extern/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2024-11-07 16:54:16 +01:00
Code Issues Packages Projects Releases Wiki Activity
e18bf565a2
netbird/go.mod

176 lines
7.8 KiB
Modula-2
Raw Normal View History

Rename module to netbirdio/netbird (#288) rename the go module to netbirdio/netbird as part of our rebranding.
2022-03-26 12:08:54 +01:00
module github.com/netbirdio/netbird
project init
2021-05-01 12:45:37 +02:00
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
go 1.21
toolchain go1.21.0
project init
2021-05-01 12:45:37 +02:00
require (
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
cunicu.li/go-rosenpass v0.4.0
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/cenkalti/backoff/v4 v4.1.3
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/cloudflare/circl v1.3.3 // indirect
peer management HTTP API (#81) * feature: create account for a newly registered user * feature: finalize user auth flow * feature: create protected API with JWT * chore: cleanup http server * feature: add UI assets * chore: update react UI * refactor: move account not exists -> create to AccountManager * chore: update UI * chore: return only peers on peers endpoint * chore: add UI path to the config * chore: remove ui from management * chore: remove unused Docker comamnds * docs: update management config sample * fix: store creation * feature: introduce peer response to the HTTP api * fix: lint errors * feature: add setup-keys HTTP endpoint * fix: return empty json arrays in HTTP API * feature: add new peer response fields
2021-08-12 12:49:10 +02:00
github.com/golang-jwt/jwt v3.2.2+incompatible
Add Authentik IdP (#897)
2023-05-29 14:35:30 +02:00
github.com/golang/protobuf v1.5.3
Update pion v3 (#1398) Update Pion related versions to the latest --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com>
2023-12-20 23:02:42 +01:00
github.com/google/uuid v1.3.1
feature: add update setup key endpoint
2021-08-20 22:33:43 +02:00
github.com/gorilla/mux v1.8.0
Update service pkg with log directory fix (#692) This service pkg update includes directory check and creation
2023-02-16 18:04:14 +01:00
github.com/kardianos/service v1.2.1-0.20210728001519-a323c3813bc7
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
github.com/onsi/ginkgo v1.16.5
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/onsi/gomega v1.18.1
Update pion v3 (#1398) Update Pion related versions to the latest --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com>
2023-12-20 23:02:42 +01:00
github.com/pion/ice/v3 v3.0.2
Add cors headers (#85) * disable EnableAuthOnOptions * Setup basic cors headers * feature: user cors lib
2021-08-16 11:29:57 +02:00
github.com/rs/cors v1.8.0
Feat rego default policy (#700) Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.
2023-03-13 15:14:18 +01:00
github.com/sirupsen/logrus v1.9.0
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/spf13/cobra v1.7.0
Support environment vars (#155) * updage flag values from environment variables * add log and removing unused constants * removing unused code * Docker build client * fix indentation * Documentation with docker command * use docker volume
2021-11-15 09:11:50 +01:00
github.com/spf13/pflag v1.0.5
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/vishvananda/netlink v1.1.1-0.20211118161826-650dca95af54
Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#1401) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0. - [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-18 16:02:08 +01:00
golang.org/x/crypto v0.17.0
golang.org/x/sys v0.15.0
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
golang.zx2c4.com/wireguard v0.0.0-20230704135630-469159ecf7d1
golang.zx2c4.com/wireguard/wgctrl v0.0.0-20230429144221-925a1e7659e6
Windows MTU fix and wg/win version update (#896) - wireguard/windows version update to 0.5.3 - follow up forked wireguard-go MTU related changes - fix MTU settings on Windows --------- Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2023-05-25 14:16:24 +02:00
golang.zx2c4.com/wireguard/windows v0.5.3
Bump google.golang.org/grpc from 1.55.0 to 1.56.3 (#1252) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.55.0 to 1.56.3. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.55.0...v1.56.3) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-03 14:45:50 +01:00
google.golang.org/grpc v1.56.3
Extract peer real IP from Load Balancer when possible (#1510)
2024-01-31 16:02:24 +01:00
google.golang.org/protobuf v1.31.0
feature: add logging to a file (#112) * feature: add logging to a file * refactor: move InitLog to util lib * docs: update signal and management docs * chore: update docker compose * set --log-file to console * chore: comment out log volume in docker compose Co-authored-by: mlsmaycon <mlsmaycon@gmail.com>
2021-09-07 09:53:18 +02:00
gopkg.in/natefinch/lumberjack.v2 v2.0.0
project init
2021-05-01 12:45:37 +02:00
)
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
require (
Add Settings window to Agent UI Agent systray UI has been extended with a setting window that allows configuring management URL, admin URL and supports pre-shared key. While for the Netbird managed version the Settings are not necessary, it helps to properly configure the self-hosted version.
