netbird/management/server
Yury Gargay 9bc7b9e897
Add initial support of device posture checks (#1540)
This PR implements the following posture checks:

* Agent minimum version allowed
* OS minimum version allowed
* Geo-location based on connection IP

For the geo-based location, we rely on GeoLite2 databases which are free IP geolocation databases. MaxMind was tested and we provide a script that easily allows to download of all necessary files, see infrastructure_files/download-geolite2.sh.

The OpenAPI spec should extensively cover the life cycle of current version posture checks.
2024-02-20 09:59:56 +01:00
..
account extract account into separate package 2023-11-28 14:34:57 +01:00
activity Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
geolocation Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
http Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
idp add owner role support (#1340) 2023-12-01 17:24:57 +01:00
jwtclaims Fix jwks validation and flag/config overriding (#1380) 2023-12-12 14:56:27 +01:00
metrics Merge branch 'main' into feature/peer-approval 2023-12-04 17:34:53 +01:00
mock_server Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
peer Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
posture Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
status Move Login business logic from gRPC API to Accountmanager (#713) 2023-03-03 18:35:38 +01:00
telemetry Implement lightweight method to check is peer has update channel (#1351) 2023-12-05 14:17:56 +01:00
testdata Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
account_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
account.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
config.go Expose trusted proxy list and counter configuration for realip middleware (#1535) 2024-02-08 14:40:40 +01:00
dns_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
dns.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
ephemeral_test.go extract peer into seperate package 2023-11-28 13:45:26 +01:00
ephemeral.go extract peer into seperate package 2023-11-28 13:45:26 +01:00
event_test.go Extend linter rules (#1300) 2023-11-10 16:33:13 +01:00
event.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
file_store_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
file_store.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
group_test.go add owner role support (#1340) 2023-12-01 17:24:57 +01:00
group.go Return error when peer is not valid (#1573) 2024-02-13 10:59:31 +01:00
grpcserver.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
management_proto_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
management_suite_test.go Move management server to a separate directory (#67) 2021-07-24 16:14:29 +02:00
management_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
nameserver_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
nameserver.go Allow adding 3 nameserver addresses (#1588) 2024-02-19 14:29:20 +01:00
network_test.go Exclude second last IP from allocation to use it in the Fake DNS (#912) 2023-05-30 18:26:44 +04:00
network.go Merge branch 'main' into feature/peer-approval 2023-11-29 16:27:01 +01:00
peer_test.go extract peer into seperate package 2023-11-28 13:45:26 +01:00
peer.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
personal_access_token_test.go move into separate package 2023-05-16 12:57:56 +02:00
personal_access_token.go Implement SQLite Store using gorm and relational approach (#1065) 2023-10-12 15:42:36 +02:00
policy_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
policy.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
posture_checks_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
posture_checks.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
route_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
route.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
rule.go Implement SQLite Store using gorm and relational approach (#1065) 2023-10-12 15:42:36 +02:00
scheduler_test.go Proactively expire peers' login per account (#698) 2023-02-27 16:44:26 +01:00
scheduler.go Proactively expire peers' login per account (#698) 2023-02-27 16:44:26 +01:00
setupkey_test.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
setupkey.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
sqlite_store_test.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
sqlite_store.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
store_test.go Extend linter rules (#1300) 2023-11-10 16:33:13 +01:00
store.go Add initial support of device posture checks (#1540) 2024-02-20 09:59:56 +01:00
turncredentials_test.go Add metrics for PeersUpdateManager (#1310) 2023-11-16 18:21:52 +01:00
turncredentials.go Reorder peer deletion when deleteing a user (#1191) 2023-10-03 16:46:58 +02:00
updatechannel_test.go Add metrics for PeersUpdateManager (#1310) 2023-11-16 18:21:52 +01:00
updatechannel.go Implement lightweight method to check is peer has update channel (#1351) 2023-12-05 14:17:56 +01:00
user_test.go Allow service users with user role read-only access to all resources (#1484) 2024-01-25 09:50:27 +01:00
user.go Get cache from external cache when refresh fails (#1537) 2024-02-07 16:14:30 +01:00