miloschwartz
2ba49e84bb
add archive device instead of delete
2026-01-09 18:00:00 -08:00
miloschwartz
4c8d2266ec
clean up login page
2026-01-09 14:41:22 -08:00
miloschwartz
168ce549f7
remove guards form list idp for integration api
2026-01-06 13:20:18 -05:00
Owen
f7fcde8312
Add max recursion depth to matchSegments
2025-12-31 10:40:16 -05:00
Owen
6660c850f3
Try to bound logs
...
Ref #2120
2025-12-31 10:31:40 -05:00
Owen
0eb39abdb4
Set hc to unknown when changing to local site
...
Fixes #2181
2025-12-29 10:22:06 -05:00
miloschwartz
9fba9bd6b7
ui enhancements
2025-12-24 15:53:08 -05:00
Owen
b64e2e11db
Try to remove deadlocks on client updates
2025-12-24 12:20:22 -05:00
miloschwartz
da112d3417
add stripPortFromHost and reuse everywhere
2025-12-23 12:35:03 -05:00
Owen
5c67a1cb12
Format
2025-12-22 16:28:41 -05:00
miloschwartz
1905936950
parse request ip in exchange session
2025-12-22 15:48:24 -05:00
Owen
221ee6a1c2
Remove warning for limit
2025-12-22 14:07:49 -05:00
miloschwartz
71386d3b05
fix request ip port strip issue with badger >=1.3.0
2025-12-22 12:35:40 -05:00
Jacky Fong
89a7e2e4dc
handle olm as well
2025-12-22 10:25:30 -05:00
Jacky Fong
27440700a5
fix: Don't treat newt release-candidate as a "update" in the site list
2025-12-22 10:25:30 -05:00
Dhananjay Mahtha
90c48f20e0
Fix: Prevent cache memory leak by adding maxKeys limit and conditional caching
...
- Add maxKeys limit (10,000) to NodeCache to prevent unbounded memory growth
- Skip caching undefined values when GeoIP/ASN lookups fail (e.g., when MaxMind DB not configured)
- Add periodic cache statistics logging every 5 minutes for monitoring
- Fixes memory leak where cache would grow indefinitely with high request volumes
The maxKeys limit uses LRU eviction, so oldest entries are automatically removed
when the limit is reached. With ~10k requests/day and 5min TTL, 10k keys provides
ample headroom while preventing OOM issues.
Fixes #2120
2025-12-21 17:08:27 -05:00
Owen
3ce0cc1992
Add missing semicolon
2025-12-20 16:35:16 -05:00
Owen
a9a0fbe244
Merge UI into new screen
2025-12-20 16:35:16 -05:00
Owen
9b3d066a91
Fix merge issues
2025-12-20 16:35:16 -05:00
Owen
d8344988c0
Restrict license
2025-12-20 16:35:16 -05:00
Owen
19f8cda3d9
Make private
2025-12-20 16:35:16 -05:00
Owen
b8ffc601d4
add backend API maintenance screen
2025-12-20 16:35:16 -05:00
Pallavi Kumari
c033fd4e8b
backend for updating maintenance screen
2025-12-20 16:35:16 -05:00
Owen
eafcefbe45
Merge branch 'dev' of github.com:jln-brtn/pangolin into jln-brtn-dev
2025-12-20 15:34:32 -05:00
Thomas Wilde
4f154d212e
Add ASN-based resource rule matching
...
- Add MaxMind ASN database integration
- Implement ASN lookup and matching in resource rule verification
- Add curated list of 100+ major ASNs (cloud, ISP, CDN, mobile carriers)
- Add ASN dropdown selector in resource rules UI with search functionality
- Support custom ASN input for unlisted ASNs
- Add 'ALL ASNs' special case handling (AS0)
- Cache ASN lookups with 5-minute TTL for performance
- Update validation schemas to support ASN match type
This allows administrators to create resource access rules based on
Autonomous System Numbers, similar to existing country-based rules.
Useful for restricting access by ISP, cloud provider, or mobile carrier.
2025-12-20 12:16:31 -05:00
miloschwartz
5587bd9d59
Merge branch 'dev' of https://github.com/fosrl/pangolin into dev
2025-12-19 17:06:57 -05:00
miloschwartz
b5f8e8feb2
add org auth slug with device auth support
2025-12-19 17:04:37 -05:00
Jacky Fong
9bd66fa306
add back the blueprints api - draft
2025-12-19 15:01:33 -05:00
Owen
fea4d43920
Make utility subnet configurable
2025-12-19 14:45:00 -05:00
Owen
6e7ba1dc52
Prevent overlapping resources with org subnets
2025-12-18 17:08:50 -05:00
Owen
3e01bfef7d
Move primaryDb into driver
2025-12-18 17:08:50 -05:00
miloschwartz
e0de003c2c
Merge branch 'dev' of https://github.com/fosrl/pangolin into dev
2025-12-18 16:49:44 -05:00
Owen
6b609bb078
Force big queries onto primary db to prevent 40001
2025-12-18 16:03:15 -05:00
depado
16653dd524
fix(database): filter dates evaluated at module load time
2025-12-18 10:06:31 -05:00
Owen
8ff588407c
Fix various small issues; blueprints working
2025-12-17 22:12:16 -05:00
Owen
c2e06725a8
Keep the same site resource id
2025-12-17 22:12:16 -05:00
Owen
bb43e0c325
Handle changing site by recreating site resource
2025-12-17 22:12:16 -05:00
Owen
35ea01610a
Update API routes and ui
2025-12-17 22:12:16 -05:00
Owen
cc1e551f43
Fix deleting site not terminating newt
2025-12-17 21:23:25 -05:00
miloschwartz
6f50fb8a4f
remote node changes
2025-12-17 16:50:39 -05:00
miloschwartz
9f29657570
Merge branch 'dev' into feat/login-page-customization
2025-12-17 11:41:17 -05:00
Milo Schwartz
553fda265c
Merge branch 'dev' into feature/oidc-email-error
2025-12-17 08:20:40 -08:00
Owen
43fb06084f
Alias should not get double regex
2025-12-16 21:54:14 -05:00
Owen
9de39dbe42
Support wildcard resources
2025-12-16 21:54:14 -05:00
Owen
a21029582e
Always send the relay port config
2025-12-16 18:38:20 -05:00
Owen
3d5ae9dd5c
Disable icmp packets over private resources
2025-12-16 17:20:18 -05:00
miloschwartz
6072ee93fa
add remove invitation to integration api
2025-12-16 17:17:03 -05:00
Owen
1b4884afd8
Make sure to push changes
2025-12-15 22:13:56 -05:00
Owen
0c0ad7029f
Batch and delay for large amounts of targets
2025-12-15 22:13:56 -05:00
Owen
c44c1a5518
Add UI, update API, send to newt
2025-12-15 22:13:56 -05:00