pascal
d09c69f303
fix scan sql
2026-02-04 21:05:25 +01:00
pascal
096d4ac529
rewrite peer creation and network map calc [WIP]
2026-02-04 20:01:00 +01:00
Alisdair MacLeod
8fafde614a
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-04 16:52:42 +00:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Eduard Gert
b5b7dd4f53
Add other error pages
2026-02-04 17:12:26 +01:00
Viktor Liu
476785b122
Remove health check addr override
2026-02-04 22:32:46 +08:00
Viktor Liu
907677f835
Set readiness false on disconnect right away
2026-02-04 22:28:53 +08:00
Viktor Liu
7d844b9410
Add health checks
2026-02-04 22:18:45 +08:00
Eduard Gert
eeabc64a73
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
2026-02-04 15:11:33 +01:00
Eduard Gert
5da2b0fdcc
Add error page
2026-02-04 15:11:22 +01:00
Alisdair MacLeod
a0005a604e
fix minor potential security issues with OIDC
2026-02-04 12:25:19 +00:00
Alisdair MacLeod
a89bb807a6
fix protos after merge
2026-02-04 11:56:34 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Alisdair MacLeod
0dd0c67b3b
Revert "add management oidc configuration for proxies"
...
This reverts commit 146774860b
2026-02-04 09:28:54 +00:00
Viktor Liu
ca33849f31
Use a 1:1 mapping of netbird client to netbird account
...
- Add debug endpoint for monitoring netbird clients
- Add types package with AccountID type
- Refactor netbird roundtrip to key clients by AccountID
- Multiple domains can share the same client per account
- Add status notifier for tunnel connection updates
- Add OIDC flags to CLI
- Add tests for netbird client management
2026-02-04 14:48:20 +08:00
Viktor Liu
18cd0f1480
Fix netstack detection and add wireguard port option
...
- Add WireguardPort option to embed.Options for custom port configuration
- Fix KernelInterface detection to account for netstack mode
- Skip SSH config updates when running in netstack mode
- Skip interface removal wait when running in netstack mode
- Use BindListener for netstack to avoid port conflicts on same host
2026-02-04 14:39:19 +08:00
Eduard Gert
733ea77c5c
Add proxy auth ui
2026-02-03 19:05:55 +01:00
pascal
92f72bfce6
add reverse proxy meta to api resp
2026-02-03 17:37:55 +01:00
pascal
bffb25bea7
add status confirmation for certs and tunnel creation
2026-02-03 16:58:14 +01:00
Alisdair MacLeod
3af4543e80
check for domain ownership via subdomain rather than naked domain
2026-02-03 12:50:25 +00:00
Alisdair MacLeod
146774860b
add management oidc configuration for proxies
2026-02-03 12:39:16 +00:00
Alisdair MacLeod
5243481316
get OIDC configuration from proxy flags/env
2026-02-03 12:10:23 +00:00
Alisdair MacLeod
76a39c1dcb
Revert "add management side of OIDC authentication"
...
This reverts commit 02ce918114
2026-02-03 10:03:38 +00:00
Alisdair MacLeod
02ce918114
add management side of OIDC authentication
2026-02-03 09:42:40 +00:00
Alisdair MacLeod
30cfc22cb6
correct proto and proxy authentication for oidc
2026-02-03 09:01:39 +00:00
Alisdair MacLeod
3168afbfcb
clean up proxy reported urls when using them for validation
2026-02-02 15:59:24 +00:00
Alisdair MacLeod
a73ee47557
ignore ports when performing proxy mapping lookups
2026-02-02 14:39:13 +00:00
Alisdair MacLeod
fa6ff005f2
add validation logging
2026-02-02 10:53:46 +00:00
Alisdair MacLeod
095379fa60
add logging to domain validation
2026-02-02 10:27:20 +00:00
Alisdair MacLeod
30572fe1b8
add domain validation using values from proxies
2026-02-02 09:53:49 +00:00
Alisdair MacLeod
3a6f364b03
use a defined logger
...
this should avoid issues with the embedded
client also attempting to use the same global logger
2026-01-30 16:31:32 +00:00
Alisdair MacLeod
5345d716ee
Merge branch 'main' into prototype/reverse-proxy
2026-01-30 14:46:08 +00:00
Alisdair MacLeod
f882c36e0a
simplify authentication
2026-01-30 14:08:52 +00:00
Viktor Liu
0c990ab662
[client] Add block inbound option to the embed client ( #5215 )
2026-01-30 10:42:39 +01:00
Viktor Liu
101c813e98
[client] Add macOS default resolvers as fallback ( #5201 )
2026-01-30 10:42:14 +01:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
Zoltan Papp
5333e55a81
Fix WG watcher missing initial handshake ( #5213 )
...
Start the WireGuard watcher before configuring the WG endpoint to ensure it captures the initial handshake timestamp.
Previously, the watcher was started after endpoint configuration, causing it to miss the handshake that occurred during setup.
2026-01-29 16:58:10 +01:00
pascal
0d480071b6
pass accountID
2026-01-29 14:47:22 +01:00
pascal
8e0b7b6c25
add api for access log events
2026-01-29 14:27:57 +01:00
Viktor Liu
81c11df103
[management] Streamline domain validation ( #5211 )
2026-01-29 13:51:44 +01:00
Alisdair MacLeod
f204da0d68
fix management reverseproxy proto mapping
2026-01-29 12:29:21 +00:00
Alisdair MacLeod
7d74904d62
add roundtripper debug log
2026-01-29 12:03:14 +00:00
Alisdair MacLeod
760ac5e07d
use the netbird client transport directly
2026-01-29 11:11:28 +00:00
Viktor Liu
f74bc48d16
[Client] Stop NetBird on firewall init failure ( #5208 )
2026-01-29 11:05:06 +01:00
Alisdair MacLeod
4352228797
allow setting the proxy url for autocert server name
2026-01-29 10:03:48 +00:00
Vlad
0169e4540f
[management] fix skip of ephemeral peers on deletion ( #5206 )
2026-01-29 10:58:45 +01:00
Alisdair MacLeod
74c770609c
fix access log context cancelled
2026-01-29 09:33:23 +00:00
Alisdair MacLeod
f4ca36ed7e
fix non-nil path assignment
2026-01-29 08:40:03 +00:00
mlsmaycon
c86da92fc6
update log init
2026-01-28 23:18:54 +01:00
pascal