Documentation
¶
Index ¶
- Variables
- func RegisterManagementServiceServer(s grpc.ServiceRegistrar, srv ManagementServiceServer)
- func RegisterProxyServiceServer(s grpc.ServiceRegistrar, srv ProxyServiceServer)
- type AccessLog
- func (*AccessLog) Descriptor() ([]byte, []int)deprecated
- func (x *AccessLog) GetAccountId() string
- func (x *AccessLog) GetAgentNetwork() bool
- func (x *AccessLog) GetAuthMechanism() string
- func (x *AccessLog) GetAuthSuccess() bool
- func (x *AccessLog) GetBytesDownload() int64
- func (x *AccessLog) GetBytesUpload() int64
- func (x *AccessLog) GetDurationMs() int64
- func (x *AccessLog) GetHost() string
- func (x *AccessLog) GetLogId() string
- func (x *AccessLog) GetMetadata() map[string]string
- func (x *AccessLog) GetMethod() string
- func (x *AccessLog) GetPath() string
- func (x *AccessLog) GetProtocol() string
- func (x *AccessLog) GetResponseCode() int32
- func (x *AccessLog) GetServiceId() string
- func (x *AccessLog) GetSourceIp() string
- func (x *AccessLog) GetTimestamp() *timestamppb.Timestamp
- func (x *AccessLog) GetUserId() string
- func (*AccessLog) ProtoMessage()
- func (x *AccessLog) ProtoReflect() protoreflect.Message
- func (x *AccessLog) Reset()
- func (x *AccessLog) String() string
- type AccessRestrictions
- func (*AccessRestrictions) Descriptor() ([]byte, []int)deprecated
- func (x *AccessRestrictions) GetAllowedCidrs() []string
- func (x *AccessRestrictions) GetAllowedCountries() []string
- func (x *AccessRestrictions) GetBlockedCidrs() []string
- func (x *AccessRestrictions) GetBlockedCountries() []string
- func (x *AccessRestrictions) GetCrowdsecMode() string
- func (*AccessRestrictions) ProtoMessage()
- func (x *AccessRestrictions) ProtoReflect() protoreflect.Message
- func (x *AccessRestrictions) Reset()
- func (x *AccessRestrictions) String() string
- type AccountNetwork
- func (*AccountNetwork) Descriptor() ([]byte, []int)deprecated
- func (x *AccountNetwork) GetDns() string
- func (x *AccountNetwork) GetIdentifier() string
- func (x *AccountNetwork) GetNetCidr() string
- func (x *AccountNetwork) GetNetV6Cidr() string
- func (x *AccountNetwork) GetSerial() uint64
- func (*AccountNetwork) ProtoMessage()
- func (x *AccountNetwork) ProtoReflect() protoreflect.Message
- func (x *AccountNetwork) Reset()
- func (x *AccountNetwork) String() string
- type AccountSettingsCompact
- func (*AccountSettingsCompact) Descriptor() ([]byte, []int)deprecated
- func (x *AccountSettingsCompact) GetPeerLoginExpirationEnabled() bool
- func (x *AccountSettingsCompact) GetPeerLoginExpirationNs() int64
- func (*AccountSettingsCompact) ProtoMessage()
- func (x *AccountSettingsCompact) ProtoReflect() protoreflect.Message
- func (x *AccountSettingsCompact) Reset()
- func (x *AccountSettingsCompact) String() string
- type AuthenticateRequest
- func (*AuthenticateRequest) Descriptor() ([]byte, []int)deprecated
- func (x *AuthenticateRequest) GetAccountId() string
- func (x *AuthenticateRequest) GetHeaderAuth() *HeaderAuthRequest
- func (x *AuthenticateRequest) GetId() string
- func (x *AuthenticateRequest) GetPassword() *PasswordRequest
- func (x *AuthenticateRequest) GetPin() *PinRequest
- func (m *AuthenticateRequest) GetRequest() isAuthenticateRequest_Request
- func (*AuthenticateRequest) ProtoMessage()
- func (x *AuthenticateRequest) ProtoReflect() protoreflect.Message
- func (x *AuthenticateRequest) Reset()
- func (x *AuthenticateRequest) String() string
- type AuthenticateRequest_HeaderAuth
- type AuthenticateRequest_Password
- type AuthenticateRequest_Pin
- type AuthenticateResponse
- func (*AuthenticateResponse) Descriptor() ([]byte, []int)deprecated
- func (x *AuthenticateResponse) GetSessionToken() string
- func (x *AuthenticateResponse) GetSuccess() bool
- func (*AuthenticateResponse) ProtoMessage()
- func (x *AuthenticateResponse) ProtoReflect() protoreflect.Message
- func (x *AuthenticateResponse) Reset()
- func (x *AuthenticateResponse) String() string
- type Authentication
- func (*Authentication) Descriptor() ([]byte, []int)deprecated
- func (x *Authentication) GetHeaderAuths() []*HeaderAuth
- func (x *Authentication) GetMaxSessionAgeSeconds() int64
- func (x *Authentication) GetOidc() bool
- func (x *Authentication) GetPassword() bool
- func (x *Authentication) GetPin() bool
- func (x *Authentication) GetSessionKey() string
- func (*Authentication) ProtoMessage()
- func (x *Authentication) ProtoReflect() protoreflect.Message
- func (x *Authentication) Reset()
- func (x *Authentication) String() string
- type AutoUpdateSettings
- func (*AutoUpdateSettings) Descriptor() ([]byte, []int)deprecated
- func (x *AutoUpdateSettings) GetAlwaysUpdate() bool
- func (x *AutoUpdateSettings) GetVersion() string
- func (*AutoUpdateSettings) ProtoMessage()
- func (x *AutoUpdateSettings) ProtoReflect() protoreflect.Message
- func (x *AutoUpdateSettings) Reset()
- func (x *AutoUpdateSettings) String() string
- type BundleParameters
- func (*BundleParameters) Descriptor() ([]byte, []int)deprecated
- func (x *BundleParameters) GetAnonymize() bool
- func (x *BundleParameters) GetBundleFor() bool
- func (x *BundleParameters) GetBundleForTime() int64
- func (x *BundleParameters) GetLogFileCount() int32
- func (*BundleParameters) ProtoMessage()
- func (x *BundleParameters) ProtoReflect() protoreflect.Message
- func (x *BundleParameters) Reset()
- func (x *BundleParameters) String() string
- type BundleResult
- type CheckLLMPolicyLimitsRequest
- func (*CheckLLMPolicyLimitsRequest) Descriptor() ([]byte, []int)deprecated
- func (x *CheckLLMPolicyLimitsRequest) GetAccountId() string
- func (x *CheckLLMPolicyLimitsRequest) GetGroupIds() []string
- func (x *CheckLLMPolicyLimitsRequest) GetModel() string
- func (x *CheckLLMPolicyLimitsRequest) GetProviderId() string
- func (x *CheckLLMPolicyLimitsRequest) GetUserId() string
- func (*CheckLLMPolicyLimitsRequest) ProtoMessage()
- func (x *CheckLLMPolicyLimitsRequest) ProtoReflect() protoreflect.Message
- func (x *CheckLLMPolicyLimitsRequest) Reset()
- func (x *CheckLLMPolicyLimitsRequest) String() string
- type CheckLLMPolicyLimitsResponse
- func (*CheckLLMPolicyLimitsResponse) Descriptor() ([]byte, []int)deprecated
- func (x *CheckLLMPolicyLimitsResponse) GetAttributionGroupId() string
- func (x *CheckLLMPolicyLimitsResponse) GetDecision() string
- func (x *CheckLLMPolicyLimitsResponse) GetDenyCode() string
- func (x *CheckLLMPolicyLimitsResponse) GetDenyReason() string
- func (x *CheckLLMPolicyLimitsResponse) GetSelectedPolicyId() string
- func (x *CheckLLMPolicyLimitsResponse) GetWindowSeconds() int64
- func (*CheckLLMPolicyLimitsResponse) ProtoMessage()
- func (x *CheckLLMPolicyLimitsResponse) ProtoReflect() protoreflect.Message
- func (x *CheckLLMPolicyLimitsResponse) Reset()
- func (x *CheckLLMPolicyLimitsResponse) String() string
- type Checks
- type CreateProxyPeerRequest
- func (*CreateProxyPeerRequest) Descriptor() ([]byte, []int)deprecated
- func (x *CreateProxyPeerRequest) GetAccountId() string
- func (x *CreateProxyPeerRequest) GetCluster() string
- func (x *CreateProxyPeerRequest) GetServiceId() string
- func (x *CreateProxyPeerRequest) GetToken() string
- func (x *CreateProxyPeerRequest) GetWireguardPublicKey() string
- func (*CreateProxyPeerRequest) ProtoMessage()
- func (x *CreateProxyPeerRequest) ProtoReflect() protoreflect.Message
- func (x *CreateProxyPeerRequest) Reset()
- func (x *CreateProxyPeerRequest) String() string
- type CreateProxyPeerResponse
- func (*CreateProxyPeerResponse) Descriptor() ([]byte, []int)deprecated
- func (x *CreateProxyPeerResponse) GetErrorMessage() string
- func (x *CreateProxyPeerResponse) GetSuccess() bool
- func (*CreateProxyPeerResponse) ProtoMessage()
- func (x *CreateProxyPeerResponse) ProtoReflect() protoreflect.Message
- func (x *CreateProxyPeerResponse) Reset()
- func (x *CreateProxyPeerResponse) String() string
- type CustomZone
- func (*CustomZone) Descriptor() ([]byte, []int)deprecated
- func (x *CustomZone) GetDomain() string
- func (x *CustomZone) GetNonAuthoritative() bool
- func (x *CustomZone) GetRecords() []*SimpleRecord
- func (x *CustomZone) GetSearchDomainDisabled() bool
- func (*CustomZone) ProtoMessage()
- func (x *CustomZone) ProtoReflect() protoreflect.Message
- func (x *CustomZone) Reset()
- func (x *CustomZone) String() string
- type DNSConfig
- func (*DNSConfig) Descriptor() ([]byte, []int)deprecated
- func (x *DNSConfig) GetCustomZones() []*CustomZone
- func (x *DNSConfig) GetForwarderPort() int64deprecated
- func (x *DNSConfig) GetNameServerGroups() []*NameServerGroup
- func (x *DNSConfig) GetServiceEnable() bool
- func (*DNSConfig) ProtoMessage()
- func (x *DNSConfig) ProtoReflect() protoreflect.Message
- func (x *DNSConfig) Reset()
- func (x *DNSConfig) String() string
- type DNSSettingsCompact
- func (*DNSSettingsCompact) Descriptor() ([]byte, []int)deprecated
- func (x *DNSSettingsCompact) GetDisabledManagementGroupIds() []string
- func (*DNSSettingsCompact) ProtoMessage()
- func (x *DNSSettingsCompact) ProtoReflect() protoreflect.Message
- func (x *DNSSettingsCompact) Reset()
- func (x *DNSSettingsCompact) String() string
- type DeviceAuthorizationFlow
- func (*DeviceAuthorizationFlow) Descriptor() ([]byte, []int)deprecated
- func (x *DeviceAuthorizationFlow) GetProvider() DeviceAuthorizationFlowProvider
- func (x *DeviceAuthorizationFlow) GetProviderConfig() *ProviderConfig
- func (*DeviceAuthorizationFlow) ProtoMessage()
- func (x *DeviceAuthorizationFlow) ProtoReflect() protoreflect.Message
- func (x *DeviceAuthorizationFlow) Reset()
- func (x *DeviceAuthorizationFlow) String() string
- type DeviceAuthorizationFlowProvider
- func (DeviceAuthorizationFlowProvider) Descriptor() protoreflect.EnumDescriptor
- func (x DeviceAuthorizationFlowProvider) Enum() *DeviceAuthorizationFlowProvider
- func (DeviceAuthorizationFlowProvider) EnumDescriptor() ([]byte, []int)deprecated
- func (x DeviceAuthorizationFlowProvider) Number() protoreflect.EnumNumber
- func (x DeviceAuthorizationFlowProvider) String() string
- func (DeviceAuthorizationFlowProvider) Type() protoreflect.EnumType
- type DeviceAuthorizationFlowRequest
- func (*DeviceAuthorizationFlowRequest) Descriptor() ([]byte, []int)deprecated
- func (*DeviceAuthorizationFlowRequest) ProtoMessage()
- func (x *DeviceAuthorizationFlowRequest) ProtoReflect() protoreflect.Message
- func (x *DeviceAuthorizationFlowRequest) Reset()
- func (x *DeviceAuthorizationFlowRequest) String() string
- type Empty
- type EncryptedMessage
- func (*EncryptedMessage) Descriptor() ([]byte, []int)deprecated
- func (x *EncryptedMessage) GetBody() []byte
- func (x *EncryptedMessage) GetVersion() int32
- func (x *EncryptedMessage) GetWgPubKey() string
- func (*EncryptedMessage) ProtoMessage()
- func (x *EncryptedMessage) ProtoReflect() protoreflect.Message
- func (x *EncryptedMessage) Reset()
- func (x *EncryptedMessage) String() string
- type Environment
- func (*Environment) Descriptor() ([]byte, []int)deprecated
- func (x *Environment) GetCloud() string
- func (x *Environment) GetPlatform() string
- func (*Environment) ProtoMessage()
- func (x *Environment) ProtoReflect() protoreflect.Message
- func (x *Environment) Reset()
- func (x *Environment) String() string
- type ExposeProtocol
- func (ExposeProtocol) Descriptor() protoreflect.EnumDescriptor
- func (x ExposeProtocol) Enum() *ExposeProtocol
- func (ExposeProtocol) EnumDescriptor() ([]byte, []int)deprecated
- func (x ExposeProtocol) Number() protoreflect.EnumNumber
- func (x ExposeProtocol) String() string
- func (ExposeProtocol) Type() protoreflect.EnumType
- type ExposeServiceRequest
- func (*ExposeServiceRequest) Descriptor() ([]byte, []int)deprecated
- func (x *ExposeServiceRequest) GetDomain() string
- func (x *ExposeServiceRequest) GetListenPort() uint32
- func (x *ExposeServiceRequest) GetNamePrefix() string
- func (x *ExposeServiceRequest) GetPassword() string
- func (x *ExposeServiceRequest) GetPin() string
- func (x *ExposeServiceRequest) GetPort() uint32
- func (x *ExposeServiceRequest) GetProtocol() ExposeProtocol
- func (x *ExposeServiceRequest) GetUserGroups() []string
- func (*ExposeServiceRequest) ProtoMessage()
- func (x *ExposeServiceRequest) ProtoReflect() protoreflect.Message
- func (x *ExposeServiceRequest) Reset()
- func (x *ExposeServiceRequest) String() string
- type ExposeServiceResponse
- func (*ExposeServiceResponse) Descriptor() ([]byte, []int)deprecated
- func (x *ExposeServiceResponse) GetDomain() string
- func (x *ExposeServiceResponse) GetPortAutoAssigned() bool
- func (x *ExposeServiceResponse) GetServiceName() string
- func (x *ExposeServiceResponse) GetServiceUrl() string
- func (*ExposeServiceResponse) ProtoMessage()
- func (x *ExposeServiceResponse) ProtoReflect() protoreflect.Message
- func (x *ExposeServiceResponse) Reset()
- func (x *ExposeServiceResponse) String() string
- type ExtendAuthSessionRequest
- func (*ExtendAuthSessionRequest) Descriptor() ([]byte, []int)deprecated
- func (x *ExtendAuthSessionRequest) GetJwtToken() string
- func (x *ExtendAuthSessionRequest) GetMeta() *PeerSystemMeta
- func (*ExtendAuthSessionRequest) ProtoMessage()
- func (x *ExtendAuthSessionRequest) ProtoReflect() protoreflect.Message
- func (x *ExtendAuthSessionRequest) Reset()
- func (x *ExtendAuthSessionRequest) String() string
- type ExtendAuthSessionResponse
- func (*ExtendAuthSessionResponse) Descriptor() ([]byte, []int)deprecated
- func (x *ExtendAuthSessionResponse) GetSessionExpiresAt() *timestamppb.Timestamp
- func (*ExtendAuthSessionResponse) ProtoMessage()
- func (x *ExtendAuthSessionResponse) ProtoReflect() protoreflect.Message
- func (x *ExtendAuthSessionResponse) Reset()
- func (x *ExtendAuthSessionResponse) String() string
- type File
- type FirewallRule
- func (*FirewallRule) Descriptor() ([]byte, []int)deprecated
- func (x *FirewallRule) GetAction() RuleAction
- func (x *FirewallRule) GetCustomProtocol() uint32
- func (x *FirewallRule) GetDirection() RuleDirection
- func (x *FirewallRule) GetPeerIP() stringdeprecated
- func (x *FirewallRule) GetPolicyID() []byte
- func (x *FirewallRule) GetPort() string
- func (x *FirewallRule) GetPortInfo() *PortInfo
- func (x *FirewallRule) GetProtocol() RuleProtocol
- func (x *FirewallRule) GetSourcePrefixes() [][]byte
- func (*FirewallRule) ProtoMessage()
- func (x *FirewallRule) ProtoReflect() protoreflect.Message
- func (x *FirewallRule) Reset()
- func (x *FirewallRule) String() string
- type Flags
- func (*Flags) Descriptor() ([]byte, []int)deprecated
- func (x *Flags) GetBlockInbound() bool
- func (x *Flags) GetBlockLANAccess() bool
- func (x *Flags) GetDisableClientRoutes() bool
- func (x *Flags) GetDisableDNS() bool
- func (x *Flags) GetDisableFirewall() bool
- func (x *Flags) GetDisableIPv6() bool
- func (x *Flags) GetDisableSSHAuth() bool
- func (x *Flags) GetDisableServerRoutes() bool
- func (x *Flags) GetEnableSSHLocalPortForwarding() bool
- func (x *Flags) GetEnableSSHRemotePortForwarding() bool
- func (x *Flags) GetEnableSSHRoot() bool
- func (x *Flags) GetEnableSSHSFTP() bool
- func (x *Flags) GetLazyConnectionEnabled() bool
- func (x *Flags) GetRosenpassEnabled() bool
- func (x *Flags) GetRosenpassPermissive() bool
- func (x *Flags) GetServerSSHAllowed() bool
- func (*Flags) ProtoMessage()
- func (x *Flags) ProtoReflect() protoreflect.Message
- func (x *Flags) Reset()
- func (x *Flags) String() string
- type FlowConfig
- func (*FlowConfig) Descriptor() ([]byte, []int)deprecated
- func (x *FlowConfig) GetCounters() bool
- func (x *FlowConfig) GetDnsCollection() bool
- func (x *FlowConfig) GetEnabled() bool
- func (x *FlowConfig) GetExitNodeCollection() bool
- func (x *FlowConfig) GetInterval() *durationpb.Duration
- func (x *FlowConfig) GetTokenPayload() string
- func (x *FlowConfig) GetTokenSignature() string
- func (x *FlowConfig) GetUrl() string
- func (*FlowConfig) ProtoMessage()
- func (x *FlowConfig) ProtoReflect() protoreflect.Message
- func (x *FlowConfig) Reset()
- func (x *FlowConfig) String() string
- type ForwardingRule
- func (*ForwardingRule) Descriptor() ([]byte, []int)deprecated
- func (x *ForwardingRule) GetDestinationPort() *PortInfo
- func (x *ForwardingRule) GetProtocol() RuleProtocol
- func (x *ForwardingRule) GetTranslatedAddress() []byte
- func (x *ForwardingRule) GetTranslatedPort() *PortInfo
- func (*ForwardingRule) ProtoMessage()
- func (x *ForwardingRule) ProtoReflect() protoreflect.Message
- func (x *ForwardingRule) Reset()
- func (x *ForwardingRule) String() string
- type GetMappingUpdateRequest
- func (*GetMappingUpdateRequest) Descriptor() ([]byte, []int)deprecated
- func (x *GetMappingUpdateRequest) GetAddress() string
- func (x *GetMappingUpdateRequest) GetCapabilities() *ProxyCapabilities
- func (x *GetMappingUpdateRequest) GetProxyId() string
- func (x *GetMappingUpdateRequest) GetStartedAt() *timestamppb.Timestamp
- func (x *GetMappingUpdateRequest) GetVersion() string
- func (*GetMappingUpdateRequest) ProtoMessage()
- func (x *GetMappingUpdateRequest) ProtoReflect() protoreflect.Message
- func (x *GetMappingUpdateRequest) Reset()
- func (x *GetMappingUpdateRequest) String() string
- type GetMappingUpdateResponse
- func (*GetMappingUpdateResponse) Descriptor() ([]byte, []int)deprecated
- func (x *GetMappingUpdateResponse) GetInitialSyncComplete() bool
- func (x *GetMappingUpdateResponse) GetMapping() []*ProxyMapping
- func (*GetMappingUpdateResponse) ProtoMessage()
- func (x *GetMappingUpdateResponse) ProtoReflect() protoreflect.Message
- func (x *GetMappingUpdateResponse) Reset()
- func (x *GetMappingUpdateResponse) String() string
- type GetOIDCURLRequest
- func (*GetOIDCURLRequest) Descriptor() ([]byte, []int)deprecated
- func (x *GetOIDCURLRequest) GetAccountId() string
- func (x *GetOIDCURLRequest) GetId() string
- func (x *GetOIDCURLRequest) GetRedirectUrl() string
- func (*GetOIDCURLRequest) ProtoMessage()
- func (x *GetOIDCURLRequest) ProtoReflect() protoreflect.Message
- func (x *GetOIDCURLRequest) Reset()
- func (x *GetOIDCURLRequest) String() string
- type GetOIDCURLResponse
- type GroupCompact
- func (*GroupCompact) Descriptor() ([]byte, []int)deprecated
- func (x *GroupCompact) GetId() string
- func (x *GroupCompact) GetIsAll() bool
- func (x *GroupCompact) GetPeerIndexes() []uint32
- func (*GroupCompact) ProtoMessage()
- func (x *GroupCompact) ProtoReflect() protoreflect.Message
- func (x *GroupCompact) Reset()
- func (x *GroupCompact) String() string
- type HeaderAuth
- type HeaderAuthRequest
- func (*HeaderAuthRequest) Descriptor() ([]byte, []int)deprecated
- func (x *HeaderAuthRequest) GetHeaderName() string
- func (x *HeaderAuthRequest) GetHeaderValue() string
- func (*HeaderAuthRequest) ProtoMessage()
- func (x *HeaderAuthRequest) ProtoReflect() protoreflect.Message
- func (x *HeaderAuthRequest) Reset()
- func (x *HeaderAuthRequest) String() string
- type HostConfig
- func (*HostConfig) Descriptor() ([]byte, []int)deprecated
- func (x *HostConfig) GetProtocol() HostConfig_Protocol
- func (x *HostConfig) GetUri() string
- func (*HostConfig) ProtoMessage()
- func (x *HostConfig) ProtoReflect() protoreflect.Message
- func (x *HostConfig) Reset()
- func (x *HostConfig) String() string
- type HostConfig_Protocol
- func (HostConfig_Protocol) Descriptor() protoreflect.EnumDescriptor
- func (x HostConfig_Protocol) Enum() *HostConfig_Protocol
- func (HostConfig_Protocol) EnumDescriptor() ([]byte, []int)deprecated
- func (x HostConfig_Protocol) Number() protoreflect.EnumNumber
- func (x HostConfig_Protocol) String() string
- func (HostConfig_Protocol) Type() protoreflect.EnumType
- type JWTConfig
- func (*JWTConfig) Descriptor() ([]byte, []int)deprecated
- func (x *JWTConfig) GetAudience() string
- func (x *JWTConfig) GetAudiences() []string
- func (x *JWTConfig) GetIssuer() string
- func (x *JWTConfig) GetKeysLocation() string
- func (x *JWTConfig) GetMaxTokenAge() int64
- func (*JWTConfig) ProtoMessage()
- func (x *JWTConfig) ProtoReflect() protoreflect.Message
- func (x *JWTConfig) Reset()
- func (x *JWTConfig) String() string
- type JobRequest
- func (*JobRequest) Descriptor() ([]byte, []int)deprecated
- func (x *JobRequest) GetBundle() *BundleParameters
- func (x *JobRequest) GetID() []byte
- func (m *JobRequest) GetWorkloadParameters() isJobRequest_WorkloadParameters
- func (*JobRequest) ProtoMessage()
- func (x *JobRequest) ProtoReflect() protoreflect.Message
- func (x *JobRequest) Reset()
- func (x *JobRequest) String() string
- type JobRequest_Bundle
- type JobResponse
- func (*JobResponse) Descriptor() ([]byte, []int)deprecated
- func (x *JobResponse) GetBundle() *BundleResult
- func (x *JobResponse) GetID() []byte
- func (x *JobResponse) GetReason() []byte
- func (x *JobResponse) GetStatus() JobStatus
- func (m *JobResponse) GetWorkloadResults() isJobResponse_WorkloadResults
- func (*JobResponse) ProtoMessage()
- func (x *JobResponse) ProtoReflect() protoreflect.Message
- func (x *JobResponse) Reset()
- func (x *JobResponse) String() string
- type JobResponse_Bundle
- type JobStatus
- type LoginRequest
- func (*LoginRequest) Descriptor() ([]byte, []int)deprecated
- func (x *LoginRequest) GetDnsLabels() []string
- func (x *LoginRequest) GetJwtToken() string
- func (x *LoginRequest) GetMeta() *PeerSystemMeta
- func (x *LoginRequest) GetPeerKeys() *PeerKeys
- func (x *LoginRequest) GetSetupKey() string
- func (*LoginRequest) ProtoMessage()
- func (x *LoginRequest) ProtoReflect() protoreflect.Message
- func (x *LoginRequest) Reset()
- func (x *LoginRequest) String() string
- type LoginResponse
- func (*LoginResponse) Descriptor() ([]byte, []int)deprecated
- func (x *LoginResponse) GetChecks() []*Checks
- func (x *LoginResponse) GetNetbirdConfig() *NetbirdConfig
- func (x *LoginResponse) GetPeerConfig() *PeerConfig
- func (x *LoginResponse) GetSessionExpiresAt() *timestamppb.Timestamp
- func (*LoginResponse) ProtoMessage()
- func (x *LoginResponse) ProtoReflect() protoreflect.Message
- func (x *LoginResponse) Reset()
- func (x *LoginResponse) String() string
- type MachineUserIndexes
- func (*MachineUserIndexes) Descriptor() ([]byte, []int)deprecated
- func (x *MachineUserIndexes) GetIndexes() []uint32
- func (*MachineUserIndexes) ProtoMessage()
- func (x *MachineUserIndexes) ProtoReflect() protoreflect.Message
- func (x *MachineUserIndexes) Reset()
- func (x *MachineUserIndexes) String() string
- type ManagementServiceClient
- type ManagementServiceServer
- type ManagementService_JobClient
- type ManagementService_JobServer
- type ManagementService_SyncClient
- type ManagementService_SyncServer
- type MetricsConfig
- type MiddlewareConfig
- func (*MiddlewareConfig) Descriptor() ([]byte, []int)deprecated
- func (x *MiddlewareConfig) GetCanMutate() bool
- func (x *MiddlewareConfig) GetConfigJson() []byte
- func (x *MiddlewareConfig) GetEnabled() bool
- func (x *MiddlewareConfig) GetFailMode() MiddlewareConfig_FailMode
- func (x *MiddlewareConfig) GetId() string
- func (x *MiddlewareConfig) GetSlot() MiddlewareSlot
- func (x *MiddlewareConfig) GetTimeout() *durationpb.Duration
- func (*MiddlewareConfig) ProtoMessage()
- func (x *MiddlewareConfig) ProtoReflect() protoreflect.Message
- func (x *MiddlewareConfig) Reset()
- func (x *MiddlewareConfig) String() string
- type MiddlewareConfig_FailMode
- func (MiddlewareConfig_FailMode) Descriptor() protoreflect.EnumDescriptor
- func (x MiddlewareConfig_FailMode) Enum() *MiddlewareConfig_FailMode
- func (MiddlewareConfig_FailMode) EnumDescriptor() ([]byte, []int)deprecated
- func (x MiddlewareConfig_FailMode) Number() protoreflect.EnumNumber
- func (x MiddlewareConfig_FailMode) String() string
- func (MiddlewareConfig_FailMode) Type() protoreflect.EnumType
- type MiddlewareSlot
- func (MiddlewareSlot) Descriptor() protoreflect.EnumDescriptor
- func (x MiddlewareSlot) Enum() *MiddlewareSlot
- func (MiddlewareSlot) EnumDescriptor() ([]byte, []int)deprecated
- func (x MiddlewareSlot) Number() protoreflect.EnumNumber
- func (x MiddlewareSlot) String() string
- func (MiddlewareSlot) Type() protoreflect.EnumType
- type NameServer
- func (*NameServer) Descriptor() ([]byte, []int)deprecated
- func (x *NameServer) GetIP() string
- func (x *NameServer) GetNSType() int64
- func (x *NameServer) GetPort() int64
- func (*NameServer) ProtoMessage()
- func (x *NameServer) ProtoReflect() protoreflect.Message
- func (x *NameServer) Reset()
- func (x *NameServer) String() string
- type NameServerGroup
- func (*NameServerGroup) Descriptor() ([]byte, []int)deprecated
- func (x *NameServerGroup) GetDomains() []string
- func (x *NameServerGroup) GetNameServers() []*NameServer
- func (x *NameServerGroup) GetPrimary() bool
- func (x *NameServerGroup) GetSearchDomainsEnabled() bool
- func (*NameServerGroup) ProtoMessage()
- func (x *NameServerGroup) ProtoReflect() protoreflect.Message
- func (x *NameServerGroup) Reset()
- func (x *NameServerGroup) String() string
- type NameServerGroupRaw
- func (*NameServerGroupRaw) Descriptor() ([]byte, []int)deprecated
- func (x *NameServerGroupRaw) GetDomains() []string
- func (x *NameServerGroupRaw) GetEnabled() bool
- func (x *NameServerGroupRaw) GetGroupIds() []string
- func (x *NameServerGroupRaw) GetId() string
- func (x *NameServerGroupRaw) GetNameservers() []*NameServer
- func (x *NameServerGroupRaw) GetPrimary() bool
- func (x *NameServerGroupRaw) GetSearchDomainsEnabled() bool
- func (*NameServerGroupRaw) ProtoMessage()
- func (x *NameServerGroupRaw) ProtoReflect() protoreflect.Message
- func (x *NameServerGroupRaw) Reset()
- func (x *NameServerGroupRaw) String() string
- type NetbirdConfig
- func (*NetbirdConfig) Descriptor() ([]byte, []int)deprecated
- func (x *NetbirdConfig) GetFlow() *FlowConfig
- func (x *NetbirdConfig) GetMetrics() *MetricsConfig
- func (x *NetbirdConfig) GetRelay() *RelayConfig
- func (x *NetbirdConfig) GetSignal() *HostConfig
- func (x *NetbirdConfig) GetStuns() []*HostConfig
- func (x *NetbirdConfig) GetTurns() []*ProtectedHostConfig
- func (*NetbirdConfig) ProtoMessage()
- func (x *NetbirdConfig) ProtoReflect() protoreflect.Message
- func (x *NetbirdConfig) Reset()
- func (x *NetbirdConfig) String() string
- type NetworkAddress
- func (*NetworkAddress) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkAddress) GetMac() string
- func (x *NetworkAddress) GetNetIP() string
- func (*NetworkAddress) ProtoMessage()
- func (x *NetworkAddress) ProtoReflect() protoreflect.Message
- func (x *NetworkAddress) Reset()
- func (x *NetworkAddress) String() string
- type NetworkMap
- func (*NetworkMap) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkMap) GetDNSConfig() *DNSConfig
- func (x *NetworkMap) GetFirewallRules() []*FirewallRule
- func (x *NetworkMap) GetFirewallRulesIsEmpty() bool
- func (x *NetworkMap) GetForwardingRules() []*ForwardingRule
- func (x *NetworkMap) GetOfflinePeers() []*RemotePeerConfig
- func (x *NetworkMap) GetPeerConfig() *PeerConfig
- func (x *NetworkMap) GetRemotePeers() []*RemotePeerConfig
- func (x *NetworkMap) GetRemotePeersIsEmpty() bool
- func (x *NetworkMap) GetRoutes() []*Route
- func (x *NetworkMap) GetRoutesFirewallRules() []*RouteFirewallRule
- func (x *NetworkMap) GetRoutesFirewallRulesIsEmpty() bool
- func (x *NetworkMap) GetSerial() uint64
- func (x *NetworkMap) GetSshAuth() *SSHAuth
- func (*NetworkMap) ProtoMessage()
- func (x *NetworkMap) ProtoReflect() protoreflect.Message
- func (x *NetworkMap) Reset()
- func (x *NetworkMap) String() string
- type NetworkMapComponentsDelta
- type NetworkMapComponentsFull
- func (*NetworkMapComponentsFull) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkMapComponentsFull) GetAccountSettings() *AccountSettingsCompact
- func (x *NetworkMapComponentsFull) GetAccountZones() []*CustomZone
- func (x *NetworkMapComponentsFull) GetAgentVersions() []string
- func (x *NetworkMapComponentsFull) GetAllDnsRecords() []*SimpleRecord
- func (x *NetworkMapComponentsFull) GetAllowedUserIds() []string
- func (x *NetworkMapComponentsFull) GetCustomZoneDomain() string
- func (x *NetworkMapComponentsFull) GetDnsDomain() string
- func (x *NetworkMapComponentsFull) GetDnsForwarderPort() int64
- func (x *NetworkMapComponentsFull) GetDnsSettings() *DNSSettingsCompact
- func (x *NetworkMapComponentsFull) GetGroupIdToUserIds() map[string]*UserIDList
- func (x *NetworkMapComponentsFull) GetGroups() []*GroupCompact
- func (x *NetworkMapComponentsFull) GetNameserverGroups() []*NameServerGroupRaw
- func (x *NetworkMapComponentsFull) GetNetwork() *AccountNetwork
- func (x *NetworkMapComponentsFull) GetNetworkResources() []*NetworkResourceRaw
- func (x *NetworkMapComponentsFull) GetPeerConfig() *PeerConfig
- func (x *NetworkMapComponentsFull) GetPeers() []*PeerCompact
- func (x *NetworkMapComponentsFull) GetPolicies() []*PolicyCompact
- func (x *NetworkMapComponentsFull) GetPostureFailedPeers() map[string]*PeerIndexSet
- func (x *NetworkMapComponentsFull) GetProxyPatch() *ProxyPatch
- func (x *NetworkMapComponentsFull) GetResourcePoliciesMap() map[string]*PolicyIds
- func (x *NetworkMapComponentsFull) GetRouterPeerIndexes() []uint32
- func (x *NetworkMapComponentsFull) GetRoutersMap() map[string]*NetworkRouterList
- func (x *NetworkMapComponentsFull) GetRoutes() []*RouteRaw
- func (x *NetworkMapComponentsFull) GetSerial() uint64
- func (x *NetworkMapComponentsFull) GetUserIdClaim() string
- func (*NetworkMapComponentsFull) ProtoMessage()
- func (x *NetworkMapComponentsFull) ProtoReflect() protoreflect.Message
- func (x *NetworkMapComponentsFull) Reset()
- func (x *NetworkMapComponentsFull) String() string
- type NetworkMapEnvelope
- func (*NetworkMapEnvelope) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkMapEnvelope) GetDelta() *NetworkMapComponentsDelta
- func (x *NetworkMapEnvelope) GetFull() *NetworkMapComponentsFull
- func (m *NetworkMapEnvelope) GetPayload() isNetworkMapEnvelope_Payload
- func (*NetworkMapEnvelope) ProtoMessage()
- func (x *NetworkMapEnvelope) ProtoReflect() protoreflect.Message
- func (x *NetworkMapEnvelope) Reset()
- func (x *NetworkMapEnvelope) String() string
