Commit Graph

  • 724c6a06e6 [relay] only trust X-Real-Ip headers from configured trusted proxies (#6833) Zoltan Papp 2026-07-20 18:15:03 +02:00
  • 30f4685185 add a test for retrieval of peer metadata from db Dmitri Dolguikh 2026-07-20 17:55:16 +02:00
  • 4e9effcf4c remove old math rand lib pascal 2026-07-20 17:50:31 +02:00
  • 3098ed9f4f Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-20 17:17:05 +02:00
  • 9b60ff4a1a return SyncMessageVersion in sql_store.getPeers() Dmitri Dolguikh 2026-07-20 17:10:55 +02:00
  • 38b6714ffe added exteded logging of negotiated sync message version Dmitri Dolguikh 2026-07-20 16:54:52 +02:00
  • d93ae8c889 drop names and descriptions from GroupCompact and NameserverGroupRaw Dmitri Dolguikh 2026-07-20 16:26:30 +02:00
  • d64e9542eb [proxy] Bedrock cost-allocation metadata + per-provider metadata_disabled (#6791) Maycon Santos 2026-07-20 14:45:50 +02:00
  • ab565a3d3b by default configure the client to use the highest available synv message version Dmitri Dolguikh 2026-07-20 14:21:42 +02:00
  • 3fb26d458e [relay] Remove deprecated Hello handshake and gob token decode (#6783) Viktor Liu 2026-07-20 21:13:40 +09:00
  • a411fd300c [client] Add Japanese (ja) UI translation (#6790) s-shimizu-clpl 2026-07-20 21:12:13 +09:00
  • f37ccf46c0 Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-20 12:03:22 +02:00
  • 9a9317df2f disable network components on the mgmt server by default Dmitri Dolguikh 2026-07-20 11:44:34 +02:00
  • f1c06ef1a4 [client] Return empty map from test mock GetStats to satisfy nilnil linter fix/lazyconn-idle-keep-wg-peer Zoltan Papp 2026-07-19 21:48:53 +02:00
  • 13433af4a5 [client] Preserve routed allowed IPs across lazy connection idle transitions Zoltan Papp 2026-07-19 21:37:15 +02:00
  • 02747c2393 use embedded dex with logging of supported grants dmitri-propagate-auth-grant-types-on-combined Dmitri Dolguikh 2026-07-17 17:18:04 +02:00
  • 92a5ed19d3 [client] Merge 0.74.7 to main (#6819) Viktor Liu 2026-07-18 00:07:44 +09:00
  • be6777427d Merge remote-tracking branch 'origin/main' into 0.74.7-branch-sync Viktor Liu 2026-07-17 16:34:58 +02:00
  • a1c9427d80 [client] Evaluate IP fragments against firewall ACLs (#6781) v0.74.7 0.74.7-branch Viktor Liu 2026-07-17 23:05:32 +09:00
  • a59d7fba95 [management] propagate auth grant types for combined server (#6817) Pascal Fischer 2026-07-17 15:41:57 +02:00
  • 41d7bf4bbd [client] Diagnose empty vs corrupt state (#6816) Zoltan Papp 2026-07-17 15:31:07 +02:00
  • b7b0d5796e [client] Bind netstack SOCKS5 proxy to 127.0.0.1 by default (#6812) Riccardo Manfrin 2026-07-17 15:09:09 +02:00
  • 117e98017c fix import pascal 2026-07-17 14:33:30 +02:00
  • 667d8558f1 propagate auth grant types for combined server pascal 2026-07-17 14:24:38 +02:00
  • 540198ee99 log state file size when unmarshal fails to distinguish empty from corrupt diagnose-empty-vs-corrupt-state Zoltán Papp 2026-07-17 14:09:53 +02:00
  • 25fe7d13d9 Keep Windows power notification handle when unregister fails windows-sleep-detector Viktor Liu 2026-07-17 12:51:43 +02:00
  • c533dead28 Merge branch 'main' into windows-sleep-detector Viktor Liu 2026-07-17 19:47:21 +09:00
  • 21fc5b81f6 [management] allow disabling device code flow when using dex (#6809) Pascal Fischer 2026-07-17 12:41:08 +02:00
  • 67af1b2ef2 Add Windows sleep detection for pre-sleep down/wake up Viktor Liu 2026-07-17 12:35:59 +02:00
  • 9906b9b1a1 [management] fix a flake in account_test (#6811) dmitri-netbird 2026-07-17 11:21:11 +02:00
  • 3f8c447378 [client] Rename isValidAccessToken to reflect audience-only check (#6806) Riccardo Manfrin 2026-07-17 11:00:55 +02:00
  • 6e3f4d8722 [client] Disable gVisor TCP RACK loss detection on Windows (#6808) Viktor Liu 2026-07-17 17:45:30 +09:00
  • ce55620e37 Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-17 10:39:34 +02:00
