9c9d8e17d7
Revert "Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )" ( #5071 )
...
This reverts commit 24df442198
2026-01-08 18:58:22 +01:00
Diego Noguês
fb71b0d04b
[infrastructure] fix: disable Caddy debug ( #5067 )
2026-01-08 12:49:45 +01:00
Maycon Santos
ab7d6b2196
[misc] add new getting started to release ( #5057 )
2026-01-08 12:12:50 +01:00
Maycon Santos
9c5b2575e3
[misc] add embedded provider support metrics
...
count local vs idp users if embedded
2026-01-08 12:12:19 +01:00
Bethuel Mmbaga
00e2689ffb
[management] Fix race condition in experimental network map when deleting account ( #5064 )
2026-01-08 14:10:09 +03:00
Misha Bragin
cf535f8c61
[management] Fix role change in transaction and update readme ( #5060 )
2026-01-08 12:07:59 +01:00
Maycon Santos
24df442198
Revert "[relay] Update GO version and QUIC version ( #4736 )" ( #5055 )
...
This reverts commit 8722b79799
2026-01-07 19:02:20 +01:00
Zoltan Papp
8722b79799
[relay] Update GO version and QUIC version ( #4736 )
...
- Go 1.25.5
- QUIC 0.55.0
2026-01-07 16:30:29 +01:00
Vlad
afcdef6121
[management] add ssh authorized users to network map cache ( #5048 )
2026-01-07 15:53:18 +01:00
Zoltan Papp
12a7fa24d7
Add support for disabling eBPF WireGuard proxy via environment variable ( #5047 )
2026-01-07 15:34:52 +01:00
Zoltan Papp
6ff9aa0366
Refactor SSH server to manage listener lifecycle and expose active address via Addr method. ( #5036 )
2026-01-07 15:34:26 +01:00