2022-04-15 17:30:12 +02:00
fyne.io/fyne/v2 v2.1.4
Add jumpcloud IdP (#1124) added intergration with JumpCloud User API. Use the steps in setup.md for configuration. Additional changes: - Enhance compatibility for providers that lack audience support in the Authorization Code Flow and the Authorization - - Code Flow with Proof Key for Code Exchange (PKCE) using NETBIRD_DASH_AUTH_USE_AUDIENCE=falseenv - Verify tokens by utilizing the client ID when audience support is absent in providers
2023-10-03 19:33:42 +02:00
github.com/TheJumpCloud/jcapi-go v3.0.0+incompatible
Replace IP allocation logic (#342) The peer IP allocation logic was allocating sequential peer IP from the 100.64.0.0/10 address block. Each account is created with a random subnet from 100.64.0.0/10. The total amount of potential subnets is 64. The new logic allocates random peer IP from the account subnet. This gives us flexibility to add support for multi subnet accounts without overlapping IPs.
2022-05-29 22:43:39 +02:00
github.com/c-robinson/iplib v1.0.3
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/cilium/ebpf v0.11.0
Routemgr error handling (#1073) In case the route management feature is not supported then do not create unnecessary firewall and manager instances. This can happen if the nftables nor iptables is not available on the host OS. - Move the error handling to upper layer - Remove fake, useless implementations of interfaces - Update go-iptables because In Docker the old version can not determine well the path of executable file - update lib to 0.70
2023-08-12 11:42:36 +02:00
github.com/coreos/go-iptables v0.7.0
NetBird SSH (#361) This PR adds support for SSH access through the NetBird network without managing SSH skeys. NetBird client app has an embedded SSH server (Linux/Mac only) and a netbird ssh command.
2022-06-23 17:04:53 +02:00
github.com/creack/pty v1.1.18
Super user invites (#483) This PR brings user invites logic to the Management service via HTTP API. The POST /users/ API endpoint creates a new user in the Idp and then in the local storage. Once the invited user signs ups, the account invitation is redeemed. There are a few limitations. This works only with an enabled IdP manager. Users that already have a registered account can't be invited.
2022-10-13 18:26:31 +02:00
github.com/eko/gocache/v3 v3.1.1
Support disabled resolved stub server mode (#1493) In the case of disabled stub listeren the list of name servers is unordered. The solution is to configure the resolv.conf file directly instead of dbus API. Because third-party services also can manipulate the DNS settings the agent watch the resolv.conf file and keep it up to date. - apply file type DNS manager if in the name server list does not exist the 127.0.0.53 address - watching the resolv.conf file with inotify service and overwrite all the time if the configuration has changed and it invalid - fix resolv.conf generation algorithm
2024-01-24 16:47:26 +01:00
github.com/fsnotify/fsnotify v1.6.0
Add basic desktop UI - systray This PR adds a basic UI for desktop applications that support Linux, Max and Windows.
2022-03-20 17:36:35 +01:00
github.com/getlantern/systray v1.2.1
NetBird SSH (#361) This PR adds support for SSH access through the NetBird network without managing SSH skeys. NetBird client app has an embedded SSH server (Linux/Mac only) and a netbird ssh command.
2022-06-23 17:04:53 +02:00
github.com/gliderlabs/ssh v0.3.4
Feature/dns client configuration (#563) Added host configurators for Linux, Windows, and macOS. The host configurator will update the peer system configuration directing DNS queries according to its capabilities. Some Linux distributions don't support split (match) DNS or custom ports, and that will be reported to our management system in another PR
2022-11-23 13:39:42 +01:00
github.com/godbus/dbus/v5 v5.1.0
Feat linux firewall support (#805) Update the client's engine to apply firewall rules received from the manager (results of ACL policy).
2023-05-29 16:00:18 +02:00
github.com/golang/mock v1.6.0
fix linter
2023-03-28 14:54:06 +02:00
github.com/google/go-cmp v0.5.9
Share kernel Wireguard port with raw socket (#826) This PR brings support of a shared port between stun (ICE agent) and the kernel WireGuard It implements a single port mode for execution with kernel WireGuard interface using a raw socket listener. BPF filters ensure that only STUN packets hit the NetBird userspace app Removed a lot of the proxy logic and direct mode exchange. Now we are doing an extra hole punch to the remote WireGuard port for best-effort cases and support to old client's direct mode.
2023-05-03 14:47:44 +02:00
github.com/google/gopacket v1.1.19
Add routing peer support (#441) Handle routes updates from management Manage routing firewall rules Manage peer RIB table Add get peer and get notification channel from the status recorder Update interface peers allowed IPs
2022-09-05 09:06:35 +02:00
github.com/google/nftables v0.0.0-20220808154552-2eca00135732
Add initial support of device posture checks (#1540) This PR implements the following posture checks: * Agent minimum version allowed * OS minimum version allowed * Geo-location based on connection IP For the geo-based location, we rely on GeoLite2 databases which are free IP geolocation databases. MaxMind was tested and we provide a script that easily allows to download of all necessary files, see infrastructure_files/download-geolite2.sh. The OpenAPI spec should extensively cover the life cycle of current version posture checks.
