Skip to content

[management, reverse proxy] Add reverse proxy feature#5291

Merged
pascal-fischer merged 279 commits intomainfrom
prototype/reverse-proxy
Feb 13, 2026
Merged

[management, reverse proxy] Add reverse proxy feature#5291
pascal-fischer merged 279 commits intomainfrom
prototype/reverse-proxy

Conversation

@pascal-fischer
Copy link
Copy Markdown
Collaborator

@pascal-fischer pascal-fischer commented Feb 11, 2026 •
edited
Loading

Describe your changes

Issue ticket number and link

Stack

Checklist

  • Is it a bug fix
  • Is a typo/documentation fix
  • Is a feature enhancement
  • It is a refactor
  • Created tests that fail without the change (if possible)

By submitting this pull request, you confirm that you have read and agree to the terms of the Contributor License Agreement.

Documentation

Select exactly one:

  • I added/updated documentation for this change
  • Documentation is not needed for this change (explain why)

Docs PR URL (required if "docs added" is checked)

Paste the PR link from https://github.com/netbirdio/docs here:

netbirdio/docs#594

admacleod and others added 30 commits January 27, 2026 16:34
@admacleod
return empty domain list when none in database
7b3523e
@pascal-fischer
fix reverse proxy put and post
73fbb3f
@pascal-fischer
remove basic auth scheme
a103f69
@admacleod
fix domain api registration
b867223
@admacleod
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into pr…
ae42bbb 
…ototype/reverse-proxy
@admacleod
fix domain store nil pointer
3c5ac17
@admacleod
fix domain store slice retrieval
2c9decf
@admacleod
pass account manager in to proxy grpc server for setup key generation
b611d4a
@admacleod
pass proxy information to management on grpc connection
a4c1362
@pascal-fischer
Merge branch 'main' into prototype/reverse-proxy
231e80c
@pascal-fischer
go mod tidy
f97544a
@admacleod
remove scheme information from management address when connecting via…
1daea35 
… grpc
@admacleod
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into pr…
7d01311 
…ototype/reverse-proxy
@admacleod
correctly interpret custom domains from the database
7700b43
@admacleod
fix gorm id failures
10b981a
@admacleod
add grpc TLS with selection inferred from management URL
a9ce9f8
@admacleod
add debug logs and switch to logrus for logs
3d116c9
@admacleod
add env var for debug logs
95bf97d
@pascal-fischer
add log on broadcasting update
57cb6bf
@admacleod
get all proxy endpoints when a proxy connects
c98dcf5
@admacleod
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into pr…
5b1fced 
…ototype/reverse-proxy
@mlsmaycon
add extra debug logs
a0a61d4
@mlsmaycon
fix nil path
717da8c
@mlsmaycon
use util.InitLog
3f0c577
@mlsmaycon
update log init
c86da92
@admacleod
fix non-nil path assignment
f4ca36e
@admacleod
fix access log context cancelled
74c7706
@admacleod
allow setting the proxy url for autocert server name
4352228
@admacleod
use the netbird client transport directly
760ac5e
@admacleod
add roundtripper debug log
7d74904
lixmal and others added 15 commits February 13, 2026 13:02
@lixmal
Consolidate duplicate timeout cases in classifyProxyError
3971d2f
@lixmal
Refactor proxy server to reduce complexity in ListenAndServe and hand…
04b9de0 
…leMappingStream
@pascal-fischer
simplify policy inject logic
6ebcc7e
@lixmal
Fix HTML form label accessibility and CSS duplicate selector
009de5d
@lixmal
Fix TypeScript Sonar issues across proxy/web
b463161
@mlsmaycon
add proxy to goreleaser build pipeline with PR image tagging
b962ae2 
- Replace proxy/Dockerfile with goreleaser-compatible COPY pattern
- Preserve original multi-stage Dockerfile as Dockerfile.build
- Add netbird-proxy build, docker images (3 arch x 2 registries), and manifests
- Enable GHCR login for non-fork PRs and re-tag amd64 images with pr-<number>
@mlsmaycon
use a similar multistage approach to copy files
d64066c 
rename Dockerfile.build
@mlsmaycon
add chmod to tmp folder
004a363
@lixmal
Merge branch 'main' into prototype/reverse-proxy
31728b6
@lixmal
Merge branch 'main' into prototype/reverse-proxy
45ba44f
@pascal-fischer
refactor authenticate method
cd7b966
@pascal-fischer
update codespell
0bce808
@lixmal
Replace COPY . . with explicit directories in proxy Dockerfile
204a6d1 
Also fix missing chown
@lixmal
Fix lint
6fbf040
@pascal-fischer
remove unused authResults struct
add0156
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Feb 13, 2026

Quality Gate Failed Quality Gate failed

Failed conditions
1 Security Hotspot

See analysis details on SonarQube Cloud

mlsmaycon
mlsmaycon previously approved these changes Feb 13, 2026
View reviewed changes
@shuuri-labs
getting-started.sh: prompt for NB_PROXY_DOMAIN when built-in traefik …
b68a9a6 
…proxy is enabled. includes warning about and validation
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud Bot commented Feb 13, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
12 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.3% Duplication on New Code

See analysis details on SonarQube Cloud

@pascal-fischer pascal-fischer merged commit f531555 into main Feb 13, 2026
64 of 67 checks passed
@pascal-fischer pascal-fischer deleted the prototype/reverse-proxy branch February 13, 2026 18:37
@xangelix xangelix mentioned this pull request Feb 14, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mlsmaycon mlsmaycon mlsmaycon approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

10 participants

@pascal-fischer @CLAassistant @mlsmaycon @admacleod @heisbrot @lixmal @diegocn @bcmmbaga @pappz @shuuri-labs