Commit graph

120 commits

Author SHA1 Message Date
Abhishek K
3d765f9cf1
NET-1910: Acl controls for Egress Traffic (#3377)
* add support for egress ranges on acl policy

* add egress ranges to acl rules

* add egress ranges to acl policies

* Add egress ranges to acl rules

* add egress ranges to fw update

* fetch acl rules for egress networks

* apply egress policies for devices

* configure user policies for egresss routes

* fix gw tag name migration

* fix egress acl rules for static nodes

* add egress ranges for static nodes on ingress gw

* fileter acl IPs to be unique

* cleanup IOT logic from peer update

* make acl Rule Dst List

* cleanup egress ranges from acl policies

* create user group default acl policy for gateways

* remove remote access name ids

* rm egress ranges removal from acl policies

* simplify user permissions on nodes

* add additional nameservers to extclient dns

* remove debug logs

* fix static checks
2025-03-18 13:25:55 +04:00
abhishek9686
f3fd10326f migrate remote access gw tags 2025-03-11 00:50:44 +04:00
abhishek9686
b45a926649 optimise static node rules, fix traffic flows for static nodes 2025-03-05 14:26:35 +04:00
abhishek9686
e50da805d4 Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1911 2025-02-24 08:53:49 +03:00
Aceix
f46030e40f
fix: add user group struct to get user response (#3336)
* fix: add user group struct to user response

* fix: set auto-created network groups as default
2025-02-24 08:17:55 +03:00
abhishek9686
41fa0b1bce resolve merge conflicts 2025-02-14 18:24:56 +04:00
Abhishek K
689b9b6b52
NET-1941: failover signaling optimized, new endpoint for metrics peer info (#3322)
* optimise acl cache with network map

* fix mutex clash

* fix acl mutex

* add new endpoint for metrics peer info

* fix static check

* add new endpoint for metrics peer info

* fix host peer info api params

* cache failover data

* add json tag

* avoid duplicate calls to failover

* add failover check ctx

* add failover check ctx

* fix failover debug log

* optimise failover operations

* remove debug logs

* rm unused model

* rm unused model
2025-02-14 16:06:26 +04:00
abhishek9686
d2d5658a01 Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1911 2025-01-31 20:26:24 +04:00
Abhishek K
8297642b90
NET-1914: add gw apis, move relays into CE (#3309)
* add gw apis, move relays into CE

* set gw field on relay and ingress creation

* add gw handlers to relay and ingress apis

* if node is inetgw and gw add dns

* remove pro check on relays

* fetch node before updating
2025-01-28 11:28:31 +05:30
Abhishek K
c02ec193db
NET-1920: Add disconnected node status (#3300)
* create peer ack table

* add restricted status

* add disconnected status
2025-01-28 11:26:12 +05:30
abhishek9686
8de1f4f6ca single node acl group 2025-01-20 17:43:13 +05:30
abhishek9686
04f2dc2d6a fix status for new added nodes 2025-01-09 22:16:02 +05:30
abhishek9686
4b41e86901 improvise status check 2025-01-09 09:34:27 +05:30
abhishek9686
739f6ade90 check last check in against metrics interval 2025-01-07 21:23:49 +05:30
abhishek9686
088b4ef82b check peer status 2025-01-06 17:54:04 +04:00
Abhishek K
629f6d3d70
Merge pull request #3273 from gravitl/NET-1784-release
add all proto to default user policies
2024-12-20 20:11:57 +04:00
abhishek9686
27088a3595 add all proto to default user policies 2024-12-20 20:10:57 +04:00
Abhishek K
93219dd984
Merge pull request #3265 from gravitl/NET-1784-release
Net 1784 release
2024-12-18 23:09:02 +04:00
abhishek9686
73eed6e583 add service type to default acl polices 2024-12-18 16:18:24 +04:00
Aceix
b1d813a906
refactor: update metadata descriptions for Network User permissions (#3254) 2024-12-17 15:32:47 +04:00
Abhishek K
f124b10c35
NET-1784: Adv Acl Rules (#3239)
* define direction on acl req

