braginini
3b3aa18148
Store setup keys and ns groups in a batch
2024-04-17 18:32:13 +02:00
braginini
93045f3e3a
Fix rand lint issue
2024-04-17 18:07:02 +02:00
braginini
fd3c1dea8e
Add save large account test
2024-04-17 18:02:10 +02:00
braginini
48aff7a26e
Fix test compilation errors
2024-04-17 17:39:28 +02:00
braginini
83dfe8e3a3
Fix test compilation errors
2024-04-17 17:27:23 +02:00
braginini
38e10af2d9
Add accountID reference
2024-04-17 17:16:56 +02:00
braginini
99854a126a
Add comments
2024-04-17 17:08:01 +02:00
braginini
a75f982fcd
Copy account when storing to avoid reference issues
2024-04-17 17:03:21 +02:00
braginini
e7a6483912
Optimize all other objects storing in SQLite
2024-04-17 12:35:41 +02:00
braginini
30ede299b8
Optimize peer storing in SQLite
2024-04-17 11:50:33 +02:00
Viktor Liu
e3b76448f3
Fix ICE endpoint remote port in status command ( #1851 )
2024-04-16 14:01:59 +02:00
Viktor Liu
e0de86d6c9
Use fixed activity codes ( #1846 )
...
* Add duplicate constants check
2024-04-15 14:15:46 +02:00
Zoltan Papp
5204d07811
Pass integrated validator for API ( #1814 )
...
Pass integrated validator for API handler
2024-04-15 12:08:38 +02:00
Viktor Liu
5ea24ba56e
Add sysctl opts to prevent reverse path filtering from dropping fwmark packets ( #1839 )
2024-04-12 17:53:07 +02:00
Viktor Liu
d30cf8706a
Allow disabling custom routing ( #1840 )
2024-04-12 16:53:11 +02:00
Viktor Liu
15a2feb723
Use fixed preference for rules ( #1836 )
2024-04-12 16:07:03 +02:00
Viktor Liu
91b2f9fc51
Use route active store ( #1834 )
2024-04-12 15:22:40 +02:00
Carlos Hernandez
76702c8a09
Add safe read/write to route map ( #1760 )
2024-04-11 22:12:23 +02:00
Viktor Liu
061f673a4f
Don't use the custom dialer as non-root ( #1823 )
2024-04-11 15:29:03 +02:00
Zoltan Papp
9505805313
Rename variable ( #1829 )
2024-04-11 14:08:03 +02:00
Maycon Santos
704c67dec8
Allow owners that did not create the account to delete it ( #1825 )
...
Sometimes the Owner role will be passed to new users, and they need to be able to delete the account
2024-04-11 10:02:51 +02:00
pascal-fischer
3ed2f08f3c
Add latency based routing ( #1732 )
...
Now that we have the latency between peers available we can use this data to consider when choosing the best route. This way the route with the routing peer with the lower latency will be preferred over others with the same target network.
2024-04-09 21:20:02 +02:00
Maycon Santos
4c83408f27
Add log-level to the management's docker service command ( #1820 )
2024-04-09 21:00:43 +02:00
Viktor Liu
90bd39c740
Log panics ( #1818 )
2024-04-09 20:27:27 +02:00
Maycon Santos
dd0cf41147
Auto restart Windows agent daemon service ( #1819 )
...
This enables auto restart of the windows agent daemon service on event of failure
2024-04-09 20:10:59 +02:00
pascal-fischer
22b2caffc6
Remove dns based cloud detection ( #1812 )
...
* remove dns based cloud checks
* remove dns based cloud checks
2024-04-09 19:01:31 +02:00
Viktor Liu
c1f66d1354
Retry macOS route command ( #1817 )
2024-04-09 15:27:19 +02:00
Viktor Liu
ac0fe6025b
Fix routing issues with MacOS ( #1815 )
...
* Handle zones properly
* Use host routes for single IPs
* Add GOOS and GOARCH to startup log
* Log powershell command
2024-04-09 13:25:14 +02:00
verytrap
c28657710a
Fix function names in comments ( #1816 )
...
