adf494e1ac
[management] fix a bug with missed extra dns labels for a new peer ( #3798 )
2025-05-14 17:50:21 +02:00
2158461121
[management,client] PKCE add flag parameter prompt=login or max_age ( #3824 )
2025-05-14 17:48:51 +02:00
0cd4b601c3
[management] Add connection type filter to Network Traffic API ( #3815 )
2025-05-14 11:15:50 +03:00
fcd2c15a37
[management] policy delete cleans policy rules ( #3788 )
2025-05-07 07:25:25 +02:00
ebda0fc538
[management] Delete service users with account manager ( #3793 )
2025-05-06 17:31:03 +02:00
25faf9283d
[management] removal of foreign key constraint enforcement on sqlite ( #3786 )
2025-05-05 18:21:48 +02:00
055df9854c
[management] add gorm tag for primary key for the networks objects ( #3758 )
2025-05-04 20:58:04 +02:00
12f883badf
[management] Optimize load account ( #3774 )
2025-05-02 00:59:41 +02:00
2abb92b0d4
[management] Get account id with order ( #3773 )
...
updated log to display account id
2025-05-02 00:25:46 +02:00
7b64953eed
[management] user info with role permissions ( #3728 )
2025-05-01 11:24:55 +01:00
b5419ef11a
[management] limit peers based on module read permission ( #3757 )
2025-04-30 15:53:18 +01:00
488e619ec7
[management] Add network traffic events pagination ( #3580 )
...
* Add network traffic events pagination schema
2025-04-30 11:51:40 +03:00
d8dc107bee
[management] Skip IdP cache warm-up on Redis if data exists ( #3733 )
...
* Add Redis cache check to skip warm-up on startup if cache is already populated
* Refactor Redis test container setup for reusability
2025-04-28 15:10:40 +03:00
47c3afe561
[management] add missing network admin mapping ( #3751 )
2025-04-28 11:05:27 +01:00
38ada44a0e
[management] allow impersonation via pats ( #3739 )
2025-04-25 16:40:54 +02:00
dbf81a145e
[management] network admin role ( #3720 )
2025-04-25 15:14:32 +01:00
39483f8ca8
[management] Auditor role ( #3721 )
2025-04-25 15:04:25 +01:00
4a9049566a
[client] Set up firewall rules for dns routes dynamically based on dns response ( #3702 )
2025-04-24 17:37:28 +02:00
400b9fca32
[management] Add firewall rule route ID and missing route domains ( #3700 )
2025-04-23 21:29:46 +02:00
312bfd9bd7
[management] support custom domains per account ( #3726 )
2025-04-23 19:36:53 +02:00
c69df13515
[management] Add account meta ( #3724 )
2025-04-23 18:44:22 +02:00
986eb8c1e0
[management] fix lastLogin on dashboard ( #3725 )
2025-04-23 15:54:49 +02:00
1a6d6b3109
[management] fix github run id ( #3705 )
2025-04-18 11:21:54 +02:00
a4311f574d
[management] push benchmark results to grafana ( #3701 )
2025-04-17 21:01:23 +02:00
e0b33d325d
[management] permissions manager use crud operations ( #3690 )
2025-04-16 17:25:03 +02:00
75bdd47dfb
[management] get current user endpoint ( #3666 )
2025-04-15 11:06:07 +01:00
4134b857b4
[management] add permissions manager to geolocation handler ( #3665 )
2025-04-14 17:57:58 +01:00
7839d2c169
[management] Refactor/management/updchannel ( #3645 )
...
* refactoring updatechannel - use read mutex for send update
2025-04-11 18:22:59 +03:00
b9f82e2f8a
[management] Buffer updateAccountPeers calls ( #3644 )
2025-04-11 17:21:05 +02:00
fd2a21c65d
[management] remove unnecessary access control middleware ( #3650 )
2025-04-11 10:43:59 +01:00
82d982b0ab
[management,client] Add support to configurable prompt login ( #3660 )
2025-04-11 11:34:55 +02:00
5ea2806663
[management] use permission modules ( #3622 )
2025-04-10 11:06:52 +02:00
09243a0fe0
[management] Remove remaining backend linux router limitation ( #3589 )
2025-04-01 21:29:57 +02:00
cbec7bda80
[management] permission manager validate account access ( #3444 )
2025-03-30 17:08:22 +02:00
50f5cc48cd
[management] Fix extended config when nil ( #3593 )
...