2024-02-20 09:59:56 +01:00
github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.0.2-0.20240212192251-757544f21357
use const and do array copy
2023-03-08 11:54:10 +01:00
github.com/hashicorp/go-secure-stdlib/base62 v0.1.2
Update last run time and active count (#568) * Update last run time and active count We will collect the active peer min and max versions * Get UI client usage
2022-11-18 16:35:13 +01:00
github.com/hashicorp/go-version v1.6.0
Add routing peer support (#441) Handle routes updates from management Manage routing firewall rules Manage peer RIB table Add get peer and get notification channel from the status recorder Update interface peers allowed IPs
2022-09-05 09:06:35 +02:00
github.com/libp2p/go-netroute v0.2.0
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
github.com/magiconair/properties v1.8.5
Fix musl build (#1480) * Update go.mod * Update go.sum
2024-01-18 15:44:33 +01:00
github.com/mattn/go-sqlite3 v1.14.19
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/mdlayher/socket v0.4.1
Feat rego default policy (#700) Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.
2023-03-13 15:14:18 +01:00
github.com/miekg/dns v1.1.43
Store the previous applied dns configuration hash (#628) This prevents changing the system DNS config when there is nothing to new It also prevents issues with network change on google chrome
2022-12-16 17:00:20 +01:00
github.com/mitchellh/hashstructure/v2 v2.0.2
Feat optimize acl performance iptables (#1025) * use ipset for iptables * Update unit-tests for iptables * Remove debug code * Update dependencies * Create separate sets for dPort and sPort rules * Fix iptables tests * Fix 0.0.0.0 processing in iptables with ipset
2023-07-24 13:00:23 +02:00
github.com/nadoo/ipset v0.5.0
Upgrade integrations versions to 8a7c87accb22 (#1482) * Upgrade integrations versions to 8a7c87accb22 * sync go sum
2024-01-18 18:20:59 +01:00
github.com/netbirdio/management-integrations/additions v0.0.0-20240118163419-8a7c87accb22
github.com/netbirdio/management-integrations/integrations v0.0.0-20240118163419-8a7c87accb22
Add Okta IdP (#859)
2023-05-29 14:52:04 +02:00
github.com/okta/okta-sdk-golang/v2 v2.18.0
Add initial support of device posture checks (#1540) This PR implements the following posture checks: * Agent minimum version allowed * OS minimum version allowed * Geo-location based on connection IP For the geo-based location, we rely on GeoLite2 databases which are free IP geolocation databases. MaxMind was tested and we provide a script that easily allows to download of all necessary files, see infrastructure_files/download-geolite2.sh. The OpenAPI spec should extensively cover the life cycle of current version posture checks.
2024-02-20 09:59:56 +01:00
github.com/oschwald/maxminddb-golang v1.12.0
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/patrickmn/go-cache v2.1.0+incompatible
Bind implementation (#779) This PR adds supports for the WireGuard userspace implementation using Bind interface from wireguard-go. The newly introduced ICEBind struct implements Bind with UDPMux-based structs from pion/ice to handle hole punching using ICE. The core implementation was taken from StdBind of wireguard-go. The result is a single WireGuard port that is used for host and server reflexive candidates. Relay candidates are still handled separately and will be integrated in the following PRs. ICEBind checks the incoming packets for being STUN or WireGuard ones and routes them to UDPMux (to handle hole punching) or to WireGuard respectively.
2023-04-13 17:00:01 +02:00
github.com/pion/logging v0.2.2
Update pion v3 (#1398) Update Pion related versions to the latest --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com>
2023-12-20 23:02:42 +01:00
github.com/pion/stun/v2 v2.0.0
github.com/pion/transport/v3 v3.0.1
Tidy up mod (#1492)
2024-01-22 23:05:02 +01:00
github.com/pion/turn/v3 v3.0.1
Feat rego default policy (#700) Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.
2023-03-13 15:14:18 +01:00
github.com/prometheus/client_golang v1.14.0
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
github.com/rs/xid v1.3.0
Add basic desktop UI - systray This PR adds a basic UI for desktop applications that support Linux, Max and Windows.