  • 877e889250 [management] fix fetching of missing settings in GetAccount call (#6800) dmitri-netbird 2026-07-17 10:38:43 +02:00
  • ccb271b5bb [client] Make netbird up wait for the daemon to become ready fix/cli-up-wait-for-daemon Zoltán Papp 2026-07-17 10:28:58 +02:00
  • 099ae4bc6c [client] Sanitize peer FQDN/hostname in generated SSH config (#6805) Riccardo Manfrin 2026-07-17 10:10:22 +02:00
  • 63d60ba490 [client] Reject leading hyphen in getent input to prevent flag injection (#6787) Viktor Liu 2026-07-17 16:28:33 +09:00
  • 6e75b6b62a another import fix Dmitri Dolguikh 2026-07-16 18:18:38 +02:00
  • 408ceb5170 fix import Dmitri Dolguikh 2026-07-16 18:04:22 +02:00
  • c41b1c5835 fixed spelling Dmitri Dolguikh 2026-07-16 17:54:20 +02:00
  • 7b16b3efbd Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-16 17:49:22 +02:00
  • 20243fcfee redid versioning Dmitri Dolguikh 2026-07-16 17:45:57 +02:00
  • 945f8809ee Rework signal protocol to minimize number of exchanged initial RP 512KB keys rp_key_persistency riccardom 2026-07-16 17:25:19 +02:00
  • d15830a2d0 [client] Sync 0.74.6 fix/ios-relogin (#6795) Zoltan Papp 2026-07-16 14:38:01 +02:00
  • 141f3d0390 [client] Fix DNS probe listener impossible panic on unparseable local address (#6797) Zoltan Papp 2026-07-16 14:37:27 +02:00
  • 8fd098dcc7 fix linter feature/native-grpc pascal 2026-07-16 13:24:34 +02:00
  • e3e8dd8cb0 [client] persist Rosenpass static keypair across restarts riccardom 2026-07-16 10:18:18 +02:00
  • 820303c71d fix interval and job cancel pascal 2026-07-16 02:13:51 +02:00
  • ad31406494 improve jobs endpoint pascal 2026-07-16 02:07:15 +02:00
  • 4d8d0e30db use native grpc + unify token refresh pascal 2026-07-16 01:22:37 +02:00
  • 5aa2a748d7 use native grpc + unify token refresh pascal 2026-07-16 01:22:30 +02:00
  • 38b377f21e [client] tie DNS warm-up dial to engine context; fix codespell mlsmaycon 2026-07-15 22:17:57 +02:00
  • e93fd6c1eb Gate local metrics settings behind update-settings and MDM policy Viktor Liu 2026-07-07 19:23:20 +02:00
  • 8280696e6e Render local metrics config in debug bundle and harden metrics HTTP server Viktor Liu 2026-07-07 18:49:15 +02:00
  • 9d2a7e330a Add opt-in local Prometheus metrics endpoint to the client Viktor Liu 2026-07-07 17:49:03 +02:00
  • be578368d8 Add test for bidirectional SSH rule authorized users on source peers Viktor Liu 2026-05-16 15:59:02 +02:00
  • 10ba4b368f Collect SSH authorized users for bidirectional rules on source peers Viktor Liu 2026-05-16 15:49:07 +02:00
  • e1a24376ab [management] build routes for peer cache on network map components (#6780) Pascal Fischer 2026-07-15 18:24:48 +02:00
  • 62fc8d254e [relay] Handle QUIC connections concurrently to prevent handshake head-of-line blocking (#6784) Viktor Liu 2026-07-16 01:18:47 +09:00
  • cfb534af8f use current context when logging sync message version Dmitri Dolguikh 2026-07-15 17:01:20 +02:00
  • 14aad75e86 made commonSyncMessageVersion debug message more useful Dmitri Dolguikh 2026-07-15 16:49:59 +02:00
  • dd569a7ab6 Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-15 15:57:47 +02:00
  • 2ac1d77bf0 log highest common sync message version Dmitri Dolguikh 2026-07-15 15:57:06 +02:00
  • 572353a932 propgate DisableComponentNetworkMap on the client-side Dmitri Dolguikh 2026-07-15 15:32:10 +02:00
  • 3a2f773d65 [client] preserve WireGuard key on interactive re-login (#6777) v0.74.6 0.74.6-branch-sync 0.74.6-branch Zoltan Papp 2026-07-15 12:04:04 +02:00
  • 8f901f8899 [management] enable pprof via env var (#6778) Pascal Fischer 2026-07-15 12:05:40 +02:00
  • 82d8f0a4ee [e2e] source Bedrock model from AWS_BEDROCK_MODEL and normalize catalog id mlsmaycon 2026-07-15 09:49:03 +02:00