- type NetworkMapEnvelope_Delta
- type NetworkMapEnvelope_Full
- type NetworkResourceRaw
- func (*NetworkResourceRaw) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkResourceRaw) GetAddress() string
- func (x *NetworkResourceRaw) GetDescription() string
- func (x *NetworkResourceRaw) GetDomainValue() string
- func (x *NetworkResourceRaw) GetEnabled() bool
- func (x *NetworkResourceRaw) GetId() string
- func (x *NetworkResourceRaw) GetName() string
- func (x *NetworkResourceRaw) GetNetworkSeq() string
- func (x *NetworkResourceRaw) GetPrefixCidr() string
- func (x *NetworkResourceRaw) GetType() string
- func (*NetworkResourceRaw) ProtoMessage()
- func (x *NetworkResourceRaw) ProtoReflect() protoreflect.Message
- func (x *NetworkResourceRaw) Reset()
- func (x *NetworkResourceRaw) String() string
- type NetworkRouterEntry
- func (*NetworkRouterEntry) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkRouterEntry) GetEnabled() bool
- func (x *NetworkRouterEntry) GetId() string
- func (x *NetworkRouterEntry) GetMasquerade() bool
- func (x *NetworkRouterEntry) GetMetric() int32
- func (x *NetworkRouterEntry) GetPeerGroupIds() []string
- func (x *NetworkRouterEntry) GetPeerIndex() uint32
- func (x *NetworkRouterEntry) GetPeerIndexSet() bool
- func (*NetworkRouterEntry) ProtoMessage()
- func (x *NetworkRouterEntry) ProtoReflect() protoreflect.Message
- func (x *NetworkRouterEntry) Reset()
- func (x *NetworkRouterEntry) String() string
- type NetworkRouterList
- func (*NetworkRouterList) Descriptor() ([]byte, []int)deprecated
- func (x *NetworkRouterList) GetEntries() []*NetworkRouterEntry
- func (*NetworkRouterList) ProtoMessage()
- func (x *NetworkRouterList) ProtoReflect() protoreflect.Message
- func (x *NetworkRouterList) Reset()
- func (x *NetworkRouterList) String() string
- type PKCEAuthorizationFlow
- func (*PKCEAuthorizationFlow) Descriptor() ([]byte, []int)deprecated
- func (x *PKCEAuthorizationFlow) GetProviderConfig() *ProviderConfig
- func (*PKCEAuthorizationFlow) ProtoMessage()
- func (x *PKCEAuthorizationFlow) ProtoReflect() protoreflect.Message
- func (x *PKCEAuthorizationFlow) Reset()
- func (x *PKCEAuthorizationFlow) String() string
- type PKCEAuthorizationFlowRequest
- func (*PKCEAuthorizationFlowRequest) Descriptor() ([]byte, []int)deprecated
- func (*PKCEAuthorizationFlowRequest) ProtoMessage()
- func (x *PKCEAuthorizationFlowRequest) ProtoReflect() protoreflect.Message
- func (x *PKCEAuthorizationFlowRequest) Reset()
- func (x *PKCEAuthorizationFlowRequest) String() string
- type PasswordRequest
- type PathMapping
- func (*PathMapping) Descriptor() ([]byte, []int)deprecated
- func (x *PathMapping) GetOptions() *PathTargetOptions
- func (x *PathMapping) GetPath() string
- func (x *PathMapping) GetTarget() string
- func (*PathMapping) ProtoMessage()
- func (x *PathMapping) ProtoReflect() protoreflect.Message
- func (x *PathMapping) Reset()
- func (x *PathMapping) String() string
- type PathRewriteMode
- func (PathRewriteMode) Descriptor() protoreflect.EnumDescriptor
- func (x PathRewriteMode) Enum() *PathRewriteMode
- func (PathRewriteMode) EnumDescriptor() ([]byte, []int)deprecated
- func (x PathRewriteMode) Number() protoreflect.EnumNumber
- func (x PathRewriteMode) String() string
- func (PathRewriteMode) Type() protoreflect.EnumType
- type PathTargetOptions
- func (*PathTargetOptions) Descriptor() ([]byte, []int)deprecated
- func (x *PathTargetOptions) GetAgentNetwork() bool
- func (x *PathTargetOptions) GetCaptureContentTypes() []string
- func (x *PathTargetOptions) GetCaptureMaxRequestBytes() int64
- func (x *PathTargetOptions) GetCaptureMaxResponseBytes() int64
- func (x *PathTargetOptions) GetCustomHeaders() map[string]string
- func (x *PathTargetOptions) GetDirectUpstream() bool
- func (x *PathTargetOptions) GetDisableAccessLog() bool
- func (x *PathTargetOptions) GetMiddlewares() []*MiddlewareConfig
- func (x *PathTargetOptions) GetPathRewrite() PathRewriteMode
- func (x *PathTargetOptions) GetProxyProtocol() bool
- func (x *PathTargetOptions) GetRequestTimeout() *durationpb.Duration
- func (x *PathTargetOptions) GetSessionIdleTimeout() *durationpb.Duration
- func (x *PathTargetOptions) GetSkipTlsVerify() bool
- func (*PathTargetOptions) ProtoMessage()
- func (x *PathTargetOptions) ProtoReflect() protoreflect.Message
- func (x *PathTargetOptions) Reset()
- func (x *PathTargetOptions) String() string
- type PeerCapability
- func (PeerCapability) Descriptor() protoreflect.EnumDescriptor
- func (x PeerCapability) Enum() *PeerCapability
- func (PeerCapability) EnumDescriptor() ([]byte, []int)deprecated
- func (x PeerCapability) Number() protoreflect.EnumNumber
- func (x PeerCapability) String() string
- func (PeerCapability) Type() protoreflect.EnumType
- type PeerCompact
- func (*PeerCompact) Descriptor() ([]byte, []int)deprecated
- func (x *PeerCompact) GetAddedWithSsoLogin() bool
- func (x *PeerCompact) GetAgentVersion() string
- func (x *PeerCompact) GetDnsLabel() string
- func (x *PeerCompact) GetIp() []byte
- func (x *PeerCompact) GetIpv6() []byte
- func (x *PeerCompact) GetLastLoginUnixNano() int64
- func (x *PeerCompact) GetLoginExpirationEnabled() bool
- func (x *PeerCompact) GetServerSshAllowed() bool
- func (x *PeerCompact) GetSshEnabled() bool
- func (x *PeerCompact) GetSshPubKey() []byte
- func (x *PeerCompact) GetSupportsIpv6() bool
- func (x *PeerCompact) GetSupportsSourcePrefixes() bool
- func (x *PeerCompact) GetWgPubKey() []byte
- func (*PeerCompact) ProtoMessage()
- func (x *PeerCompact) ProtoReflect() protoreflect.Message
- func (x *PeerCompact) Reset()
- func (x *PeerCompact) String() string
- type PeerConfig
- func (*PeerConfig) Descriptor() ([]byte, []int)deprecated
- func (x *PeerConfig) GetAddress() string
- func (x *PeerConfig) GetAddressV6() []byte
- func (x *PeerConfig) GetAutoUpdate() *AutoUpdateSettings
- func (x *PeerConfig) GetDns() string
- func (x *PeerConfig) GetFqdn() string
- func (x *PeerConfig) GetLazyConnectionEnabled() bool
- func (x *PeerConfig) GetMtu() int32
- func (x *PeerConfig) GetRoutingPeerDnsResolutionEnabled() bool
- func (x *PeerConfig) GetSshConfig() *SSHConfig
- func (*PeerConfig) ProtoMessage()
- func (x *PeerConfig) ProtoReflect() protoreflect.Message
- func (x *PeerConfig) Reset()
- func (x *PeerConfig) String() string
- type PeerIndexSet
- type PeerKeys
- type PeerSystemMeta
- func (*PeerSystemMeta) Descriptor() ([]byte, []int)deprecated
- func (x *PeerSystemMeta) GetCapabilities() []PeerCapability
- func (x *PeerSystemMeta) GetCore() string
- func (x *PeerSystemMeta) GetEnvironment() *Environment
- func (x *PeerSystemMeta) GetFiles() []*File
- func (x *PeerSystemMeta) GetFlags() *Flags
- func (x *PeerSystemMeta) GetGoOS() string
- func (x *PeerSystemMeta) GetHostname() string
- func (x *PeerSystemMeta) GetKernel() string
- func (x *PeerSystemMeta) GetKernelVersion() string
- func (x *PeerSystemMeta) GetNetbirdVersion() string
- func (x *PeerSystemMeta) GetNetworkAddresses() []*NetworkAddress
- func (x *PeerSystemMeta) GetOS() string
- func (x *PeerSystemMeta) GetOSVersion() string
- func (x *PeerSystemMeta) GetPlatform() string
- func (x *PeerSystemMeta) GetSyncMessageVersion() int32
- func (x *PeerSystemMeta) GetSysManufacturer() string
- func (x *PeerSystemMeta) GetSysProductName() string
- func (x *PeerSystemMeta) GetSysSerialNumber() string
- func (x *PeerSystemMeta) GetUiVersion() string
- func (*PeerSystemMeta) ProtoMessage()
- func (x *PeerSystemMeta) ProtoReflect() protoreflect.Message
- func (x *PeerSystemMeta) Reset()
- func (x *PeerSystemMeta) String() string
- type PinRequest
- type PolicyCompact
- func (*PolicyCompact) Descriptor() ([]byte, []int)deprecated
- func (x *PolicyCompact) GetAction() RuleAction
- func (x *PolicyCompact) GetAuthorizedGroups() map[string]*UserNameList
- func (x *PolicyCompact) GetAuthorizedUser() string
- func (x *PolicyCompact) GetBidirectional() bool
- func (x *PolicyCompact) GetDestinationGroupIds() []string
- func (x *PolicyCompact) GetDestinationResource() *ResourceCompact
- func (x *PolicyCompact) GetId() string
- func (x *PolicyCompact) GetPortRanges() []*PortInfo_Range
- func (x *PolicyCompact) GetPorts() []uint32
- func (x *PolicyCompact) GetProtocol() RuleProtocol
- func (x *PolicyCompact) GetSourceGroupIds() []string
- func (x *PolicyCompact) GetSourcePostureCheckIds() []string
- func (x *PolicyCompact) GetSourceResource() *ResourceCompact
- func (*PolicyCompact) ProtoMessage()
- func (x *PolicyCompact) ProtoReflect() protoreflect.Message
- func (x *PolicyCompact) Reset()
- func (x *PolicyCompact) String() string
- type PolicyIds
- type PortInfo
- func (*PortInfo) Descriptor() ([]byte, []int)deprecated
- func (x *PortInfo) GetPort() uint32
- func (m *PortInfo) GetPortSelection() isPortInfo_PortSelection
- func (x *PortInfo) GetRange() *PortInfo_Range
- func (*PortInfo) ProtoMessage()
- func (x *PortInfo) ProtoReflect() protoreflect.Message
- func (x *PortInfo) Reset()
- func (x *PortInfo) String() string
- type PortInfo_Port
- type PortInfo_Range
- func (*PortInfo_Range) Descriptor() ([]byte, []int)deprecated
- func (x *PortInfo_Range) GetEnd() uint32
- func (x *PortInfo_Range) GetStart() uint32
- func (*PortInfo_Range) ProtoMessage()
- func (x *PortInfo_Range) ProtoReflect() protoreflect.Message
- func (x *PortInfo_Range) Reset()
- func (x *PortInfo_Range) String() string
- type PortInfo_Range_
- type ProtectedHostConfig
- func (*ProtectedHostConfig) Descriptor() ([]byte, []int)deprecated
- func (x *ProtectedHostConfig) GetHostConfig() *HostConfig
- func (x *ProtectedHostConfig) GetPassword() string
- func (x *ProtectedHostConfig) GetUser() string
- func (*ProtectedHostConfig) ProtoMessage()
- func (x *ProtectedHostConfig) ProtoReflect() protoreflect.Message
- func (x *ProtectedHostConfig) Reset()
- func (x *ProtectedHostConfig) String() string
- type ProviderConfig
- func (*ProviderConfig) Descriptor() ([]byte, []int)deprecated
- func (x *ProviderConfig) GetAudience() string
- func (x *ProviderConfig) GetAuthorizationEndpoint() string
- func (x *ProviderConfig) GetClientID() string
- func (x *ProviderConfig) GetClientSecret() stringdeprecated
- func (x *ProviderConfig) GetDeviceAuthEndpoint() string
- func (x *ProviderConfig) GetDisablePromptLogin() bool
- func (x *ProviderConfig) GetDomain() string
- func (x *ProviderConfig) GetLoginFlag() uint32
- func (x *ProviderConfig) GetRedirectURLs() []string
- func (x *ProviderConfig) GetScope() string
- func (x *ProviderConfig) GetTokenEndpoint() string
- func (x *ProviderConfig) GetUseIDToken() bool
- func (*ProviderConfig) ProtoMessage()
- func (x *ProviderConfig) ProtoReflect() protoreflect.Message
- func (x *ProviderConfig) Reset()
- func (x *ProviderConfig) String() string
- type ProxyCapabilities
- func (*ProxyCapabilities) Descriptor() ([]byte, []int)deprecated
- func (x *ProxyCapabilities) GetPrivate() bool
- func (x *ProxyCapabilities) GetRequireSubdomain() bool
- func (x *ProxyCapabilities) GetSupportsCrowdsec() bool
- func (x *ProxyCapabilities) GetSupportsCustomPorts() bool
- func (x *ProxyCapabilities) GetSupportsPrivateService() bool
- func (*ProxyCapabilities) ProtoMessage()
- func (x *ProxyCapabilities) ProtoReflect() protoreflect.Message
- func (x *ProxyCapabilities) Reset()
- func (x *ProxyCapabilities) String() string
- type ProxyInboundListener
- func (*ProxyInboundListener) Descriptor() ([]byte, []int)deprecated
- func (x *ProxyInboundListener) GetHttpPort() uint32
- func (x *ProxyInboundListener) GetHttpsPort() uint32
- func (x *ProxyInboundListener) GetTunnelIp() string
- func (*ProxyInboundListener) ProtoMessage()
- func (x *ProxyInboundListener) ProtoReflect() protoreflect.Message
- func (x *ProxyInboundListener) Reset()
- func (x *ProxyInboundListener) String() string
- type ProxyMapping
- func (*ProxyMapping) Descriptor() ([]byte, []int)deprecated
- func (x *ProxyMapping) GetAccessRestrictions() *AccessRestrictions
- func (x *ProxyMapping) GetAccountId() string
- func (x *ProxyMapping) GetAuth() *Authentication
- func (x *ProxyMapping) GetAuthToken() string
- func (x *ProxyMapping) GetDomain() string
- func (x *ProxyMapping) GetId() string
- func (x *ProxyMapping) GetListenPort() int32
- func (x *ProxyMapping) GetMode() string
- func (x *ProxyMapping) GetPassHostHeader() bool
- func (x *ProxyMapping) GetPath() []*PathMapping
- func (x *ProxyMapping) GetPrivate() bool
- func (x *ProxyMapping) GetRewriteRedirects() bool
- func (x *ProxyMapping) GetType() ProxyMappingUpdateType
- func (*ProxyMapping) ProtoMessage()
- func (x *ProxyMapping) ProtoReflect() protoreflect.Message
- func (x *ProxyMapping) Reset()
- func (x *ProxyMapping) String() string
- type ProxyMappingUpdateType
- func (ProxyMappingUpdateType) Descriptor() protoreflect.EnumDescriptor
- func (x ProxyMappingUpdateType) Enum() *ProxyMappingUpdateType
- func (ProxyMappingUpdateType) EnumDescriptor() ([]byte, []int)deprecated
- func (x ProxyMappingUpdateType) Number() protoreflect.EnumNumber
- func (x ProxyMappingUpdateType) String() string
- func (ProxyMappingUpdateType) Type() protoreflect.EnumType
- type ProxyPatch
- func (*ProxyPatch) Descriptor() ([]byte, []int)deprecated
- func (x *ProxyPatch) GetFirewallRules() []*FirewallRule
- func (x *ProxyPatch) GetForwardingRules() []*ForwardingRule
- func (x *ProxyPatch) GetOfflinePeers() []*RemotePeerConfig
- func (x *ProxyPatch) GetPeers() []*RemotePeerConfig
- func (x *ProxyPatch) GetRouteFirewallRules() []*RouteFirewallRule
- func (x *ProxyPatch) GetRoutes() []*Route
- func (*ProxyPatch) ProtoMessage()
- func (x *ProxyPatch) ProtoReflect() protoreflect.Message
- func (x *ProxyPatch) Reset()
- func (x *ProxyPatch) String() string
- type ProxyServiceClient
- type ProxyServiceServer
- type ProxyService_GetMappingUpdateClient
- type ProxyService_GetMappingUpdateServer
- type ProxyService_SyncMappingsClient
- type ProxyService_SyncMappingsServer
- type ProxyStatus
- func (ProxyStatus) Descriptor() protoreflect.EnumDescriptor
- func (x ProxyStatus) Enum() *ProxyStatus
- func (ProxyStatus) EnumDescriptor() ([]byte, []int)deprecated
- func (x ProxyStatus) Number() protoreflect.EnumNumber
- func (x ProxyStatus) String() string
- func (ProxyStatus) Type() protoreflect.EnumType
- type RecordLLMUsageRequest
- func (*RecordLLMUsageRequest) Descriptor() ([]byte, []int)deprecated
- func (x *RecordLLMUsageRequest) GetAccountId() string
- func (x *RecordLLMUsageRequest) GetCostUsd() float64
- func (x *RecordLLMUsageRequest) GetGroupId() string
- func (x *RecordLLMUsageRequest) GetGroupIds() []string
- func (x *RecordLLMUsageRequest) GetTokensInput() int64
- func (x *RecordLLMUsageRequest) GetTokensOutput() int64
- func (x *RecordLLMUsageRequest) GetUserId() string
- func (x *RecordLLMUsageRequest) GetWindowSeconds() int64
- func (*RecordLLMUsageRequest) ProtoMessage()
- func (x *RecordLLMUsageRequest) ProtoReflect() protoreflect.Message
- func (x *RecordLLMUsageRequest) Reset()
- func (x *RecordLLMUsageRequest) String() string
- type RecordLLMUsageResponse
- type RelayConfig
- func (*RelayConfig) Descriptor() ([]byte, []int)deprecated
- func (x *RelayConfig) GetTokenPayload() string
- func (x *RelayConfig) GetTokenSignature() string
- func (x *RelayConfig) GetUrls() []string
- func (*RelayConfig) ProtoMessage()
- func (x *RelayConfig) ProtoReflect() protoreflect.Message
- func (x *RelayConfig) Reset()
- func (x *RelayConfig) String() string
- type RemotePeerConfig
- func (*RemotePeerConfig) Descriptor() ([]byte, []int)deprecated
- func (x *RemotePeerConfig) GetAgentVersion() string
- func (x *RemotePeerConfig) GetAllowedIps() []string
- func (x *RemotePeerConfig) GetFqdn() string
- func (x *RemotePeerConfig) GetSshConfig() *SSHConfig
- func (x *RemotePeerConfig) GetWgPubKey() string
- func (*RemotePeerConfig) ProtoMessage()
- func (x *RemotePeerConfig) ProtoReflect() protoreflect.Message
- func (x *RemotePeerConfig) Reset()
- func (x *RemotePeerConfig) String() string
- type RenewExposeRequest
- func (*RenewExposeRequest) Descriptor() ([]byte, []int)deprecated
- func (x *RenewExposeRequest) GetDomain() string
- func (*RenewExposeRequest) ProtoMessage()
- func (x *RenewExposeRequest) ProtoReflect() protoreflect.Message
- func (x *RenewExposeRequest) Reset()
- func (x *RenewExposeRequest) String() string
- type RenewExposeResponse
- type ResourceCompact
- func (*ResourceCompact) Descriptor() ([]byte, []int)deprecated
- func (x *ResourceCompact) GetPeerIndex() uint32
- func (x *ResourceCompact) GetPeerIndexSet() bool
- func (x *ResourceCompact) GetType() string
- func (*ResourceCompact) ProtoMessage()
- func (x *ResourceCompact) ProtoReflect() protoreflect.Message
- func (x *ResourceCompact) Reset()
- func (x *ResourceCompact) String() string
- type Route
- func (*Route) Descriptor() ([]byte, []int)deprecated
- func (x *Route) GetDomains() []string
- func (x *Route) GetID() string
- func (x *Route) GetKeepRoute() bool
- func (x *Route) GetMasquerade() bool
- func (x *Route) GetMetric() int64
- func (x *Route) GetNetID() string
- func (x *Route) GetNetwork() string
- func (x *Route) GetNetworkType() int64
- func (x *Route) GetPeer() string
- func (x *Route) GetSkipAutoApply() bool
- func (*Route) ProtoMessage()
- func (x *Route) ProtoReflect() protoreflect.Message
- func (x *Route) Reset()
- func (x *Route) String() string
- type RouteFirewallRule
- func (*RouteFirewallRule) Descriptor() ([]byte, []int)deprecated
- func (x *RouteFirewallRule) GetAction() RuleAction
- func (x *RouteFirewallRule) GetCustomProtocol() uint32
- func (x *RouteFirewallRule) GetDestination() string
- func (x *RouteFirewallRule) GetDomains() []string
- func (x *RouteFirewallRule) GetIsDynamic() bool
- func (x *RouteFirewallRule) GetPolicyID() []byte
- func (x *RouteFirewallRule) GetPortInfo() *PortInfo
- func (x *RouteFirewallRule) GetProtocol() RuleProtocol
- func (x *RouteFirewallRule) GetRouteID() string
- func (x *RouteFirewallRule) GetSourceRanges() []string
- func (*RouteFirewallRule) ProtoMessage()
- func (x *RouteFirewallRule) ProtoReflect() protoreflect.Message
- func (x *RouteFirewallRule) Reset()
- func (x *RouteFirewallRule) String() string
- type RouteRaw
- func (*RouteRaw) Descriptor() ([]byte, []int)deprecated
- func (x *RouteRaw) GetAccessControlGroupIds() []string
- func (x *RouteRaw) GetDescription() string
- func (x *RouteRaw) GetDomains() []string
- func (x *RouteRaw) GetEnabled() bool
- func (x *RouteRaw) GetGroupIds() []string
- func (x *RouteRaw) GetId() string
- func (x *RouteRaw) GetKeepRoute() bool
- func (x *RouteRaw) GetMasquerade() bool
- func (x *RouteRaw) GetMetric() int32
- func (x *RouteRaw) GetNetId() string
- func (x *RouteRaw) GetNetworkCidr() string
- func (x *RouteRaw) GetNetworkType() int32
- func (x *RouteRaw) GetPeerGroupIds() []string
- func (x *RouteRaw) GetPeerIndex() uint32
- func (x *RouteRaw) GetPeerIndexSet() bool
- func (x *RouteRaw) GetSkipAutoApply() bool
- func (*RouteRaw) ProtoMessage()
- func (x *RouteRaw) ProtoReflect() protoreflect.Message
- func (x *RouteRaw) Reset()
- func (x *RouteRaw) String() string
- type RuleAction
- type RuleDirection
- func (RuleDirection) Descriptor() protoreflect.EnumDescriptor
- func (x RuleDirection) Enum() *RuleDirection
- func (RuleDirection) EnumDescriptor() ([]byte, []int)deprecated
- func (x RuleDirection) Number() protoreflect.EnumNumber
- func (x RuleDirection) String() string
- func (RuleDirection) Type() protoreflect.EnumType
- type RuleProtocol
- func (RuleProtocol) Descriptor() protoreflect.EnumDescriptor
- func (x RuleProtocol) Enum() *RuleProtocol
- func (RuleProtocol) EnumDescriptor() ([]byte, []int)deprecated
- func (x RuleProtocol) Number() protoreflect.EnumNumber
- func (x RuleProtocol) String() string
- func (RuleProtocol) Type() protoreflect.EnumType
- type SSHAuth
- func (*SSHAuth) Descriptor() ([]byte, []int)deprecated
- func (x *SSHAuth) GetAuthorizedUsers() [][]byte
- func (x *SSHAuth) GetMachineUsers() map[string]*MachineUserIndexes
- func (x *SSHAuth) GetUserIDClaim() string
- func (*SSHAuth) ProtoMessage()
- func (x *SSHAuth) ProtoReflect() protoreflect.Message
- func (x *SSHAuth) Reset()
- func (x *SSHAuth) String() string
- type SSHConfig
- func (*SSHConfig) Descriptor() ([]byte, []int)deprecated
- func (x *SSHConfig) GetJwtConfig() *JWTConfig
- func (x *SSHConfig) GetSshEnabled() bool
- func (x *SSHConfig) GetSshPubKey() []byte
- func (*SSHConfig) ProtoMessage()
- func (x *SSHConfig) ProtoReflect() protoreflect.Message
- func (x *SSHConfig) Reset()
- func (x *SSHConfig) String() string
- type SendAccessLogRequest
- func (*SendAccessLogRequest) Descriptor() ([]byte, []int)deprecated
- func (x *SendAccessLogRequest) GetLog() *AccessLog
- func (*SendAccessLogRequest) ProtoMessage()
- func (x *SendAccessLogRequest) ProtoReflect() protoreflect.Message
- func (x *SendAccessLogRequest) Reset()
- func (x *SendAccessLogRequest) String() string
- type SendAccessLogResponse
- type SendStatusUpdateRequest
- func (*SendStatusUpdateRequest) Descriptor() ([]byte, []int)deprecated
- func (x *SendStatusUpdateRequest) GetAccountId() string
- func (x *SendStatusUpdateRequest) GetCertificateIssued() bool
- func (x *SendStatusUpdateRequest) GetErrorMessage() string
- func (x *SendStatusUpdateRequest) GetInboundListener() *ProxyInboundListener
- func (x *SendStatusUpdateRequest) GetServiceId() string
- func (x *SendStatusUpdateRequest) GetStatus() ProxyStatus
- func (*SendStatusUpdateRequest) ProtoMessage()
- func (x *SendStatusUpdateRequest) ProtoReflect() protoreflect.Message
- func (x *SendStatusUpdateRequest) Reset()
- func (x *SendStatusUpdateRequest) String() string
- type SendStatusUpdateResponse
- type ServerKeyResponse
- func (*ServerKeyResponse) Descriptor() ([]byte, []int)deprecated
- func (x *ServerKeyResponse) GetExpiresAt() *timestamppb.Timestamp
- func (x *ServerKeyResponse) GetKey() string
- func (x *ServerKeyResponse) GetVersion() int32
- func (*ServerKeyResponse) ProtoMessage()
- func (x *ServerKeyResponse) ProtoReflect() protoreflect.Message
- func (x *ServerKeyResponse) Reset()
- func (x *ServerKeyResponse) String() string
- type SimpleRecord
- func (*SimpleRecord) Descriptor() ([]byte, []int)deprecated
- func (x *SimpleRecord) GetClass() string
- func (x *SimpleRecord) GetName() string
- func (x *SimpleRecord) GetRData() string
- func (x *SimpleRecord) GetTTL() int64
- func (x *SimpleRecord) GetType() int64
- func (*SimpleRecord) ProtoMessage()
- func (x *SimpleRecord) ProtoReflect() protoreflect.Message
- func (x *SimpleRecord) Reset()
- func (x *SimpleRecord) String() string
- type StopExposeRequest
- type StopExposeResponse
- type SyncMappingsAck
- type SyncMappingsInit
- func (*SyncMappingsInit) Descriptor() ([]byte, []int)deprecated
- func (x *SyncMappingsInit) GetAddress() string
- func (x *SyncMappingsInit) GetCapabilities() *ProxyCapabilities
- func (x *SyncMappingsInit) GetProxyId() string
- func (x *SyncMappingsInit) GetStartedAt() *timestamppb.Timestamp
- func (x *SyncMappingsInit) GetVersion() string
- func (*SyncMappingsInit) ProtoMessage()
- func (x *SyncMappingsInit) ProtoReflect() protoreflect.Message
- func (x *SyncMappingsInit) Reset()
- func (x *SyncMappingsInit) String() string
- type SyncMappingsRequest
- func (*SyncMappingsRequest) Descriptor() ([]byte, []int)deprecated
- func (x *SyncMappingsRequest) GetAck() *SyncMappingsAck
- func (x *SyncMappingsRequest) GetInit() *SyncMappingsInit
- func (m *SyncMappingsRequest) GetMsg() isSyncMappingsRequest_Msg
- func (*SyncMappingsRequest) ProtoMessage()
- func (x *SyncMappingsRequest) ProtoReflect() protoreflect.Message
- func (x *SyncMappingsRequest) Reset()
- func (x *SyncMappingsRequest) String() string
- type SyncMappingsRequest_Ack
- type SyncMappingsRequest_Init
- type SyncMappingsResponse
- func (*SyncMappingsResponse) Descriptor() ([]byte, []int)deprecated
- func (x *SyncMappingsResponse) GetInitialSyncComplete() bool
- func (x *SyncMappingsResponse) GetMapping() []*ProxyMapping
- func (*SyncMappingsResponse) ProtoMessage()
- func (x *SyncMappingsResponse) ProtoReflect() protoreflect.Message
- func (x *SyncMappingsResponse) Reset()
- func (x *SyncMappingsResponse) String() string
- type SyncMetaRequest
- type SyncRequest
- type SyncResponse
- func (*SyncResponse) Descriptor() ([]byte, []int)deprecated
- func (x *SyncResponse) GetChecks() []*Checks
- func (x *SyncResponse) GetNetbirdConfig() *NetbirdConfig
- func (x *SyncResponse) GetNetworkMap() *NetworkMap
- func (x *SyncResponse) GetNetworkMapEnvelope() *NetworkMapEnvelope
- func (x *SyncResponse) GetPeerConfig() *PeerConfig
- func (x *SyncResponse) GetRemotePeers() []*RemotePeerConfig
- func (x *SyncResponse) GetRemotePeersIsEmpty() bool
- func (x *SyncResponse) GetSessionExpiresAt() *timestamppb.Timestamp
- func (x *SyncResponse) GetVersion() int32
- func (*SyncResponse) ProtoMessage()
- func (x *SyncResponse) ProtoReflect() protoreflect.Message
- func (x *SyncResponse) Reset()
- func (x *SyncResponse) String() string
- type UnimplementedManagementServiceServer
- func (UnimplementedManagementServiceServer) CreateExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) ExtendAuthSession(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) GetDeviceAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) GetPKCEAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) GetServerKey(context.Context, *Empty) (*ServerKeyResponse, error)
- func (UnimplementedManagementServiceServer) IsHealthy(context.Context, *Empty) (*Empty, error)
- func (UnimplementedManagementServiceServer) Job(ManagementService_JobServer) error
- func (UnimplementedManagementServiceServer) Login(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) Logout(context.Context, *EncryptedMessage) (*Empty, error)
- func (UnimplementedManagementServiceServer) RenewExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) StopExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
- func (UnimplementedManagementServiceServer) Sync(*EncryptedMessage, ManagementService_SyncServer) error
- func (UnimplementedManagementServiceServer) SyncMeta(context.Context, *EncryptedMessage) (*Empty, error)
- type UnimplementedProxyServiceServer
- func (UnimplementedProxyServiceServer) Authenticate(context.Context, *AuthenticateRequest) (*AuthenticateResponse, error)
- func (UnimplementedProxyServiceServer) CheckLLMPolicyLimits(context.Context, *CheckLLMPolicyLimitsRequest) (*CheckLLMPolicyLimitsResponse, error)
- func (UnimplementedProxyServiceServer) CreateProxyPeer(context.Context, *CreateProxyPeerRequest) (*CreateProxyPeerResponse, error)
- func (UnimplementedProxyServiceServer) GetMappingUpdate(*GetMappingUpdateRequest, ProxyService_GetMappingUpdateServer) error
- func (UnimplementedProxyServiceServer) GetOIDCURL(context.Context, *GetOIDCURLRequest) (*GetOIDCURLResponse, error)
- func (UnimplementedProxyServiceServer) RecordLLMUsage(context.Context, *RecordLLMUsageRequest) (*RecordLLMUsageResponse, error)
- func (UnimplementedProxyServiceServer) SendAccessLog(context.Context, *SendAccessLogRequest) (*SendAccessLogResponse, error)
- func (UnimplementedProxyServiceServer) SendStatusUpdate(context.Context, *SendStatusUpdateRequest) (*SendStatusUpdateResponse, error)
- func (UnimplementedProxyServiceServer) SyncMappings(ProxyService_SyncMappingsServer) error
- func (UnimplementedProxyServiceServer) ValidateSession(context.Context, *ValidateSessionRequest) (*ValidateSessionResponse, error)
- func (UnimplementedProxyServiceServer) ValidateTunnelPeer(context.Context, *ValidateTunnelPeerRequest) (*ValidateTunnelPeerResponse, error)
- type UnsafeManagementServiceServer
- type UnsafeProxyServiceServer
- type UserIDList
- type UserNameList
- type ValidateSessionRequest
- func (*ValidateSessionRequest) Descriptor() ([]byte, []int)deprecated
- func (x *ValidateSessionRequest) GetDomain() string
- func (x *ValidateSessionRequest) GetSessionToken() string
- func (*ValidateSessionRequest) ProtoMessage()
- func (x *ValidateSessionRequest) ProtoReflect() protoreflect.Message
- func (x *ValidateSessionRequest) Reset()
- func (x *ValidateSessionRequest) String() string
- type ValidateSessionResponse
- func (*ValidateSessionResponse) Descriptor() ([]byte, []int)deprecated
- func (x *ValidateSessionResponse) GetDeniedReason() string
- func (x *ValidateSessionResponse) GetPeerGroupIds() []string
- func (x *ValidateSessionResponse) GetPeerGroupNames() []string
- func (x *ValidateSessionResponse) GetUserEmail() string
- func (x *ValidateSessionResponse) GetUserId() string
- func (x *ValidateSessionResponse) GetValid() bool
- func (*ValidateSessionResponse) ProtoMessage()
- func (x *ValidateSessionResponse) ProtoReflect() protoreflect.Message
- func (x *ValidateSessionResponse) Reset()
- func (x *ValidateSessionResponse) String() string
- type ValidateTunnelPeerRequest
- func (*ValidateTunnelPeerRequest) Descriptor() ([]byte, []int)deprecated
- func (x *ValidateTunnelPeerRequest) GetDomain() string
- func (x *ValidateTunnelPeerRequest) GetTunnelIp() string
- func (*ValidateTunnelPeerRequest) ProtoMessage()
- func (x *ValidateTunnelPeerRequest) ProtoReflect() protoreflect.Message
- func (x *ValidateTunnelPeerRequest) Reset()
- func (x *ValidateTunnelPeerRequest) String() string
- type ValidateTunnelPeerResponse
- func (*ValidateTunnelPeerResponse) Descriptor() ([]byte, []int)deprecated
- func (x *ValidateTunnelPeerResponse) GetDeniedReason() string
- func (x *ValidateTunnelPeerResponse) GetPeerGroupIds() []string
- func (x *ValidateTunnelPeerResponse) GetPeerGroupNames() []string
- func (x *ValidateTunnelPeerResponse) GetSessionToken() string
- func (x *ValidateTunnelPeerResponse) GetUserEmail() string
- func (x *ValidateTunnelPeerResponse) GetUserId() string
- func (x *ValidateTunnelPeerResponse) GetValid() bool
- func (*ValidateTunnelPeerResponse) ProtoMessage()
- func (x *ValidateTunnelPeerResponse) ProtoReflect() protoreflect.Message
- func (x *ValidateTunnelPeerResponse) Reset()
- func (x *ValidateTunnelPeerResponse) String() string
Constants ¶
This section is empty.
