netbird

mirror of https://github.com/netbirdio/netbird.git synced 2026-10-19 11:59:09 +02:00

Files

T

Nicolas Frati 357d8a2a7c [proxy,client] Add --external-ip-map flag for the embedded client (#8185 )

* [proxy] Add --external-ip-map flag for the embedded client

The proxy behind a NAT with a forwarded fixed --wg-port could not advertise
its public address as an ICE candidate, so peers fell back to relay. Expose
the agent's external IP map through embed.Options and a proxy flag
(NB_PROXY_EXTERNAL_IP_MAP).

* [proxy] Validate --external-ip-map at startup

The engine drops every external IP mapping when one fails to parse, so a
typo or a space after a comma silently disabled the feature. Move the
agent's validator to shared/externalipmap, run it from the proxy at
startup, and trim entries first.

* [client,proxy] Require an external IP first in --external-ip-map

The engine reads the first component as the external IP, so a mapping like
iface/10.0.0.5 passed validation and then dropped every mapping.

2026-10-15 14:26:50 +02:00

clone_http2_test.go

[proxy] Apply the upstream HTTP version before cloning transports (#7806 )

2026-09-30 11:05:45 +02:00

context_test.go

[management,proxy] Add per-target options to reverse proxy (#5501 )

2026-03-05 10:03:26 +01:00

dialguard_test.go

[proxy] Optionally refuse private addresses on direct-upstream dials (#7913 )

2026-10-02 12:02:06 +02:00

dialguard.go

[proxy] Optionally refuse private addresses on direct-upstream dials (#7913 )