Commit Graph

1374 Commits

Author SHA1 Message Date
miloschwartz 71386d3b05 fix request ip port strip issue with badger >=1.3.0 2025-12-22 12:35:40 -05:00
Dennis e051142334 Add region-based resource rule 2025-12-22 17:44:56 +01:00
Jacky Fong 89a7e2e4dc handle olm as well 2025-12-22 10:25:30 -05:00
Jacky Fong 27440700a5 fix: Don't treat newt release-candidate as a "update" in the site list 2025-12-22 10:25:30 -05:00
Dhananjay Mahtha 90c48f20e0 Fix: Prevent cache memory leak by adding maxKeys limit and conditional caching
- Add maxKeys limit (10,000) to NodeCache to prevent unbounded memory growth
- Skip caching undefined values when GeoIP/ASN lookups fail (e.g., when MaxMind DB not configured)
- Add periodic cache statistics logging every 5 minutes for monitoring
- Fixes memory leak where cache would grow indefinitely with high request volumes

The maxKeys limit uses LRU eviction, so oldest entries are automatically removed
when the limit is reached. With ~10k requests/day and 5min TTL, 10k keys provides
ample headroom while preventing OOM issues.

Fixes #2120
2025-12-21 17:08:27 -05:00
Owen 3ce0cc1992 Add missing semicolon 2025-12-20 16:35:16 -05:00
Owen a9a0fbe244 Merge UI into new screen 2025-12-20 16:35:16 -05:00
Owen 9b3d066a91 Fix merge issues 2025-12-20 16:35:16 -05:00
Owen d8344988c0 Restrict license 2025-12-20 16:35:16 -05:00
Owen 19f8cda3d9 Make private 2025-12-20 16:35:16 -05:00
Owen b8ffc601d4 add backend API maintenance screen 2025-12-20 16:35:16 -05:00
Pallavi Kumari c033fd4e8b backend for updating maintenance screen 2025-12-20 16:35:16 -05:00
Owen eafcefbe45 Merge branch 'dev' of github.com:jln-brtn/pangolin into jln-brtn-dev 2025-12-20 15:34:32 -05:00
Thomas Wilde 4f154d212e Add ASN-based resource rule matching
- Add MaxMind ASN database integration
- Implement ASN lookup and matching in resource rule verification
- Add curated list of 100+ major ASNs (cloud, ISP, CDN, mobile carriers)
- Add ASN dropdown selector in resource rules UI with search functionality
- Support custom ASN input for unlisted ASNs
- Add 'ALL ASNs' special case handling (AS0)
- Cache ASN lookups with 5-minute TTL for performance
- Update validation schemas to support ASN match type

This allows administrators to create resource access rules based on
Autonomous System Numbers, similar to existing country-based rules.
Useful for restricting access by ISP, cloud provider, or mobile carrier.
2025-12-20 12:16:31 -05:00
Thomas Wilde 8d2955475b Add ASN-based resource rule matching
- Add MaxMind ASN database integration
- Implement ASN lookup and matching in resource rule verification
- Add curated list of 100+ major ASNs (cloud, ISP, CDN, mobile carriers)
- Add ASN dropdown selector in resource rules UI with search functionality
- Support custom ASN input for unlisted ASNs
- Add 'ALL ASNs' special case handling (AS0)
- Cache ASN lookups with 5-minute TTL for performance
- Update validation schemas to support ASN match type

This allows administrators to create resource access rules based on
Autonomous System Numbers, similar to existing country-based rules.
Useful for restricting access by ISP, cloud provider, or mobile carrier.
2025-12-20 12:16:00 -05:00
Owen 75b9703793 Seperate config gen into functions 2025-12-20 11:41:23 -05:00
Fred KISSIE e983e1166a 🚧 wip: approval tables in DB 2025-12-20 00:05:33 +01:00
miloschwartz 5587bd9d59 Merge branch 'dev' of https://github.com/fosrl/pangolin into dev 2025-12-19 17:06:57 -05:00
miloschwartz b5f8e8feb2 add org auth slug with device auth support 2025-12-19 17:04:37 -05:00
Owen 322f3bfb1d Add version and send it down 2025-12-19 16:44:57 -05:00
Jacky Fong 9bd66fa306 add back the blueprints api - draft 2025-12-19 15:01:33 -05:00
Owen fea4d43920 Make utility subnet configurable 2025-12-19 14:45:00 -05:00
Owen 6e7ba1dc52 Prevent overlapping resources with org subnets 2025-12-18 17:08:50 -05:00
Owen 3e01bfef7d Move primaryDb into driver 2025-12-18 17:08:50 -05:00
miloschwartz e0de003c2c Merge branch 'dev' of https://github.com/fosrl/pangolin into dev 2025-12-18 16:49:44 -05:00
Owen 6b609bb078 Force big queries onto primary db to prevent 40001 2025-12-18 16:03:15 -05:00
depado 16653dd524 fix(database): filter dates evaluated at module load time 2025-12-18 10:06:31 -05:00
Owen 8ff588407c Fix various small issues; blueprints working 2025-12-17 22:12:16 -05:00
Owen c2e06725a8 Keep the same site resource id 2025-12-17 22:12:16 -05:00
Owen bb43e0c325 Handle changing site by recreating site resource 2025-12-17 22:12:16 -05:00
Owen 35ea01610a Update API routes and ui 2025-12-17 22:12:16 -05:00
Owen cc1e551f43 Fix deleting site not terminating newt 2025-12-17 21:23:25 -05:00
miloschwartz 6f50fb8a4f remote node changes 2025-12-17 16:50:39 -05:00
miloschwartz 9f29657570 Merge branch 'dev' into feat/login-page-customization 2025-12-17 11:41:17 -05:00
Milo Schwartz 553fda265c Merge branch 'dev' into feature/oidc-email-error 2025-12-17 08:20:40 -08:00
Owen 43fb06084f Alias should not get double regex 2025-12-16 21:54:14 -05:00
Owen 9de39dbe42 Support wildcard resources 2025-12-16 21:54:14 -05:00
Owen a21029582e Always send the relay port config 2025-12-16 18:38:20 -05:00
Owen 3d5ae9dd5c Disable icmp packets over private resources 2025-12-16 17:20:18 -05:00
miloschwartz 6072ee93fa add remove invitation to integration api 2025-12-16 17:17:03 -05:00
Owen 1b4884afd8 Make sure to push changes 2025-12-15 22:13:56 -05:00
Owen 0c0ad7029f Batch and delay for large amounts of targets 2025-12-15 22:13:56 -05:00
Owen c44c1a5518 Add UI, update API, send to newt 2025-12-15 22:13:56 -05:00
Owen 97631c068c Clean key
Ref #1806
2025-12-14 15:58:29 -05:00
Owen a012369f83 Make sure to always check retention first
Fixes #2061
2025-12-12 18:39:13 -05:00
miloschwartz f81909489a add client telmetry and fix missing openapi on prefault 2025-12-11 10:38:48 -05:00
Owen 4c819d264b Only permit ipv4 for now 2025-12-10 20:40:22 -05:00
Owen Schwartz d409e58186 Merge pull request #2020 from Fredkiss3/fix/log-analytics-adjustments
refactor: adjustments for logs pages
2025-12-10 20:33:12 -05:00
David Reed 78369b6f6a Add OIDC authentication error response support 2025-12-10 11:13:04 -08:00
Owen c56574e431 Send site add in case the client does not have the site 2025-12-10 11:57:45 -05:00