* Fix extended config when nil
* update integrations
2025-03-27 23:07:10 +01:00
a4f04f5570
[management] fix extend call and move config to types ( #3575 )
...
This PR fixes configuration inconsistencies and updates the store engine type usage throughout the management code. Key changes include:
- Replacing outdated server.Config references with types.Config and updating related flag variables (e.g. types.MgmtConfigPath).
- Converting engine constants (SqliteStoreEngine, PostgresStoreEngine, MysqlStoreEngine) to use types.Engine for consistent type–safety.
- Adjusting various test and migration code paths to correctly reference the new configuration and engine types.
2025-03-27 13:04:50 +01:00
34d86c5ab8
[management] Sync account peers on network router group changes ( #3573 )
...
- Updates account peers when a group linked to a network router is modified
- Prevents group deletion if it's still being used by any network router
2025-03-27 12:19:22 +01:00
9cbcf7531f
[management] Fix invalid port range sync ( #3571 )
...
We should not send port range when a port is set or when protocol is all or icmp
2025-03-24 00:56:51 +01:00
bd8f0c1ef3
[client] add profiling dumps to debug package ( #3517 )
...
enhances debugging capabilities by adding support for goroutine, mutex, and block profiling while updating state dump tracking and refining test and release settings.
- Adds pprof-based profiling for goroutine, mutex, and block profiles in the debug bundle.
- Updates state dump functionality by incorporating new status and key fields.
- Adjusts test validations and default flag/retention settings.
2025-03-23 13:46:09 +01:00
f081435a56
[management] add log when using redis cache ( #3562 )
2025-03-21 18:16:27 +01:00
b62a1b56ce
[docs] rename network traffic logging to traffic events ( #3556 )
2025-03-21 16:32:47 +01:00
8d7c92c661
[management] add receive timestamp to traffic event ( #3559 )
2025-03-21 16:31:23 +01:00
8f0aa8352a
[docs] add examples to events and tag to ingress port ( #3552 )
2025-03-20 18:26:08 +01:00
c02e236196
[client,management] add netflow support to client and update management ( #3414 )
...
adds NetFlow functionality to track and log network traffic information between peers, with features including:
- Flow logging for TCP, UDP, and ICMP traffic
- Integration with connection tracking system
- Resource ID tracking in NetFlow events
- DNS and exit node collection configuration
- Flow API and Redis cache in management
- Memory-based flow storage implementation
- Kernel conntrack counters and userspace counters
- TCP state machine improvements for more accurate tracking
- Migration from net.IP to netip.Addr in the userspace firewall
2025-03-20 17:05:48 +01:00
f51e0b59bd
[management] Posture checks handle suffixes like "-dev" in netbird version ( #3511 )
2025-03-20 16:28:39 +01:00
919fe94fd5
Fix always enabling of NetworkResource in createResource() ( #3532 )
2025-03-18 19:41:15 +01:00
67ae871ce4
[management] return empty array instead of null on networks endpoints ( #3480 )
2025-03-11 00:20:54 +01:00
fc1da94520
[client, management] Add port forwarding ( #3275 )
...
Add initial support to ingress ports on the client code.
- new types where added
- new protocol messages and controller
2025-03-09 16:06:43 +01:00
53b9a2002f
Print out the goroutine id ( #3433 )
...
The TXT logger prints out the actual go routine ID
This feature depends on 'loggoroutine' build tag
```go build -tags loggoroutine```
2025-03-07 14:06:47 +01:00
82c12cc8ae
[management] Handle transaction error on peer deletion ( #3387 )
...
Signed-off-by: bcmmbaga <bethuelmbaga12@gmail.com >
2025-02-25 19:57:04 +00:00