Variables ¶
var ( JobStatus_name = map[int32]string{ 0: "unknown_status", 1: "succeeded", 2: "failed", } JobStatus_value = map[string]int32{ "unknown_status": 0, "succeeded": 1, "failed": 2, } )
Enum value maps for JobStatus.
var ( PeerCapability_name = map[int32]string{ 0: "PeerCapabilityUnknown", 1: "PeerCapabilitySourcePrefixes", 2: "PeerCapabilityIPv6Overlay", 3: "PeerCapabilityComponentNetworkMap", } PeerCapability_value = map[string]int32{ "PeerCapabilityUnknown": 0, "PeerCapabilitySourcePrefixes": 1, "PeerCapabilityIPv6Overlay": 2, "PeerCapabilityComponentNetworkMap": 3, } )
Enum value maps for PeerCapability.
var ( RuleProtocol_name = map[int32]string{ 0: "UNKNOWN", 1: "ALL", 2: "TCP", 3: "UDP", 4: "ICMP", 5: "CUSTOM", 6: "NETBIRD_SSH", } RuleProtocol_value = map[string]int32{ "UNKNOWN": 0, "ALL": 1, "TCP": 2, "UDP": 3, "ICMP": 4, "CUSTOM": 5, "NETBIRD_SSH": 6, } )
Enum value maps for RuleProtocol.
var ( RuleDirection_name = map[int32]string{ 0: "IN", 1: "OUT", } RuleDirection_value = map[string]int32{ "IN": 0, "OUT": 1, } )
Enum value maps for RuleDirection.
var ( RuleAction_name = map[int32]string{ 0: "ACCEPT", 1: "DROP", } RuleAction_value = map[string]int32{ "ACCEPT": 0, "DROP": 1, } )
Enum value maps for RuleAction.
var ( ExposeProtocol_name = map[int32]string{ 0: "EXPOSE_HTTP", 1: "EXPOSE_HTTPS", 2: "EXPOSE_TCP", 3: "EXPOSE_UDP", 4: "EXPOSE_TLS", } ExposeProtocol_value = map[string]int32{ "EXPOSE_HTTP": 0, "EXPOSE_HTTPS": 1, "EXPOSE_TCP": 2, "EXPOSE_UDP": 3, "EXPOSE_TLS": 4, } )
Enum value maps for ExposeProtocol.
var ( HostConfig_Protocol_name = map[int32]string{ 0: "UDP", 1: "TCP", 2: "HTTP", 3: "HTTPS", 4: "DTLS", } HostConfig_Protocol_value = map[string]int32{ "UDP": 0, "TCP": 1, "HTTP": 2, "HTTPS": 3, "DTLS": 4, } )
Enum value maps for HostConfig_Protocol.
var ( DeviceAuthorizationFlowProvider_name = map[int32]string{ 0: "HOSTED", } DeviceAuthorizationFlowProvider_value = map[string]int32{ "HOSTED": 0, } )
Enum value maps for DeviceAuthorizationFlowProvider.
var ( ProxyMappingUpdateType_name = map[int32]string{ 0: "UPDATE_TYPE_CREATED", 1: "UPDATE_TYPE_MODIFIED", 2: "UPDATE_TYPE_REMOVED", } ProxyMappingUpdateType_value = map[string]int32{ "UPDATE_TYPE_CREATED": 0, "UPDATE_TYPE_MODIFIED": 1, "UPDATE_TYPE_REMOVED": 2, } )
Enum value maps for ProxyMappingUpdateType.
var ( PathRewriteMode_name = map[int32]string{ 0: "PATH_REWRITE_DEFAULT", 1: "PATH_REWRITE_PRESERVE", } PathRewriteMode_value = map[string]int32{ "PATH_REWRITE_DEFAULT": 0, "PATH_REWRITE_PRESERVE": 1, } )
Enum value maps for PathRewriteMode.
var ( MiddlewareSlot_name = map[int32]string{ 0: "MIDDLEWARE_SLOT_UNSPECIFIED", 1: "MIDDLEWARE_SLOT_ON_REQUEST", 2: "MIDDLEWARE_SLOT_ON_RESPONSE", 3: "MIDDLEWARE_SLOT_TERMINAL", } MiddlewareSlot_value = map[string]int32{ "MIDDLEWARE_SLOT_UNSPECIFIED": 0, "MIDDLEWARE_SLOT_ON_REQUEST": 1, "MIDDLEWARE_SLOT_ON_RESPONSE": 2, "MIDDLEWARE_SLOT_TERMINAL": 3, } )
Enum value maps for MiddlewareSlot.
var ( ProxyStatus_name = map[int32]string{ 0: "PROXY_STATUS_PENDING", 1: "PROXY_STATUS_ACTIVE", 2: "PROXY_STATUS_TUNNEL_NOT_CREATED", 3: "PROXY_STATUS_CERTIFICATE_PENDING", 4: "PROXY_STATUS_CERTIFICATE_FAILED", 5: "PROXY_STATUS_ERROR", } ProxyStatus_value = map[string]int32{ "PROXY_STATUS_PENDING": 0, "PROXY_STATUS_ACTIVE": 1, "PROXY_STATUS_TUNNEL_NOT_CREATED": 2, "PROXY_STATUS_CERTIFICATE_PENDING": 3, "PROXY_STATUS_CERTIFICATE_FAILED": 4, "PROXY_STATUS_ERROR": 5, } )
Enum value maps for ProxyStatus.
var ( MiddlewareConfig_FailMode_name = map[int32]string{ 0: "FAIL_OPEN", 1: "FAIL_CLOSED", } MiddlewareConfig_FailMode_value = map[string]int32{ "FAIL_OPEN": 0, "FAIL_CLOSED": 1, } )
Enum value maps for MiddlewareConfig_FailMode.
var File_management_proto protoreflect.FileDescriptor
var File_proxy_service_proto protoreflect.FileDescriptor
var ManagementService_ServiceDesc = grpc.ServiceDesc{ ServiceName: "management.ManagementService", HandlerType: (*ManagementServiceServer)(nil), Methods: []grpc.MethodDesc{ { MethodName: "Login", Handler: _ManagementService_Login_Handler, }, { MethodName: "GetServerKey", Handler: _ManagementService_GetServerKey_Handler, }, { MethodName: "isHealthy", Handler: _ManagementService_IsHealthy_Handler, }, { MethodName: "GetDeviceAuthorizationFlow", Handler: _ManagementService_GetDeviceAuthorizationFlow_Handler, }, { MethodName: "GetPKCEAuthorizationFlow", Handler: _ManagementService_GetPKCEAuthorizationFlow_Handler, }, { MethodName: "SyncMeta", Handler: _ManagementService_SyncMeta_Handler, }, { MethodName: "Logout", Handler: _ManagementService_Logout_Handler, }, { MethodName: "ExtendAuthSession", Handler: _ManagementService_ExtendAuthSession_Handler, }, { MethodName: "CreateExpose", Handler: _ManagementService_CreateExpose_Handler, }, { MethodName: "RenewExpose", Handler: _ManagementService_RenewExpose_Handler, }, { MethodName: "StopExpose", Handler: _ManagementService_StopExpose_Handler, }, }, Streams: []grpc.StreamDesc{ { StreamName: "Sync", Handler: _ManagementService_Sync_Handler, ServerStreams: true, }, { StreamName: "Job", Handler: _ManagementService_Job_Handler, ServerStreams: true, ClientStreams: true, }, }, Metadata: "management.proto", }
ManagementService_ServiceDesc is the grpc.ServiceDesc for ManagementService service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)
var ProxyService_ServiceDesc = grpc.ServiceDesc{ ServiceName: "management.ProxyService", HandlerType: (*ProxyServiceServer)(nil), Methods: []grpc.MethodDesc{ { MethodName: "SendAccessLog", Handler: _ProxyService_SendAccessLog_Handler, }, { MethodName: "Authenticate", Handler: _ProxyService_Authenticate_Handler, }, { MethodName: "SendStatusUpdate", Handler: _ProxyService_SendStatusUpdate_Handler, }, { MethodName: "CreateProxyPeer", Handler: _ProxyService_CreateProxyPeer_Handler, }, { MethodName: "GetOIDCURL", Handler: _ProxyService_GetOIDCURL_Handler, }, { MethodName: "ValidateSession", Handler: _ProxyService_ValidateSession_Handler, }, { MethodName: "ValidateTunnelPeer", Handler: _ProxyService_ValidateTunnelPeer_Handler, }, { MethodName: "CheckLLMPolicyLimits", Handler: _ProxyService_CheckLLMPolicyLimits_Handler, }, { MethodName: "RecordLLMUsage", Handler: _ProxyService_RecordLLMUsage_Handler, }, }, Streams: []grpc.StreamDesc{ { StreamName: "GetMappingUpdate", Handler: _ProxyService_GetMappingUpdate_Handler, ServerStreams: true, }, { StreamName: "SyncMappings", Handler: _ProxyService_SyncMappings_Handler, ServerStreams: true, ClientStreams: true, }, }, Metadata: "proxy_service.proto", }
ProxyService_ServiceDesc is the grpc.ServiceDesc for ProxyService service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)
Functions ¶
func RegisterManagementServiceServer ¶
func RegisterManagementServiceServer(s grpc.ServiceRegistrar, srv ManagementServiceServer)
func RegisterProxyServiceServer ¶ added in v0.65.0
func RegisterProxyServiceServer(s grpc.ServiceRegistrar, srv ProxyServiceServer)
Types ¶
type AccessLog ¶ added in v0.65.0
type AccessLog struct {
Timestamp *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=timestamp,proto3" json:"timestamp,omitempty"`
LogId string `protobuf:"bytes,2,opt,name=log_id,json=logId,proto3" json:"log_id,omitempty"`
AccountId string `protobuf:"bytes,3,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
ServiceId string `protobuf:"bytes,4,opt,name=service_id,json=serviceId,proto3" json:"service_id,omitempty"`
Host string `protobuf:"bytes,5,opt,name=host,proto3" json:"host,omitempty"`
Path string `protobuf:"bytes,6,opt,name=path,proto3" json:"path,omitempty"`
DurationMs int64 `protobuf:"varint,7,opt,name=duration_ms,json=durationMs,proto3" json:"duration_ms,omitempty"`
Method string `protobuf:"bytes,8,opt,name=method,proto3" json:"method,omitempty"`
ResponseCode int32 `protobuf:"varint,9,opt,name=response_code,json=responseCode,proto3" json:"response_code,omitempty"`
SourceIp string `protobuf:"bytes,10,opt,name=source_ip,json=sourceIp,proto3" json:"source_ip,omitempty"`
AuthMechanism string `protobuf:"bytes,11,opt,name=auth_mechanism,json=authMechanism,proto3" json:"auth_mechanism,omitempty"`
UserId string `protobuf:"bytes,12,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
AuthSuccess bool `protobuf:"varint,13,opt,name=auth_success,json=authSuccess,proto3" json:"auth_success,omitempty"`
BytesUpload int64 `protobuf:"varint,14,opt,name=bytes_upload,json=bytesUpload,proto3" json:"bytes_upload,omitempty"`
BytesDownload int64 `protobuf:"varint,15,opt,name=bytes_download,json=bytesDownload,proto3" json:"bytes_download,omitempty"`
Protocol string `protobuf:"bytes,16,opt,name=protocol,proto3" json:"protocol,omitempty"`
// Extra key-value metadata for the access log entry (e.g. crowdsec_verdict, scenario).
Metadata map[string]string `` /* 158-byte string literal not displayed */
// When true, the entry was emitted by an agent-network synth service.
// Management routes these to the agent-network access-log surface instead
// of the standard service log.
AgentNetwork bool `protobuf:"varint,18,opt,name=agent_network,json=agentNetwork,proto3" json:"agent_network,omitempty"`
// contains filtered or unexported fields
}
func (*AccessLog) Descriptor
deprecated
added in
v0.65.0
func (*AccessLog) GetAccountId ¶ added in v0.65.0
func (*AccessLog) GetAgentNetwork ¶ added in v0.74.0
func (*AccessLog) GetAuthMechanism ¶ added in v0.65.0
func (*AccessLog) GetAuthSuccess ¶ added in v0.65.0
func (*AccessLog) GetBytesDownload ¶ added in v0.66.3
func (*AccessLog) GetBytesUpload ¶ added in v0.66.3
func (*AccessLog) GetDurationMs ¶ added in v0.65.0
func (*AccessLog) GetMetadata ¶ added in v0.69.0
func (*AccessLog) GetProtocol ¶ added in v0.67.0
func (*AccessLog) GetResponseCode ¶ added in v0.65.0
func (*AccessLog) GetServiceId ¶ added in v0.65.0
func (*AccessLog) GetSourceIp ¶ added in v0.65.0
func (*AccessLog) GetTimestamp ¶ added in v0.65.0
func (x *AccessLog) GetTimestamp() *timestamppb.Timestamp
func (*AccessLog) ProtoMessage ¶ added in v0.65.0
func (*AccessLog) ProtoMessage()
func (*AccessLog) ProtoReflect ¶ added in v0.65.0
func (x *AccessLog) ProtoReflect() protoreflect.Message
type AccessRestrictions ¶ added in v0.67.0
type AccessRestrictions struct {
AllowedCidrs []string `protobuf:"bytes,1,rep,name=allowed_cidrs,json=allowedCidrs,proto3" json:"allowed_cidrs,omitempty"`
BlockedCidrs []string `protobuf:"bytes,2,rep,name=blocked_cidrs,json=blockedCidrs,proto3" json:"blocked_cidrs,omitempty"`
AllowedCountries []string `protobuf:"bytes,3,rep,name=allowed_countries,json=allowedCountries,proto3" json:"allowed_countries,omitempty"`
BlockedCountries []string `protobuf:"bytes,4,rep,name=blocked_countries,json=blockedCountries,proto3" json:"blocked_countries,omitempty"`
// CrowdSec IP reputation mode: "", "off", "enforce", or "observe".
CrowdsecMode string `protobuf:"bytes,5,opt,name=crowdsec_mode,json=crowdsecMode,proto3" json:"crowdsec_mode,omitempty"`
// contains filtered or unexported fields
}
func (*AccessRestrictions) Descriptor
deprecated
added in
v0.67.0
func (*AccessRestrictions) Descriptor() ([]byte, []int)
Deprecated: Use AccessRestrictions.ProtoReflect.Descriptor instead.
func (*AccessRestrictions) GetAllowedCidrs ¶ added in v0.67.0
func (x *AccessRestrictions) GetAllowedCidrs() []string
func (*AccessRestrictions) GetAllowedCountries ¶ added in v0.67.0
func (x *AccessRestrictions) GetAllowedCountries() []string
func (*AccessRestrictions) GetBlockedCidrs ¶ added in v0.67.0
func (x *AccessRestrictions) GetBlockedCidrs() []string
func (*AccessRestrictions) GetBlockedCountries ¶ added in v0.67.0
func (x *AccessRestrictions) GetBlockedCountries() []string
func (*AccessRestrictions) GetCrowdsecMode ¶ added in v0.69.0
func (x *AccessRestrictions) GetCrowdsecMode() string
func (*AccessRestrictions) ProtoMessage ¶ added in v0.67.0
func (*AccessRestrictions) ProtoMessage()
func (*AccessRestrictions) ProtoReflect ¶ added in v0.67.0
func (x *AccessRestrictions) ProtoReflect() protoreflect.Message
func (*AccessRestrictions) Reset ¶ added in v0.67.0
func (x *AccessRestrictions) Reset()
func (*AccessRestrictions) String ¶ added in v0.67.0
func (x *AccessRestrictions) String() string
type AccountNetwork ¶ added in v0.75.0
type AccountNetwork struct {
Identifier string `protobuf:"bytes,1,opt,name=identifier,proto3" json:"identifier,omitempty"`
// IPv4 overlay subnet in CIDR form (e.g. "100.64.0.0/16").
NetCidr string `protobuf:"bytes,2,opt,name=net_cidr,json=netCidr,proto3" json:"net_cidr,omitempty"`
// IPv6 ULA overlay subnet in CIDR form (e.g. "fd00:4e42::/64"). Empty when
// the account has no IPv6 overlay yet.
NetV6Cidr string `protobuf:"bytes,3,opt,name=net_v6_cidr,json=netV6Cidr,proto3" json:"net_v6_cidr,omitempty"`
Dns string `protobuf:"bytes,4,opt,name=dns,proto3" json:"dns,omitempty"`
Serial uint64 `protobuf:"varint,5,opt,name=serial,proto3" json:"serial,omitempty"`
// contains filtered or unexported fields
}
AccountNetwork is the account-level overlay metadata. Mirrors types.Network so the client can populate NetworkMap.Network without a server round-trip.
func (*AccountNetwork) Descriptor
deprecated
added in
v0.75.0
func (*AccountNetwork) Descriptor() ([]byte, []int)
Deprecated: Use AccountNetwork.ProtoReflect.Descriptor instead.
func (*AccountNetwork) GetDns ¶ added in v0.75.0
func (x *AccountNetwork) GetDns() string
func (*AccountNetwork) GetIdentifier ¶ added in v0.75.0
func (x *AccountNetwork) GetIdentifier() string
func (*AccountNetwork) GetNetCidr ¶ added in v0.75.0
func (x *AccountNetwork) GetNetCidr() string
func (*AccountNetwork) GetNetV6Cidr ¶ added in v0.75.0
func (x *AccountNetwork) GetNetV6Cidr() string
func (*AccountNetwork) GetSerial ¶ added in v0.75.0
func (x *AccountNetwork) GetSerial() uint64
func (*AccountNetwork) ProtoMessage ¶ added in v0.75.0
func (*AccountNetwork) ProtoMessage()
func (*AccountNetwork) ProtoReflect ¶ added in v0.75.0
func (x *AccountNetwork) ProtoReflect() protoreflect.Message
func (*AccountNetwork) Reset ¶ added in v0.75.0
func (x *AccountNetwork) Reset()
func (*AccountNetwork) String ¶ added in v0.75.0
func (x *AccountNetwork) String() string
type AccountSettingsCompact ¶ added in v0.75.0
type AccountSettingsCompact struct {
PeerLoginExpirationEnabled bool `` /* 144-byte string literal not displayed */
// Login expiration window. Unit is nanoseconds (matches time.Duration).
PeerLoginExpirationNs int64 `` /* 129-byte string literal not displayed */
// contains filtered or unexported fields
}
AccountSettingsCompact carries the account-level settings the client needs to evaluate locally. Mirrors the subset of types.AccountSettingsInfo that Calculate() actually reads — login-expiration (used to filter expired peers). Inactivity expiration is purely server-side bookkeeping and is not shipped.
func (*AccountSettingsCompact) Descriptor
deprecated
added in
v0.75.0
func (*AccountSettingsCompact) Descriptor() ([]byte, []int)
Deprecated: Use AccountSettingsCompact.ProtoReflect.Descriptor instead.
func (*AccountSettingsCompact) GetPeerLoginExpirationEnabled ¶ added in v0.75.0
func (x *AccountSettingsCompact) GetPeerLoginExpirationEnabled() bool
func (*AccountSettingsCompact) GetPeerLoginExpirationNs ¶ added in v0.75.0
func (x *AccountSettingsCompact) GetPeerLoginExpirationNs() int64
func (*AccountSettingsCompact) ProtoMessage ¶ added in v0.75.0
func (*AccountSettingsCompact) ProtoMessage()
func (*AccountSettingsCompact) ProtoReflect ¶ added in v0.75.0
func (x *AccountSettingsCompact) ProtoReflect() protoreflect.Message
func (*AccountSettingsCompact) Reset ¶ added in v0.75.0
func (x *AccountSettingsCompact) Reset()
func (*AccountSettingsCompact) String ¶ added in v0.75.0
func (x *AccountSettingsCompact) String() string
type AuthenticateRequest ¶ added in v0.65.0
type AuthenticateRequest struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
// Types that are assignable to Request:
//
// *AuthenticateRequest_Password
// *AuthenticateRequest_Pin
// *AuthenticateRequest_HeaderAuth
Request isAuthenticateRequest_Request `protobuf_oneof:"request"`
// contains filtered or unexported fields
}
func (*AuthenticateRequest) Descriptor
deprecated
added in
v0.65.0
func (*AuthenticateRequest) Descriptor() ([]byte, []int)
Deprecated: Use AuthenticateRequest.ProtoReflect.Descriptor instead.
func (*AuthenticateRequest) GetAccountId ¶ added in v0.65.0
func (x *AuthenticateRequest) GetAccountId() string
func (*AuthenticateRequest) GetHeaderAuth ¶ added in v0.67.0
func (x *AuthenticateRequest) GetHeaderAuth() *HeaderAuthRequest
func (*AuthenticateRequest) GetId ¶ added in v0.65.0
func (x *AuthenticateRequest) GetId() string
func (*AuthenticateRequest) GetPassword ¶ added in v0.65.0
func (x *AuthenticateRequest) GetPassword() *PasswordRequest
func (*AuthenticateRequest) GetPin ¶ added in v0.65.0
func (x *AuthenticateRequest) GetPin() *PinRequest
func (*AuthenticateRequest) GetRequest ¶ added in v0.65.0
func (m *AuthenticateRequest) GetRequest() isAuthenticateRequest_Request
func (*AuthenticateRequest) ProtoMessage ¶ added in v0.65.0
func (*AuthenticateRequest) ProtoMessage()
func (*AuthenticateRequest) ProtoReflect ¶ added in v0.65.0
func (x *AuthenticateRequest) ProtoReflect() protoreflect.Message
func (*AuthenticateRequest) Reset ¶ added in v0.65.0
func (x *AuthenticateRequest) Reset()
func (*AuthenticateRequest) String ¶ added in v0.65.0
func (x *AuthenticateRequest) String() string
type AuthenticateRequest_HeaderAuth ¶ added in v0.67.0
type AuthenticateRequest_HeaderAuth struct {
HeaderAuth *HeaderAuthRequest `protobuf:"bytes,5,opt,name=header_auth,json=headerAuth,proto3,oneof"`
}
type AuthenticateRequest_Password ¶ added in v0.65.0
type AuthenticateRequest_Password struct {
Password *PasswordRequest `protobuf:"bytes,3,opt,name=password,proto3,oneof"`
}
type AuthenticateRequest_Pin ¶ added in v0.65.0
type AuthenticateRequest_Pin struct {
Pin *PinRequest `protobuf:"bytes,4,opt,name=pin,proto3,oneof"`
}
type AuthenticateResponse ¶ added in v0.65.0
type AuthenticateResponse struct {
Success bool `protobuf:"varint,1,opt,name=success,proto3" json:"success,omitempty"`
SessionToken string `protobuf:"bytes,2,opt,name=session_token,json=sessionToken,proto3" json:"session_token,omitempty"`
// contains filtered or unexported fields
}
func (*AuthenticateResponse) Descriptor
deprecated
added in
v0.65.0
func (*AuthenticateResponse) Descriptor() ([]byte, []int)
Deprecated: Use AuthenticateResponse.ProtoReflect.Descriptor instead.
func (*AuthenticateResponse) GetSessionToken ¶ added in v0.65.0
func (x *AuthenticateResponse) GetSessionToken() string
func (*AuthenticateResponse) GetSuccess ¶ added in v0.65.0
func (x *AuthenticateResponse) GetSuccess() bool
func (*AuthenticateResponse) ProtoMessage ¶ added in v0.65.0
func (*AuthenticateResponse) ProtoMessage()
func (*AuthenticateResponse) ProtoReflect ¶ added in v0.65.0
func (x *AuthenticateResponse) ProtoReflect() protoreflect.Message
func (*AuthenticateResponse) Reset ¶ added in v0.65.0
func (x *AuthenticateResponse) Reset()
func (*AuthenticateResponse) String ¶ added in v0.65.0
func (x *AuthenticateResponse) String() string
type Authentication ¶ added in v0.65.0
type Authentication struct {
SessionKey string `protobuf:"bytes,1,opt,name=session_key,json=sessionKey,proto3" json:"session_key,omitempty"`
MaxSessionAgeSeconds int64 `` /* 126-byte string literal not displayed */
Password bool `protobuf:"varint,3,opt,name=password,proto3" json:"password,omitempty"`
Pin bool `protobuf:"varint,4,opt,name=pin,proto3" json:"pin,omitempty"`
Oidc bool `protobuf:"varint,5,opt,name=oidc,proto3" json:"oidc,omitempty"`
HeaderAuths []*HeaderAuth `protobuf:"bytes,6,rep,name=header_auths,json=headerAuths,proto3" json:"header_auths,omitempty"`
// contains filtered or unexported fields
}
func (*Authentication) Descriptor
deprecated
added in
v0.65.0
func (*Authentication) Descriptor() ([]byte, []int)
Deprecated: Use Authentication.ProtoReflect.Descriptor instead.
