Files
netbird/proxy/internal/auth
mlsmaycon 30d13aa869 proxy: allow overriding tunnel-cache TTL via env var
The tunnel-peer validation cache (peer -> user/groups from ValidateTunnelPeer)
memoizes positive results for a fixed 5 minutes, so an authorization change
(e.g. a revoked peer) can take up to 5 minutes to take effect on the proxy.

Add NB_PROXY_TUNNEL_CACHE_TTL to override the default at construction. The
value is a Go duration string (e.g. "30s", "2m"); unset, unparseable, or
non-positive values keep the 300s default and log a warning. Operators who
need faster propagation can lower it (trading more ValidateTunnelPeer RPCs for
freshness).
2026-07-26 17:45:32 +00:00
..