Viktor Liu
a4b067553d
Merge branch 'main' into ssh-rewrite
2025-07-04 16:53:54 +02:00
Viktor Liu
77ec32dd6f
[client] Implement dns routes for Android ( #3989 )
2025-07-04 16:43:11 +02:00
Viktor Liu
4bbca28eb6
Fix lint
2025-07-02 20:23:23 +02:00
Viktor Liu
9d1554f9f7
Complete overhaul
2025-07-02 19:35:19 +02:00
Viktor Liu
c7884039b8
Revert "Fix errorf"
...
This reverts commit 26fc32f1be
2025-06-25 15:17:31 +02:00
Viktor Liu
26fc32f1be
Fix errorf
2025-06-25 15:03:55 +02:00
Viktor Liu
9468e69c8c
Extract static error
2025-06-17 21:47:05 +02:00
Viktor Liu
f51ce7cee5
Remove nil checks
2025-06-17 21:41:58 +02:00
Viktor Liu
471f90e8db
Rename methods
2025-06-17 15:52:34 +02:00
Viktor Liu
1a3b04d2fe
Swap tracking and nat order
2025-06-17 15:45:22 +02:00
Viktor Liu
51b9e93eb9
Merge branch 'main' into android-dns-routes
2025-06-17 15:12:05 +02:00
Viktor Liu
2952669e97
Fix lint
2025-06-17 14:16:59 +02:00
Viktor Liu
7cd44a9a3c
Improve nat perf
2025-06-17 13:55:57 +02:00
Viktor Liu
8684981b57
Add tests
2025-06-17 13:41:06 +02:00
Viktor Liu
8e94d85d14
Rename test files
2025-06-17 12:46:17 +02:00
Viktor Liu
631b77dc3c
Remove some allocations
2025-06-17 12:44:52 +02:00
Viktor Liu
bb74e903cd
Implement dns routes for Android
2025-06-17 02:48:13 +02:00
Viktor Liu
bfa5c21d2d
[client] Improve icmp conntrack log ( #3963 )
2025-06-16 10:12:59 +02:00
Viktor Liu
609654eee7
[client] Allow userspace local forwarding to internal interfaces if requested ( #3884 )
2025-06-04 18:12:48 +02:00
Viktor Liu
ea4d13e96d
[client] Use platform-native routing APIs for freeBSD, macOS and Windows
2025-06-04 16:28:58 +02:00
Viktor Liu
1ce4ee0cef
[client] Add block inbound flag to disallow inbound connections of any kind ( #3897 )
2025-06-03 10:53:27 +02:00
Viktor Liu
41cd4952f1
[client] Apply return traffic rules only if firewall is stateless ( #3895 )
2025-06-02 12:11:54 +02:00
hakansa
84bfecdd37
[client] add byte counters & ruleID for routed traffic on userspace ( #3653 )
...
* [client] add byte counters for routed traffic on userspace
* [client] add allowed ruleID for routed traffic on userspace
2025-04-28 10:10:41 +03:00
Viktor Liu
3cf87b6846
[client] Run container tests more generically ( #3737 )
2025-04-25 18:50:44 +02:00
Viktor Liu
ef8b8a2891
[client] Ensure dst-type local marks can overwrite nat marks ( #3738 )
2025-04-25 12:43:20 +02:00
Viktor Liu
4a9049566a
[client] Set up firewall rules for dns routes dynamically based on dns response ( #3702 )
2025-04-24 17:37:28 +02:00
Viktor Liu
85f92f8321
[client] Add more userspace filter ACL test cases ( #3730 )
2025-04-24 12:57:46 +02:00
Viktor Liu
192c97aa63
[client] Support IP fragmentation in userspace ( #3639 )
2025-04-08 12:49:14 +02:00
Viktor Liu
6162aeb82d
[client] Mark netbird data plane traffic to identify interface traffic correctly ( #3623 )
2025-04-07 13:14:56 +02:00
Viktor Liu
df9c1b9883
[client] Improve TCP conn tracking ( #3572 )
2025-04-05 11:42:15 +02:00
Viktor Liu
5752bb78f2
[client] Fix missing inbound flows in Linux userspace mode with native router ( #3624 )
...
* Fix missing inbound flows in Linux userspace mode with native router
* Fix route enable/disable order for userspace mode
2025-04-05 11:41:31 +02:00
Viktor Liu
48ffec95dd
Improve local ip lookup ( #3551 )
...
- lower memory footprint in most cases
- increase accuracy
2025-03-31 10:05:57 +02:00
Viktor Liu
29a6e5be71
[client] Stop flow grpc receiver properly ( #3596 )
2025-03-28 16:08:31 +01:00
Viktor Liu
99b41543b8
[client] Fix flows for embedded listeners ( #3564 )
2025-03-22 18:51:48 +01:00
Maycon Santos
c02e236196
[client,management] add netflow support to client and update management ( #3414 )
...
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
2025-03-20 17:05:48 +01:00
Viktor Liu
80ceb80197
[client] Ignore candidates that are part of the the wireguard subnet ( #3472 )
2025-03-10 13:59:21 +01:00
Zoltan Papp
6bef474e9e
[client] Prevent panic in case of double close call ( #3475 )
...
Prevent panic in case of double close call
2025-03-10 13:16:28 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Viktor Liu
bcc5824980
[client] Close userspace firewall properly ( #3426 )
2025-03-04 11:19:42 +01:00
Viktor Liu
a74208abac
[client] Fix udp forwarder deadline ( #3364 )
2025-02-21 18:51:52 +01:00
Viktor Liu
631ef4ed28
[client] Add embeddable library ( #3239 )
2025-02-20 13:22:03 +01:00
Viktor Liu
b41de7fcd1
[client] Enable userspace forwarder conditionally ( #3309 )
...
* Enable userspace forwarder conditionally
* Move disable/enable logic
2025-02-12 11:10:49 +01:00
Viktor Liu
05415f72ec
[client] Add experimental support for userspace routing ( #3134 )
2025-02-07 14:11:53 +01:00
Viktor Liu
e20be2397c
[client] Add missing peer ACL flush ( #3247 )
2025-01-28 23:25:22 +01:00
Viktor Liu
5c05131a94
[client] Support port ranges in peer ACLs ( #3232 )
2025-01-27 13:51:57 +01:00
Viktor Liu
eb2ac039c7
[client] Mark redirected traffic early to match input filters on pre-DNAT ports ( #3205 )
2025-01-23 18:00:51 +01:00
Viktor Liu
5a82477d48
[client] Remove outbound chains ( #3157 )
2025-01-15 16:57:41 +01:00
Viktor Liu
d9905d1a57
[client] Add disable system flags ( #3153 )
2025-01-07 20:38:18 +01:00
Viktor Liu
abbdf20f65
[client] Allow inbound rosenpass port ( #3109 )
2024-12-31 14:08:48 +01:00
Viktor Liu
b3c87cb5d1
[client] Fix inbound tracking in userspace firewall ( #3111 )
...
* Don't create state for inbound SYN
* Allow final ack in some cases
* Relax state machine test a little
2024-12-26 00:51:27 +01:00