func (*Authentication) GetHeaderAuths ¶ added in v0.67.0
func (x *Authentication) GetHeaderAuths() []*HeaderAuth
func (*Authentication) GetMaxSessionAgeSeconds ¶ added in v0.65.0
func (x *Authentication) GetMaxSessionAgeSeconds() int64
func (*Authentication) GetOidc ¶ added in v0.65.0
func (x *Authentication) GetOidc() bool
func (*Authentication) GetPassword ¶ added in v0.65.0
func (x *Authentication) GetPassword() bool
func (*Authentication) GetPin ¶ added in v0.65.0
func (x *Authentication) GetPin() bool
func (*Authentication) GetSessionKey ¶ added in v0.65.0
func (x *Authentication) GetSessionKey() string
func (*Authentication) ProtoMessage ¶ added in v0.65.0
func (*Authentication) ProtoMessage()
func (*Authentication) ProtoReflect ¶ added in v0.65.0
func (x *Authentication) ProtoReflect() protoreflect.Message
func (*Authentication) Reset ¶ added in v0.65.0
func (x *Authentication) Reset()
func (*Authentication) String ¶ added in v0.65.0
func (x *Authentication) String() string
type AutoUpdateSettings ¶ added in v0.61.0
type AutoUpdateSettings struct {
Version string `protobuf:"bytes,1,opt,name=version,proto3" json:"version,omitempty"`
// alwaysUpdate = true → Updates are installed automatically in the background
// alwaysUpdate = false → Updates require user interaction from the UI
AlwaysUpdate bool `protobuf:"varint,2,opt,name=alwaysUpdate,proto3" json:"alwaysUpdate,omitempty"`
// contains filtered or unexported fields
}
func (*AutoUpdateSettings) Descriptor
deprecated
added in
v0.61.0
func (*AutoUpdateSettings) Descriptor() ([]byte, []int)
Deprecated: Use AutoUpdateSettings.ProtoReflect.Descriptor instead.
func (*AutoUpdateSettings) GetAlwaysUpdate ¶ added in v0.61.0
func (x *AutoUpdateSettings) GetAlwaysUpdate() bool
func (*AutoUpdateSettings) GetVersion ¶ added in v0.61.0
func (x *AutoUpdateSettings) GetVersion() string
func (*AutoUpdateSettings) ProtoMessage ¶ added in v0.61.0
func (*AutoUpdateSettings) ProtoMessage()
func (*AutoUpdateSettings) ProtoReflect ¶ added in v0.61.0
func (x *AutoUpdateSettings) ProtoReflect() protoreflect.Message
func (*AutoUpdateSettings) Reset ¶ added in v0.61.0
func (x *AutoUpdateSettings) Reset()
func (*AutoUpdateSettings) String ¶ added in v0.61.0
func (x *AutoUpdateSettings) String() string
type BundleParameters ¶ added in v0.64.0
type BundleParameters struct {
BundleFor bool `protobuf:"varint,1,opt,name=bundle_for,json=bundleFor,proto3" json:"bundle_for,omitempty"`
BundleForTime int64 `protobuf:"varint,2,opt,name=bundle_for_time,json=bundleForTime,proto3" json:"bundle_for_time,omitempty"`
LogFileCount int32 `protobuf:"varint,3,opt,name=log_file_count,json=logFileCount,proto3" json:"log_file_count,omitempty"`
Anonymize bool `protobuf:"varint,4,opt,name=anonymize,proto3" json:"anonymize,omitempty"`
// contains filtered or unexported fields
}
func (*BundleParameters) Descriptor
deprecated
added in
v0.64.0
func (*BundleParameters) Descriptor() ([]byte, []int)
Deprecated: Use BundleParameters.ProtoReflect.Descriptor instead.
func (*BundleParameters) GetAnonymize ¶ added in v0.64.0
func (x *BundleParameters) GetAnonymize() bool
func (*BundleParameters) GetBundleFor ¶ added in v0.64.0
func (x *BundleParameters) GetBundleFor() bool
func (*BundleParameters) GetBundleForTime ¶ added in v0.64.0
func (x *BundleParameters) GetBundleForTime() int64
func (*BundleParameters) GetLogFileCount ¶ added in v0.64.0
func (x *BundleParameters) GetLogFileCount() int32
func (*BundleParameters) ProtoMessage ¶ added in v0.64.0
func (*BundleParameters) ProtoMessage()
func (*BundleParameters) ProtoReflect ¶ added in v0.64.0
func (x *BundleParameters) ProtoReflect() protoreflect.Message
func (*BundleParameters) Reset ¶ added in v0.64.0
func (x *BundleParameters) Reset()
func (*BundleParameters) String ¶ added in v0.64.0
func (x *BundleParameters) String() string
type BundleResult ¶ added in v0.64.0
type BundleResult struct {
UploadKey string `protobuf:"bytes,1,opt,name=upload_key,json=uploadKey,proto3" json:"upload_key,omitempty"`
// contains filtered or unexported fields
}
func (*BundleResult) Descriptor
deprecated
added in
v0.64.0
func (*BundleResult) Descriptor() ([]byte, []int)
Deprecated: Use BundleResult.ProtoReflect.Descriptor instead.
func (*BundleResult) GetUploadKey ¶ added in v0.64.0
func (x *BundleResult) GetUploadKey() string
func (*BundleResult) ProtoMessage ¶ added in v0.64.0
func (*BundleResult) ProtoMessage()
func (*BundleResult) ProtoReflect ¶ added in v0.64.0
func (x *BundleResult) ProtoReflect() protoreflect.Message
func (*BundleResult) Reset ¶ added in v0.64.0
func (x *BundleResult) Reset()
func (*BundleResult) String ¶ added in v0.64.0
func (x *BundleResult) String() string
type CheckLLMPolicyLimitsRequest ¶ added in v0.74.0
type CheckLLMPolicyLimitsRequest struct {
// account_id is the netbird account the request belongs to.
AccountId string `protobuf:"bytes,1,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
// user_id is the netbird user id of the caller. May be empty when the
// principal is a tunnel-peer that isn't bound to a user; group membership
// still gates the request in that case.
UserId string `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
// group_ids is the caller's full group membership at request time.
GroupIds []string `protobuf:"bytes,3,rep,name=group_ids,json=groupIds,proto3" json:"group_ids,omitempty"`
// provider_id is the agent-network provider record id chosen by llm_router.
ProviderId string `protobuf:"bytes,4,opt,name=provider_id,json=providerId,proto3" json:"provider_id,omitempty"`
// model is the upstream model identifier extracted from the request body.
Model string `protobuf:"bytes,5,opt,name=model,proto3" json:"model,omitempty"`
// contains filtered or unexported fields
}
CheckLLMPolicyLimitsRequest carries the resolved caller identity and the upstream provider already chosen by llm_router. Management computes which policies authorise the request, picks the one with the most remaining headroom, and returns the attribution decision.
func (*CheckLLMPolicyLimitsRequest) Descriptor
deprecated
added in
v0.74.0
func (*CheckLLMPolicyLimitsRequest) Descriptor() ([]byte, []int)
Deprecated: Use CheckLLMPolicyLimitsRequest.ProtoReflect.Descriptor instead.
func (*CheckLLMPolicyLimitsRequest) GetAccountId ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) GetAccountId() string
func (*CheckLLMPolicyLimitsRequest) GetGroupIds ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) GetGroupIds() []string
func (*CheckLLMPolicyLimitsRequest) GetModel ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) GetModel() string
func (*CheckLLMPolicyLimitsRequest) GetProviderId ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) GetProviderId() string
func (*CheckLLMPolicyLimitsRequest) GetUserId ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) GetUserId() string
func (*CheckLLMPolicyLimitsRequest) ProtoMessage ¶ added in v0.74.0
func (*CheckLLMPolicyLimitsRequest) ProtoMessage()
func (*CheckLLMPolicyLimitsRequest) ProtoReflect ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) ProtoReflect() protoreflect.Message
func (*CheckLLMPolicyLimitsRequest) Reset ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) Reset()
func (*CheckLLMPolicyLimitsRequest) String ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsRequest) String() string
type CheckLLMPolicyLimitsResponse ¶ added in v0.74.0
type CheckLLMPolicyLimitsResponse struct {
// decision is "allow" or "deny".
Decision string `protobuf:"bytes,1,opt,name=decision,proto3" json:"decision,omitempty"`
// selected_policy_id names the policy that paid for this request.
SelectedPolicyId string `protobuf:"bytes,2,opt,name=selected_policy_id,json=selectedPolicyId,proto3" json:"selected_policy_id,omitempty"`
// attribution_group_id is the source group the request booked against.
AttributionGroupId string `protobuf:"bytes,3,opt,name=attribution_group_id,json=attributionGroupId,proto3" json:"attribution_group_id,omitempty"`
// window_seconds is the cap window length the selected policy uses.
WindowSeconds int64 `protobuf:"varint,4,opt,name=window_seconds,json=windowSeconds,proto3" json:"window_seconds,omitempty"`
// deny_code is set on decision="deny" with a stable label.
DenyCode string `protobuf:"bytes,5,opt,name=deny_code,json=denyCode,proto3" json:"deny_code,omitempty"`
// deny_reason is a short human-readable explanation paired with deny_code.
DenyReason string `protobuf:"bytes,6,opt,name=deny_reason,json=denyReason,proto3" json:"deny_reason,omitempty"`
// contains filtered or unexported fields
}
CheckLLMPolicyLimitsResponse is management's allow-or-deny decision for a pre-flight check.
func (*CheckLLMPolicyLimitsResponse) Descriptor
deprecated
added in
v0.74.0
func (*CheckLLMPolicyLimitsResponse) Descriptor() ([]byte, []int)
Deprecated: Use CheckLLMPolicyLimitsResponse.ProtoReflect.Descriptor instead.
func (*CheckLLMPolicyLimitsResponse) GetAttributionGroupId ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetAttributionGroupId() string
func (*CheckLLMPolicyLimitsResponse) GetDecision ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetDecision() string
func (*CheckLLMPolicyLimitsResponse) GetDenyCode ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetDenyCode() string
func (*CheckLLMPolicyLimitsResponse) GetDenyReason ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetDenyReason() string
func (*CheckLLMPolicyLimitsResponse) GetSelectedPolicyId ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetSelectedPolicyId() string
func (*CheckLLMPolicyLimitsResponse) GetWindowSeconds ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) GetWindowSeconds() int64
func (*CheckLLMPolicyLimitsResponse) ProtoMessage ¶ added in v0.74.0
func (*CheckLLMPolicyLimitsResponse) ProtoMessage()
func (*CheckLLMPolicyLimitsResponse) ProtoReflect ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) ProtoReflect() protoreflect.Message
func (*CheckLLMPolicyLimitsResponse) Reset ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) Reset()
func (*CheckLLMPolicyLimitsResponse) String ¶ added in v0.74.0
func (x *CheckLLMPolicyLimitsResponse) String() string
type Checks ¶
type Checks struct {
Files []string `protobuf:"bytes,1,rep,name=Files,proto3" json:"Files,omitempty"`
// contains filtered or unexported fields
}
func (*Checks) Descriptor
deprecated
func (*Checks) ProtoMessage ¶
func (*Checks) ProtoMessage()
func (*Checks) ProtoReflect ¶
func (x *Checks) ProtoReflect() protoreflect.Message
type CreateProxyPeerRequest ¶ added in v0.65.0
type CreateProxyPeerRequest struct {
ServiceId string `protobuf:"bytes,1,opt,name=service_id,json=serviceId,proto3" json:"service_id,omitempty"`
AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
Token string `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`
WireguardPublicKey string `protobuf:"bytes,4,opt,name=wireguard_public_key,json=wireguardPublicKey,proto3" json:"wireguard_public_key,omitempty"`
Cluster string `protobuf:"bytes,5,opt,name=cluster,proto3" json:"cluster,omitempty"`
// contains filtered or unexported fields
}
CreateProxyPeerRequest is sent by the proxy to create a peer connection The token is a one-time authentication token sent via ProxyMapping
func (*CreateProxyPeerRequest) Descriptor
deprecated
added in
v0.65.0
func (*CreateProxyPeerRequest) Descriptor() ([]byte, []int)
Deprecated: Use CreateProxyPeerRequest.ProtoReflect.Descriptor instead.
func (*CreateProxyPeerRequest) GetAccountId ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) GetAccountId() string
func (*CreateProxyPeerRequest) GetCluster ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) GetCluster() string
func (*CreateProxyPeerRequest) GetServiceId ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) GetServiceId() string
func (*CreateProxyPeerRequest) GetToken ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) GetToken() string
func (*CreateProxyPeerRequest) GetWireguardPublicKey ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) GetWireguardPublicKey() string
func (*CreateProxyPeerRequest) ProtoMessage ¶ added in v0.65.0
func (*CreateProxyPeerRequest) ProtoMessage()
func (*CreateProxyPeerRequest) ProtoReflect ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) ProtoReflect() protoreflect.Message
func (*CreateProxyPeerRequest) Reset ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) Reset()
func (*CreateProxyPeerRequest) String ¶ added in v0.65.0
func (x *CreateProxyPeerRequest) String() string
type CreateProxyPeerResponse ¶ added in v0.65.0
type CreateProxyPeerResponse struct {
Success bool `protobuf:"varint,1,opt,name=success,proto3" json:"success,omitempty"`
ErrorMessage *string `protobuf:"bytes,2,opt,name=error_message,json=errorMessage,proto3,oneof" json:"error_message,omitempty"`
// contains filtered or unexported fields
}
CreateProxyPeerResponse contains the result of peer creation
func (*CreateProxyPeerResponse) Descriptor
deprecated
added in
v0.65.0
func (*CreateProxyPeerResponse) Descriptor() ([]byte, []int)
Deprecated: Use CreateProxyPeerResponse.ProtoReflect.Descriptor instead.
func (*CreateProxyPeerResponse) GetErrorMessage ¶ added in v0.65.0
func (x *CreateProxyPeerResponse) GetErrorMessage() string
func (*CreateProxyPeerResponse) GetSuccess ¶ added in v0.65.0
func (x *CreateProxyPeerResponse) GetSuccess() bool
func (*CreateProxyPeerResponse) ProtoMessage ¶ added in v0.65.0
func (*CreateProxyPeerResponse) ProtoMessage()
func (*CreateProxyPeerResponse) ProtoReflect ¶ added in v0.65.0
func (x *CreateProxyPeerResponse) ProtoReflect() protoreflect.Message
func (*CreateProxyPeerResponse) Reset ¶ added in v0.65.0
func (x *CreateProxyPeerResponse) Reset()
func (*CreateProxyPeerResponse) String ¶ added in v0.65.0
func (x *CreateProxyPeerResponse) String() string
type CustomZone ¶
type CustomZone struct {
Domain string `protobuf:"bytes,1,opt,name=Domain,proto3" json:"Domain,omitempty"`
Records []*SimpleRecord `protobuf:"bytes,2,rep,name=Records,proto3" json:"Records,omitempty"`
SearchDomainDisabled bool `protobuf:"varint,3,opt,name=SearchDomainDisabled,proto3" json:"SearchDomainDisabled,omitempty"`
// NonAuthoritative indicates this is a user-created zone (not the built-in peer DNS zone).
// Non-authoritative zones will fallthrough to lower-priority handlers on NXDOMAIN and skip PTR processing.
NonAuthoritative bool `protobuf:"varint,4,opt,name=NonAuthoritative,proto3" json:"NonAuthoritative,omitempty"`
// contains filtered or unexported fields
}
CustomZone represents a dns.CustomZone
func (*CustomZone) Descriptor
deprecated
func (*CustomZone) Descriptor() ([]byte, []int)
Deprecated: Use CustomZone.ProtoReflect.Descriptor instead.
func (*CustomZone) GetDomain ¶
func (x *CustomZone) GetDomain() string
func (*CustomZone) GetNonAuthoritative ¶ added in v0.63.0
func (x *CustomZone) GetNonAuthoritative() bool
func (*CustomZone) GetRecords ¶
func (x *CustomZone) GetRecords() []*SimpleRecord
func (*CustomZone) GetSearchDomainDisabled ¶ added in v0.60.3
func (x *CustomZone) GetSearchDomainDisabled() bool
func (*CustomZone) ProtoMessage ¶
func (*CustomZone) ProtoMessage()
func (*CustomZone) ProtoReflect ¶
func (x *CustomZone) ProtoReflect() protoreflect.Message
func (*CustomZone) Reset ¶
func (x *CustomZone) Reset()
func (*CustomZone) String ¶
func (x *CustomZone) String() string
type DNSConfig ¶
type DNSConfig struct {
ServiceEnable bool `protobuf:"varint,1,opt,name=ServiceEnable,proto3" json:"ServiceEnable,omitempty"`
NameServerGroups []*NameServerGroup `protobuf:"bytes,2,rep,name=NameServerGroups,proto3" json:"NameServerGroups,omitempty"`
CustomZones []*CustomZone `protobuf:"bytes,3,rep,name=CustomZones,proto3" json:"CustomZones,omitempty"`
// Deprecated: Do not use.
ForwarderPort int64 `protobuf:"varint,4,opt,name=ForwarderPort,proto3" json:"ForwarderPort,omitempty"`
// contains filtered or unexported fields
}
DNSConfig represents a dns.Update
func (*DNSConfig) Descriptor
deprecated
func (*DNSConfig) GetCustomZones ¶
func (x *DNSConfig) GetCustomZones() []*CustomZone
func (*DNSConfig) GetForwarderPort
deprecated
added in
v0.59.0
func (*DNSConfig) GetNameServerGroups ¶
func (x *DNSConfig) GetNameServerGroups() []*NameServerGroup
func (*DNSConfig) GetServiceEnable ¶
func (*DNSConfig) ProtoMessage ¶
func (*DNSConfig) ProtoMessage()
func (*DNSConfig) ProtoReflect ¶
func (x *DNSConfig) ProtoReflect() protoreflect.Message
type DNSSettingsCompact ¶ added in v0.75.0
type DNSSettingsCompact struct {
// Group ids (public_id) whose DNS management is disabled.
DisabledManagementGroupIds []string `` /* 143-byte string literal not displayed */
// contains filtered or unexported fields
}
DNSSettingsCompact mirrors types.DNSSettings.
func (*DNSSettingsCompact) Descriptor
deprecated
added in
v0.75.0
func (*DNSSettingsCompact) Descriptor() ([]byte, []int)
Deprecated: Use DNSSettingsCompact.ProtoReflect.Descriptor instead.
func (*DNSSettingsCompact) GetDisabledManagementGroupIds ¶ added in v0.75.0
func (x *DNSSettingsCompact) GetDisabledManagementGroupIds() []string
func (*DNSSettingsCompact) ProtoMessage ¶ added in v0.75.0
func (*DNSSettingsCompact) ProtoMessage()
func (*DNSSettingsCompact) ProtoReflect ¶ added in v0.75.0
func (x *DNSSettingsCompact) ProtoReflect() protoreflect.Message
func (*DNSSettingsCompact) Reset ¶ added in v0.75.0
func (x *DNSSettingsCompact) Reset()
func (*DNSSettingsCompact) String ¶ added in v0.75.0
func (x *DNSSettingsCompact) String() string
type DeviceAuthorizationFlow ¶
type DeviceAuthorizationFlow struct {
// An IDP provider , (eg. Auth0)
Provider DeviceAuthorizationFlowProvider `protobuf:"varint,1,opt,name=Provider,proto3,enum=management.DeviceAuthorizationFlowProvider" json:"Provider,omitempty"`
ProviderConfig *ProviderConfig `protobuf:"bytes,2,opt,name=ProviderConfig,proto3" json:"ProviderConfig,omitempty"`
// contains filtered or unexported fields
}
DeviceAuthorizationFlow represents Device Authorization Flow information that can be used by the client to login initiate a Oauth 2.0 device authorization grant flow see https://datatracker.ietf.org/doc/html/rfc8628
func (*DeviceAuthorizationFlow) Descriptor
deprecated
func (*DeviceAuthorizationFlow) Descriptor() ([]byte, []int)
Deprecated: Use DeviceAuthorizationFlow.ProtoReflect.Descriptor instead.
func (*DeviceAuthorizationFlow) GetProvider ¶
func (x *DeviceAuthorizationFlow) GetProvider() DeviceAuthorizationFlowProvider
func (*DeviceAuthorizationFlow) GetProviderConfig ¶
func (x *DeviceAuthorizationFlow) GetProviderConfig() *ProviderConfig
func (*DeviceAuthorizationFlow) ProtoMessage ¶
func (*DeviceAuthorizationFlow) ProtoMessage()
func (*DeviceAuthorizationFlow) ProtoReflect ¶
func (x *DeviceAuthorizationFlow) ProtoReflect() protoreflect.Message
func (*DeviceAuthorizationFlow) Reset ¶
func (x *DeviceAuthorizationFlow) Reset()
func (*DeviceAuthorizationFlow) String ¶
func (x *DeviceAuthorizationFlow) String() string
type DeviceAuthorizationFlowProvider ¶
type DeviceAuthorizationFlowProvider int32
const (
DeviceAuthorizationFlow_HOSTED DeviceAuthorizationFlowProvider = 0
)
func (DeviceAuthorizationFlowProvider) Descriptor ¶
func (DeviceAuthorizationFlowProvider) Descriptor() protoreflect.EnumDescriptor
func (DeviceAuthorizationFlowProvider) Enum ¶
func (x DeviceAuthorizationFlowProvider) Enum() *DeviceAuthorizationFlowProvider
func (DeviceAuthorizationFlowProvider) EnumDescriptor
deprecated
func (DeviceAuthorizationFlowProvider) EnumDescriptor() ([]byte, []int)
Deprecated: Use DeviceAuthorizationFlowProvider.Descriptor instead.
func (DeviceAuthorizationFlowProvider) Number ¶
func (x DeviceAuthorizationFlowProvider) Number() protoreflect.EnumNumber
func (DeviceAuthorizationFlowProvider) String ¶
func (x DeviceAuthorizationFlowProvider) String() string
func (DeviceAuthorizationFlowProvider) Type ¶
func (DeviceAuthorizationFlowProvider) Type() protoreflect.EnumType
type DeviceAuthorizationFlowRequest ¶
type DeviceAuthorizationFlowRequest struct {
// contains filtered or unexported fields
}
DeviceAuthorizationFlowRequest empty struct for future expansion
func (*DeviceAuthorizationFlowRequest) Descriptor
deprecated
func (*DeviceAuthorizationFlowRequest) Descriptor() ([]byte, []int)
Deprecated: Use DeviceAuthorizationFlowRequest.ProtoReflect.Descriptor instead.
func (*DeviceAuthorizationFlowRequest) ProtoMessage ¶
func (*DeviceAuthorizationFlowRequest) ProtoMessage()
func (*DeviceAuthorizationFlowRequest) ProtoReflect ¶
func (x *DeviceAuthorizationFlowRequest) ProtoReflect() protoreflect.Message
func (*DeviceAuthorizationFlowRequest) Reset ¶
func (x *DeviceAuthorizationFlowRequest) Reset()
func (*DeviceAuthorizationFlowRequest) String ¶
func (x *DeviceAuthorizationFlowRequest) String() string
type Empty ¶
type Empty struct {
// contains filtered or unexported fields
}
func (*Empty) Descriptor
deprecated
func (*Empty) ProtoMessage ¶
func (*Empty) ProtoMessage()
func (*Empty) ProtoReflect ¶
func (x *Empty) ProtoReflect() protoreflect.Message
type EncryptedMessage ¶
type EncryptedMessage struct {
// Wireguard public key
WgPubKey string `protobuf:"bytes,1,opt,name=wgPubKey,proto3" json:"wgPubKey,omitempty"`
// encrypted message Body
Body []byte `protobuf:"bytes,2,opt,name=body,proto3" json:"body,omitempty"`
// Version of the Netbird Management Service protocol
Version int32 `protobuf:"varint,3,opt,name=version,proto3" json:"version,omitempty"`
// contains filtered or unexported fields
}
func (*EncryptedMessage) Descriptor
deprecated
func (*EncryptedMessage) Descriptor() ([]byte, []int)
Deprecated: Use EncryptedMessage.ProtoReflect.Descriptor instead.
func (*EncryptedMessage) GetBody ¶
func (x *EncryptedMessage) GetBody() []byte
func (*EncryptedMessage) GetVersion ¶
func (x *EncryptedMessage) GetVersion() int32
func (*EncryptedMessage) GetWgPubKey ¶
func (x *EncryptedMessage) GetWgPubKey() string
func (*EncryptedMessage) ProtoMessage ¶
func (*EncryptedMessage) ProtoMessage()
func (*EncryptedMessage) ProtoReflect ¶
func (x *EncryptedMessage) ProtoReflect() protoreflect.Message
func (*EncryptedMessage) Reset ¶
func (x *EncryptedMessage) Reset()
func (*EncryptedMessage) String ¶
func (x *EncryptedMessage) String() string
type Environment ¶
type Environment struct {
// cloud is the cloud provider the agent is running in if applicable.
Cloud string `protobuf:"bytes,1,opt,name=cloud,proto3" json:"cloud,omitempty"`
// platform is the platform the agent is running on if applicable.
Platform string `protobuf:"bytes,2,opt,name=platform,proto3" json:"platform,omitempty"`
// contains filtered or unexported fields
}
Environment is part of the PeerSystemMeta and describes the environment the agent is running in.
func (*Environment) Descriptor
deprecated
func (*Environment) Descriptor() ([]byte, []int)
Deprecated: Use Environment.ProtoReflect.Descriptor instead.
func (*Environment) GetCloud ¶
func (x *Environment) GetCloud() string
func (*Environment) GetPlatform ¶
func (x *Environment) GetPlatform() string
func (*Environment) ProtoMessage ¶
func (*Environment) ProtoMessage()
func (*Environment) ProtoReflect ¶
func (x *Environment) ProtoReflect() protoreflect.Message
func (*Environment) Reset ¶
func (x *Environment) Reset()
func (*Environment) String ¶
func (x *Environment) String() string
type ExposeProtocol ¶ added in v0.66.0
type ExposeProtocol int32
const ( ExposeProtocol_EXPOSE_HTTP ExposeProtocol = 0 ExposeProtocol_EXPOSE_HTTPS ExposeProtocol = 1 ExposeProtocol_EXPOSE_TCP ExposeProtocol = 2 ExposeProtocol_EXPOSE_UDP ExposeProtocol = 3 ExposeProtocol_EXPOSE_TLS ExposeProtocol = 4 )
func (ExposeProtocol) Descriptor ¶ added in v0.66.0
func (ExposeProtocol) Descriptor() protoreflect.EnumDescriptor
func (ExposeProtocol) Enum ¶ added in v0.66.0
func (x ExposeProtocol) Enum() *ExposeProtocol
func (ExposeProtocol) EnumDescriptor
deprecated
added in
v0.66.0
func (ExposeProtocol) EnumDescriptor() ([]byte, []int)
Deprecated: Use ExposeProtocol.Descriptor instead.
func (ExposeProtocol) Number ¶ added in v0.66.0
func (x ExposeProtocol) Number() protoreflect.EnumNumber
func (ExposeProtocol) String ¶ added in v0.66.0
func (x ExposeProtocol) String() string
func (ExposeProtocol) Type ¶ added in v0.66.0
func (ExposeProtocol) Type() protoreflect.EnumType
type ExposeServiceRequest ¶ added in v0.66.0
type ExposeServiceRequest struct {
Port uint32 `protobuf:"varint,1,opt,name=port,proto3" json:"port,omitempty"`
Protocol ExposeProtocol `protobuf:"varint,2,opt,name=protocol,proto3,enum=management.ExposeProtocol" json:"protocol,omitempty"`
Pin string `protobuf:"bytes,3,opt,name=pin,proto3" json:"pin,omitempty"`
Password string `protobuf:"bytes,4,opt,name=password,proto3" json:"password,omitempty"`
UserGroups []string `protobuf:"bytes,5,rep,name=user_groups,json=userGroups,proto3" json:"user_groups,omitempty"`
Domain string `protobuf:"bytes,6,opt,name=domain,proto3" json:"domain,omitempty"`
NamePrefix string `protobuf:"bytes,7,opt,name=name_prefix,json=namePrefix,proto3" json:"name_prefix,omitempty"`
ListenPort uint32 `protobuf:"varint,8,opt,name=listen_port,json=listenPort,proto3" json:"listen_port,omitempty"`
// contains filtered or unexported fields
}
func (*ExposeServiceRequest) Descriptor
deprecated
added in
v0.66.0
func (*ExposeServiceRequest) Descriptor() ([]byte, []int)
Deprecated: Use ExposeServiceRequest.ProtoReflect.Descriptor instead.
func (*ExposeServiceRequest) GetDomain ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetDomain() string
func (*ExposeServiceRequest) GetListenPort ¶ added in v0.67.0
func (x *ExposeServiceRequest) GetListenPort() uint32
func (*ExposeServiceRequest) GetNamePrefix ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetNamePrefix() string
func (*ExposeServiceRequest) GetPassword ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetPassword() string
func (*ExposeServiceRequest) GetPin ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetPin() string
func (*ExposeServiceRequest) GetPort ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetPort() uint32
func (*ExposeServiceRequest) GetProtocol ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetProtocol() ExposeProtocol
func (*ExposeServiceRequest) GetUserGroups ¶ added in v0.66.0
func (x *ExposeServiceRequest) GetUserGroups() []string
func (*ExposeServiceRequest) ProtoMessage ¶ added in v0.66.0
func (*ExposeServiceRequest) ProtoMessage()
func (*ExposeServiceRequest) ProtoReflect ¶ added in v0.66.0
func (x *ExposeServiceRequest) ProtoReflect() protoreflect.Message
func (*ExposeServiceRequest) Reset ¶ added in v0.66.0
func (x *ExposeServiceRequest) Reset()
func (*ExposeServiceRequest) String ¶ added in v0.66.0
func (x *ExposeServiceRequest) String() string
type ExposeServiceResponse ¶ added in v0.66.0
type ExposeServiceResponse struct {
ServiceName string `protobuf:"bytes,1,opt,name=service_name,json=serviceName,proto3" json:"service_name,omitempty"`
ServiceUrl string `protobuf:"bytes,2,opt,name=service_url,json=serviceUrl,proto3" json:"service_url,omitempty"`
Domain string `protobuf:"bytes,3,opt,name=domain,proto3" json:"domain,omitempty"`
PortAutoAssigned bool `protobuf:"varint,4,opt,name=port_auto_assigned,json=portAutoAssigned,proto3" json:"port_auto_assigned,omitempty"`
// contains filtered or unexported fields
}
func (*ExposeServiceResponse) Descriptor
deprecated
added in
v0.66.0
func (*ExposeServiceResponse) Descriptor() ([]byte, []int)
Deprecated: Use ExposeServiceResponse.ProtoReflect.Descriptor instead.
func (*ExposeServiceResponse) GetDomain ¶ added in v0.66.0
func (x *ExposeServiceResponse) GetDomain() string
func (*ExposeServiceResponse) GetPortAutoAssigned ¶ added in v0.67.0
func (x *ExposeServiceResponse) GetPortAutoAssigned() bool
func (*ExposeServiceResponse) GetServiceName ¶ added in v0.66.0
func (x *ExposeServiceResponse) GetServiceName() string
func (*ExposeServiceResponse) GetServiceUrl ¶ added in v0.66.0
func (x *ExposeServiceResponse) GetServiceUrl() string
func (*ExposeServiceResponse) ProtoMessage ¶ added in v0.66.0
func (*ExposeServiceResponse) ProtoMessage()
func (*ExposeServiceResponse) ProtoReflect ¶ added in v0.66.0
func (x *ExposeServiceResponse) ProtoReflect() protoreflect.Message
func (*ExposeServiceResponse) Reset ¶ added in v0.66.0
func (x *ExposeServiceResponse) Reset()
func (*ExposeServiceResponse) String ¶ added in v0.66.0
func (x *ExposeServiceResponse) String() string
type ExtendAuthSessionRequest ¶ added in v0.72.0
type ExtendAuthSessionRequest struct {
// SSO token (must be a fresh, valid JWT for the peer's owning user)
JwtToken string `protobuf:"bytes,1,opt,name=jwtToken,proto3" json:"jwtToken,omitempty"`
// Meta data of the peer (used for IdP user info refresh consistent with Login)
Meta *PeerSystemMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
// contains filtered or unexported fields
}
ExtendAuthSessionRequest carries a fresh JWT to refresh the peer's session deadline. The encrypted body of an EncryptedMessage with this payload is sent to the ExtendAuthSession RPC.
func (*ExtendAuthSessionRequest) Descriptor
deprecated
added in
v0.72.0
func (*ExtendAuthSessionRequest) Descriptor() ([]byte, []int)
Deprecated: Use ExtendAuthSessionRequest.ProtoReflect.Descriptor instead.
func (*ExtendAuthSessionRequest) GetJwtToken ¶ added in v0.72.0
func (x *ExtendAuthSessionRequest) GetJwtToken() string
func (*ExtendAuthSessionRequest) GetMeta ¶ added in v0.72.0
func (x *ExtendAuthSessionRequest) GetMeta() *PeerSystemMeta
func (*ExtendAuthSessionRequest) ProtoMessage ¶ added in v0.72.0
func (*ExtendAuthSessionRequest) ProtoMessage()
func (*ExtendAuthSessionRequest) ProtoReflect ¶ added in v0.72.0
func (x *ExtendAuthSessionRequest) ProtoReflect() protoreflect.Message
func (*ExtendAuthSessionRequest) Reset ¶ added in v0.72.0
func (x *ExtendAuthSessionRequest) Reset()
func (*ExtendAuthSessionRequest) String ¶ added in v0.72.0
func (x *ExtendAuthSessionRequest) String() string
type ExtendAuthSessionResponse ¶ added in v0.72.0
type ExtendAuthSessionResponse struct {
// 3-state session deadline; same encoding as SyncResponse.sessionExpiresAt.