* define protocol types and rule model

* get rules for node

* fetch acl rule for a node

* redine acl firewall model

* add json tags

* update port,protocol, and direction

* add json tags to acl options

* convert protocol to string

* simplify acl map

* add json tags to acl rules

* add networks to fw update

* add acls rules

* NET-1784: add allow all field

* add allow all field on fw udpate

* remove debug logs

* fix port and protocol types

* migrate default acl policies

* define constants for service types

* add adv options for user rules on ingress gw

* debug log

* allow whole network

* add static nodes to acl rules

* replace peers on acl updates

* initiliase rule map

* add user acl rules on target node

* revert acl check on extclient

* handle static node rules on ingress gw

* update multiple policies for users

* check allowed direction

* remove debug logs
2024-12-10 11:21:14 +04:00
Abhishek K
31c2311bef
NET-1782: Fetch Node Connection Status from metrics (#3237)
* add live status of node

* handle static node status

* add public IP field to server configuration

* get public Ip from config

* improve node status logic

* improvise status check

* use only checkin status on old nodes

---------

Co-authored-by: the_aceix <aceixsmartx@gmail.com>
2024-12-10 10:46:05 +04:00
Abhishek K
dbb44c2867
Merge pull request #3217 from gravitl/failover_mutex
Failover mutex
2024-11-23 18:18:36 +04:00
abhishek9686
6f60551f02 add failover ctx mutex 2024-11-22 19:14:50 +04:00
Abhishek K
d485a3060f
Merge pull request #3195 from gravitl/NET-1773
NET-1773: Fix Platform User Permissions, comment out default pro trial on status api, peer endpoint fix
2024-11-11 11:27:24 +04:00
abhishek9686
378bac7452 add view only permissions for network users 2024-11-10 17:38:04 +04:00
Max Ma
e194d80fe9
fix metric cache map issue (#3191) 2024-11-10 15:30:21 +04:00
Abhishek K
b796331f3c
preserver platfrom user admin role (#3187) 2024-11-08 13:38:17 +04:00
abhishek9686
2339b49878 cannot update default groups 2024-11-05 15:05:59 +04:00
abhishek9686
c07b32d167 fix all networks user grp 2024-11-04 16:58:03 +04:00
abhishek9686
4b99435cbc user roles and groups migration 2024-10-31 11:58:54 +04:00
abhishek9686
167d29a96b remove * on default grp, add admins to admin net groups by default 2024-10-30 19:22:05 +04:00
abhishek9686
8c6772420f refer new new user role fields 2024-10-30 13:11:32 +04:00
abhishek9686
169ae8fd02 update global group names 2024-10-30 13:02:53 +04:00
abhishek9686
5375a8eefa fix user roles and groups descriptions 2024-10-30 12:31:15 +04:00
abhishek9686
0d6792c21b Merge branch 'develop' of https://github.com/gravitl/netmaker into NET-1615 2024-10-30 11:49:54 +04:00
Max Ma
2426b5fd39
fix metric bytes sent/recv issue (#3166) 2024-10-30 11:48:57 +04:00
abhishek9686
ea46ea5378 fix extclient allowed Ips 2024-10-29 22:57:58 +04:00
abhishek9686
2852314762 fix global network role access 2024-10-29 20:24:31 +04:00
abhishek9686
0246a7e32d add global grp to default acl policy 2024-10-29 16:29:57 +04:00
abhishek9686
ffd0133468 add middleware acl check 2024-10-29 15:28:25 +04:00
abhishek9686
ebc3e90301 add extclient egress ranges 2024-10-29 12:41:40 +04:00
abhishek9686
2cc54d949c remove user role from policy types 2024-10-29 08:51:27 +04:00
abhishek9686
4eacadbb27 convert network roles to groups, deprecate RAG roles 2024-10-28 16:18:50 +04:00
abhishek9686
f7b78ccad6 remove user role from acl policy types 2024-10-28 11:39:16 +04:00
abhishek9686
bf88a80ea2 avoid gateway role migration 2024-10-27 23:31:30 +04:00
abhishek9686
514e785f7b ignore disabled policies for users 2024-10-25 16:15:41 +04:00
abhishek9686
c0f107b302 remove userips usage, add allow all to fwupdate 2024-10-23 14:15:13 +04:00
abhishek9686
148c1fdc8f return all gws for admins 2024-10-22 15:12:05 +04:00
abhishek9686
7fa6580103 add ingress rules to peer update 2024-10-21 12:35:10 +04:00