Viktor Liu
6f14134988
Merge branch 'main' into ssh-rewrite
2025-10-28 16:50:23 +01:00
Viktor Liu
404cab90ba
[client] Redirect dns forwarder port 5353 to new listening port 22054 ( #4707 )
...
- Port dnat changes from https://github.com/netbirdio/netbird/pull/4015 (nftables/iptables/userspace)
- For userspace: rewrite the original port to the target port
- Remember original destination port in conntrack
- Rewrite the source port back to the original port for replies
- Redirect incoming port 5353 to 22054 (tcp/udp)
- Revert port changes based on the network map received from management
- Adjust tracer to show NAT stages
2025-10-28 15:12:53 +01:00
Viktor Liu
4386a21956
Merge branch 'main' into ssh-rewrite
2025-10-17 15:34:36 +02:00
Viktor Liu
3cdb10cde7
[client] Remove rule squashing ( #4653 )
2025-10-17 11:09:39 +02:00
Viktor Liu
5272fc2b18
Merge branch 'main' into ssh-rewrite
2025-09-25 11:12:47 +02:00
Viktor Liu
55126f990c
[client] Use native windows sock opts to avoid routing loops ( #4314 )
...
- Move `util/grpc` and `util/net` to `client` so `internal` packages can be accessed
- Add methods to return the next best interface after the NetBird interface.
- Use `IP_UNICAST_IF` sock opt to force the outgoing interface for the NetBird `net.Dialer` and `net.ListenerConfig` to avoid routing loops. The interface is picked by the new route lookup method.
- Some refactoring to avoid import cycles
- Old behavior is available through `NB_USE_LEGACY_ROUTING=true` env var
2025-09-20 09:31:04 +02:00
Viktor Liu
b43ef4f17b
Merge branch 'main' into ssh-rewrite
2025-08-26 20:09:47 +02:00
Viktor Liu
7cd5dcae59
[client] Fix rule order for deny rules in peer ACLs ( #4147 )
2025-08-18 11:17:00 +02:00
Viktor Liu
1d5e871bdf
[misc] Move shared components to shared directory ( #4286 )
...
Moved the following directories:
```
- management/client → shared/management/client
- management/domain → shared/management/domain
- management/proto → shared/management/proto
- signal/client → shared/signal/client
- signal/proto → shared/signal/proto
- relay/client → shared/relay/client
- relay/auth → shared/relay/auth
```
and adjusted import paths
2025-08-05 15:22:58 +02:00
Viktor Liu
71bb09d870
[client] Improve userspace filter logging performance ( #4221 )
2025-07-31 14:36:30 +02:00
Viktor Liu
a4b067553d
Merge branch 'main' into ssh-rewrite
2025-07-04 16:53:54 +02:00
Viktor Liu
77ec32dd6f
[client] Implement dns routes for Android ( #3989 )
2025-07-04 16:43:11 +02:00
Viktor Liu
4bbca28eb6
Fix lint
2025-07-02 20:23:23 +02:00
Viktor Liu
9d1554f9f7
Complete overhaul
2025-07-02 19:35:19 +02:00
Viktor Liu
c7884039b8
Revert "Fix errorf"
...