Signed-off-by: verytrap <wangqiuyue@outlook.com >
2024-04-09 13:18:38 +02:00
Maycon Santos
3875c29f6b
Revert "Rollback new routing functionality ( #1805 )" ( #1813 )
...
This reverts commit 9f32ccd453
2024-04-08 18:56:52 +02:00
Viktor Liu
9f32ccd453
Rollback new routing functionality ( #1805 )
2024-04-05 20:38:49 +02:00
trax
1d1d057e7d
Change the dashboard image pull from wiretrustee to netbirdio ( #1804 )
2024-04-05 13:51:28 +02:00
Viktor Liu
3461b1bb90
Expect correct conn type ( #1801 )
2024-04-05 00:10:32 +02:00
Viktor Liu
3d2a2377c6
Don't return errors on disallowed routes ( #1792 )
2024-04-03 19:06:04 +02:00
Viktor Liu
25f5f26527
Timeout rule removing loop and catch IPv6 unsupported error in loop ( #1791 )
2024-04-03 18:57:50 +02:00
Viktor Liu
bb0d5c5baf
Linux legacy routing ( #1774 )
...
* Add Linux legacy routing if ip rule functionality is not available
* Ignore exclusion route errors if host has no route
* Exclude iOS from route manager
* Also retrieve IPv6 routes
* Ignore loopback addresses not being in the main table
* Ignore "not supported" errors on cleanup
* Fix regression in ListenUDP not using fwmarks
2024-04-03 18:04:22 +02:00
Viktor Liu
7938295190
Feature/exit nodes - Windows and macOS support ( #1726 )
2024-04-03 11:11:46 +02:00
rqi14
9af532fe71
Get scope from endpoint url instead of hardcoding ( #1770 )
2024-04-02 13:43:57 +02:00
Vilian Gerdzhikov
23a1473797
Fix grammar in readme ( #1778 )
2024-04-02 10:08:58 +02:00
Misha Bragin
9c2dc05df1
Eval/higher timeouts ( #1776 )
2024-03-31 19:39:52 +02:00
Misha Bragin
40d56e5d29
Update network security image ( #1765 )
2024-03-28 18:43:32 +01:00
Viktor Liu
fd23d0c28f
Don't block on failed routing setup ( #1768 )
2024-03-28 18:12:25 +01:00
Viktor Liu
4fff93a1f2
Ignore unsupported address families ( #1766 )
2024-03-28 13:06:54 +01:00
Misha Bragin
22beac1b1b
Fix invalid token due to the cache race ( #1763 )
2024-03-28 12:33:56 +01:00
Jeremy Wu
bd7a65d798
support to configure extra blacklist of iface in "up" command ( #1734 )
...
Support to configure extra blacklist of iface in "up" command
2024-03-28 09:56:41 +01:00
Zoltan Papp
2d76b058fc
Feature/peer validator ( #1553 )
...
Follow up management-integrations changes
move groups to separated packages to avoid circle dependencies
save location information in Login action
2024-03-27 18:48:48 +01:00
pascal-fischer
ea2d060f93
Add limited dashboard view ( #1738 )
2024-03-27 16:11:45 +01:00
Zoltan Papp
68b377a28c
Collect chassis.serial ( #1748 )
2024-03-26 15:33:01 +01:00
pascal-fischer
af50eb350f
Change log level for JWT override message of single account mode ( #1747 )
2024-03-25 14:25:26 +01:00
Viktor Liu
2475473227
Support client default routes for Linux ( #1667 )
...
All routes are now installed in a custom netbird routing table.
Management and wireguard traffic is now marked with a custom fwmark.
When the mark is present the traffic is routed via the main routing table, bypassing the VPN.
When the mark is absent the traffic is routed via the netbird routing table, if:
- there's no match in the main routing table
- it would match the default route in the routing table
IPv6 traffic is blocked when a default route IPv4 route is configured to avoid leakage.
2024-03-21 16:49:28 +01:00
