mirror of
https://github.com/netbirdio/netbird.git
synced 2026-07-28 08:52:37 -04:00
30d13aa869
The tunnel-peer validation cache (peer -> user/groups from ValidateTunnelPeer) memoizes positive results for a fixed 5 minutes, so an authorization change (e.g. a revoked peer) can take up to 5 minutes to take effect on the proxy. Add NB_PROXY_TUNNEL_CACHE_TTL to override the default at construction. The value is a Go duration string (e.g. "30s", "2m"); unset, unparseable, or non-positive values keep the 300s default and log a warning. Operators who need faster propagation can lower it (trading more ValidateTunnelPeer RPCs for freshness).