// In practice ExtendAuthSession only succeeds for SSO peers with expiry
// enabled, so this carries a valid timestamp on the success path. The
// 3-state encoding is documented here for symmetry with Login/Sync.
SessionExpiresAt *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=sessionExpiresAt,proto3" json:"sessionExpiresAt,omitempty"`
// contains filtered or unexported fields
}
ExtendAuthSessionResponse contains the refreshed session deadline.
func (*ExtendAuthSessionResponse) Descriptor
deprecated
added in
v0.72.0
func (*ExtendAuthSessionResponse) Descriptor() ([]byte, []int)
Deprecated: Use ExtendAuthSessionResponse.ProtoReflect.Descriptor instead.
func (*ExtendAuthSessionResponse) GetSessionExpiresAt ¶ added in v0.72.0
func (x *ExtendAuthSessionResponse) GetSessionExpiresAt() *timestamppb.Timestamp
func (*ExtendAuthSessionResponse) ProtoMessage ¶ added in v0.72.0
func (*ExtendAuthSessionResponse) ProtoMessage()
func (*ExtendAuthSessionResponse) ProtoReflect ¶ added in v0.72.0
func (x *ExtendAuthSessionResponse) ProtoReflect() protoreflect.Message
func (*ExtendAuthSessionResponse) Reset ¶ added in v0.72.0
func (x *ExtendAuthSessionResponse) Reset()
func (*ExtendAuthSessionResponse) String ¶ added in v0.72.0
func (x *ExtendAuthSessionResponse) String() string
type File ¶
type File struct {
// path is the path to the file.
Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
// exist indicate whether the file exists.
Exist bool `protobuf:"varint,2,opt,name=exist,proto3" json:"exist,omitempty"`
// processIsRunning indicates whether the file is a running process or not.
ProcessIsRunning bool `protobuf:"varint,3,opt,name=processIsRunning,proto3" json:"processIsRunning,omitempty"`
// contains filtered or unexported fields
}
File represents a file on the system.
func (*File) Descriptor
deprecated
func (*File) GetProcessIsRunning ¶
func (*File) ProtoMessage ¶
func (*File) ProtoMessage()
func (*File) ProtoReflect ¶
func (x *File) ProtoReflect() protoreflect.Message
type FirewallRule ¶
type FirewallRule struct {
// Use sourcePrefixes instead.
//
// Deprecated: Do not use.
PeerIP string `protobuf:"bytes,1,opt,name=PeerIP,proto3" json:"PeerIP,omitempty"`
Direction RuleDirection `protobuf:"varint,2,opt,name=Direction,proto3,enum=management.RuleDirection" json:"Direction,omitempty"`
Action RuleAction `protobuf:"varint,3,opt,name=Action,proto3,enum=management.RuleAction" json:"Action,omitempty"`
Protocol RuleProtocol `protobuf:"varint,4,opt,name=Protocol,proto3,enum=management.RuleProtocol" json:"Protocol,omitempty"`
Port string `protobuf:"bytes,5,opt,name=Port,proto3" json:"Port,omitempty"`
PortInfo *PortInfo `protobuf:"bytes,6,opt,name=PortInfo,proto3" json:"PortInfo,omitempty"`
// PolicyID is the ID of the policy that this rule belongs to
PolicyID []byte `protobuf:"bytes,7,opt,name=PolicyID,proto3" json:"PolicyID,omitempty"`
// CustomProtocol is a custom protocol ID when Protocol is CUSTOM.
CustomProtocol uint32 `protobuf:"varint,8,opt,name=customProtocol,proto3" json:"customProtocol,omitempty"`
// Compact source IP prefixes for this rule, supersedes PeerIP.
// Each entry is 5 bytes (v4) or 17 bytes (v6): [IP bytes][1 byte prefix_len].
SourcePrefixes [][]byte `protobuf:"bytes,9,rep,name=sourcePrefixes,proto3" json:"sourcePrefixes,omitempty"`
// contains filtered or unexported fields
}
FirewallRule represents a firewall rule
func (*FirewallRule) Descriptor
deprecated
func (*FirewallRule) Descriptor() ([]byte, []int)
Deprecated: Use FirewallRule.ProtoReflect.Descriptor instead.
func (*FirewallRule) GetAction ¶
func (x *FirewallRule) GetAction() RuleAction
func (*FirewallRule) GetCustomProtocol ¶ added in v0.71.0
func (x *FirewallRule) GetCustomProtocol() uint32
func (*FirewallRule) GetDirection ¶
func (x *FirewallRule) GetDirection() RuleDirection
func (*FirewallRule) GetPeerIP
deprecated
func (x *FirewallRule) GetPeerIP() string
Deprecated: Do not use.
func (*FirewallRule) GetPolicyID ¶
func (x *FirewallRule) GetPolicyID() []byte
func (*FirewallRule) GetPort ¶
func (x *FirewallRule) GetPort() string
func (*FirewallRule) GetPortInfo ¶
func (x *FirewallRule) GetPortInfo() *PortInfo
func (*FirewallRule) GetProtocol ¶
func (x *FirewallRule) GetProtocol() RuleProtocol
func (*FirewallRule) GetSourcePrefixes ¶ added in v0.71.0
func (x *FirewallRule) GetSourcePrefixes() [][]byte
func (*FirewallRule) ProtoMessage ¶
func (*FirewallRule) ProtoMessage()
func (*FirewallRule) ProtoReflect ¶
func (x *FirewallRule) ProtoReflect() protoreflect.Message
func (*FirewallRule) Reset ¶
func (x *FirewallRule) Reset()
func (*FirewallRule) String ¶
func (x *FirewallRule) String() string
type Flags ¶
type Flags struct {
RosenpassEnabled bool `protobuf:"varint,1,opt,name=rosenpassEnabled,proto3" json:"rosenpassEnabled,omitempty"`
RosenpassPermissive bool `protobuf:"varint,2,opt,name=rosenpassPermissive,proto3" json:"rosenpassPermissive,omitempty"`
ServerSSHAllowed bool `protobuf:"varint,3,opt,name=serverSSHAllowed,proto3" json:"serverSSHAllowed,omitempty"`
DisableClientRoutes bool `protobuf:"varint,4,opt,name=disableClientRoutes,proto3" json:"disableClientRoutes,omitempty"`
DisableServerRoutes bool `protobuf:"varint,5,opt,name=disableServerRoutes,proto3" json:"disableServerRoutes,omitempty"`
DisableDNS bool `protobuf:"varint,6,opt,name=disableDNS,proto3" json:"disableDNS,omitempty"`
DisableFirewall bool `protobuf:"varint,7,opt,name=disableFirewall,proto3" json:"disableFirewall,omitempty"`
BlockLANAccess bool `protobuf:"varint,8,opt,name=blockLANAccess,proto3" json:"blockLANAccess,omitempty"`
BlockInbound bool `protobuf:"varint,9,opt,name=blockInbound,proto3" json:"blockInbound,omitempty"`
LazyConnectionEnabled bool `protobuf:"varint,10,opt,name=lazyConnectionEnabled,proto3" json:"lazyConnectionEnabled,omitempty"`
EnableSSHRoot bool `protobuf:"varint,11,opt,name=enableSSHRoot,proto3" json:"enableSSHRoot,omitempty"`
EnableSSHSFTP bool `protobuf:"varint,12,opt,name=enableSSHSFTP,proto3" json:"enableSSHSFTP,omitempty"`
EnableSSHLocalPortForwarding bool `protobuf:"varint,13,opt,name=enableSSHLocalPortForwarding,proto3" json:"enableSSHLocalPortForwarding,omitempty"`
EnableSSHRemotePortForwarding bool `protobuf:"varint,14,opt,name=enableSSHRemotePortForwarding,proto3" json:"enableSSHRemotePortForwarding,omitempty"`
DisableSSHAuth bool `protobuf:"varint,15,opt,name=disableSSHAuth,proto3" json:"disableSSHAuth,omitempty"`
DisableIPv6 bool `protobuf:"varint,16,opt,name=disableIPv6,proto3" json:"disableIPv6,omitempty"`
// contains filtered or unexported fields
}
func (*Flags) Descriptor
deprecated
func (*Flags) GetBlockInbound ¶
func (*Flags) GetBlockLANAccess ¶
func (*Flags) GetDisableClientRoutes ¶
func (*Flags) GetDisableDNS ¶
func (*Flags) GetDisableFirewall ¶
func (*Flags) GetDisableIPv6 ¶ added in v0.71.0
func (*Flags) GetDisableSSHAuth ¶ added in v0.60.0
func (*Flags) GetDisableServerRoutes ¶
func (*Flags) GetEnableSSHLocalPortForwarding ¶ added in v0.60.0
func (*Flags) GetEnableSSHRemotePortForwarding ¶ added in v0.60.0
func (*Flags) GetEnableSSHRoot ¶ added in v0.60.0
func (*Flags) GetEnableSSHSFTP ¶ added in v0.60.0
func (*Flags) GetLazyConnectionEnabled ¶
func (*Flags) GetRosenpassEnabled ¶
func (*Flags) GetRosenpassPermissive ¶
func (*Flags) GetServerSSHAllowed ¶
func (*Flags) ProtoMessage ¶
func (*Flags) ProtoMessage()
func (*Flags) ProtoReflect ¶
func (x *Flags) ProtoReflect() protoreflect.Message
type FlowConfig ¶
type FlowConfig struct {
Url string `protobuf:"bytes,1,opt,name=url,proto3" json:"url,omitempty"`
TokenPayload string `protobuf:"bytes,2,opt,name=tokenPayload,proto3" json:"tokenPayload,omitempty"`
TokenSignature string `protobuf:"bytes,3,opt,name=tokenSignature,proto3" json:"tokenSignature,omitempty"`
Interval *durationpb.Duration `protobuf:"bytes,4,opt,name=interval,proto3" json:"interval,omitempty"`
Enabled bool `protobuf:"varint,5,opt,name=enabled,proto3" json:"enabled,omitempty"`
// counters determines if flow packets and bytes counters should be sent
Counters bool `protobuf:"varint,6,opt,name=counters,proto3" json:"counters,omitempty"`
// exitNodeCollection determines if event collection on exit nodes should be enabled
ExitNodeCollection bool `protobuf:"varint,7,opt,name=exitNodeCollection,proto3" json:"exitNodeCollection,omitempty"`
// dnsCollection determines if DNS event collection should be enabled
DnsCollection bool `protobuf:"varint,8,opt,name=dnsCollection,proto3" json:"dnsCollection,omitempty"`
// contains filtered or unexported fields
}
func (*FlowConfig) Descriptor
deprecated
func (*FlowConfig) Descriptor() ([]byte, []int)
Deprecated: Use FlowConfig.ProtoReflect.Descriptor instead.
func (*FlowConfig) GetCounters ¶
func (x *FlowConfig) GetCounters() bool
func (*FlowConfig) GetDnsCollection ¶
func (x *FlowConfig) GetDnsCollection() bool
func (*FlowConfig) GetEnabled ¶
func (x *FlowConfig) GetEnabled() bool
func (*FlowConfig) GetExitNodeCollection ¶
func (x *FlowConfig) GetExitNodeCollection() bool
func (*FlowConfig) GetInterval ¶
func (x *FlowConfig) GetInterval() *durationpb.Duration
func (*FlowConfig) GetTokenPayload ¶
func (x *FlowConfig) GetTokenPayload() string
func (*FlowConfig) GetTokenSignature ¶
func (x *FlowConfig) GetTokenSignature() string
func (*FlowConfig) GetUrl ¶
func (x *FlowConfig) GetUrl() string
func (*FlowConfig) ProtoMessage ¶
func (*FlowConfig) ProtoMessage()
func (*FlowConfig) ProtoReflect ¶
func (x *FlowConfig) ProtoReflect() protoreflect.Message
func (*FlowConfig) Reset ¶
func (x *FlowConfig) Reset()
func (*FlowConfig) String ¶
func (x *FlowConfig) String() string
type ForwardingRule ¶
type ForwardingRule struct {
// Protocol of the forwarding rule
Protocol RuleProtocol `protobuf:"varint,1,opt,name=protocol,proto3,enum=management.RuleProtocol" json:"protocol,omitempty"`
// portInfo is the ingress destination port information, where the traffic arrives in the gateway node
DestinationPort *PortInfo `protobuf:"bytes,2,opt,name=destinationPort,proto3" json:"destinationPort,omitempty"`
// IP address of the translated address (remote peer) to send traffic to
TranslatedAddress []byte `protobuf:"bytes,3,opt,name=translatedAddress,proto3" json:"translatedAddress,omitempty"`
// Translated port information, where the traffic should be forwarded to
TranslatedPort *PortInfo `protobuf:"bytes,4,opt,name=translatedPort,proto3" json:"translatedPort,omitempty"`
// contains filtered or unexported fields
}
func (*ForwardingRule) Descriptor
deprecated
func (*ForwardingRule) Descriptor() ([]byte, []int)
Deprecated: Use ForwardingRule.ProtoReflect.Descriptor instead.
func (*ForwardingRule) GetDestinationPort ¶
func (x *ForwardingRule) GetDestinationPort() *PortInfo
func (*ForwardingRule) GetProtocol ¶
func (x *ForwardingRule) GetProtocol() RuleProtocol
func (*ForwardingRule) GetTranslatedAddress ¶
func (x *ForwardingRule) GetTranslatedAddress() []byte
func (*ForwardingRule) GetTranslatedPort ¶
func (x *ForwardingRule) GetTranslatedPort() *PortInfo
func (*ForwardingRule) ProtoMessage ¶
func (*ForwardingRule) ProtoMessage()
func (*ForwardingRule) ProtoReflect ¶
func (x *ForwardingRule) ProtoReflect() protoreflect.Message
func (*ForwardingRule) Reset ¶
func (x *ForwardingRule) Reset()
func (*ForwardingRule) String ¶
func (x *ForwardingRule) String() string
type GetMappingUpdateRequest ¶ added in v0.65.0
type GetMappingUpdateRequest struct {
ProxyId string `protobuf:"bytes,1,opt,name=proxy_id,json=proxyId,proto3" json:"proxy_id,omitempty"`
Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
StartedAt *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=started_at,json=startedAt,proto3" json:"started_at,omitempty"`
Address string `protobuf:"bytes,4,opt,name=address,proto3" json:"address,omitempty"`
Capabilities *ProxyCapabilities `protobuf:"bytes,5,opt,name=capabilities,proto3" json:"capabilities,omitempty"`
// contains filtered or unexported fields
}
GetMappingUpdateRequest is sent to initialise a mapping stream.
func (*GetMappingUpdateRequest) Descriptor
deprecated
added in
v0.65.0
func (*GetMappingUpdateRequest) Descriptor() ([]byte, []int)
Deprecated: Use GetMappingUpdateRequest.ProtoReflect.Descriptor instead.
func (*GetMappingUpdateRequest) GetAddress ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) GetAddress() string
func (*GetMappingUpdateRequest) GetCapabilities ¶ added in v0.67.0
func (x *GetMappingUpdateRequest) GetCapabilities() *ProxyCapabilities
func (*GetMappingUpdateRequest) GetProxyId ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) GetProxyId() string
func (*GetMappingUpdateRequest) GetStartedAt ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) GetStartedAt() *timestamppb.Timestamp
func (*GetMappingUpdateRequest) GetVersion ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) GetVersion() string
func (*GetMappingUpdateRequest) ProtoMessage ¶ added in v0.65.0
func (*GetMappingUpdateRequest) ProtoMessage()
func (*GetMappingUpdateRequest) ProtoReflect ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) ProtoReflect() protoreflect.Message
func (*GetMappingUpdateRequest) Reset ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) Reset()
func (*GetMappingUpdateRequest) String ¶ added in v0.65.0
func (x *GetMappingUpdateRequest) String() string
type GetMappingUpdateResponse ¶ added in v0.65.0
type GetMappingUpdateResponse struct {
Mapping []*ProxyMapping `protobuf:"bytes,1,rep,name=mapping,proto3" json:"mapping,omitempty"`
// initial_sync_complete is set on the last message of the initial snapshot.
// The proxy uses this to signal that startup is complete.
InitialSyncComplete bool `protobuf:"varint,2,opt,name=initial_sync_complete,json=initialSyncComplete,proto3" json:"initial_sync_complete,omitempty"`
// contains filtered or unexported fields
}
GetMappingUpdateResponse contains zero or more ProxyMappings. No mappings may be sent to test the liveness of the Proxy. Mappings that are sent should be interpreted by the Proxy appropriately.
func (*GetMappingUpdateResponse) Descriptor
deprecated
added in
v0.65.0
func (*GetMappingUpdateResponse) Descriptor() ([]byte, []int)
Deprecated: Use GetMappingUpdateResponse.ProtoReflect.Descriptor instead.
func (*GetMappingUpdateResponse) GetInitialSyncComplete ¶ added in v0.65.0
func (x *GetMappingUpdateResponse) GetInitialSyncComplete() bool
func (*GetMappingUpdateResponse) GetMapping ¶ added in v0.65.0
func (x *GetMappingUpdateResponse) GetMapping() []*ProxyMapping
func (*GetMappingUpdateResponse) ProtoMessage ¶ added in v0.65.0
func (*GetMappingUpdateResponse) ProtoMessage()
func (*GetMappingUpdateResponse) ProtoReflect ¶ added in v0.65.0
func (x *GetMappingUpdateResponse) ProtoReflect() protoreflect.Message
func (*GetMappingUpdateResponse) Reset ¶ added in v0.65.0
func (x *GetMappingUpdateResponse) Reset()
func (*GetMappingUpdateResponse) String ¶ added in v0.65.0
func (x *GetMappingUpdateResponse) String() string
type GetOIDCURLRequest ¶ added in v0.65.0
type GetOIDCURLRequest struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
RedirectUrl string `protobuf:"bytes,3,opt,name=redirect_url,json=redirectUrl,proto3" json:"redirect_url,omitempty"`
// contains filtered or unexported fields
}
func (*GetOIDCURLRequest) Descriptor
deprecated
added in
v0.65.0
func (*GetOIDCURLRequest) Descriptor() ([]byte, []int)
Deprecated: Use GetOIDCURLRequest.ProtoReflect.Descriptor instead.
func (*GetOIDCURLRequest) GetAccountId ¶ added in v0.65.0
func (x *GetOIDCURLRequest) GetAccountId() string
func (*GetOIDCURLRequest) GetId ¶ added in v0.65.0
func (x *GetOIDCURLRequest) GetId() string
func (*GetOIDCURLRequest) GetRedirectUrl ¶ added in v0.65.0
func (x *GetOIDCURLRequest) GetRedirectUrl() string
func (*GetOIDCURLRequest) ProtoMessage ¶ added in v0.65.0
func (*GetOIDCURLRequest) ProtoMessage()
func (*GetOIDCURLRequest) ProtoReflect ¶ added in v0.65.0
func (x *GetOIDCURLRequest) ProtoReflect() protoreflect.Message
func (*GetOIDCURLRequest) Reset ¶ added in v0.65.0
func (x *GetOIDCURLRequest) Reset()
func (*GetOIDCURLRequest) String ¶ added in v0.65.0
func (x *GetOIDCURLRequest) String() string
type GetOIDCURLResponse ¶ added in v0.65.0
type GetOIDCURLResponse struct {
Url string `protobuf:"bytes,1,opt,name=url,proto3" json:"url,omitempty"`
// contains filtered or unexported fields
}
func (*GetOIDCURLResponse) Descriptor
deprecated
added in
v0.65.0
func (*GetOIDCURLResponse) Descriptor() ([]byte, []int)
Deprecated: Use GetOIDCURLResponse.ProtoReflect.Descriptor instead.
func (*GetOIDCURLResponse) GetUrl ¶ added in v0.65.0
func (x *GetOIDCURLResponse) GetUrl() string
func (*GetOIDCURLResponse) ProtoMessage ¶ added in v0.65.0
func (*GetOIDCURLResponse) ProtoMessage()
func (*GetOIDCURLResponse) ProtoReflect ¶ added in v0.65.0
func (x *GetOIDCURLResponse) ProtoReflect() protoreflect.Message
func (*GetOIDCURLResponse) Reset ¶ added in v0.65.0
func (x *GetOIDCURLResponse) Reset()
func (*GetOIDCURLResponse) String ¶ added in v0.65.0
func (x *GetOIDCURLResponse) String() string
type GroupCompact ¶ added in v0.75.0
type GroupCompact struct {
// id comes from PublicID. Used by PolicyCompact.source_group_ids / destination_group_ids.
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
// Indexes into NetworkMapComponentsFull.peers.
PeerIndexes []uint32 `protobuf:"varint,2,rep,packed,name=peer_indexes,json=peerIndexes,proto3" json:"peer_indexes,omitempty"`
// True when the group is named "All" (types.Group.IsGroupAll). The
// client-side Calculate short-circuits group→peer expansion on such
// groups exactly like the server does; without this bit the decoded
// groups lose that property and the two sides expand policy
// destinations differently.
IsAll bool `protobuf:"varint,3,opt,name=is_all,json=isAll,proto3" json:"is_all,omitempty"`
// contains filtered or unexported fields
}
GroupCompact is the wire-shape of a group: public id, optional name, and indexes into NetworkMapComponentsFull.peers identifying members.
func (*GroupCompact) Descriptor
deprecated
added in
v0.75.0
func (*GroupCompact) Descriptor() ([]byte, []int)
Deprecated: Use GroupCompact.ProtoReflect.Descriptor instead.
func (*GroupCompact) GetId ¶ added in v0.75.0
func (x *GroupCompact) GetId() string
func (*GroupCompact) GetIsAll ¶ added in v0.75.0
func (x *GroupCompact) GetIsAll() bool
func (*GroupCompact) GetPeerIndexes ¶ added in v0.75.0
func (x *GroupCompact) GetPeerIndexes() []uint32
func (*GroupCompact) ProtoMessage ¶ added in v0.75.0
func (*GroupCompact) ProtoMessage()
func (*GroupCompact) ProtoReflect ¶ added in v0.75.0
func (x *GroupCompact) ProtoReflect() protoreflect.Message
func (*GroupCompact) Reset ¶ added in v0.75.0
func (x *GroupCompact) Reset()
func (*GroupCompact) String ¶ added in v0.75.0
func (x *GroupCompact) String() string
type HeaderAuth ¶ added in v0.67.0
type HeaderAuth struct {
// Header name to check, e.g. "Authorization", "X-API-Key".
Header string `protobuf:"bytes,1,opt,name=header,proto3" json:"header,omitempty"`
// argon2id hash of the expected full header value.
HashedValue string `protobuf:"bytes,2,opt,name=hashed_value,json=hashedValue,proto3" json:"hashed_value,omitempty"`
// contains filtered or unexported fields
}
func (*HeaderAuth) Descriptor
deprecated
added in
v0.67.0
func (*HeaderAuth) Descriptor() ([]byte, []int)
Deprecated: Use HeaderAuth.ProtoReflect.Descriptor instead.
func (*HeaderAuth) GetHashedValue ¶ added in v0.67.0
func (x *HeaderAuth) GetHashedValue() string
func (*HeaderAuth) GetHeader ¶ added in v0.67.0
func (x *HeaderAuth) GetHeader() string
func (*HeaderAuth) ProtoMessage ¶ added in v0.67.0
func (*HeaderAuth) ProtoMessage()
func (*HeaderAuth) ProtoReflect ¶ added in v0.67.0
func (x *HeaderAuth) ProtoReflect() protoreflect.Message
func (*HeaderAuth) Reset ¶ added in v0.67.0
func (x *HeaderAuth) Reset()
func (*HeaderAuth) String ¶ added in v0.67.0
func (x *HeaderAuth) String() string
type HeaderAuthRequest ¶ added in v0.67.0
type HeaderAuthRequest struct {
HeaderValue string `protobuf:"bytes,1,opt,name=header_value,json=headerValue,proto3" json:"header_value,omitempty"`
HeaderName string `protobuf:"bytes,2,opt,name=header_name,json=headerName,proto3" json:"header_name,omitempty"`
// contains filtered or unexported fields
}
func (*HeaderAuthRequest) Descriptor
deprecated
added in
v0.67.0
func (*HeaderAuthRequest) Descriptor() ([]byte, []int)
Deprecated: Use HeaderAuthRequest.ProtoReflect.Descriptor instead.
func (*HeaderAuthRequest) GetHeaderName ¶ added in v0.67.0
func (x *HeaderAuthRequest) GetHeaderName() string
func (*HeaderAuthRequest) GetHeaderValue ¶ added in v0.67.0
func (x *HeaderAuthRequest) GetHeaderValue() string
func (*HeaderAuthRequest) ProtoMessage ¶ added in v0.67.0
func (*HeaderAuthRequest) ProtoMessage()
func (*HeaderAuthRequest) ProtoReflect ¶ added in v0.67.0
func (x *HeaderAuthRequest) ProtoReflect() protoreflect.Message
func (*HeaderAuthRequest) Reset ¶ added in v0.67.0
func (x *HeaderAuthRequest) Reset()
func (*HeaderAuthRequest) String ¶ added in v0.67.0
func (x *HeaderAuthRequest) String() string
type HostConfig ¶
type HostConfig struct {
// URI of the resource e.g. turns://stun.netbird.io:4430 or signal.netbird.io:10000
Uri string `protobuf:"bytes,1,opt,name=uri,proto3" json:"uri,omitempty"`
Protocol HostConfig_Protocol `protobuf:"varint,2,opt,name=protocol,proto3,enum=management.HostConfig_Protocol" json:"protocol,omitempty"`
// contains filtered or unexported fields
}
HostConfig describes connection properties of some server (e.g. STUN, Signal, Management)
func (*HostConfig) Descriptor
deprecated
func (*HostConfig) Descriptor() ([]byte, []int)
Deprecated: Use HostConfig.ProtoReflect.Descriptor instead.
func (*HostConfig) GetProtocol ¶
func (x *HostConfig) GetProtocol() HostConfig_Protocol
func (*HostConfig) GetUri ¶
func (x *HostConfig) GetUri() string
func (*HostConfig) ProtoMessage ¶
func (*HostConfig) ProtoMessage()
func (*HostConfig) ProtoReflect ¶
func (x *HostConfig) ProtoReflect() protoreflect.Message
func (*HostConfig) Reset ¶
func (x *HostConfig) Reset()
func (*HostConfig) String ¶
func (x *HostConfig) String() string
type HostConfig_Protocol ¶
type HostConfig_Protocol int32
const ( HostConfig_UDP HostConfig_Protocol = 0 HostConfig_TCP HostConfig_Protocol = 1 HostConfig_HTTP HostConfig_Protocol = 2 HostConfig_HTTPS HostConfig_Protocol = 3 HostConfig_DTLS HostConfig_Protocol = 4 )
func (HostConfig_Protocol) Descriptor ¶
func (HostConfig_Protocol) Descriptor() protoreflect.EnumDescriptor
func (HostConfig_Protocol) Enum ¶
func (x HostConfig_Protocol) Enum() *HostConfig_Protocol
func (HostConfig_Protocol) EnumDescriptor
deprecated
func (HostConfig_Protocol) EnumDescriptor() ([]byte, []int)
Deprecated: Use HostConfig_Protocol.Descriptor instead.
func (HostConfig_Protocol) Number ¶
func (x HostConfig_Protocol) Number() protoreflect.EnumNumber
func (HostConfig_Protocol) String ¶
func (x HostConfig_Protocol) String() string
func (HostConfig_Protocol) Type ¶
func (HostConfig_Protocol) Type() protoreflect.EnumType
type JWTConfig ¶ added in v0.60.0
type JWTConfig struct {
Issuer string `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
// Deprecated: audience is kept for backwards compatibility only. Use audiences instead in the client code but populate this field.
Audience string `protobuf:"bytes,2,opt,name=audience,proto3" json:"audience,omitempty"`
KeysLocation string `protobuf:"bytes,3,opt,name=keysLocation,proto3" json:"keysLocation,omitempty"`
MaxTokenAge int64 `protobuf:"varint,4,opt,name=maxTokenAge,proto3" json:"maxTokenAge,omitempty"`
// audiences contains the list of valid audiences for JWT validation.
// Tokens matching any audience in this list are considered valid.