2022-03-20 17:36:35 +01:00
github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
Update pion v3 (#1398) Update Pion related versions to the latest --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com>
2023-12-20 23:02:42 +01:00
github.com/stretchr/testify v1.8.4
Netstack (#1403) Add netstack support for the agent to run it without privileges. - use interface for tun device - use common IPC for userspace WireGuard integration - move udpmux creation and sharedsock to tun layer
2024-01-03 16:06:20 +01:00
github.com/things-go/go-socks5 v0.0.4
testing windows
2023-06-09 19:17:26 +02:00
github.com/yusufpapurcu/wmi v1.2.3
Extend system meta (#1598) * wip: add posture checks structs * add netbird version check * Refactor posture checks and add version checks * Add posture check activities (#1445) * Integrate Endpoints for Posture Checks (#1432) * wip: add posture checks structs * add netbird version check * Refactor posture checks and add version checks * Implement posture and version checks in API models * Refactor API models and enhance posture check functionality * wip: add posture checks endpoints * go mod tidy * Reference the posture checks by id's in policy * Add posture checks management to server * Add posture checks management mocks * implement posture checks handlers * Add posture checks to account copy and fix tests * Refactor posture checks validation * wip: Add posture checks handler tests * Add JSON encoding support to posture checks * Encode posture checks to correct api response object * Refactored posture checks implementation to align with the new API schema * Refactor structure of `Checks` from slice to map * Cleanup * Add posture check activities (#1445) * Revert map to use list of checks * Add posture check activity events * Refactor posture check initialization in account test * Improve the handling of version range in posture check * Fix tests and linter * Remove max_version from NBVersionCheck * Added unit tests for NBVersionCheck * go mod tidy * Extend policy endpoint with posture checks (#1450) * Implement posture and version checks in API models * go mod tidy * Allow attaching posture checks to policy * Update error message for linked posture check on deleting * Refactor PostureCheck and Checks structures * go mod tidy * Add validation for non-existing posture checks * fix unit tests * use Wt version * Remove the enabled field, as posture check will now automatically be activated by default when attaching to a policy * wip: add posture checks structs * add netbird version check * Refactor posture checks and add version checks * Add posture check activities (#1445) * Integrate Endpoints for Posture Checks (#1432) * wip: add posture checks structs * add netbird version check * Refactor posture checks and add version checks * Implement posture and version checks in API models * Refactor API models and enhance posture check functionality * wip: add posture checks endpoints * go mod tidy * Reference the posture checks by id's in policy * Add posture checks management to server * Add posture checks management mocks * implement posture checks handlers * Add posture checks to account copy and fix tests * Refactor posture checks validation * wip: Add posture checks handler tests * Add JSON encoding support to posture checks * Encode posture checks to correct api response object * Refactored posture checks implementation to align with the new API schema * Refactor structure of `Checks` from slice to map * Cleanup * Add posture check activities (#1445) * Revert map to use list of checks * Add posture check activity events * Refactor posture check initialization in account test * Improve the handling of version range in posture check * Fix tests and linter * Remove max_version from NBVersionCheck * Added unit tests for NBVersionCheck * go mod tidy * Extend policy endpoint with posture checks (#1450) * Implement posture and version checks in API models * go mod tidy * Allow attaching posture checks to policy * Update error message for linked posture check on deleting * Refactor PostureCheck and Checks structures * go mod tidy * Add validation for non-existing posture checks * fix unit tests * use Wt version * Remove the enabled field, as posture check will now automatically be activated by default when attaching to a policy * Extend network map generation with posture checks (#1466) * Apply posture checks to network map generation * run policy posture checks on peers to connect * Refactor and streamline policy posture check process for peers to connect. * Add posture checks testing in a network map * Remove redundant nil check in policy.go * Refactor peer validation check in policy.go * Update 'Check' function signature and use logger for version check * Refactor posture checks run on sources and updated the validation func * Update peer validation * fix tests * improved test coverage for policy posture check * Refactoring * Extend NetBird agent to collect kernel version (#1495) * Add KernelVersion field to LoginRequest * Add KernelVersion to system info retrieval * Fix tests * Remove Core field from system info * Replace Core field with new OSVersion field in system info * Added WMI dependency to info_windows.go * Add OS Version posture checks (#1479) * Initial support of Geolocation service (#1491) * Add Geo Location posture check (#1500) * wip: implement geolocation check * add geo location posture checks to posture api * Merge branch 'feature/posture-checks' into geo-posture-check * Remove CityGeoNameID and update required fields in API * Add geoLocation checks to posture checks handler tests * Implement geo location-based checks for peers * Update test values and embed location struct in peer system * add support for country wide checks * initialize country code regex once * Fix peer meta core compability with older clients (#1515) * Refactor extraction of OSVersion in grpcserver * Ignore lint check * Fix peer meta core compability with older management (#1532) * Revert core field deprecation * fix tests * Extend peer meta with location information (#1517) This PR uses the geolocation service to resolve IP to location. The lookup happens once on the first connection - when a client calls the Sync func. The location is stored as part of the peer: * Add Locations endpoints (#1516) * add