Bethuel Mmbaga
4ee1635baa
[management] Propagate user groups when group propagation setting is re-enabled ( #3912 )
2025-06-11 14:32:16 +03:00
Bethuel Mmbaga
87376afd13
[management] Enable unidirectional rules for all port policy ( #3826 )
2025-06-10 18:02:45 +03:00
Bethuel Mmbaga
b76d9e8e9e
[management] Add support for port ranges in firewall rules ( #3823 )
2025-06-10 18:02:13 +03:00
Viktor Liu
e71383dcb9
[client] Add missing client meta flags ( #3898 )
2025-06-10 14:27:58 +02:00
Bethuel Mmbaga
de27d6df36
[management] Add account ID index to activity events ( #3946 )
2025-06-09 14:34:53 +03:00
Bethuel Mmbaga
b604c66140
[management] Add postgres support for activity event store ( #3890 )
2025-06-04 17:38:49 +03:00
Pedro Maia Costa
87148c503f
[management] support account retrieval and creation by private domain ( #3825 )
...
* [management] sys initiator save user (#3911 )
* [management] activity events with multiple external account users (#3914 )
2025-06-04 11:21:31 +01:00
Pedro Maia Costa
07b220d91b
[management] REST client impersonation ( #3879 )
2025-06-02 22:11:28 +02:00
Bethuel Mmbaga
2bef214cc0
[management] Fix user groups propagation ( #3902 )
2025-05-30 18:12:30 +03:00
Bethuel Mmbaga
684501fd35
[management] Prevent deletion of peers linked to network routers ( #3881 )
...
- Prevent deletion of peers linked to network routers
- Add API endpoint to list all network routers
2025-05-29 18:50:00 +03:00
Bethuel Mmbaga
a0d28f9851
[management] Reset test containers after cleanup ( #3885 )
2025-05-27 14:42:00 +03:00
Bethuel Mmbaga
5523040acd
[management] Add correlated network traffic event schema ( #3680 )
2025-05-27 13:47:53 +03:00
M. Essam
670446d42e
[management/client/rest] Fix panic on unknown errors ( #3865 )
2025-05-25 16:57:34 +02:00
Pedro Maia Costa
5bed6777d5
[management] force account id on save groups update ( #3850 )
2025-05-23 14:42:42 +01:00
Bethuel Mmbaga
2a89d6e47a
[management] Extend nameserver match domain validation ( #3864 )
...
* Enhance match domain validation logic and add test cases
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
* remove the leading dot and root dot support ns regex
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
* Remove support for wildcard ns match domain
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
---------
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
2025-05-22 23:16:19 +02:00
Bethuel Mmbaga
24f932b2ce
[management] Update traffic events pagination filters ( #3857 )
2025-05-22 16:28:14 +03:00
Pedro Maia Costa
c03435061c
[management] lazy connection account setting ( #3855 )
2025-05-22 14:09:00 +01:00
Zoltan Papp
802a18167c
[client] Do not reconnect to mgm server in case of handler error ( #3856 )
...
* Do not reconnect to mgm server in case of handler error
Set to nil the flow grpc client to nil
* Better error handling
2025-05-21 20:18:21 +02:00
Zoltan Papp
daa8380df9
[client] Feature/lazy connection ( #3379 )
...
With the lazy connection feature, the peer will connect to target peers on-demand. The trigger can be any IP traffic.
This feature can be enabled with the NB_ENABLE_EXPERIMENTAL_LAZY_CONN environment variable.
When the engine receives a network map, it binds a free UDP port for every remote peer, and the system configures WireGuard endpoints for these ports. When traffic appears on a UDP socket, the system removes this listener and starts the peer connection procedure immediately.
Key changes
Fix slow netbird status -d command
Move from engine.go file to conn_mgr.go the peer connection related code
Refactor the iface interface usage and moved interface file next to the engine code
Add new command line flag and UI option to enable feature
The peer.Conn struct is reusable after it has been closed.
Change connection states
Connection states
Idle: The peer is not attempting to establish a connection. This typically means it's in a lazy state or the remote peer is expired.
Connecting: The peer is actively trying to establish a connection. This occurs when the peer has entered an active state and is continuously attempting to reach the remote peer.
Connected: A successful peer-to-peer connection has been established and communication is active.
