446eba8bc9
Orging how we are going to make the sync
2025-12-24 10:38:44 -05:00
18579c0647
Merge branch 'dev' into msg-delivery
2025-12-23 16:57:17 -05:00
0d37e08638
Merge branch 'dev' into msg-delivery
2025-12-23 16:56:50 -05:00
da112d3417
add stripPortFromHost and reuse everywhere
2025-12-23 12:35:03 -05:00
5c67a1cb12
Format
2025-12-22 16:28:41 -05:00
1905936950
parse request ip in exchange session
2025-12-22 15:48:24 -05:00
221ee6a1c2
Remove warning for limit
2025-12-22 14:07:49 -05:00
71386d3b05
fix request ip port strip issue with badger >=1.3.0
2025-12-22 12:35:40 -05:00
89a7e2e4dc
handle olm as well
2025-12-22 10:25:30 -05:00
27440700a5
fix: Don't treat newt release-candidate as a "update" in the site list
2025-12-22 10:25:30 -05:00
90c48f20e0
Fix: Prevent cache memory leak by adding maxKeys limit and conditional caching
...
- Add maxKeys limit (10,000) to NodeCache to prevent unbounded memory growth
- Skip caching undefined values when GeoIP/ASN lookups fail (e.g., when MaxMind DB not configured)
- Add periodic cache statistics logging every 5 minutes for monitoring
- Fixes memory leak where cache would grow indefinitely with high request volumes
The maxKeys limit uses LRU eviction, so oldest entries are automatically removed
when the limit is reached. With ~10k requests/day and 5min TTL, 10k keys provides
ample headroom while preventing OOM issues.
Fixes #2120
2025-12-21 17:08:27 -05:00
3ce0cc1992
Add missing semicolon
2025-12-20 16:35:16 -05:00
a9a0fbe244
Merge UI into new screen
2025-12-20 16:35:16 -05:00
9b3d066a91
Fix merge issues
2025-12-20 16:35:16 -05:00
d8344988c0
Restrict license
2025-12-20 16:35:16 -05:00
19f8cda3d9
Make private
2025-12-20 16:35:16 -05:00
b8ffc601d4
add backend API maintenance screen
2025-12-20 16:35:16 -05:00
c033fd4e8b
backend for updating maintenance screen
2025-12-20 16:35:16 -05:00
eafcefbe45
Merge branch 'dev' of github.com:jln-brtn/pangolin into jln-brtn-dev
2025-12-20 15:34:32 -05:00
4f154d212e
Add ASN-based resource rule matching
...
- Add MaxMind ASN database integration
- Implement ASN lookup and matching in resource rule verification
- Add curated list of 100+ major ASNs (cloud, ISP, CDN, mobile carriers)
- Add ASN dropdown selector in resource rules UI with search functionality
- Support custom ASN input for unlisted ASNs
- Add 'ALL ASNs' special case handling (AS0)
- Cache ASN lookups with 5-minute TTL for performance
- Update validation schemas to support ASN match type
This allows administrators to create resource access rules based on
Autonomous System Numbers, similar to existing country-based rules.
Useful for restricting access by ISP, cloud provider, or mobile carrier.
2025-12-20 12:16:31 -05:00
75b9703793
Seperate config gen into functions
2025-12-20 11:41:23 -05:00
5587bd9d59
Merge branch 'dev' of https://github.com/fosrl/pangolin into dev
2025-12-19 17:06:57 -05:00
b5f8e8feb2
add org auth slug with device auth support
2025-12-19 17:04:37 -05:00
322f3bfb1d
Add version and send it down
2025-12-19 16:44:57 -05:00
9bd66fa306
add back the blueprints api - draft
2025-12-19 15:01:33 -05:00
fea4d43920
Make utility subnet configurable
2025-12-19 14:45:00 -05:00
6e7ba1dc52
Prevent overlapping resources with org subnets
2025-12-18 17:08:50 -05:00
3e01bfef7d
Move primaryDb into driver
2025-12-18 17:08:50 -05:00
e0de003c2c
Merge branch 'dev' of https://github.com/fosrl/pangolin into dev
2025-12-18 16:49:44 -05:00
6b609bb078
Force big queries onto primary db to prevent 40001
2025-12-18 16:03:15 -05:00
16653dd524
fix(database): filter dates evaluated at module load time
2025-12-18 10:06:31 -05:00
8ff588407c
Fix various small issues; blueprints working
2025-12-17 22:12:16 -05:00
c2e06725a8
Keep the same site resource id
2025-12-17 22:12:16 -05:00
bb43e0c325
Handle changing site by recreating site resource
2025-12-17 22:12:16 -05:00
35ea01610a
Update API routes and ui
2025-12-17 22:12:16 -05:00
cc1e551f43
Fix deleting site not terminating newt
2025-12-17 21:23:25 -05:00
6f50fb8a4f
remote node changes
2025-12-17 16:50:39 -05:00
9f29657570
Merge branch 'dev' into feat/login-page-customization
2025-12-17 11:41:17 -05:00
553fda265c
Merge branch 'dev' into feature/oidc-email-error
2025-12-17 08:20:40 -08:00
43fb06084f
Alias should not get double regex
2025-12-16 21:54:14 -05:00
9de39dbe42
Support wildcard resources
2025-12-16 21:54:14 -05:00
a21029582e
Always send the relay port config
2025-12-16 18:38:20 -05:00
3d5ae9dd5c
Disable icmp packets over private resources
2025-12-16 17:20:18 -05:00
6072ee93fa
add remove invitation to integration api
2025-12-16 17:17:03 -05:00
1b4884afd8
Make sure to push changes
2025-12-15 22:13:56 -05:00
0c0ad7029f
Batch and delay for large amounts of targets
2025-12-15 22:13:56 -05:00
c44c1a5518
Add UI, update API, send to newt
2025-12-15 22:13:56 -05:00
97631c068c
Clean key
...
Ref #1806
2025-12-14 15:58:29 -05:00
a012369f83
Make sure to always check retention first
...
Fixes #2061
2025-12-12 18:39:13 -05:00
f81909489a
add client telmetry and fix missing openapi on prefault
2025-12-11 10:38:48 -05:00
Owen
miloschwartz
Jacky Fong
Dhananjay Mahtha
Pallavi Kumari
Thomas Wilde
depado