locations endpoints * Add sqlite3 check and database generation in geolite script * Add SQLite storage for geolocation data * Refactor file existence check into a separate function * Integrate geolocation services into management application * Refactoring * Refactor city retrieval to include Geonames ID * Add signature verification for GeoLite2 database download * Change to in-memory database for geolocation store * Merge manager to geolocation * Update GetAllCountries to return Country name and iso code * fix tests * Add reload to SqliteStore * Add geoname indexes * move db file check to connectDB * Add concurrency safety to SQL queries and database reloading The commit adds mutex locks to the GetAllCountries and GetCitiesByCountry functions to ensure thread-safety during database queries. Additionally, it introduces a mechanism to safely close the old database connection before a new connection is established upon reloading, which improves the reliability of database operations. Lastly, it moves the checking of database file existence to the connectDB function. * Add sha256 sum check to geolocation store before reload * Use read lock * Check SHA256 twice when reload geonames db --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com> * Add tests and validation for empty peer location in GeoLocationCheck (#1546) * Disallow Geo check creation/update without configured Geo DB (#1548) * Fix shared access to in memory copy of geonames.db (#1550) * Trim suffix in when evaluate Min Kernel Version in OS check * Add Valid Peer Windows Kernel version test * Add Geolocation handler tests (#1556) * Implement user admin checks in posture checks * Add geolocation handler tests * Mark initGeolocationTestData as helper func * Add error handling to geolocation database closure * Add cleanup function to close geolocation resources * Simplify checks definition serialisation (#1555) * Regenerate network map on posture check update (#1563) * change network state and generate map on posture check update * Refactoring * Make city name optional (#1575) * Do not return empty city name * Validate action param of geo location checks (#1577) We only support allow and deny * Switch realip middleware to upstream (#1578) * Be more silent in download-geolite2.sh script * Fix geonames db reload (#1580) * Ensure posture check name uniqueness when create (#1594) * Enhance the management of posture checks (#1595) * add a correct min version and kernel for os posture check example * handle error when geo or location db is nil * expose all peer location details in api response * Check for nil geolocation manager only * Validate posture check before save * bump open api version * add peer location fields to toPeerListItemResponse * Feautre/extend sys meta (#1536) * Collect network addresses * Add Linux sys product info * Fix peer meta comparison * Collect sys info on mac * Add windows sys info * Fix test * Fix test * Fix grpc client * Ignore test * Fix test * Collect IPv6 addresses * Change the IP to IP + net * fix tests * Use netip on server side * Serialize netip to json * Extend Peer metadata with cloud detection (#1552) * add cloud detection + test binary * test windows exe * Collect IPv6 addresses * Change the IP to IP + net * switch to forked cloud detect lib * new test builds * new GCE build * discontinue using library but local copy instead * fix imports * remove openstack check * add hierarchy to cloud check * merge IBM and SoftLayer * close resp bodies and use os lib for file reading * close more resp bodies * fix error check logic * parallelize IBM checks * fix response value * go mod tidy * include context + change kubernetes detection * add context in info functions * extract platform into separate field * fix imports * add missing wmi import --------- Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com> --------- Co-authored-by: pascal-fischer <32096965+pascal-fischer@users.noreply.github.com> * generate proto * remove test binaries --------- Co-authored-by: bcmmbaga <bethuelmbaga12@gmail.com> Co-authored-by: Yury Gargay <yury.gargay@gmail.com> Co-authored-by: Zoltan Papp <zoltan.pmail@gmail.com>
2024-02-20 11:53:11 +01:00
github.com/zcalusic/sysinfo v1.0.2
Measure write requests separately from read requests (#880)
2023-05-19 16:56:15 +02:00
go.opentelemetry.io/otel v1.11.1
Add Open-telemetry support (#517) This PR brings open-telemetry metrics to the Management service. The Management service exposes new HTTP endpoint /metrics on 8081 port by default. The port can be changed by specifying --metrics-port PORT flag when starting the service.
2022-10-21 16:24:13 +02:00
go.opentelemetry.io/otel/exporters/prometheus v0.33.0
go.opentelemetry.io/otel/metric v0.33.0
go.opentelemetry.io/otel/sdk/metric v0.33.0
Add Authentik IdP (#897)
2023-05-29 14:35:30 +02:00
goauthentik.io/api/v3 v3.2023051.3
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
golang.org/x/exp v0.0.0-20230725093048-515e97ebf090
Import go mobile bind at the android package level (#935)
2023-06-05 17:28:13 +02:00
golang.org/x/mobile v0.0.0-20190719004257-d2bd2a29d028
Bump golang.org/x/net from 0.10.0 to 0.17.0 (#1214) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.10.0 to 0.17.0. - [Commits](https://github.com/golang/net/compare/v0.10.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-25 00:23:07 +02:00
golang.org/x/net v0.17.0
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
golang.org/x/oauth2 v0.8.0
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
golang.org/x/sync v0.3.0
Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#1401) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0. - [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-18 16:02:08 +01:00
golang.org/x/term v0.15.0
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
google.golang.org/api v0.126.0
clean go.mod
2023-02-27 11:33:12 +01:00
gopkg.in/yaml.v3 v3.0.1
Implement SQLite Store using gorm and relational approach (#1065) Restructure data handling for improved performance and flexibility. Introduce 'G'-prefixed fields to represent Gorm relations, simplifying resource management. Eliminate complexity in lookup tables for enhanced query and write speed. Enable independent operations on data structures, requiring adjustments in the Store interface and Account Manager.