Audiences []string `protobuf:"bytes,5,rep,name=audiences,proto3" json:"audiences,omitempty"`
// contains filtered or unexported fields
}
JWTConfig represents JWT authentication configuration for validating tokens.
func (*JWTConfig) Descriptor
deprecated
added in
v0.60.0
func (*JWTConfig) GetAudience ¶ added in v0.60.0
func (*JWTConfig) GetAudiences ¶ added in v0.63.0
func (*JWTConfig) GetKeysLocation ¶ added in v0.60.0
func (*JWTConfig) GetMaxTokenAge ¶ added in v0.60.0
func (*JWTConfig) ProtoMessage ¶ added in v0.60.0
func (*JWTConfig) ProtoMessage()
func (*JWTConfig) ProtoReflect ¶ added in v0.60.0
func (x *JWTConfig) ProtoReflect() protoreflect.Message
type JobRequest ¶ added in v0.64.0
type JobRequest struct {
ID []byte `protobuf:"bytes,1,opt,name=ID,proto3" json:"ID,omitempty"`
// Types that are assignable to WorkloadParameters:
//
// *JobRequest_Bundle
WorkloadParameters isJobRequest_WorkloadParameters `protobuf_oneof:"workload_parameters"`
// contains filtered or unexported fields
}
func (*JobRequest) Descriptor
deprecated
added in
v0.64.0
func (*JobRequest) Descriptor() ([]byte, []int)
Deprecated: Use JobRequest.ProtoReflect.Descriptor instead.
func (*JobRequest) GetBundle ¶ added in v0.64.0
func (x *JobRequest) GetBundle() *BundleParameters
func (*JobRequest) GetID ¶ added in v0.64.0
func (x *JobRequest) GetID() []byte
func (*JobRequest) GetWorkloadParameters ¶ added in v0.64.0
func (m *JobRequest) GetWorkloadParameters() isJobRequest_WorkloadParameters
func (*JobRequest) ProtoMessage ¶ added in v0.64.0
func (*JobRequest) ProtoMessage()
func (*JobRequest) ProtoReflect ¶ added in v0.64.0
func (x *JobRequest) ProtoReflect() protoreflect.Message
func (*JobRequest) Reset ¶ added in v0.64.0
func (x *JobRequest) Reset()
func (*JobRequest) String ¶ added in v0.64.0
func (x *JobRequest) String() string
type JobRequest_Bundle ¶ added in v0.64.0
type JobRequest_Bundle struct {
Bundle *BundleParameters `protobuf:"bytes,10,opt,name=bundle,proto3,oneof"` //OtherParameters other = 11;
}
type JobResponse ¶ added in v0.64.0
type JobResponse struct {
ID []byte `protobuf:"bytes,1,opt,name=ID,proto3" json:"ID,omitempty"`
Status JobStatus `protobuf:"varint,2,opt,name=status,proto3,enum=management.JobStatus" json:"status,omitempty"`
Reason []byte `protobuf:"bytes,3,opt,name=Reason,proto3" json:"Reason,omitempty"`
// Types that are assignable to WorkloadResults:
//
// *JobResponse_Bundle
WorkloadResults isJobResponse_WorkloadResults `protobuf_oneof:"workload_results"`
// contains filtered or unexported fields
}
func (*JobResponse) Descriptor
deprecated
added in
v0.64.0
func (*JobResponse) Descriptor() ([]byte, []int)
Deprecated: Use JobResponse.ProtoReflect.Descriptor instead.
func (*JobResponse) GetBundle ¶ added in v0.64.0
func (x *JobResponse) GetBundle() *BundleResult
func (*JobResponse) GetID ¶ added in v0.64.0
func (x *JobResponse) GetID() []byte
func (*JobResponse) GetReason ¶ added in v0.64.0
func (x *JobResponse) GetReason() []byte
func (*JobResponse) GetStatus ¶ added in v0.64.0
func (x *JobResponse) GetStatus() JobStatus
func (*JobResponse) GetWorkloadResults ¶ added in v0.64.0
func (m *JobResponse) GetWorkloadResults() isJobResponse_WorkloadResults
func (*JobResponse) ProtoMessage ¶ added in v0.64.0
func (*JobResponse) ProtoMessage()
func (*JobResponse) ProtoReflect ¶ added in v0.64.0
func (x *JobResponse) ProtoReflect() protoreflect.Message
func (*JobResponse) Reset ¶ added in v0.64.0
func (x *JobResponse) Reset()
func (*JobResponse) String ¶ added in v0.64.0
func (x *JobResponse) String() string
type JobResponse_Bundle ¶ added in v0.64.0
type JobResponse_Bundle struct {
Bundle *BundleResult `protobuf:"bytes,10,opt,name=bundle,proto3,oneof"` //OtherResult other = 11;
}
type JobStatus ¶ added in v0.64.0
type JobStatus int32
func (JobStatus) Descriptor ¶ added in v0.64.0
func (JobStatus) Descriptor() protoreflect.EnumDescriptor
func (JobStatus) EnumDescriptor
deprecated
added in
v0.64.0
func (JobStatus) Number ¶ added in v0.64.0
func (x JobStatus) Number() protoreflect.EnumNumber
func (JobStatus) Type ¶ added in v0.64.0
func (JobStatus) Type() protoreflect.EnumType
type LoginRequest ¶
type LoginRequest struct {
// Pre-authorized setup key (can be empty)
SetupKey string `protobuf:"bytes,1,opt,name=setupKey,proto3" json:"setupKey,omitempty"`
// Meta data of the peer (e.g. name, os_name, os_version,
Meta *PeerSystemMeta `protobuf:"bytes,2,opt,name=meta,proto3" json:"meta,omitempty"`
// SSO token (can be empty)
JwtToken string `protobuf:"bytes,3,opt,name=jwtToken,proto3" json:"jwtToken,omitempty"`
// Can be absent for now.
PeerKeys *PeerKeys `protobuf:"bytes,4,opt,name=peerKeys,proto3" json:"peerKeys,omitempty"`
DnsLabels []string `protobuf:"bytes,5,rep,name=dnsLabels,proto3" json:"dnsLabels,omitempty"`
// contains filtered or unexported fields
}
func (*LoginRequest) Descriptor
deprecated
func (*LoginRequest) Descriptor() ([]byte, []int)
Deprecated: Use LoginRequest.ProtoReflect.Descriptor instead.
func (*LoginRequest) GetDnsLabels ¶
func (x *LoginRequest) GetDnsLabels() []string
func (*LoginRequest) GetJwtToken ¶
func (x *LoginRequest) GetJwtToken() string
func (*LoginRequest) GetMeta ¶
func (x *LoginRequest) GetMeta() *PeerSystemMeta
func (*LoginRequest) GetPeerKeys ¶
func (x *LoginRequest) GetPeerKeys() *PeerKeys
func (*LoginRequest) GetSetupKey ¶
func (x *LoginRequest) GetSetupKey() string
func (*LoginRequest) ProtoMessage ¶
func (*LoginRequest) ProtoMessage()
func (*LoginRequest) ProtoReflect ¶
func (x *LoginRequest) ProtoReflect() protoreflect.Message
func (*LoginRequest) Reset ¶
func (x *LoginRequest) Reset()
func (*LoginRequest) String ¶
func (x *LoginRequest) String() string
type LoginResponse ¶
type LoginResponse struct {
// Global config
NetbirdConfig *NetbirdConfig `protobuf:"bytes,1,opt,name=netbirdConfig,proto3" json:"netbirdConfig,omitempty"`
// Peer local config
PeerConfig *PeerConfig `protobuf:"bytes,2,opt,name=peerConfig,proto3" json:"peerConfig,omitempty"`
// Posture checks to be evaluated by client
Checks []*Checks `protobuf:"bytes,3,rep,name=Checks,proto3" json:"Checks,omitempty"`
// 3-state session deadline; same encoding as SyncResponse.sessionExpiresAt.
//
// field unset (nil) → no info; client keeps any deadline it had
// set, seconds=0 nanos=0 → explicit "expiry disabled" / non-SSO peer
// set, valid timestamp → new absolute UTC deadline
SessionExpiresAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=sessionExpiresAt,proto3" json:"sessionExpiresAt,omitempty"`
// contains filtered or unexported fields
}
func (*LoginResponse) Descriptor
deprecated
func (*LoginResponse) Descriptor() ([]byte, []int)
Deprecated: Use LoginResponse.ProtoReflect.Descriptor instead.
func (*LoginResponse) GetChecks ¶
func (x *LoginResponse) GetChecks() []*Checks
func (*LoginResponse) GetNetbirdConfig ¶
func (x *LoginResponse) GetNetbirdConfig() *NetbirdConfig
func (*LoginResponse) GetPeerConfig ¶
func (x *LoginResponse) GetPeerConfig() *PeerConfig
func (*LoginResponse) GetSessionExpiresAt ¶ added in v0.72.0
func (x *LoginResponse) GetSessionExpiresAt() *timestamppb.Timestamp
func (*LoginResponse) ProtoMessage ¶
func (*LoginResponse) ProtoMessage()
func (*LoginResponse) ProtoReflect ¶
func (x *LoginResponse) ProtoReflect() protoreflect.Message
func (*LoginResponse) Reset ¶
func (x *LoginResponse) Reset()
func (*LoginResponse) String ¶
func (x *LoginResponse) String() string
type MachineUserIndexes ¶ added in v0.61.0
type MachineUserIndexes struct {
Indexes []uint32 `protobuf:"varint,1,rep,packed,name=indexes,proto3" json:"indexes,omitempty"`
// contains filtered or unexported fields
}
func (*MachineUserIndexes) Descriptor
deprecated
added in
v0.61.0
func (*MachineUserIndexes) Descriptor() ([]byte, []int)
Deprecated: Use MachineUserIndexes.ProtoReflect.Descriptor instead.
func (*MachineUserIndexes) GetIndexes ¶ added in v0.61.0
func (x *MachineUserIndexes) GetIndexes() []uint32
func (*MachineUserIndexes) ProtoMessage ¶ added in v0.61.0
func (*MachineUserIndexes) ProtoMessage()
func (*MachineUserIndexes) ProtoReflect ¶ added in v0.61.0
func (x *MachineUserIndexes) ProtoReflect() protoreflect.Message
func (*MachineUserIndexes) Reset ¶ added in v0.61.0
func (x *MachineUserIndexes) Reset()
func (*MachineUserIndexes) String ¶ added in v0.61.0
func (x *MachineUserIndexes) String() string
type ManagementServiceClient ¶
type ManagementServiceClient interface {
// Login logs in peer. In case server returns codes.PermissionDenied this endpoint can be used to register Peer providing LoginRequest.setupKey
// Returns encrypted LoginResponse in EncryptedMessage.Body
Login(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// Sync enables peer synchronization. Each peer that is connected to this stream will receive updates from the server.
// For example, if a new peer has been added to an account all other connected peers will receive this peer's Wireguard public key as an update
// The initial SyncResponse contains all of the available peers so the local state can be refreshed
// Returns encrypted SyncResponse in EncryptedMessage.Body
Sync(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (ManagementService_SyncClient, error)
// Exposes a Wireguard public key of the Management service.
// This key is used to support message encryption between client and server
GetServerKey(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*ServerKeyResponse, error)
// health check endpoint
IsHealthy(ctx context.Context, in *Empty, opts ...grpc.CallOption) (*Empty, error)
// Exposes a device authorization flow information
// This is used for initiating a Oauth 2 device authorization grant flow
// which will be used by our clients to Login.
// EncryptedMessage of the request has a body of DeviceAuthorizationFlowRequest.
// EncryptedMessage of the response has a body of DeviceAuthorizationFlow.
GetDeviceAuthorizationFlow(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// Exposes a PKCE authorization code flow information
// This is used for initiating a Oauth 2 authorization grant flow
// with Proof Key for Code Exchange (PKCE) which will be used by our clients to Login.
// EncryptedMessage of the request has a body of PKCEAuthorizationFlowRequest.
// EncryptedMessage of the response has a body of PKCEAuthorizationFlow.
GetPKCEAuthorizationFlow(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// SyncMeta is used to sync metadata of the peer.
// After sync the peer if there is a change in peer posture check which needs to be evaluated by the client,
// sync meta will evaluate the checks and update the peer meta with the result.
// EncryptedMessage of the request has a body of Empty.
SyncMeta(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*Empty, error)
// Logout logs out the peer and removes it from the management server
Logout(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*Empty, error)
// Executes a job on a target peer (e.g., debug bundle)
Job(ctx context.Context, opts ...grpc.CallOption) (ManagementService_JobClient, error)
// ExtendAuthSession refreshes the peer's session expiry deadline using a fresh JWT.
// Same JWT validation pipeline as Login (including jwt.UserID == peer.UserID check),
// but does not redo the network-map sync. Only valid for SSO-registered peers where
// login expiration is enabled. The tunnel remains up.
// EncryptedMessage of the request has a body of ExtendAuthSessionRequest.
// EncryptedMessage of the response has a body of ExtendAuthSessionResponse.
ExtendAuthSession(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// CreateExpose creates a temporary reverse proxy service for a peer
CreateExpose(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// RenewExpose extends the TTL of an active expose session
RenewExpose(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
// StopExpose terminates an active expose session
StopExpose(ctx context.Context, in *EncryptedMessage, opts ...grpc.CallOption) (*EncryptedMessage, error)
}
ManagementServiceClient is the client API for ManagementService service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
func NewManagementServiceClient ¶
func NewManagementServiceClient(cc grpc.ClientConnInterface) ManagementServiceClient
type ManagementServiceServer ¶
type ManagementServiceServer interface {
// Login logs in peer. In case server returns codes.PermissionDenied this endpoint can be used to register Peer providing LoginRequest.setupKey
// Returns encrypted LoginResponse in EncryptedMessage.Body
Login(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// Sync enables peer synchronization. Each peer that is connected to this stream will receive updates from the server.
// For example, if a new peer has been added to an account all other connected peers will receive this peer's Wireguard public key as an update
// The initial SyncResponse contains all of the available peers so the local state can be refreshed
// Returns encrypted SyncResponse in EncryptedMessage.Body
Sync(*EncryptedMessage, ManagementService_SyncServer) error
// Exposes a Wireguard public key of the Management service.
// This key is used to support message encryption between client and server
GetServerKey(context.Context, *Empty) (*ServerKeyResponse, error)
// health check endpoint
IsHealthy(context.Context, *Empty) (*Empty, error)
// Exposes a device authorization flow information
// This is used for initiating a Oauth 2 device authorization grant flow
// which will be used by our clients to Login.
// EncryptedMessage of the request has a body of DeviceAuthorizationFlowRequest.
// EncryptedMessage of the response has a body of DeviceAuthorizationFlow.
GetDeviceAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// Exposes a PKCE authorization code flow information
// This is used for initiating a Oauth 2 authorization grant flow
// with Proof Key for Code Exchange (PKCE) which will be used by our clients to Login.
// EncryptedMessage of the request has a body of PKCEAuthorizationFlowRequest.
// EncryptedMessage of the response has a body of PKCEAuthorizationFlow.
GetPKCEAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// SyncMeta is used to sync metadata of the peer.
// After sync the peer if there is a change in peer posture check which needs to be evaluated by the client,
// sync meta will evaluate the checks and update the peer meta with the result.
// EncryptedMessage of the request has a body of Empty.
SyncMeta(context.Context, *EncryptedMessage) (*Empty, error)
// Logout logs out the peer and removes it from the management server
Logout(context.Context, *EncryptedMessage) (*Empty, error)
// Executes a job on a target peer (e.g., debug bundle)
Job(ManagementService_JobServer) error
// ExtendAuthSession refreshes the peer's session expiry deadline using a fresh JWT.
// Same JWT validation pipeline as Login (including jwt.UserID == peer.UserID check),
// but does not redo the network-map sync. Only valid for SSO-registered peers where
// login expiration is enabled. The tunnel remains up.
// EncryptedMessage of the request has a body of ExtendAuthSessionRequest.
// EncryptedMessage of the response has a body of ExtendAuthSessionResponse.
ExtendAuthSession(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// CreateExpose creates a temporary reverse proxy service for a peer
CreateExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// RenewExpose extends the TTL of an active expose session
RenewExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// StopExpose terminates an active expose session
StopExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
// contains filtered or unexported methods
}
ManagementServiceServer is the server API for ManagementService service. All implementations must embed UnimplementedManagementServiceServer for forward compatibility
type ManagementService_JobClient ¶ added in v0.64.0
type ManagementService_JobClient interface {
Send(*EncryptedMessage) error
Recv() (*EncryptedMessage, error)
grpc.ClientStream
}
type ManagementService_JobServer ¶ added in v0.64.0
type ManagementService_JobServer interface {
Send(*EncryptedMessage) error
Recv() (*EncryptedMessage, error)
grpc.ServerStream
}
type ManagementService_SyncClient ¶
type ManagementService_SyncClient interface {
Recv() (*EncryptedMessage, error)
grpc.ClientStream
}
type ManagementService_SyncServer ¶
type ManagementService_SyncServer interface {
Send(*EncryptedMessage) error
grpc.ServerStream
}
type MetricsConfig ¶ added in v0.74.0
type MetricsConfig struct {
Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
// contains filtered or unexported fields
}
func (*MetricsConfig) Descriptor
deprecated
added in
v0.74.0
func (*MetricsConfig) Descriptor() ([]byte, []int)
Deprecated: Use MetricsConfig.ProtoReflect.Descriptor instead.
func (*MetricsConfig) GetEnabled ¶ added in v0.74.0
func (x *MetricsConfig) GetEnabled() bool
func (*MetricsConfig) ProtoMessage ¶ added in v0.74.0
func (*MetricsConfig) ProtoMessage()
func (*MetricsConfig) ProtoReflect ¶ added in v0.74.0
func (x *MetricsConfig) ProtoReflect() protoreflect.Message
func (*MetricsConfig) Reset ¶ added in v0.74.0
func (x *MetricsConfig) Reset()
func (*MetricsConfig) String ¶ added in v0.74.0
func (x *MetricsConfig) String() string
type MiddlewareConfig ¶ added in v0.74.0
type MiddlewareConfig struct {
// Middleware id; must match the proxy-local compiled-in registry.
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
Enabled bool `protobuf:"varint,2,opt,name=enabled,proto3" json:"enabled,omitempty"`
Slot MiddlewareSlot `protobuf:"varint,3,opt,name=slot,proto3,enum=management.MiddlewareSlot" json:"slot,omitempty"`
// Free-form JSON unmarshalled by the middleware factory into its own typed
// config struct. Empty / null / {} are valid (zero-value config).
ConfigJson []byte `protobuf:"bytes,4,opt,name=config_json,json=configJson,proto3" json:"config_json,omitempty"`
FailMode MiddlewareConfig_FailMode `` /* 128-byte string literal not displayed */
// Clamped to [10ms, 5s] at apply time; zero → 500ms default.
Timeout *durationpb.Duration `protobuf:"bytes,6,opt,name=timeout,proto3" json:"timeout,omitempty"`
// When true, the middleware may mutate request headers or body (subject to
// policy). Honoured only when the implementation also declares
// MutationsSupported.
CanMutate bool `protobuf:"varint,7,opt,name=can_mutate,json=canMutate,proto3" json:"can_mutate,omitempty"`
// contains filtered or unexported fields
}
MiddlewareConfig is the per-target configuration for a single middleware. The proxy validates every incoming MiddlewareConfig at apply time: unknown ids are rejected, timeout is clamped to [10ms, 5s], and the declared slot must match the registered middleware's slot.
func (*MiddlewareConfig) Descriptor
deprecated
added in
v0.74.0
func (*MiddlewareConfig) Descriptor() ([]byte, []int)
Deprecated: Use MiddlewareConfig.ProtoReflect.Descriptor instead.
func (*MiddlewareConfig) GetCanMutate ¶ added in v0.74.0
func (x *MiddlewareConfig) GetCanMutate() bool
func (*MiddlewareConfig) GetConfigJson ¶ added in v0.74.0
func (x *MiddlewareConfig) GetConfigJson() []byte
func (*MiddlewareConfig) GetEnabled ¶ added in v0.74.0
func (x *MiddlewareConfig) GetEnabled() bool
func (*MiddlewareConfig) GetFailMode ¶ added in v0.74.0
func (x *MiddlewareConfig) GetFailMode() MiddlewareConfig_FailMode
func (*MiddlewareConfig) GetId ¶ added in v0.74.0
func (x *MiddlewareConfig) GetId() string
func (*MiddlewareConfig) GetSlot ¶ added in v0.74.0
func (x *MiddlewareConfig) GetSlot() MiddlewareSlot
func (*MiddlewareConfig) GetTimeout ¶ added in v0.74.0
func (x *MiddlewareConfig) GetTimeout() *durationpb.Duration
func (*MiddlewareConfig) ProtoMessage ¶ added in v0.74.0
func (*MiddlewareConfig) ProtoMessage()
func (*MiddlewareConfig) ProtoReflect ¶ added in v0.74.0
func (x *MiddlewareConfig) ProtoReflect() protoreflect.Message
func (*MiddlewareConfig) Reset ¶ added in v0.74.0
func (x *MiddlewareConfig) Reset()
func (*MiddlewareConfig) String ¶ added in v0.74.0
func (x *MiddlewareConfig) String() string
type MiddlewareConfig_FailMode ¶ added in v0.74.0
type MiddlewareConfig_FailMode int32
const ( MiddlewareConfig_FAIL_OPEN MiddlewareConfig_FailMode = 0 MiddlewareConfig_FAIL_CLOSED MiddlewareConfig_FailMode = 1 )
func (MiddlewareConfig_FailMode) Descriptor ¶ added in v0.74.0
func (MiddlewareConfig_FailMode) Descriptor() protoreflect.EnumDescriptor
func (MiddlewareConfig_FailMode) Enum ¶ added in v0.74.0
func (x MiddlewareConfig_FailMode) Enum() *MiddlewareConfig_FailMode
func (MiddlewareConfig_FailMode) EnumDescriptor
deprecated
added in
v0.74.0
func (MiddlewareConfig_FailMode) EnumDescriptor() ([]byte, []int)
Deprecated: Use MiddlewareConfig_FailMode.Descriptor instead.
func (MiddlewareConfig_FailMode) Number ¶ added in v0.74.0
func (x MiddlewareConfig_FailMode) Number() protoreflect.EnumNumber
func (MiddlewareConfig_FailMode) String ¶ added in v0.74.0
func (x MiddlewareConfig_FailMode) String() string
func (MiddlewareConfig_FailMode) Type ¶ added in v0.74.0
func (MiddlewareConfig_FailMode) Type() protoreflect.EnumType
type MiddlewareSlot ¶ added in v0.74.0
type MiddlewareSlot int32
MiddlewareSlot identifies where in the request lifecycle a middleware runs. Mirrors proxy/internal/middleware.Slot.
const ( MiddlewareSlot_MIDDLEWARE_SLOT_UNSPECIFIED MiddlewareSlot = 0 MiddlewareSlot_MIDDLEWARE_SLOT_ON_REQUEST MiddlewareSlot = 1 MiddlewareSlot_MIDDLEWARE_SLOT_ON_RESPONSE MiddlewareSlot = 2 MiddlewareSlot_MIDDLEWARE_SLOT_TERMINAL MiddlewareSlot = 3 )
func (MiddlewareSlot) Descriptor ¶ added in v0.74.0
func (MiddlewareSlot) Descriptor() protoreflect.EnumDescriptor
func (MiddlewareSlot) Enum ¶ added in v0.74.0
func (x MiddlewareSlot) Enum() *MiddlewareSlot
func (MiddlewareSlot) EnumDescriptor
deprecated
added in
v0.74.0
func (MiddlewareSlot) EnumDescriptor() ([]byte, []int)
Deprecated: Use MiddlewareSlot.Descriptor instead.
func (MiddlewareSlot) Number ¶ added in v0.74.0
func (x MiddlewareSlot) Number() protoreflect.EnumNumber
func (MiddlewareSlot) String ¶ added in v0.74.0
func (x MiddlewareSlot) String() string
func (MiddlewareSlot) Type ¶ added in v0.74.0
func (MiddlewareSlot) Type() protoreflect.EnumType
type NameServer ¶
type NameServer struct {
IP string `protobuf:"bytes,1,opt,name=IP,proto3" json:"IP,omitempty"`
NSType int64 `protobuf:"varint,2,opt,name=NSType,proto3" json:"NSType,omitempty"`
Port int64 `protobuf:"varint,3,opt,name=Port,proto3" json:"Port,omitempty"`
// contains filtered or unexported fields
}
NameServer represents a dns.NameServer
func (*NameServer) Descriptor
deprecated
func (*NameServer) Descriptor() ([]byte, []int)
Deprecated: Use NameServer.ProtoReflect.Descriptor instead.
func (*NameServer) GetIP ¶
func (x *NameServer) GetIP() string
func (*NameServer) GetNSType ¶
func (x *NameServer) GetNSType() int64
func (*NameServer) GetPort ¶
func (x *NameServer) GetPort() int64
func (*NameServer) ProtoMessage ¶
func (*NameServer) ProtoMessage()
func (*NameServer) ProtoReflect ¶
func (x *NameServer) ProtoReflect() protoreflect.Message
func (*NameServer) Reset ¶
func (x *NameServer) Reset()
func (*NameServer) String ¶
func (x *NameServer) String() string
type NameServerGroup ¶
type NameServerGroup struct {
NameServers []*NameServer `protobuf:"bytes,1,rep,name=NameServers,proto3" json:"NameServers,omitempty"`
Primary bool `protobuf:"varint,2,opt,name=Primary,proto3" json:"Primary,omitempty"`
Domains []string `protobuf:"bytes,3,rep,name=Domains,proto3" json:"Domains,omitempty"`
SearchDomainsEnabled bool `protobuf:"varint,4,opt,name=SearchDomainsEnabled,proto3" json:"SearchDomainsEnabled,omitempty"`
// contains filtered or unexported fields
}
NameServerGroup represents a dns.NameServerGroup
func (*NameServerGroup) Descriptor
deprecated
func (*NameServerGroup) Descriptor() ([]byte, []int)
Deprecated: Use NameServerGroup.ProtoReflect.Descriptor instead.
func (*NameServerGroup) GetDomains ¶
func (x *NameServerGroup) GetDomains() []string
func (*NameServerGroup) GetNameServers ¶
func (x *NameServerGroup) GetNameServers() []*NameServer
func (*NameServerGroup) GetPrimary ¶
func (x *NameServerGroup) GetPrimary() bool
func (*NameServerGroup) GetSearchDomainsEnabled ¶
func (x *NameServerGroup) GetSearchDomainsEnabled() bool
func (*NameServerGroup) ProtoMessage ¶
func (*NameServerGroup) ProtoMessage()
func (*NameServerGroup) ProtoReflect ¶
func (x *NameServerGroup) ProtoReflect() protoreflect.Message
func (*NameServerGroup) Reset ¶
func (x *NameServerGroup) Reset()
func (*NameServerGroup) String ¶
func (x *NameServerGroup) String() string
type NameServerGroupRaw ¶ added in v0.75.0
type NameServerGroupRaw struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
// Reuses the legacy NameServer wire shape (IP as string).
Nameservers []*NameServer `protobuf:"bytes,2,rep,name=nameservers,proto3" json:"nameservers,omitempty"`
// Group ids the NSG distributes nameservers to.
GroupIds []string `protobuf:"bytes,3,rep,name=group_ids,json=groupIds,proto3" json:"group_ids,omitempty"`
Primary bool `protobuf:"varint,4,opt,name=primary,proto3" json:"primary,omitempty"`
Domains []string `protobuf:"bytes,5,rep,name=domains,proto3" json:"domains,omitempty"`
Enabled bool `protobuf:"varint,6,opt,name=enabled,proto3" json:"enabled,omitempty"`
SearchDomainsEnabled bool `protobuf:"varint,7,opt,name=search_domains_enabled,json=searchDomainsEnabled,proto3" json:"search_domains_enabled,omitempty"`
// contains filtered or unexported fields
}
NameServerGroupRaw mirrors *nbdns.NameServerGroup. Distinct from the legacy NameServerGroup (which is the wire-trimmed shape consumed by proto.DNSConfig and lacks the Name/Description/Groups/Enabled fields).
func (*NameServerGroupRaw) Descriptor
deprecated
added in
v0.75.0
func (*NameServerGroupRaw) Descriptor() ([]byte, []int)
Deprecated: Use NameServerGroupRaw.ProtoReflect.Descriptor instead.
func (*NameServerGroupRaw) GetDomains ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetDomains() []string
func (*NameServerGroupRaw) GetEnabled ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetEnabled() bool
func (*NameServerGroupRaw) GetGroupIds ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetGroupIds() []string
func (*NameServerGroupRaw) GetId ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetId() string
func (*NameServerGroupRaw) GetNameservers ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetNameservers() []*NameServer
func (*NameServerGroupRaw) GetPrimary ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetPrimary() bool
func (*NameServerGroupRaw) GetSearchDomainsEnabled ¶ added in v0.75.0
func (x *NameServerGroupRaw) GetSearchDomainsEnabled() bool
func (*NameServerGroupRaw) ProtoMessage ¶ added in v0.75.0
func (*NameServerGroupRaw) ProtoMessage()
func (*NameServerGroupRaw) ProtoReflect ¶ added in v0.75.0
func (x *NameServerGroupRaw) ProtoReflect() protoreflect.Message
func (*NameServerGroupRaw) Reset ¶ added in v0.75.0
func (x *NameServerGroupRaw) Reset()
func (*NameServerGroupRaw) String ¶ added in v0.75.0
func (x *NameServerGroupRaw) String() string
type NetbirdConfig ¶
type NetbirdConfig struct {
// a list of STUN servers
Stuns []*HostConfig `protobuf:"bytes,1,rep,name=stuns,proto3" json:"stuns,omitempty"`
// a list of TURN servers
Turns []*ProtectedHostConfig `protobuf:"bytes,2,rep,name=turns,proto3" json:"turns,omitempty"`
// a Signal server config
Signal *HostConfig `protobuf:"bytes,3,opt,name=signal,proto3" json:"signal,omitempty"`
Relay *RelayConfig `protobuf:"bytes,4,opt,name=relay,proto3" json:"relay,omitempty"`
Flow *FlowConfig `protobuf:"bytes,5,opt,name=flow,proto3" json:"flow,omitempty"`
Metrics *MetricsConfig `protobuf:"bytes,6,opt,name=metrics,proto3" json:"metrics,omitempty"`
// contains filtered or unexported fields
}
NetbirdConfig is a common configuration of any Netbird peer. It contains STUN, TURN, Signal and Management servers configurations
func (*NetbirdConfig) Descriptor
deprecated
func (*NetbirdConfig) Descriptor() ([]byte, []int)
Deprecated: Use NetbirdConfig.ProtoReflect.Descriptor instead.
func (*NetbirdConfig) GetFlow ¶
func (x *NetbirdConfig) GetFlow() *FlowConfig
func (*NetbirdConfig) GetMetrics ¶ added in v0.74.0
func (x *NetbirdConfig) GetMetrics() *MetricsConfig
func (*NetbirdConfig) GetRelay ¶
func (x *NetbirdConfig) GetRelay() *RelayConfig
func (*NetbirdConfig) GetSignal ¶
func (x *NetbirdConfig) GetSignal() *HostConfig
func (*NetbirdConfig) GetStuns ¶
func (x *NetbirdConfig) GetStuns() []*HostConfig
func (*NetbirdConfig) GetTurns ¶
func (x *NetbirdConfig) GetTurns() []*ProtectedHostConfig
func (*NetbirdConfig) ProtoMessage ¶
func (*NetbirdConfig) ProtoMessage()
func (*NetbirdConfig) ProtoReflect ¶
func (x *NetbirdConfig) ProtoReflect() protoreflect.Message
func (*NetbirdConfig) Reset ¶
func (x *NetbirdConfig) Reset()
func (*NetbirdConfig) String ¶
func (x *NetbirdConfig) String() string
type NetworkAddress ¶
type NetworkAddress struct {
NetIP string `protobuf:"bytes,1,opt,name=netIP,proto3" json:"netIP,omitempty"`
Mac string `protobuf:"bytes,2,opt,name=mac,proto3" json:"mac,omitempty"`
// contains filtered or unexported fields
}
func (*NetworkAddress) Descriptor
deprecated
func (*NetworkAddress) Descriptor() ([]byte, []int)
Deprecated: Use NetworkAddress.ProtoReflect.Descriptor instead.
func (*NetworkAddress) GetMac ¶
func (x *NetworkAddress) GetMac() string
func (*NetworkAddress) GetNetIP ¶
func (x *NetworkAddress) GetNetIP() string
func (*NetworkAddress) ProtoMessage ¶
func (*NetworkAddress) ProtoMessage()
func (*NetworkAddress) ProtoReflect ¶
func (x *NetworkAddress) ProtoReflect() protoreflect.Message
func (*NetworkAddress) Reset ¶
func (x *NetworkAddress) Reset()
func (*NetworkAddress) String ¶
func (x *NetworkAddress) String() string
type NetworkMap ¶
type NetworkMap struct {
// Serial is an ID of the network state to be used by clients to order updates.