This reverts commit 26fc32f1be
2025-06-25 15:17:31 +02:00
Viktor Liu
26fc32f1be
Fix errorf
2025-06-25 15:03:55 +02:00
Viktor Liu
9468e69c8c
Extract static error
2025-06-17 21:47:05 +02:00
Viktor Liu
f51ce7cee5
Remove nil checks
2025-06-17 21:41:58 +02:00
Viktor Liu
471f90e8db
Rename methods
2025-06-17 15:52:34 +02:00
Viktor Liu
1a3b04d2fe
Swap tracking and nat order
2025-06-17 15:45:22 +02:00
Viktor Liu
51b9e93eb9
Merge branch 'main' into android-dns-routes
2025-06-17 15:12:05 +02:00
Viktor Liu
2952669e97
Fix lint
2025-06-17 14:16:59 +02:00
Viktor Liu
7cd44a9a3c
Improve nat perf
2025-06-17 13:55:57 +02:00
Viktor Liu
8684981b57
Add tests
2025-06-17 13:41:06 +02:00
Viktor Liu
8e94d85d14
Rename test files
2025-06-17 12:46:17 +02:00
Viktor Liu
631b77dc3c
Remove some allocations
2025-06-17 12:44:52 +02:00
Viktor Liu
bb74e903cd
Implement dns routes for Android
2025-06-17 02:48:13 +02:00
Viktor Liu
bfa5c21d2d
[client] Improve icmp conntrack log ( #3963 )
2025-06-16 10:12:59 +02:00
Viktor Liu
609654eee7
[client] Allow userspace local forwarding to internal interfaces if requested ( #3884 )
2025-06-04 18:12:48 +02:00
Viktor Liu
ea4d13e96d
[client] Use platform-native routing APIs for freeBSD, macOS and Windows
2025-06-04 16:28:58 +02:00
Viktor Liu
1ce4ee0cef
[client] Add block inbound flag to disallow inbound connections of any kind ( #3897 )
2025-06-03 10:53:27 +02:00
Viktor Liu
41cd4952f1
[client] Apply return traffic rules only if firewall is stateless ( #3895 )
2025-06-02 12:11:54 +02:00
hakansa
84bfecdd37
[client] add byte counters & ruleID for routed traffic on userspace ( #3653 )
...
* [client] add byte counters for routed traffic on userspace
* [client] add allowed ruleID for routed traffic on userspace
2025-04-28 10:10:41 +03:00
Viktor Liu
3cf87b6846
[client] Run container tests more generically ( #3737 )
2025-04-25 18:50:44 +02:00
Viktor Liu
ef8b8a2891
[client] Ensure dst-type local marks can overwrite nat marks ( #3738 )
2025-04-25 12:43:20 +02:00
Viktor Liu
4a9049566a
[client] Set up firewall rules for dns routes dynamically based on dns response ( #3702 )
2025-04-24 17:37:28 +02:00
Viktor Liu
85f92f8321
[client] Add more userspace filter ACL test cases ( #3730 )
2025-04-24 12:57:46 +02:00
Viktor Liu
192c97aa63
[client] Support IP fragmentation in userspace ( #3639 )
2025-04-08 12:49:14 +02:00
Viktor Liu
6162aeb82d
[client] Mark netbird data plane traffic to identify interface traffic correctly ( #3623 )
2025-04-07 13:14:56 +02:00
Viktor Liu
df9c1b9883
[client] Improve TCP conn tracking ( #3572 )
2025-04-05 11:42:15 +02:00
Viktor Liu
5752bb78f2
[client] Fix missing inbound flows in Linux userspace mode with native router ( #3624 )
...
* Fix missing inbound flows in Linux userspace mode with native router
* Fix route enable/disable order for userspace mode
2025-04-05 11:41:31 +02:00
Viktor Liu
48ffec95dd
Improve local ip lookup ( #3551 )
...
- lower memory footprint in most cases
- increase accuracy
2025-03-31 10:05:57 +02:00
Viktor Liu
29a6e5be71
[client] Stop flow grpc receiver properly ( #3596 )
2025-03-28 16:08:31 +01:00
Viktor Liu
99b41543b8
[client] Fix flows for embedded listeners ( #3564 )
2025-03-22 18:51:48 +01:00
Maycon Santos
c02e236196
[client,management] add netflow support to client and update management ( #3414 )
...
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
2025-03-20 17:05:48 +01:00
Viktor Liu
80ceb80197
[client] Ignore candidates that are part of the the wireguard subnet ( #3472 )
2025-03-10 13:59:21 +01:00
Zoltan Papp
6bef474e9e
[client] Prevent panic in case of double close call ( #3475 )
...
Prevent panic in case of double close call
2025-03-10 13:16:28 +01:00
Viktor Liu
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
Viktor Liu
bcc5824980
[client] Close userspace firewall properly ( #3426 )
2025-03-04 11:19:42 +01:00
Viktor Liu
a74208abac
[client] Fix udp forwarder deadline ( #3364 )
2025-02-21 18:51:52 +01:00
Viktor Liu