2023-10-12 15:42:36 +02:00
gorm.io/driver/sqlite v1.5.3
gorm.io/gorm v1.25.4
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
)
Refactor: support multiple users under the same account (#170) * feature: add User entity to Account * test: new file store creation test * test: add FileStore persist-restore tests * test: add GetOrCreateAccountByUser Accountmanager test * refactor: rename account manager users file * refactor: use userId instead of accountId when handling Management HTTP API * fix: new account creation for every request * fix: golint * chore: add account creator to Account Entity to identify who created the account. * chore: use xid ID generator for account IDs * fix: test failures * test: check that CreatedBy is stored when account is stored * chore: add account copy method * test: remove test for non existent GetOrCreateAccount func * chore: add accounts conversion function * fix: golint * refactor: simplify admin user creation * refactor: move migration script to a separate package
2021-12-27 13:17:15 +01:00
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
require (
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
cloud.google.com/go/compute v1.19.3 // indirect
cloud.google.com/go/compute/metadata v0.2.3 // indirect
Use forked Wireguard-go for custom bind (#823) Update go version to 1.20 Use forked wireguard-go repo because of custom Bind implementation
2023-04-27 17:50:45 +02:00
github.com/BurntSushi/toml v1.2.1 // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/XiaoMi/pegasus-go-client v0.0.0-20210427083443-f3b6b08bc4c2 // indirect
NetBird SSH (#361) This PR adds support for SSH access through the NetBird network without managing SSH skeys. NetBird client app has an embedded SSH server (Linux/Mac only) and a netbird ssh command.
2022-06-23 17:04:53 +02:00
github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/beorn7/perks v1.0.1 // indirect
github.com/bradfitz/gomemcache v0.0.0-20220106215444-fb4bf637b56d // indirect
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
github.com/davecgh/go-spew v1.1.1 // indirect
Feat linux firewall support (#805) Update the client's engine to apply firewall rules received from the manager (results of ACL policy).
2023-05-29 16:00:18 +02:00
github.com/dgraph-io/ristretto v0.1.1 // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
Add Settings window to Agent UI Agent systray UI has been extended with a setting window that allows configuring management URL, admin URL and supports pre-shared key. While for the Netbird managed version the Settings are not necessary, it helps to properly configure the self-hosted version.
2022-04-15 17:30:12 +02:00
github.com/fredbi/uri v0.0.0-20181227131451-3dcfdacbaaf3 // indirect
Add basic desktop UI - systray This PR adds a basic UI for desktop applications that support Linux, Max and Windows.
2022-03-20 17:36:35 +01:00
github.com/getlantern/context v0.0.0-20190109183933-c447772a6520 // indirect
github.com/getlantern/errors v0.0.0-20190325191628-abdb3e3e36f7 // indirect
github.com/getlantern/golog v0.0.0-20190830074920-4ef2e798c2d7 // indirect
github.com/getlantern/hex v0.0.0-20190417191902-c6586a6fe0b7 // indirect
github.com/getlantern/hidden v0.0.0-20190325191715-f02dbb02be55 // indirect
github.com/getlantern/ops v0.0.0-20190325191751-d70cb0d6f85f // indirect
Add Settings window to Agent UI Agent systray UI has been extended with a setting window that allows configuring management URL, admin URL and supports pre-shared key. While for the Netbird managed version the Settings are not necessary, it helps to properly configure the self-hosted version.
2022-04-15 17:30:12 +02:00
github.com/go-gl/gl v0.0.0-20210813123233-e4099ee2221f // indirect
github.com/go-gl/glfw/v3.3/glfw v0.0.0-20211024062804-40e447a793be // indirect
Add Open-telemetry support (#517) This PR brings open-telemetry metrics to the Management service. The Management service exposes new HTTP endpoint /metrics on 8081 port by default. The port can be changed by specifying --metrics-port PORT flag when starting the service.
2022-10-21 16:24:13 +02:00
github.com/go-logr/logr v1.2.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
testing windows
2023-06-09 19:15:39 +02:00
github.com/go-ole/go-ole v1.2.6 // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/go-redis/redis/v8 v8.11.5 // indirect
Add basic desktop UI - systray This PR adds a basic UI for desktop applications that support Linux, Max and Windows.
2022-03-20 17:36:35 +01:00
github.com/go-stack/stack v1.8.0 // indirect
Add Settings window to Agent UI Agent systray UI has been extended with a setting window that allows configuring management URL, admin URL and supports pre-shared key. While for the Netbird managed version the Settings are not necessary, it helps to properly configure the self-hosted version.