// The larger the Serial the newer the configuration.
// E.g. the client app should keep track of this id locally and discard all the configurations with a lower value
Serial uint64 `protobuf:"varint,1,opt,name=Serial,proto3" json:"Serial,omitempty"`
// PeerConfig represents configuration of a peer
PeerConfig *PeerConfig `protobuf:"bytes,2,opt,name=peerConfig,proto3" json:"peerConfig,omitempty"`
// RemotePeerConfig represents a list of remote peers that the receiver can connect to
RemotePeers []*RemotePeerConfig `protobuf:"bytes,3,rep,name=remotePeers,proto3" json:"remotePeers,omitempty"`
// Indicates whether remotePeers array is empty or not to bypass protobuf null and empty array equality.
RemotePeersIsEmpty bool `protobuf:"varint,4,opt,name=remotePeersIsEmpty,proto3" json:"remotePeersIsEmpty,omitempty"`
// List of routes to be applied
Routes []*Route `protobuf:"bytes,5,rep,name=Routes,proto3" json:"Routes,omitempty"`
// DNS config to be applied
DNSConfig *DNSConfig `protobuf:"bytes,6,opt,name=DNSConfig,proto3" json:"DNSConfig,omitempty"`
// RemotePeerConfig represents a list of remote peers that the receiver can connect to
OfflinePeers []*RemotePeerConfig `protobuf:"bytes,7,rep,name=offlinePeers,proto3" json:"offlinePeers,omitempty"`
// FirewallRule represents a list of firewall rules to be applied to peer
FirewallRules []*FirewallRule `protobuf:"bytes,8,rep,name=FirewallRules,proto3" json:"FirewallRules,omitempty"`
// firewallRulesIsEmpty indicates whether FirewallRule array is empty or not to bypass protobuf null and empty array equality.
FirewallRulesIsEmpty bool `protobuf:"varint,9,opt,name=firewallRulesIsEmpty,proto3" json:"firewallRulesIsEmpty,omitempty"`
// RoutesFirewallRules represents a list of routes firewall rules to be applied to peer
RoutesFirewallRules []*RouteFirewallRule `protobuf:"bytes,10,rep,name=routesFirewallRules,proto3" json:"routesFirewallRules,omitempty"`
// RoutesFirewallRulesIsEmpty indicates whether RouteFirewallRule array is empty or not to bypass protobuf null and empty array equality.
RoutesFirewallRulesIsEmpty bool `protobuf:"varint,11,opt,name=routesFirewallRulesIsEmpty,proto3" json:"routesFirewallRulesIsEmpty,omitempty"`
ForwardingRules []*ForwardingRule `protobuf:"bytes,12,rep,name=forwardingRules,proto3" json:"forwardingRules,omitempty"`
// SSHAuth represents SSH authorization configuration
SshAuth *SSHAuth `protobuf:"bytes,13,opt,name=sshAuth,proto3" json:"sshAuth,omitempty"`
// contains filtered or unexported fields
}
NetworkMap represents a network state of the peer with the corresponding configuration parameters to establish peer-to-peer connections
func (*NetworkMap) Descriptor
deprecated
func (*NetworkMap) Descriptor() ([]byte, []int)
Deprecated: Use NetworkMap.ProtoReflect.Descriptor instead.
func (*NetworkMap) GetDNSConfig ¶
func (x *NetworkMap) GetDNSConfig() *DNSConfig
func (*NetworkMap) GetFirewallRules ¶
func (x *NetworkMap) GetFirewallRules() []*FirewallRule
func (*NetworkMap) GetFirewallRulesIsEmpty ¶
func (x *NetworkMap) GetFirewallRulesIsEmpty() bool
func (*NetworkMap) GetForwardingRules ¶
func (x *NetworkMap) GetForwardingRules() []*ForwardingRule
func (*NetworkMap) GetOfflinePeers ¶
func (x *NetworkMap) GetOfflinePeers() []*RemotePeerConfig
func (*NetworkMap) GetPeerConfig ¶
func (x *NetworkMap) GetPeerConfig() *PeerConfig
func (*NetworkMap) GetRemotePeers ¶
func (x *NetworkMap) GetRemotePeers() []*RemotePeerConfig
func (*NetworkMap) GetRemotePeersIsEmpty ¶
func (x *NetworkMap) GetRemotePeersIsEmpty() bool
func (*NetworkMap) GetRoutes ¶
func (x *NetworkMap) GetRoutes() []*Route
func (*NetworkMap) GetRoutesFirewallRules ¶
func (x *NetworkMap) GetRoutesFirewallRules() []*RouteFirewallRule
func (*NetworkMap) GetRoutesFirewallRulesIsEmpty ¶
func (x *NetworkMap) GetRoutesFirewallRulesIsEmpty() bool
func (*NetworkMap) GetSerial ¶
func (x *NetworkMap) GetSerial() uint64
func (*NetworkMap) GetSshAuth ¶ added in v0.61.0
func (x *NetworkMap) GetSshAuth() *SSHAuth
func (*NetworkMap) ProtoMessage ¶
func (*NetworkMap) ProtoMessage()
func (*NetworkMap) ProtoReflect ¶
func (x *NetworkMap) ProtoReflect() protoreflect.Message
func (*NetworkMap) Reset ¶
func (x *NetworkMap) Reset()
func (*NetworkMap) String ¶
func (x *NetworkMap) String() string
type NetworkMapComponentsDelta ¶ added in v0.75.0
type NetworkMapComponentsDelta struct {
// contains filtered or unexported fields
}
NetworkMapComponentsDelta is reserved for the incremental update protocol. Field numbers 1–100 are pre-allocated to keep room for the planned event types without needing a renumber.
func (*NetworkMapComponentsDelta) Descriptor
deprecated
added in
v0.75.0
func (*NetworkMapComponentsDelta) Descriptor() ([]byte, []int)
Deprecated: Use NetworkMapComponentsDelta.ProtoReflect.Descriptor instead.
func (*NetworkMapComponentsDelta) ProtoMessage ¶ added in v0.75.0
func (*NetworkMapComponentsDelta) ProtoMessage()
func (*NetworkMapComponentsDelta) ProtoReflect ¶ added in v0.75.0
func (x *NetworkMapComponentsDelta) ProtoReflect() protoreflect.Message
func (*NetworkMapComponentsDelta) Reset ¶ added in v0.75.0
func (x *NetworkMapComponentsDelta) Reset()
func (*NetworkMapComponentsDelta) String ¶ added in v0.75.0
func (x *NetworkMapComponentsDelta) String() string
type NetworkMapComponentsFull ¶ added in v0.75.0
type NetworkMapComponentsFull struct {
Serial uint64 `protobuf:"varint,1,opt,name=serial,proto3" json:"serial,omitempty"`
// Peer config for the receiving peer (legacy proto.PeerConfig kept as-is —
// it carries the receiving peer's own overlay address, FQDN, SSH config).
PeerConfig *PeerConfig `protobuf:"bytes,2,opt,name=peer_config,json=peerConfig,proto3" json:"peer_config,omitempty"`
// Account-level network metadata (id, IPv4/IPv6 overlay subnets, DNS,
// serial). Mirrors types.Network.
Network *AccountNetwork `protobuf:"bytes,3,opt,name=network,proto3" json:"network,omitempty"`
// Account-level settings the client needs for its local Calculate().
AccountSettings *AccountSettingsCompact `protobuf:"bytes,4,opt,name=account_settings,json=accountSettings,proto3" json:"account_settings,omitempty"`
// Account DNS settings (mirrors types.DNSSettings).
DnsSettings *DNSSettingsCompact `protobuf:"bytes,5,opt,name=dns_settings,json=dnsSettings,proto3" json:"dns_settings,omitempty"`
// Domain shared across all peers in this account, e.g. "netbird.cloud".
// Each peer's FQDN is dns_label + "." + dns_domain.
DnsDomain string `protobuf:"bytes,6,opt,name=dns_domain,json=dnsDomain,proto3" json:"dns_domain,omitempty"`
// Custom-zone domain for this peer's view (c.CustomZoneDomain). Empty when
// the peer has no custom zone records.
CustomZoneDomain string `protobuf:"bytes,7,opt,name=custom_zone_domain,json=customZoneDomain,proto3" json:"custom_zone_domain,omitempty"`
// Deduplicated agent versions; PeerCompact.agent_version_idx indexes here.
// Empty string at index 0 if any peer has no version.
AgentVersions []string `protobuf:"bytes,8,rep,name=agent_versions,json=agentVersions,proto3" json:"agent_versions,omitempty"`
// All peers (deduplicated). The client splits peers into online / offline
// locally using account_settings.peer_login_expiration on receive.
Peers []*PeerCompact `protobuf:"bytes,9,rep,name=peers,proto3" json:"peers,omitempty"`
// Indexes into peers for the subset that may act as routers.
RouterPeerIndexes []uint32 `protobuf:"varint,10,rep,packed,name=router_peer_indexes,json=routerPeerIndexes,proto3" json:"router_peer_indexes,omitempty"`
// Policies that affect the receiving peer.
Policies []*PolicyCompact `protobuf:"bytes,11,rep,name=policies,proto3" json:"policies,omitempty"`
// Groups in unspecified order — clients key off id (public_id).
Groups []*GroupCompact `protobuf:"bytes,12,rep,name=groups,proto3" json:"groups,omitempty"`
// Routes relevant to this peer, raw shape (mirrors []*route.Route).
Routes []*RouteRaw `protobuf:"bytes,13,rep,name=routes,proto3" json:"routes,omitempty"`
// Nameserver groups (mirrors []*nbdns.NameServerGroup).
NameserverGroups []*NameServerGroupRaw `protobuf:"bytes,14,rep,name=nameserver_groups,json=nameserverGroups,proto3" json:"nameserver_groups,omitempty"`
// All DNS records the client needs to assemble its custom zone. Reuses
// the existing SimpleRecord wire shape.
AllDnsRecords []*SimpleRecord `protobuf:"bytes,15,rep,name=all_dns_records,json=allDnsRecords,proto3" json:"all_dns_records,omitempty"`
// Custom zones (typically the peer's own zone). Reuses the existing
// CustomZone wire shape.
AccountZones []*CustomZone `protobuf:"bytes,16,rep,name=account_zones,json=accountZones,proto3" json:"account_zones,omitempty"`
// Network resources (mirrors []*resourceTypes.NetworkResource).
NetworkResources []*NetworkResourceRaw `protobuf:"bytes,17,rep,name=network_resources,json=networkResources,proto3" json:"network_resources,omitempty"`
// Routers per network. Outer key: network public_id. Each entry is
// the set of routers backing that network for this peer's view.
RoutersMap map[string]*NetworkRouterList `` /* 180-byte string literal not displayed */
// For each NetworkResource public_id, the indexes into policies[]
// that apply to it.
ResourcePoliciesMap map[string]*PolicyIds `` /* 209-byte string literal not displayed */
// Group-id (public_id) → user ids authorized for SSH on members.
GroupIdToUserIds map[string]*UserIDList `` /* 204-byte string literal not displayed */
// Account-level allowed user ids (used by Calculate() when assembling SSH
// authorized users for the receiving peer).
AllowedUserIds []string `protobuf:"bytes,21,rep,name=allowed_user_ids,json=allowedUserIds,proto3" json:"allowed_user_ids,omitempty"`
// Per posture-check public_id, the set of peer indexes that failed
// the check. Server-side evaluation result; clients do not re-evaluate.
PostureFailedPeers map[string]*PeerIndexSet `` /* 206-byte string literal not displayed */
// Account-level DNS forwarder port (mirrors the legacy
// proto.DNSConfig.ForwarderPort). Computed by the controller from peer
// versions; clients fold it into their Calculate() DNS output.
DnsForwarderPort int64 `protobuf:"varint,23,opt,name=dns_forwarder_port,json=dnsForwarderPort,proto3" json:"dns_forwarder_port,omitempty"`
// Pre-expanded NetworkMap fragments injected post-Calculate by external
// controllers (BYOP / port-forwarding proxies). The receiving client
// merges these into its locally-computed NetworkMap the same way the
// legacy server does via NetworkMap.Merge — so downstream consumers see
// a unified merged result regardless of source.
ProxyPatch *ProxyPatch `protobuf:"bytes,24,opt,name=proxy_patch,json=proxyPatch,proto3" json:"proxy_patch,omitempty"`
// SSH UserIDClaim — server-side HttpServerConfig.AuthUserIDClaim, or
// "sub" by default. Populated in proto.SSHAuth.UserIDClaim when the
// client rebuilds the NetworkMap from this envelope. Empty when the
// account has no AuthorizedUsers (and thus no SshAuth to populate).
UserIdClaim string `protobuf:"bytes,25,opt,name=user_id_claim,json=userIdClaim,proto3" json:"user_id_claim,omitempty"`
// contains filtered or unexported fields
}
NetworkMapComponentsFull is the full per-peer component snapshot. The client decodes it into a types.NetworkMapComponents and runs Calculate() locally to produce the same NetworkMap the legacy server path would have produced. Every field carries RAW component data — no server-side expansion (firewall rules, DNS config, SSH auth, route firewall rules, forwarding rules) is shipped; the client computes those itself.
func (*NetworkMapComponentsFull) Descriptor
deprecated
added in
v0.75.0
func (*NetworkMapComponentsFull) Descriptor() ([]byte, []int)
Deprecated: Use NetworkMapComponentsFull.ProtoReflect.Descriptor instead.
func (*NetworkMapComponentsFull) GetAccountSettings ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetAccountSettings() *AccountSettingsCompact
func (*NetworkMapComponentsFull) GetAccountZones ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetAccountZones() []*CustomZone
func (*NetworkMapComponentsFull) GetAgentVersions ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetAgentVersions() []string
func (*NetworkMapComponentsFull) GetAllDnsRecords ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetAllDnsRecords() []*SimpleRecord
func (*NetworkMapComponentsFull) GetAllowedUserIds ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetAllowedUserIds() []string
func (*NetworkMapComponentsFull) GetCustomZoneDomain ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetCustomZoneDomain() string
func (*NetworkMapComponentsFull) GetDnsDomain ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetDnsDomain() string
func (*NetworkMapComponentsFull) GetDnsForwarderPort ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetDnsForwarderPort() int64
func (*NetworkMapComponentsFull) GetDnsSettings ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetDnsSettings() *DNSSettingsCompact
func (*NetworkMapComponentsFull) GetGroupIdToUserIds ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetGroupIdToUserIds() map[string]*UserIDList
func (*NetworkMapComponentsFull) GetGroups ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetGroups() []*GroupCompact
func (*NetworkMapComponentsFull) GetNameserverGroups ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetNameserverGroups() []*NameServerGroupRaw
func (*NetworkMapComponentsFull) GetNetwork ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetNetwork() *AccountNetwork
func (*NetworkMapComponentsFull) GetNetworkResources ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetNetworkResources() []*NetworkResourceRaw
func (*NetworkMapComponentsFull) GetPeerConfig ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetPeerConfig() *PeerConfig
func (*NetworkMapComponentsFull) GetPeers ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetPeers() []*PeerCompact
func (*NetworkMapComponentsFull) GetPolicies ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetPolicies() []*PolicyCompact
func (*NetworkMapComponentsFull) GetPostureFailedPeers ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetPostureFailedPeers() map[string]*PeerIndexSet
func (*NetworkMapComponentsFull) GetProxyPatch ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetProxyPatch() *ProxyPatch
func (*NetworkMapComponentsFull) GetResourcePoliciesMap ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetResourcePoliciesMap() map[string]*PolicyIds
func (*NetworkMapComponentsFull) GetRouterPeerIndexes ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetRouterPeerIndexes() []uint32
func (*NetworkMapComponentsFull) GetRoutersMap ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetRoutersMap() map[string]*NetworkRouterList
func (*NetworkMapComponentsFull) GetRoutes ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetRoutes() []*RouteRaw
func (*NetworkMapComponentsFull) GetSerial ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetSerial() uint64
func (*NetworkMapComponentsFull) GetUserIdClaim ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) GetUserIdClaim() string
func (*NetworkMapComponentsFull) ProtoMessage ¶ added in v0.75.0
func (*NetworkMapComponentsFull) ProtoMessage()
func (*NetworkMapComponentsFull) ProtoReflect ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) ProtoReflect() protoreflect.Message
func (*NetworkMapComponentsFull) Reset ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) Reset()
func (*NetworkMapComponentsFull) String ¶ added in v0.75.0
func (x *NetworkMapComponentsFull) String() string
type NetworkMapEnvelope ¶ added in v0.75.0
type NetworkMapEnvelope struct {
// Types that are assignable to Payload:
//
// *NetworkMapEnvelope_Full
// *NetworkMapEnvelope_Delta
Payload isNetworkMapEnvelope_Payload `protobuf_oneof:"payload"`
// contains filtered or unexported fields
}
NetworkMapEnvelope wraps either a full snapshot or a delta. Only Full is emitted today; Delta is reserved for the incremental-update work.
func (*NetworkMapEnvelope) Descriptor
deprecated
added in
v0.75.0
func (*NetworkMapEnvelope) Descriptor() ([]byte, []int)
Deprecated: Use NetworkMapEnvelope.ProtoReflect.Descriptor instead.
func (*NetworkMapEnvelope) GetDelta ¶ added in v0.75.0
func (x *NetworkMapEnvelope) GetDelta() *NetworkMapComponentsDelta
func (*NetworkMapEnvelope) GetFull ¶ added in v0.75.0
func (x *NetworkMapEnvelope) GetFull() *NetworkMapComponentsFull
func (*NetworkMapEnvelope) GetPayload ¶ added in v0.75.0
func (m *NetworkMapEnvelope) GetPayload() isNetworkMapEnvelope_Payload
func (*NetworkMapEnvelope) ProtoMessage ¶ added in v0.75.0
func (*NetworkMapEnvelope) ProtoMessage()
func (*NetworkMapEnvelope) ProtoReflect ¶ added in v0.75.0
func (x *NetworkMapEnvelope) ProtoReflect() protoreflect.Message
func (*NetworkMapEnvelope) Reset ¶ added in v0.75.0
func (x *NetworkMapEnvelope) Reset()
func (*NetworkMapEnvelope) String ¶ added in v0.75.0
func (x *NetworkMapEnvelope) String() string
type NetworkMapEnvelope_Delta ¶ added in v0.75.0
type NetworkMapEnvelope_Delta struct {
Delta *NetworkMapComponentsDelta `protobuf:"bytes,2,opt,name=delta,proto3,oneof"`
}
type NetworkMapEnvelope_Full ¶ added in v0.75.0
type NetworkMapEnvelope_Full struct {
Full *NetworkMapComponentsFull `protobuf:"bytes,1,opt,name=full,proto3,oneof"`
}
type NetworkResourceRaw ¶ added in v0.75.0
type NetworkResourceRaw struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
NetworkSeq string `protobuf:"bytes,2,opt,name=network_seq,json=networkSeq,proto3" json:"network_seq,omitempty"`
Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
// Resource type: "host" / "subnet" / "domain".
Type string `protobuf:"bytes,5,opt,name=type,proto3" json:"type,omitempty"`
Address string `protobuf:"bytes,6,opt,name=address,proto3" json:"address,omitempty"`
DomainValue string `protobuf:"bytes,7,opt,name=domain_value,json=domainValue,proto3" json:"domain_value,omitempty"` // resource.Domain
PrefixCidr string `protobuf:"bytes,8,opt,name=prefix_cidr,json=prefixCidr,proto3" json:"prefix_cidr,omitempty"`
Enabled bool `protobuf:"varint,9,opt,name=enabled,proto3" json:"enabled,omitempty"`
// contains filtered or unexported fields
}
NetworkResourceRaw mirrors *resourceTypes.NetworkResource.
func (*NetworkResourceRaw) Descriptor
deprecated
added in
v0.75.0
func (*NetworkResourceRaw) Descriptor() ([]byte, []int)
Deprecated: Use NetworkResourceRaw.ProtoReflect.Descriptor instead.
func (*NetworkResourceRaw) GetAddress ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetAddress() string
func (*NetworkResourceRaw) GetDescription ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetDescription() string
func (*NetworkResourceRaw) GetDomainValue ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetDomainValue() string
func (*NetworkResourceRaw) GetEnabled ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetEnabled() bool
func (*NetworkResourceRaw) GetId ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetId() string
func (*NetworkResourceRaw) GetName ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetName() string
func (*NetworkResourceRaw) GetNetworkSeq ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetNetworkSeq() string
func (*NetworkResourceRaw) GetPrefixCidr ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetPrefixCidr() string
func (*NetworkResourceRaw) GetType ¶ added in v0.75.0
func (x *NetworkResourceRaw) GetType() string
func (*NetworkResourceRaw) ProtoMessage ¶ added in v0.75.0
func (*NetworkResourceRaw) ProtoMessage()
func (*NetworkResourceRaw) ProtoReflect ¶ added in v0.75.0
func (x *NetworkResourceRaw) ProtoReflect() protoreflect.Message
func (*NetworkResourceRaw) Reset ¶ added in v0.75.0
func (x *NetworkResourceRaw) Reset()
func (*NetworkResourceRaw) String ¶ added in v0.75.0
func (x *NetworkResourceRaw) String() string
type NetworkRouterEntry ¶ added in v0.75.0
type NetworkRouterEntry struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
PeerIndex uint32 `protobuf:"varint,2,opt,name=peer_index,json=peerIndex,proto3" json:"peer_index,omitempty"`
PeerIndexSet bool `protobuf:"varint,3,opt,name=peer_index_set,json=peerIndexSet,proto3" json:"peer_index_set,omitempty"`
PeerGroupIds []string `protobuf:"bytes,4,rep,name=peer_group_ids,json=peerGroupIds,proto3" json:"peer_group_ids,omitempty"`
Masquerade bool `protobuf:"varint,5,opt,name=masquerade,proto3" json:"masquerade,omitempty"`
Metric int32 `protobuf:"varint,6,opt,name=metric,proto3" json:"metric,omitempty"`
Enabled bool `protobuf:"varint,7,opt,name=enabled,proto3" json:"enabled,omitempty"`
// contains filtered or unexported fields
}
NetworkRouterEntry mirrors a single *routerTypes.NetworkRouter; the routing peer is referenced by index into NetworkMapComponentsFull.peers.
func (*NetworkRouterEntry) Descriptor
deprecated
added in
v0.75.0
func (*NetworkRouterEntry) Descriptor() ([]byte, []int)
Deprecated: Use NetworkRouterEntry.ProtoReflect.Descriptor instead.
func (*NetworkRouterEntry) GetEnabled ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetEnabled() bool
func (*NetworkRouterEntry) GetId ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetId() string
func (*NetworkRouterEntry) GetMasquerade ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetMasquerade() bool
func (*NetworkRouterEntry) GetMetric ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetMetric() int32
func (*NetworkRouterEntry) GetPeerGroupIds ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetPeerGroupIds() []string
func (*NetworkRouterEntry) GetPeerIndex ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetPeerIndex() uint32
func (*NetworkRouterEntry) GetPeerIndexSet ¶ added in v0.75.0
func (x *NetworkRouterEntry) GetPeerIndexSet() bool
func (*NetworkRouterEntry) ProtoMessage ¶ added in v0.75.0
func (*NetworkRouterEntry) ProtoMessage()
func (*NetworkRouterEntry) ProtoReflect ¶ added in v0.75.0
func (x *NetworkRouterEntry) ProtoReflect() protoreflect.Message
func (*NetworkRouterEntry) Reset ¶ added in v0.75.0
func (x *NetworkRouterEntry) Reset()
func (*NetworkRouterEntry) String ¶ added in v0.75.0
func (x *NetworkRouterEntry) String() string
type NetworkRouterList ¶ added in v0.75.0
type NetworkRouterList struct {
// Routers in this network, keyed by peer_index (the routing peer).
Entries []*NetworkRouterEntry `protobuf:"bytes,1,rep,name=entries,proto3" json:"entries,omitempty"`
// contains filtered or unexported fields
}
NetworkRouterList carries the routers backing one network.
func (*NetworkRouterList) Descriptor
deprecated
added in
v0.75.0
func (*NetworkRouterList) Descriptor() ([]byte, []int)
Deprecated: Use NetworkRouterList.ProtoReflect.Descriptor instead.
func (*NetworkRouterList) GetEntries ¶ added in v0.75.0
func (x *NetworkRouterList) GetEntries() []*NetworkRouterEntry
func (*NetworkRouterList) ProtoMessage ¶ added in v0.75.0
func (*NetworkRouterList) ProtoMessage()
func (*NetworkRouterList) ProtoReflect ¶ added in v0.75.0
func (x *NetworkRouterList) ProtoReflect() protoreflect.Message
func (*NetworkRouterList) Reset ¶ added in v0.75.0
func (x *NetworkRouterList) Reset()
func (*NetworkRouterList) String ¶ added in v0.75.0
func (x *NetworkRouterList) String() string
type PKCEAuthorizationFlow ¶
type PKCEAuthorizationFlow struct {
ProviderConfig *ProviderConfig `protobuf:"bytes,1,opt,name=ProviderConfig,proto3" json:"ProviderConfig,omitempty"`
// contains filtered or unexported fields
}
PKCEAuthorizationFlow represents Authorization Code Flow information that can be used by the client to login initiate a Oauth 2.0 authorization code grant flow with Proof Key for Code Exchange (PKCE). See https://datatracker.ietf.org/doc/html/rfc7636
func (*PKCEAuthorizationFlow) Descriptor
deprecated
func (*PKCEAuthorizationFlow) Descriptor() ([]byte, []int)
Deprecated: Use PKCEAuthorizationFlow.ProtoReflect.Descriptor instead.
func (*PKCEAuthorizationFlow) GetProviderConfig ¶
func (x *PKCEAuthorizationFlow) GetProviderConfig() *ProviderConfig
func (*PKCEAuthorizationFlow) ProtoMessage ¶
func (*PKCEAuthorizationFlow) ProtoMessage()
func (*PKCEAuthorizationFlow) ProtoReflect ¶
func (x *PKCEAuthorizationFlow) ProtoReflect() protoreflect.Message
func (*PKCEAuthorizationFlow) Reset ¶
func (x *PKCEAuthorizationFlow) Reset()
func (*PKCEAuthorizationFlow) String ¶
func (x *PKCEAuthorizationFlow) String() string
type PKCEAuthorizationFlowRequest ¶
type PKCEAuthorizationFlowRequest struct {
// contains filtered or unexported fields
}
PKCEAuthorizationFlowRequest empty struct for future expansion
func (*PKCEAuthorizationFlowRequest) Descriptor
deprecated
func (*PKCEAuthorizationFlowRequest) Descriptor() ([]byte, []int)
Deprecated: Use PKCEAuthorizationFlowRequest.ProtoReflect.Descriptor instead.
func (*PKCEAuthorizationFlowRequest) ProtoMessage ¶
func (*PKCEAuthorizationFlowRequest) ProtoMessage()
func (*PKCEAuthorizationFlowRequest) ProtoReflect ¶
func (x *PKCEAuthorizationFlowRequest) ProtoReflect() protoreflect.Message
func (*PKCEAuthorizationFlowRequest) Reset ¶
func (x *PKCEAuthorizationFlowRequest) Reset()
func (*PKCEAuthorizationFlowRequest) String ¶
func (x *PKCEAuthorizationFlowRequest) String() string
type PasswordRequest ¶ added in v0.65.0
type PasswordRequest struct {
Password string `protobuf:"bytes,1,opt,name=password,proto3" json:"password,omitempty"`
// contains filtered or unexported fields
}
func (*PasswordRequest) Descriptor
deprecated
added in
v0.65.0
func (*PasswordRequest) Descriptor() ([]byte, []int)
Deprecated: Use PasswordRequest.ProtoReflect.Descriptor instead.
func (*PasswordRequest) GetPassword ¶ added in v0.65.0
func (x *PasswordRequest) GetPassword() string
func (*PasswordRequest) ProtoMessage ¶ added in v0.65.0
func (*PasswordRequest) ProtoMessage()
func (*PasswordRequest) ProtoReflect ¶ added in v0.65.0
func (x *PasswordRequest) ProtoReflect() protoreflect.Message
func (*PasswordRequest) Reset ¶ added in v0.65.0
func (x *PasswordRequest) Reset()
func (*PasswordRequest) String ¶ added in v0.65.0
func (x *PasswordRequest) String() string
type PathMapping ¶ added in v0.65.0
type PathMapping struct {
Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
Target string `protobuf:"bytes,2,opt,name=target,proto3" json:"target,omitempty"`
Options *PathTargetOptions `protobuf:"bytes,3,opt,name=options,proto3" json:"options,omitempty"`
// contains filtered or unexported fields
}
func (*PathMapping) Descriptor
deprecated
added in
v0.65.0
func (*PathMapping) Descriptor() ([]byte, []int)
Deprecated: Use PathMapping.ProtoReflect.Descriptor instead.
func (*PathMapping) GetOptions ¶ added in v0.66.3
func (x *PathMapping) GetOptions() *PathTargetOptions
func (*PathMapping) GetPath ¶ added in v0.65.0
func (x *PathMapping) GetPath() string
func (*PathMapping) GetTarget ¶ added in v0.65.0
func (x *PathMapping) GetTarget() string
func (*PathMapping) ProtoMessage ¶ added in v0.65.0
func (*PathMapping) ProtoMessage()
func (*PathMapping) ProtoReflect ¶ added in v0.65.0
func (x *PathMapping) ProtoReflect() protoreflect.Message
func (*PathMapping) Reset ¶ added in v0.65.0
func (x *PathMapping) Reset()
func (*PathMapping) String ¶ added in v0.65.0
func (x *PathMapping) String() string
type PathRewriteMode ¶ added in v0.66.3
type PathRewriteMode int32
const ( PathRewriteMode_PATH_REWRITE_DEFAULT PathRewriteMode = 0 PathRewriteMode_PATH_REWRITE_PRESERVE PathRewriteMode = 1 )
func (PathRewriteMode) Descriptor ¶ added in v0.66.3
func (PathRewriteMode) Descriptor() protoreflect.EnumDescriptor
func (PathRewriteMode) Enum ¶ added in v0.66.3
func (x PathRewriteMode) Enum() *PathRewriteMode
func (PathRewriteMode) EnumDescriptor
deprecated
added in
v0.66.3
func (PathRewriteMode) EnumDescriptor() ([]byte, []int)
Deprecated: Use PathRewriteMode.Descriptor instead.
func (PathRewriteMode) Number ¶ added in v0.66.3
func (x PathRewriteMode) Number() protoreflect.EnumNumber
func (PathRewriteMode) String ¶ added in v0.66.3
func (x PathRewriteMode) String() string
func (PathRewriteMode) Type ¶ added in v0.66.3
func (PathRewriteMode) Type() protoreflect.EnumType
type PathTargetOptions ¶ added in v0.66.3
type PathTargetOptions struct {
SkipTlsVerify bool `protobuf:"varint,1,opt,name=skip_tls_verify,json=skipTlsVerify,proto3" json:"skip_tls_verify,omitempty"`
RequestTimeout *durationpb.Duration `protobuf:"bytes,2,opt,name=request_timeout,json=requestTimeout,proto3" json:"request_timeout,omitempty"`
PathRewrite PathRewriteMode `` /* 127-byte string literal not displayed */
CustomHeaders map[string]string `` /* 188-byte string literal not displayed */
// Send PROXY protocol v2 header to this backend.