2025-05-21 11:12:28 +02:00
Bethuel Mmbaga
4785f23fc4
[management] Migrate events sqlite store to gorm ( #3837 )
2025-05-20 17:00:37 +03:00
Pascal Fischer
207fa059d2
[management] make locking strength clause optional ( #3844 )
2025-05-19 16:42:47 +02:00
Pascal Fischer
701c13807a
[management] add flag to disable auto-migration ( #3840 )
2025-05-19 13:36:24 +02:00
Pascal Fischer
f1de8e6eb0
[management] Make startup period configurable ( #3767 )
2025-05-16 13:16:51 +02:00
Pascal Fischer
43ae79d848
[management] extend rest client lib ( #3830 )
2025-05-15 18:20:29 +02:00
Vlad
adf494e1ac
[management] fix a bug with missed extra dns labels for a new peer ( #3798 )
2025-05-14 17:50:21 +02:00
Vlad
2158461121
[management,client] PKCE add flag parameter prompt=login or max_age ( #3824 )
2025-05-14 17:48:51 +02:00
Bethuel Mmbaga
0cd4b601c3
[management] Add connection type filter to Network Traffic API ( #3815 )
2025-05-14 11:15:50 +03:00
Pascal Fischer
fcd2c15a37
[management] policy delete cleans policy rules ( #3788 )
2025-05-07 07:25:25 +02:00
Bethuel Mmbaga
ebda0fc538
[management] Delete service users with account manager ( #3793 )
2025-05-06 17:31:03 +02:00
M. Essam
ac135ab11d
[management/client/rest] fix panic when body is nil ( #3714 )
...
Fixes panic occurring when body is nil (this usually happens when connections is refused) due to lack of nil check by centralizing response.Body.Close() behavior.
2025-05-05 18:54:47 +02:00
Pascal Fischer
25faf9283d
[management] removal of foreign key constraint enforcement on sqlite ( #3786 )
2025-05-05 18:21:48 +02:00
Pascal Fischer
055df9854c
[management] add gorm tag for primary key for the networks objects ( #3758 )
2025-05-04 20:58:04 +02:00
Maycon Santos
12f883badf
[management] Optimize load account ( #3774 )
2025-05-02 00:59:41 +02:00
Maycon Santos
2abb92b0d4
[management] Get account id with order ( #3773 )
...
updated log to display account id
2025-05-02 00:25:46 +02:00
Pedro Maia Costa
7b64953eed
[management] user info with role permissions ( #3728 )
2025-05-01 11:24:55 +01:00
Pedro Maia Costa
b5419ef11a
[management] limit peers based on module read permission ( #3757 )
2025-04-30 15:53:18 +01:00
Zoltan Papp
d5081cef90
[client] Revert mgm client error handling ( #3764 )
2025-04-30 13:09:00 +02:00
Bethuel Mmbaga
488e619ec7
[management] Add network traffic events pagination ( #3580 )
...
* Add network traffic events pagination schema
2025-04-30 11:51:40 +03:00
Bethuel Mmbaga
d8dc107bee
[management] Skip IdP cache warm-up on Redis if data exists ( #3733 )
...
* Add Redis cache check to skip warm-up on startup if cache is already populated
* Refactor Redis test container setup for reusability
2025-04-28 15:10:40 +03:00
Pedro Maia Costa
47c3afe561
[management] add missing network admin mapping ( #3751 )
2025-04-28 11:05:27 +01:00
Pascal Fischer
38ada44a0e
[management] allow impersonation via pats ( #3739 )
2025-04-25 16:40:54 +02:00
Pedro Maia Costa
dbf81a145e
[management] network admin role ( #3720 )
2025-04-25 15:14:32 +01:00
Pedro Maia Costa
39483f8ca8
[management] Auditor role ( #3721 )
2025-04-25 15:04:25 +01:00
Zoltan Papp
2817f62c13
[client] Fix error handling case of flow grpc error ( #3727 )
...
When a gRPC error occurs in the Flow package, it will be propagated to the upper layers and handled similarly to a Management gRPC error.
Always report a disconnected state in the event of any error
Hide the underlying gRPC errors
Force close the gRPC connection in the event of any error
2025-04-25 09:26:18 +02:00
Viktor Liu
4a9049566a
[client] Set up firewall rules for dns routes dynamically based on dns response ( #3702 )
2025-04-24 17:37:28 +02:00
Viktor Liu
400b9fca32
[management] Add firewall rule route ID and missing route domains ( #3700 )
2025-04-23 21:29:46 +02:00
Pascal Fischer
312bfd9bd7
[management] support custom domains per account ( #3726 )
2025-04-23 19:36:53 +02:00
Misha Bragin
c69df13515
[management] Add account meta ( #3724 )
2025-04-23 18:44:22 +02:00
Pascal Fischer
986eb8c1e0
[management] fix lastLogin on dashboard ( #3725 )
2025-04-23 15:54:49 +02:00
Pascal Fischer
1a6d6b3109
[management] fix github run id ( #3705 )
2025-04-18 11:21:54 +02:00