2022-04-15 17:30:12 +02:00
github.com/goki/freetype v0.0.0-20181231101311-fa8a33aabaff // indirect
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
Netstack (#1403) Add netstack support for the agent to run it without privileges. - use interface for tun device - use common IPC for userspace WireGuard integration - move udpmux creation and sharedsock to tun layer
2024-01-03 16:06:20 +01:00
github.com/google/btree v1.0.1 // indirect
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
github.com/google/s2a-go v0.1.4 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect
github.com/googleapis/gax-go/v2 v2.10.0 // indirect
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/gopacket/gopacket v1.1.1 // indirect
use const and do array copy
2023-03-08 11:54:10 +01:00
github.com/hashicorp/go-uuid v1.0.2 // indirect
Adding --external-ip-map and --dns-resolver-address and shorthand flags (#652) Adding --external-ip-map and --dns-resolver-address to up command and shorthand option to global flags. Refactor get and read config functions with new ConfigInput type. updated cobra package to latest release.
2023-01-17 19:16:50 +01:00
github.com/inconshreveable/mousetrap v1.1.0 // indirect
Implement SQLite Store using gorm and relational approach (#1065) Restructure data handling for improved performance and flexibility. Introduce 'G'-prefixed fields to represent Gorm relations, simplifying resource management. Eliminate complexity in lookup tables for enhanced query and write speed. Enable independent operations on data structures, requiring adjustments in the Store interface and Account Manager.
2023-10-12 15:42:36 +02:00
github.com/jinzhu/inflection v1.0.0 // indirect
github.com/jinzhu/now v1.1.5 // indirect
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/josharian/native v1.1.0 // indirect
Add Okta IdP (#859)
2023-05-29 14:52:04 +02:00
github.com/kelseyhightower/envconfig v1.4.0 // indirect
Feat rego default policy (#700) Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.
2023-03-13 15:14:18 +01:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
github.com/mdlayher/genetlink v1.3.2 // indirect
github.com/mdlayher/netlink v1.7.2 // indirect
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
github.com/nxadm/tail v1.4.8 // indirect
Add basic desktop UI - systray This PR adds a basic UI for desktop applications that support Linux, Max and Windows.
2022-03-20 17:36:35 +01:00
github.com/oxtoacart/bpool v0.0.0-20190530202638-03653db5a59c // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/pegasus-kv/thrift v0.13.0 // indirect
Update pion v3 (#1398) Update Pion related versions to the latest --------- Co-authored-by: Yury Gargay <yury.gargay@gmail.com>
2023-12-20 23:02:42 +01:00
github.com/pion/dtls/v2 v2.2.7 // indirect
github.com/pion/mdns v0.0.9 // indirect
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
github.com/pion/randutil v0.1.0 // indirect
Netstack (#1403) Add netstack support for the agent to run it without privileges. - use interface for tun device - use common IPC for userspace WireGuard integration - move udpmux creation and sharedsock to tun layer
2024-01-03 16:06:20 +01:00
github.com/pion/transport/v2 v2.2.1 // indirect
Test conn (#199) * test: add conn tests * test: add ConnStatus tests * test: add error test * test: add more conn tests
2022-01-21 13:52:19 +01:00
github.com/pmezard/go-difflib v1.0.0 // indirect
Feat rego default policy (#700) Converts rules to Rego policies and allow users to write raw policies to set up connectivity and firewall on the clients.
2023-03-13 15:14:18 +01:00
github.com/prometheus/client_model v0.3.0 // indirect
Add Open-telemetry support (#517) This PR brings open-telemetry metrics to the Management service. The Management service exposes new HTTP endpoint /metrics on 8081 port by default. The port can be changed by specifying --metrics-port PORT flag when starting the service.
2022-10-21 16:24:13 +02:00
github.com/prometheus/common v0.37.0 // indirect
github.com/prometheus/procfs v0.8.0 // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
github.com/spf13/cast v1.5.0 // indirect
Add Settings window to Agent UI Agent systray UI has been extended with a setting window that allows configuring management URL, admin URL and supports pre-shared key. While for the Netbird managed version the Settings are not necessary, it helps to properly configure the self-hosted version.
2022-04-15 17:30:12 +02:00
github.com/srwiley/oksvg v0.0.0-20200311192757-870daf9aa564 // indirect
github.com/srwiley/rasterx v0.0.0-20200120212402-85cb7272f5e9 // indirect
Use forked Wireguard-go for custom bind (#823) Update go version to 1.20 Use forked wireguard-go repo because of custom Bind implementation
2023-04-27 17:50:45 +02:00
github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 // indirect
Update pion/ICE and its dependencies (#703) Among other improvements, it fixes a memory leak with srfx conn channels not being closed it also make use of new pion/transport Net interface https://github.com/pion/ice/pull/471
2023-02-24 19:30:23 +01:00
github.com/yuin/goldmark v1.4.13 // indirect
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
go.opencensus.io v0.24.0 // indirect
Add Open-telemetry support (#517) This PR brings open-telemetry metrics to the Management service. The Management service exposes new HTTP endpoint /metrics on 8081 port by default. The port can be changed by specifying --metrics-port PORT flag when starting the service.