  • a0c1548069 [e2e] register Bedrock provider with the normalized catalog model id mlsmaycon 2026-07-15 07:20:46 +02:00
  • 03252696b9 [e2e] resolve endpoint before the proxy-peer gate in the allowlist test mlsmaycon 2026-07-14 22:22:53 +02:00
  • b457cdedb5 [e2e] resolve endpoint before the proxy-peer gate to trigger DNS warm-up mlsmaycon 2026-07-14 22:02:49 +02:00
  • f4f3e29f08 Merge remote-tracking branch 'origin/main' into feature/dns-lazy-conn-warmup mlsmaycon 2026-07-14 21:28:10 +02:00
  • c6bf5fbbfb [management,client] 0.74.5 branch sync (#6769) Maycon Santos 2026-07-14 21:22:40 +02:00
  • f28ff2a1f1 Merge branch 'main' into 0.74.5-branch-sync 0.74.5-branch-sync mlsmaycon 2026-07-14 20:18:01 +02:00
  • f0eed7564f [management] Remove proxy peer stale deduplication logic (#6768) v0.74.5 0.74.4-branch Maycon Santos 2026-07-14 20:13:00 +02:00
  • 588735f2bc [client] warm lazy connections from the DNS resolver mlsmaycon 2026-07-14 19:29:22 +02:00
  • 277d8e4c53 [proxy] enforce model allowlist for URL-routed providers (Bedrock/Vertex) (#6764) Maycon Santos 2026-07-14 19:03:01 +02:00
  • e70a69bbcf [client] Restore residual state in foreground mode before login (#6707) David Fry 2026-07-14 16:43:59 +01:00
  • 671a5f11fd pass sync message version in SyncResponse Dmitri Dolguikh 2026-07-14 17:14:16 +02:00
  • 8a3bce259d responded to feedback Dmitri Dolguikh 2026-07-14 16:57:39 +02:00
  • c31ed6cbdf add tests for sync message versions Dmitri Dolguikh 2026-07-14 16:42:44 +02:00
  • 4d1d7edbc9 fix combined server config around sync message versioning Dmitri Dolguikh 2026-07-14 14:54:39 +02:00
  • 28d8a19331 fix tests Dmitri Dolguikh 2026-07-14 14:23:11 +02:00
  • 9160873f94 Merge remote-tracking branch 'origin/main' into components-impl-drop-indexes-use-xids Dmitri Dolguikh 2026-07-14 14:17:53 +02:00
  • c15e1cec1d added support for per-account sync message versions Dmitri Dolguikh 2026-07-14 14:16:35 +02:00
  • bbe62e0223 more linter fixes Dmitri Dolguikh 2026-07-14 12:57:47 +02:00
  • 300981db04 fix linter issues Dmitri Dolguikh 2026-07-14 12:56:11 +02:00
  • 47a99768a4 propagate client-side DisableComponentNetworkMap flag Dmitri Dolguikh 2026-07-14 12:44:01 +02:00
  • 5d793985d4 add support for sync message version negotiation Dmitri Dolguikh 2026-07-14 12:12:49 +02:00
  • a48618c074 [client] Fix forwarder peers never excluded from lazy connections (#6674) Riccardo Manfrin 2026-07-14 12:12:37 +02:00
  • 39193396f5 [client] Fix WGWatcher silently failing to restart on fast disconnect/reconnect (#6664) Riccardo Manfrin 2026-07-14 10:21:59 +02:00
  • cdde472266 [management] Remove proxy peer stale deduplication test and related logic fix/remove-stale-peers-removal mlsmaycon 2026-07-14 03:15:50 +02:00
  • 5343402385 [client, relay] Increase early-message buffer cap to 10000 to avoid dropping relayed handshakes Riccardo Manfrin 2026-07-13 22:46:03 +02:00
  • 525a4fb29c disable stale proxy cleanup fix/remove-stale-proxy-logic pascal 2026-07-13 20:16:20 +02:00
  • 62703ca23e [management] add logs to ephemeral delete (#6747) v0.75.0-rc.6 Pascal Fischer 2026-07-13 19:06:22 +02:00
  • cc64a93953 [client] Include system events in ToProtoFullStatus conversion (#6746) Viktor Liu 2026-07-14 01:49:17 +09:00
  • 831325d6e2 [management] require dashboard_features.agent_network when enabling agent_network_only (#6750) Maycon Santos 2026-07-13 17:28:19 +02:00
  • 152ba28d9f Add VNC allow and approval settings to MDM policy Viktor Liu 2026-07-13 16:39:28 +02:00
  • 8f64173574 [client] Enable launch-on-login by default on fresh GUI installs (#6738) Maycon Santos 2026-07-13 13:39:57 +02:00
  • 76877e83c4 [client] Bring the connection up in Go after SSO login (#6744) Maycon Santos 2026-07-13 13:32:47 +02:00
  • eb6e8dc905 Reject empty approval request_id and verify gid after setgid Viktor Liu 2026-07-13 11:52:50 +02:00