2022-10-21 16:24:13 +02:00
go.opentelemetry.io/otel/sdk v1.11.1 // indirect
go.opentelemetry.io/otel/trace v1.11.1 // indirect
Bump golang.org/x/image from 0.5.0 to 0.10.0 (#1285) Bumps [golang.org/x/image](https://github.com/golang/image) from 0.5.0 to 0.10.0. - [Commits](https://github.com/golang/image/compare/v0.5.0...v0.10.0) --- updated-dependencies: - dependency-name: golang.org/x/image dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-03 14:45:35 +01:00
golang.org/x/image v0.10.0 // indirect
Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#1401) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0. - [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-18 16:02:08 +01:00
golang.org/x/text v0.14.0 // indirect
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
golang.org/x/time v0.0.0-20220210224613-90d013bbcef8 // indirect
Use forked Wireguard-go for custom bind (#823) Update go version to 1.20 Use forked wireguard-go repo because of custom Bind implementation
2023-04-27 17:50:45 +02:00
golang.zx2c4.com/wintun v0.0.0-20230126152724-0fa3db229ce2 // indirect
Add Authentik IdP (#897)
2023-05-29 14:35:30 +02:00
google.golang.org/appengine v1.6.7 // indirect
Add Google Workspace IdP (#949) Added integration with Google Workspace user directory API.
2023-06-20 19:15:36 +02:00
google.golang.org/genproto/googleapis/rpc v0.0.0-20230530153820-e85fd2cbaebc // indirect
Feat linux firewall support (#805) Update the client's engine to apply firewall rules received from the manager (results of ACL policy).
2023-05-29 16:00:18 +02:00
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect
Add Okta IdP (#859)
2023-05-29 14:52:04 +02:00
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 // indirect
Add caching when querying IDP Manager (#353)
2022-06-05 21:36:42 +02:00
gopkg.in/tomb.v2 v2.0.0-20161208151619-d5d1b5820637 // indirect
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
gopkg.in/yaml.v2 v2.4.0 // indirect
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
gvisor.dev/gvisor v0.0.0-20230927004350-cbd86285d259 // indirect
k8s.io/apimachinery v0.23.16 // indirect
update to go 1.17 (#167) * chore: update to go 1.17 * fix: update workflows go version * fix: golint errors/update grpc
2021-12-21 10:02:25 +01:00
)
single socket ice (#232) Enables single socket for HOST and SRFLX candidates by utilizing pion.ice UDPMux
2022-02-16 20:00:21 +01:00
Update service pkg with log directory fix (#692) This service pkg update includes directory check and creation
2023-02-16 18:04:14 +01:00
replace github.com/kardianos/service => github.com/netbirdio/service v0.0.0-20230215170314-b923b89432b0
Seticon only when status changes (#504) * Seticon only when status changes This prevents a memory leak with the systray lib when setting the icon every 2 seconds causes a large memory consumption see https://github.com/getlantern/systray/issues/135 * Use fork with permanent fix
2022-10-12 12:25:06 +02:00
Fix black icon background on Win (#1269) Fix the black icon background on Windows. Update to the patched systray library.
2023-11-03 13:05:07 +01:00
replace github.com/getlantern/systray => github.com/netbirdio/systray v0.0.0-20231030152038-ef1ed2a27949
Use forked Wireguard-go for custom bind (#823) Update go version to 1.20 Use forked wireguard-go repo because of custom Bind implementation
2023-04-27 17:50:45 +02:00
Integrate Rosenpass (#1153) This PR aims to integrate Rosenpass with NetBird. It adds a manager for Rosenpass that starts a Rosenpass server and handles the managed peers. It uses the cunicu/go-rosenpass implementation. Rosenpass will then negotiate a pre-shared key every 2 minutes and apply it to the wireguard connection. The Feature can be enabled by setting a flag during the netbird up --enable-rosenpass command. If two peers are both support and have the Rosenpass feature enabled they will create a post-quantum secure connection. If one of the peers or both don't have this feature enabled or are running an older version that does not have this feature yet, the NetBird client will fall back to a plain Wireguard connection without pre-shared keys for those connections (keeping Rosenpass negotiation for the rest). Additionally, this PR includes an update of all Github Actions workflows to use go version 1.21.0 as this is a requirement for the integration. --------- Co-authored-by: braginini <bangvalo@gmail.com> Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
2024-01-08 12:25:35 +01:00
replace golang.zx2c4.com/wireguard => github.com/netbirdio/wireguard-go v0.0.0-20240105182236-6c340dd55aed
replace github.com/cloudflare/circl => github.com/cunicu/circl v0.0.0-20230801113412-fec58fc7b5f6
Reference in New Issue Copy Permalink