ProxyProtocol bool `protobuf:"varint,5,opt,name=proxy_protocol,json=proxyProtocol,proto3" json:"proxy_protocol,omitempty"`
// Idle timeout before a UDP session is reaped.
SessionIdleTimeout *durationpb.Duration `protobuf:"bytes,6,opt,name=session_idle_timeout,json=sessionIdleTimeout,proto3" json:"session_idle_timeout,omitempty"`
// When true, the proxy dials this target via the host's network stack
// instead of through the embedded NetBird client. Useful for upstreams
// reachable without WireGuard (public APIs, LAN services, localhost
// sidecars). Defaults to false — embedded client is the standard path.
DirectUpstream bool `protobuf:"varint,7,opt,name=direct_upstream,json=directUpstream,proto3" json:"direct_upstream,omitempty"`
// Proxy clamps to [0, proxy-wide max (1 MiB)] at apply time. Agent-network
// synthesized targets only; private services leave these zero.
CaptureMaxRequestBytes int64 `` /* 132-byte string literal not displayed */
// Proxy clamps to [0, proxy-wide max (1 MiB)] at apply time.
CaptureMaxResponseBytes int64 `` /* 135-byte string literal not displayed */
// Content types eligible for body capture (e.g. "application/json").
CaptureContentTypes []string `protobuf:"bytes,10,rep,name=capture_content_types,json=captureContentTypes,proto3" json:"capture_content_types,omitempty"`
// Per-target middleware configurations populated by the agent-network
// synthesizer. Validated and clamped by the proxy at apply time.
Middlewares []*MiddlewareConfig `protobuf:"bytes,11,rep,name=middlewares,proto3" json:"middlewares,omitempty"`
// When true, the proxy stamps agent_network=true on access-log entries
// for this target so management routes them to the agent-network log
// surface.
AgentNetwork bool `protobuf:"varint,12,opt,name=agent_network,json=agentNetwork,proto3" json:"agent_network,omitempty"`
// When true, the proxy suppresses the per-request access-log emission for
// this target. Defaults false to preserve existing access-log behavior for
// every non-agent-network target. The agent-network synth target sets this
// true only when the account's EnableLogCollection toggle is off.
DisableAccessLog bool `protobuf:"varint,13,opt,name=disable_access_log,json=disableAccessLog,proto3" json:"disable_access_log,omitempty"`
// contains filtered or unexported fields
}
func (*PathTargetOptions) Descriptor
deprecated
added in
v0.66.3
func (*PathTargetOptions) Descriptor() ([]byte, []int)
Deprecated: Use PathTargetOptions.ProtoReflect.Descriptor instead.
func (*PathTargetOptions) GetAgentNetwork ¶ added in v0.74.0
func (x *PathTargetOptions) GetAgentNetwork() bool
func (*PathTargetOptions) GetCaptureContentTypes ¶ added in v0.74.0
func (x *PathTargetOptions) GetCaptureContentTypes() []string
func (*PathTargetOptions) GetCaptureMaxRequestBytes ¶ added in v0.74.0
func (x *PathTargetOptions) GetCaptureMaxRequestBytes() int64
func (*PathTargetOptions) GetCaptureMaxResponseBytes ¶ added in v0.74.0
func (x *PathTargetOptions) GetCaptureMaxResponseBytes() int64
func (*PathTargetOptions) GetCustomHeaders ¶ added in v0.66.3
func (x *PathTargetOptions) GetCustomHeaders() map[string]string
func (*PathTargetOptions) GetDirectUpstream ¶ added in v0.72.0
func (x *PathTargetOptions) GetDirectUpstream() bool
func (*PathTargetOptions) GetDisableAccessLog ¶ added in v0.74.0
func (x *PathTargetOptions) GetDisableAccessLog() bool
func (*PathTargetOptions) GetMiddlewares ¶ added in v0.74.0
func (x *PathTargetOptions) GetMiddlewares() []*MiddlewareConfig
func (*PathTargetOptions) GetPathRewrite ¶ added in v0.66.3
func (x *PathTargetOptions) GetPathRewrite() PathRewriteMode
func (*PathTargetOptions) GetProxyProtocol ¶ added in v0.67.0
func (x *PathTargetOptions) GetProxyProtocol() bool
func (*PathTargetOptions) GetRequestTimeout ¶ added in v0.66.3
func (x *PathTargetOptions) GetRequestTimeout() *durationpb.Duration
func (*PathTargetOptions) GetSessionIdleTimeout ¶ added in v0.67.0
func (x *PathTargetOptions) GetSessionIdleTimeout() *durationpb.Duration
func (*PathTargetOptions) GetSkipTlsVerify ¶ added in v0.66.3
func (x *PathTargetOptions) GetSkipTlsVerify() bool
func (*PathTargetOptions) ProtoMessage ¶ added in v0.66.3
func (*PathTargetOptions) ProtoMessage()
func (*PathTargetOptions) ProtoReflect ¶ added in v0.66.3
func (x *PathTargetOptions) ProtoReflect() protoreflect.Message
func (*PathTargetOptions) Reset ¶ added in v0.66.3
func (x *PathTargetOptions) Reset()
func (*PathTargetOptions) String ¶ added in v0.66.3
func (x *PathTargetOptions) String() string
type PeerCapability ¶ added in v0.71.0
type PeerCapability int32
PeerCapability represents a feature the client binary supports. Reported in PeerSystemMeta.capabilities on every login/sync.
const ( PeerCapability_PeerCapabilityUnknown PeerCapability = 0 // Client reads SourcePrefixes instead of the deprecated PeerIP string. PeerCapability_PeerCapabilitySourcePrefixes PeerCapability = 1 // Client handles IPv6 overlay addresses and firewall rules. PeerCapability_PeerCapabilityIPv6Overlay PeerCapability = 2 // Client receives NetworkMap as components and assembles it locally. PeerCapability_PeerCapabilityComponentNetworkMap PeerCapability = 3 )
func (PeerCapability) Descriptor ¶ added in v0.71.0
func (PeerCapability) Descriptor() protoreflect.EnumDescriptor
func (PeerCapability) Enum ¶ added in v0.71.0
func (x PeerCapability) Enum() *PeerCapability
func (PeerCapability) EnumDescriptor
deprecated
added in
v0.71.0
func (PeerCapability) EnumDescriptor() ([]byte, []int)
Deprecated: Use PeerCapability.Descriptor instead.
func (PeerCapability) Number ¶ added in v0.71.0
func (x PeerCapability) Number() protoreflect.EnumNumber
func (PeerCapability) String ¶ added in v0.71.0
func (x PeerCapability) String() string
func (PeerCapability) Type ¶ added in v0.71.0
func (PeerCapability) Type() protoreflect.EnumType
type PeerCompact ¶ added in v0.75.0
type PeerCompact struct {
// Raw 32-byte WireGuard public key (no base64 wrapping).
WgPubKey []byte `protobuf:"bytes,1,opt,name=wg_pub_key,json=wgPubKey,proto3" json:"wg_pub_key,omitempty"`
// Raw 4-byte IPv4 overlay address. Always a /32 host route, so no prefix
// byte is needed.
Ip []byte `protobuf:"bytes,2,opt,name=ip,proto3" json:"ip,omitempty"`
// Raw 16-byte IPv6 overlay address; always a /128 host route. Empty when
// the peer has no IPv6 overlay address.
Ipv6 []byte `protobuf:"bytes,3,opt,name=ipv6,proto3" json:"ipv6,omitempty"`
// Raw SSH public key bytes (or empty).
SshPubKey []byte `protobuf:"bytes,4,opt,name=ssh_pub_key,json=sshPubKey,proto3" json:"ssh_pub_key,omitempty"`
// DNS label without the account's domain suffix. Full FQDN is
// dns_label + "." + NetworkMapComponentsFull.dns_domain.
DnsLabel string `protobuf:"bytes,5,opt,name=dns_label,json=dnsLabel,proto3" json:"dns_label,omitempty"`
AgentVersion string `protobuf:"bytes,6,opt,name=agent_version,json=agentVersion,proto3" json:"agent_version,omitempty"`
// True iff the peer was added via SSO login (i.e., types.Peer.UserID is
// non-empty). Combined with login_expiration_enabled and
// last_login_unix_nano this lets the client reproduce
// (*Peer).LoginExpired() locally.
AddedWithSsoLogin bool `protobuf:"varint,7,opt,name=added_with_sso_login,json=addedWithSsoLogin,proto3" json:"added_with_sso_login,omitempty"`
// True when the peer's login can expire — mirrors
// types.Peer.LoginExpirationEnabled.
LoginExpirationEnabled bool `` /* 130-byte string literal not displayed */
// Unix-nanosecond timestamp of the peer's last login. 0 when the peer has
// never logged in (server stores nil; client treats 0 as "epoch", which
// makes a fresh peer immediately expired iff login_expiration_enabled is
// true — the same semantics as types.Peer.GetLastLogin).
LastLoginUnixNano int64 `protobuf:"varint,9,opt,name=last_login_unix_nano,json=lastLoginUnixNano,proto3" json:"last_login_unix_nano,omitempty"`
// True when the peer has an SSH server enabled locally. Used by the
// legacy SSH path in Calculate() (`policyRuleImpliesLegacySSH`): a rule
// with protocol ALL/TCP-with-SSH-ports activates SSH for the receiving
// peer when this bit is set, even without an explicit NetbirdSSH rule.
SshEnabled bool `protobuf:"varint,10,opt,name=ssh_enabled,json=sshEnabled,proto3" json:"ssh_enabled,omitempty"`
// Mirror of types.Peer.SupportsIPv6() — !Meta.Flags.DisableIPv6 &&
// HasCapability(PeerCapabilityIPv6Overlay). Used by the local peer's
// Calculate() when deciding whether to emit IPv6 firewall rules
// (appendIPv6FirewallRule) against this peer's IPv6 address.
SupportsIpv6 bool `protobuf:"varint,11,opt,name=supports_ipv6,json=supportsIpv6,proto3" json:"supports_ipv6,omitempty"`
// Mirror of types.Peer.SupportsSourcePrefixes() —
// HasCapability(PeerCapabilitySourcePrefixes). Determines whether the
// local peer's Calculate() emits SourcePrefixes alongside legacy PeerIP
// fields in proto.FirewallRule.
SupportsSourcePrefixes bool `` /* 131-byte string literal not displayed */
// Mirror of types.Peer.Meta.Flags.ServerSSHAllowed. Read by Calculate()
// when expanding TCP port-22 firewall rules — the native SSH companion
// (port 22022) is only added when this flag is set and the peer agent
// version supports it.
ServerSshAllowed bool `protobuf:"varint,13,opt,name=server_ssh_allowed,json=serverSshAllowed,proto3" json:"server_ssh_allowed,omitempty"`
// contains filtered or unexported fields
}
PeerCompact is the wire-shape of a remote peer used by the component format. It carries every field of types.Peer that the client's local Calculate() reads — including the trio needed to evaluate LoginExpired() (added_with_sso_login + login_expiration_enabled + last_login_unix_nano). Fields the client does not consume (Status, CreatedAt, etc.) are not shipped.
func (*PeerCompact) Descriptor
deprecated
added in
v0.75.0
func (*PeerCompact) Descriptor() ([]byte, []int)
Deprecated: Use PeerCompact.ProtoReflect.Descriptor instead.
func (*PeerCompact) GetAddedWithSsoLogin ¶ added in v0.75.0
func (x *PeerCompact) GetAddedWithSsoLogin() bool
func (*PeerCompact) GetAgentVersion ¶ added in v0.75.0
func (x *PeerCompact) GetAgentVersion() string
func (*PeerCompact) GetDnsLabel ¶ added in v0.75.0
func (x *PeerCompact) GetDnsLabel() string
func (*PeerCompact) GetIp ¶ added in v0.75.0
func (x *PeerCompact) GetIp() []byte
func (*PeerCompact) GetIpv6 ¶ added in v0.75.0
func (x *PeerCompact) GetIpv6() []byte
func (*PeerCompact) GetLastLoginUnixNano ¶ added in v0.75.0
func (x *PeerCompact) GetLastLoginUnixNano() int64
func (*PeerCompact) GetLoginExpirationEnabled ¶ added in v0.75.0
func (x *PeerCompact) GetLoginExpirationEnabled() bool
func (*PeerCompact) GetServerSshAllowed ¶ added in v0.75.0
func (x *PeerCompact) GetServerSshAllowed() bool
func (*PeerCompact) GetSshEnabled ¶ added in v0.75.0
func (x *PeerCompact) GetSshEnabled() bool
func (*PeerCompact) GetSshPubKey ¶ added in v0.75.0
func (x *PeerCompact) GetSshPubKey() []byte
func (*PeerCompact) GetSupportsIpv6 ¶ added in v0.75.0
func (x *PeerCompact) GetSupportsIpv6() bool
func (*PeerCompact) GetSupportsSourcePrefixes ¶ added in v0.75.0
func (x *PeerCompact) GetSupportsSourcePrefixes() bool
func (*PeerCompact) GetWgPubKey ¶ added in v0.75.0
func (x *PeerCompact) GetWgPubKey() []byte
func (*PeerCompact) ProtoMessage ¶ added in v0.75.0
func (*PeerCompact) ProtoMessage()
func (*PeerCompact) ProtoReflect ¶ added in v0.75.0
func (x *PeerCompact) ProtoReflect() protoreflect.Message
func (*PeerCompact) Reset ¶ added in v0.75.0
func (x *PeerCompact) Reset()
func (*PeerCompact) String ¶ added in v0.75.0
func (x *PeerCompact) String() string
type PeerConfig ¶
type PeerConfig struct {
// Peer's virtual IP address within the Netbird VPN (a Wireguard address config)
Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
// Netbird DNS server (a Wireguard DNS config)
Dns string `protobuf:"bytes,2,opt,name=dns,proto3" json:"dns,omitempty"`
// SSHConfig of the peer.
SshConfig *SSHConfig `protobuf:"bytes,3,opt,name=sshConfig,proto3" json:"sshConfig,omitempty"`
// Peer fully qualified domain name
Fqdn string `protobuf:"bytes,4,opt,name=fqdn,proto3" json:"fqdn,omitempty"`
RoutingPeerDnsResolutionEnabled bool `protobuf:"varint,5,opt,name=RoutingPeerDnsResolutionEnabled,proto3" json:"RoutingPeerDnsResolutionEnabled,omitempty"`
LazyConnectionEnabled bool `protobuf:"varint,6,opt,name=LazyConnectionEnabled,proto3" json:"LazyConnectionEnabled,omitempty"`
Mtu int32 `protobuf:"varint,7,opt,name=mtu,proto3" json:"mtu,omitempty"`
// Auto-update config
AutoUpdate *AutoUpdateSettings `protobuf:"bytes,8,opt,name=autoUpdate,proto3" json:"autoUpdate,omitempty"`
// IPv6 overlay address as compact bytes: 16 bytes IP + 1 byte prefix length.
AddressV6 []byte `protobuf:"bytes,9,opt,name=address_v6,json=addressV6,proto3" json:"address_v6,omitempty"`
// contains filtered or unexported fields
}
PeerConfig represents a configuration of a "our" peer. The properties are used to configure local Wireguard
func (*PeerConfig) Descriptor
deprecated
func (*PeerConfig) Descriptor() ([]byte, []int)
Deprecated: Use PeerConfig.ProtoReflect.Descriptor instead.
func (*PeerConfig) GetAddress ¶
func (x *PeerConfig) GetAddress() string
func (*PeerConfig) GetAddressV6 ¶ added in v0.71.0
func (x *PeerConfig) GetAddressV6() []byte
func (*PeerConfig) GetAutoUpdate ¶ added in v0.61.0
func (x *PeerConfig) GetAutoUpdate() *AutoUpdateSettings
func (*PeerConfig) GetDns ¶
func (x *PeerConfig) GetDns() string
func (*PeerConfig) GetFqdn ¶
func (x *PeerConfig) GetFqdn() string
func (*PeerConfig) GetLazyConnectionEnabled ¶
func (x *PeerConfig) GetLazyConnectionEnabled() bool
func (*PeerConfig) GetMtu ¶ added in v0.56.0
func (x *PeerConfig) GetMtu() int32
func (*PeerConfig) GetRoutingPeerDnsResolutionEnabled ¶
func (x *PeerConfig) GetRoutingPeerDnsResolutionEnabled() bool
func (*PeerConfig) GetSshConfig ¶
func (x *PeerConfig) GetSshConfig() *SSHConfig
func (*PeerConfig) ProtoMessage ¶
func (*PeerConfig) ProtoMessage()
func (*PeerConfig) ProtoReflect ¶
func (x *PeerConfig) ProtoReflect() protoreflect.Message
func (*PeerConfig) Reset ¶
func (x *PeerConfig) Reset()
func (*PeerConfig) String ¶
func (x *PeerConfig) String() string
type PeerIndexSet ¶ added in v0.75.0
type PeerIndexSet struct {
PeerIndexes []uint32 `protobuf:"varint,1,rep,packed,name=peer_indexes,json=peerIndexes,proto3" json:"peer_indexes,omitempty"`
// contains filtered or unexported fields
}
PeerIndexSet is a set of peer indexes — used as the value type in NetworkMapComponentsFull.posture_failed_peers.
func (*PeerIndexSet) Descriptor
deprecated
added in
v0.75.0
func (*PeerIndexSet) Descriptor() ([]byte, []int)
Deprecated: Use PeerIndexSet.ProtoReflect.Descriptor instead.
func (*PeerIndexSet) GetPeerIndexes ¶ added in v0.75.0
func (x *PeerIndexSet) GetPeerIndexes() []uint32
func (*PeerIndexSet) ProtoMessage ¶ added in v0.75.0
func (*PeerIndexSet) ProtoMessage()
func (*PeerIndexSet) ProtoReflect ¶ added in v0.75.0
func (x *PeerIndexSet) ProtoReflect() protoreflect.Message
func (*PeerIndexSet) Reset ¶ added in v0.75.0
func (x *PeerIndexSet) Reset()
func (*PeerIndexSet) String ¶ added in v0.75.0
func (x *PeerIndexSet) String() string
type PeerKeys ¶
type PeerKeys struct {
// sshPubKey represents a public SSH key of the peer. Can be absent.
SshPubKey []byte `protobuf:"bytes,1,opt,name=sshPubKey,proto3" json:"sshPubKey,omitempty"`
// wgPubKey represents a public WireGuard key of the peer. Can be absent.
WgPubKey []byte `protobuf:"bytes,2,opt,name=wgPubKey,proto3" json:"wgPubKey,omitempty"`
// contains filtered or unexported fields
}
PeerKeys is additional peer info like SSH pub key and WireGuard public key. This message is sent on Login or register requests, or when a key rotation has to happen.
func (*PeerKeys) Descriptor
deprecated
func (*PeerKeys) GetSshPubKey ¶
func (*PeerKeys) GetWgPubKey ¶
func (*PeerKeys) ProtoMessage ¶
func (*PeerKeys) ProtoMessage()
func (*PeerKeys) ProtoReflect ¶
func (x *PeerKeys) ProtoReflect() protoreflect.Message
type PeerSystemMeta ¶
type PeerSystemMeta struct {
Hostname string `protobuf:"bytes,1,opt,name=hostname,proto3" json:"hostname,omitempty"`
GoOS string `protobuf:"bytes,2,opt,name=goOS,proto3" json:"goOS,omitempty"`
Kernel string `protobuf:"bytes,3,opt,name=kernel,proto3" json:"kernel,omitempty"`
Core string `protobuf:"bytes,4,opt,name=core,proto3" json:"core,omitempty"`
Platform string `protobuf:"bytes,5,opt,name=platform,proto3" json:"platform,omitempty"`
OS string `protobuf:"bytes,6,opt,name=OS,proto3" json:"OS,omitempty"`
NetbirdVersion string `protobuf:"bytes,7,opt,name=netbirdVersion,proto3" json:"netbirdVersion,omitempty"`
UiVersion string `protobuf:"bytes,8,opt,name=uiVersion,proto3" json:"uiVersion,omitempty"`
KernelVersion string `protobuf:"bytes,9,opt,name=kernelVersion,proto3" json:"kernelVersion,omitempty"`
OSVersion string `protobuf:"bytes,10,opt,name=OSVersion,proto3" json:"OSVersion,omitempty"`
NetworkAddresses []*NetworkAddress `protobuf:"bytes,11,rep,name=networkAddresses,proto3" json:"networkAddresses,omitempty"`
SysSerialNumber string `protobuf:"bytes,12,opt,name=sysSerialNumber,proto3" json:"sysSerialNumber,omitempty"`
SysProductName string `protobuf:"bytes,13,opt,name=sysProductName,proto3" json:"sysProductName,omitempty"`
SysManufacturer string `protobuf:"bytes,14,opt,name=sysManufacturer,proto3" json:"sysManufacturer,omitempty"`
Environment *Environment `protobuf:"bytes,15,opt,name=environment,proto3" json:"environment,omitempty"`
Files []*File `protobuf:"bytes,16,rep,name=files,proto3" json:"files,omitempty"`
Flags *Flags `protobuf:"bytes,17,opt,name=flags,proto3" json:"flags,omitempty"`
Capabilities []PeerCapability `protobuf:"varint,18,rep,packed,name=capabilities,proto3,enum=management.PeerCapability" json:"capabilities,omitempty"`
SyncMessageVersion int32 `protobuf:"varint,19,opt,name=syncMessageVersion,proto3" json:"syncMessageVersion,omitempty"`
// contains filtered or unexported fields
}
PeerSystemMeta is machine meta data like OS and version.
func (*PeerSystemMeta) Descriptor
deprecated
func (*PeerSystemMeta) Descriptor() ([]byte, []int)
Deprecated: Use PeerSystemMeta.ProtoReflect.Descriptor instead.
func (*PeerSystemMeta) GetCapabilities ¶ added in v0.71.0
func (x *PeerSystemMeta) GetCapabilities() []PeerCapability
func (*PeerSystemMeta) GetCore ¶
func (x *PeerSystemMeta) GetCore() string
func (*PeerSystemMeta) GetEnvironment ¶
func (x *PeerSystemMeta) GetEnvironment() *Environment
func (*PeerSystemMeta) GetFiles ¶
func (x *PeerSystemMeta) GetFiles() []*File
func (*PeerSystemMeta) GetFlags ¶
func (x *PeerSystemMeta) GetFlags() *Flags
func (*PeerSystemMeta) GetGoOS ¶
func (x *PeerSystemMeta) GetGoOS() string
func (*PeerSystemMeta) GetHostname ¶
func (x *PeerSystemMeta) GetHostname() string
func (*PeerSystemMeta) GetKernel ¶
func (x *PeerSystemMeta) GetKernel() string
func (*PeerSystemMeta) GetKernelVersion ¶
func (x *PeerSystemMeta) GetKernelVersion() string
func (*PeerSystemMeta) GetNetbirdVersion ¶
func (x *PeerSystemMeta) GetNetbirdVersion() string
func (*PeerSystemMeta) GetNetworkAddresses ¶
func (x *PeerSystemMeta) GetNetworkAddresses() []*NetworkAddress
func (*PeerSystemMeta) GetOS ¶
func (x *PeerSystemMeta) GetOS() string
func (*PeerSystemMeta) GetOSVersion ¶
func (x *PeerSystemMeta) GetOSVersion() string
func (*PeerSystemMeta) GetPlatform ¶
func (x *PeerSystemMeta) GetPlatform() string
func (*PeerSystemMeta) GetSyncMessageVersion ¶ added in v0.75.0
func (x *PeerSystemMeta) GetSyncMessageVersion() int32
func (*PeerSystemMeta) GetSysManufacturer ¶
func (x *PeerSystemMeta) GetSysManufacturer() string
func (*PeerSystemMeta) GetSysProductName ¶
func (x *PeerSystemMeta) GetSysProductName() string
func (*PeerSystemMeta) GetSysSerialNumber ¶
func (x *PeerSystemMeta) GetSysSerialNumber() string
func (*PeerSystemMeta) GetUiVersion ¶
func (x *PeerSystemMeta) GetUiVersion() string
func (*PeerSystemMeta) ProtoMessage ¶
func (*PeerSystemMeta) ProtoMessage()
func (*PeerSystemMeta) ProtoReflect ¶
func (x *PeerSystemMeta) ProtoReflect() protoreflect.Message
func (*PeerSystemMeta) Reset ¶
func (x *PeerSystemMeta) Reset()
func (*PeerSystemMeta) String ¶
func (x *PeerSystemMeta) String() string
type PinRequest ¶ added in v0.65.0
type PinRequest struct {
Pin string `protobuf:"bytes,1,opt,name=pin,proto3" json:"pin,omitempty"`
// contains filtered or unexported fields
}
func (*PinRequest) Descriptor
deprecated
added in
v0.65.0
func (*PinRequest) Descriptor() ([]byte, []int)
Deprecated: Use PinRequest.ProtoReflect.Descriptor instead.
func (*PinRequest) GetPin ¶ added in v0.65.0
func (x *PinRequest) GetPin() string
func (*PinRequest) ProtoMessage ¶ added in v0.65.0
func (*PinRequest) ProtoMessage()
func (*PinRequest) ProtoReflect ¶ added in v0.65.0
func (x *PinRequest) ProtoReflect() protoreflect.Message
func (*PinRequest) Reset ¶ added in v0.65.0
func (x *PinRequest) Reset()
func (*PinRequest) String ¶ added in v0.65.0
func (x *PinRequest) String() string
type PolicyCompact ¶ added in v0.75.0
type PolicyCompact struct {
// public_id. Used as a stable reference for
// ResourcePoliciesMap.indexes and future delta updates.
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
Action RuleAction `protobuf:"varint,2,opt,name=action,proto3,enum=management.RuleAction" json:"action,omitempty"`
Protocol RuleProtocol `protobuf:"varint,3,opt,name=protocol,proto3,enum=management.RuleProtocol" json:"protocol,omitempty"`
Bidirectional bool `protobuf:"varint,4,opt,name=bidirectional,proto3" json:"bidirectional,omitempty"`
// Single ports referenced by the rule.
Ports []uint32 `protobuf:"varint,5,rep,packed,name=ports,proto3" json:"ports,omitempty"`
// Port ranges (start..end) referenced by the rule.
PortRanges []*PortInfo_Range `protobuf:"bytes,6,rep,name=port_ranges,json=portRanges,proto3" json:"port_ranges,omitempty"`
// Group ids (public_ids) of source / destination groups.
SourceGroupIds []string `protobuf:"bytes,7,rep,name=source_group_ids,json=sourceGroupIds,proto3" json:"source_group_ids,omitempty"`
DestinationGroupIds []string `protobuf:"bytes,8,rep,name=destination_group_ids,json=destinationGroupIds,proto3" json:"destination_group_ids,omitempty"`
// SSH authorization fields. PolicyRule.AuthorizedGroups maps the rule's
// applicable group ids (public_ids) to a list of local-user names —
// when a peer in one of those groups is the SSH destination, the named
// local users gain access. AuthorizedUser is the single-user form
// (legacy: rule scopes SSH to one specific user id).
//
// Both fields are only consumed by Calculate() when the rule's protocol
// is NetbirdSSH (or the legacy implicit-SSH heuristic).
AuthorizedGroups map[string]*UserNameList `` /* 197-byte string literal not displayed */
AuthorizedUser string `protobuf:"bytes,10,opt,name=authorized_user,json=authorizedUser,proto3" json:"authorized_user,omitempty"`
// Resource-typed rule sources/destinations. When a rule targets a specific
// peer (rather than groups), Calculate() reads SourceResource /
// DestinationResource — without these the rule's connection resources
// can't be produced on the client. ResourceCompact's peer_index refers to
// NetworkMapComponentsFull.peers; type is the raw ResourceType string
// ("peer", "host", "subnet", "domain"). Only "peer" is meaningful for
// Calculate's resource-typed rule path today.
SourceResource *ResourceCompact `protobuf:"bytes,11,opt,name=source_resource,json=sourceResource,proto3" json:"source_resource,omitempty"`
DestinationResource *ResourceCompact `protobuf:"bytes,12,opt,name=destination_resource,json=destinationResource,proto3" json:"destination_resource,omitempty"`
// Posture-check ids gating this policy's source peers. Calculate()
// reads them when filtering rule peers (peers that fail any listed check
// are dropped from sourcePeers). Match keys in
// NetworkMapComponentsFull.posture_failed_peers.
SourcePostureCheckIds []string `` /* 129-byte string literal not displayed */
// contains filtered or unexported fields
}
PolicyCompact is the compact form of a policy rule. Group references use the public_ids; the client resolves them against NetworkMapComponentsFull.groups. Direction is derived per-peer on the client (ingress when the peer is in destination_group_ids, egress when in source_group_ids; both when bidirectional).
func (*PolicyCompact) Descriptor
deprecated
added in
v0.75.0
func (*PolicyCompact) Descriptor() ([]byte, []int)
Deprecated: Use PolicyCompact.ProtoReflect.Descriptor instead.
func (*PolicyCompact) GetAction ¶ added in v0.75.0
func (x *PolicyCompact) GetAction() RuleAction
func (*PolicyCompact) GetAuthorizedGroups ¶ added in v0.75.0
func (x *PolicyCompact) GetAuthorizedGroups() map[string]*UserNameList
func (*PolicyCompact) GetAuthorizedUser ¶ added in v0.75.0
func (x *PolicyCompact) GetAuthorizedUser() string
func (*PolicyCompact) GetBidirectional ¶ added in v0.75.0
func (x *PolicyCompact) GetBidirectional() bool
func (*PolicyCompact) GetDestinationGroupIds ¶ added in v0.75.0
func (x *PolicyCompact) GetDestinationGroupIds() []string
func (*PolicyCompact) GetDestinationResource ¶ added in v0.75.0
func (x *PolicyCompact) GetDestinationResource() *ResourceCompact
func (*PolicyCompact) GetId ¶ added in v0.75.0
func (x *PolicyCompact) GetId() string
func (*PolicyCompact) GetPortRanges ¶ added in v0.75.0
func (x *PolicyCompact) GetPortRanges() []*PortInfo_Range
func (*PolicyCompact) GetPorts ¶ added in v0.75.0
func (x *PolicyCompact) GetPorts() []uint32
func (*PolicyCompact) GetProtocol ¶ added in v0.75.0
func (x *PolicyCompact) GetProtocol() RuleProtocol
func (*PolicyCompact) GetSourceGroupIds ¶ added in v0.75.0
func (x *PolicyCompact) GetSourceGroupIds() []string
func (*PolicyCompact) GetSourcePostureCheckIds ¶ added in v0.75.0
func (x *PolicyCompact) GetSourcePostureCheckIds() []string
func (*PolicyCompact) GetSourceResource ¶ added in v0.75.0
func (x *PolicyCompact) GetSourceResource() *ResourceCompact
func (*PolicyCompact) ProtoMessage ¶ added in v0.75.0
func (*PolicyCompact) ProtoMessage()
func (*PolicyCompact) ProtoReflect ¶ added in v0.75.0
func (x *PolicyCompact) ProtoReflect() protoreflect.Message
func (*PolicyCompact) Reset ¶ added in v0.75.0
func (x *PolicyCompact) Reset()
func (*PolicyCompact) String ¶ added in v0.75.0
func (x *PolicyCompact) String() string
type PolicyIds ¶ added in v0.75.0
type PolicyIds struct {
Ids []string `protobuf:"bytes,1,rep,name=ids,proto3" json:"ids,omitempty"`
// contains filtered or unexported fields
}
func (*PolicyIds) Descriptor
deprecated
added in
v0.75.0
func (*PolicyIds) ProtoMessage ¶ added in v0.75.0
func (*PolicyIds) ProtoMessage()
func (*PolicyIds) ProtoReflect ¶ added in v0.75.0
func (x *PolicyIds) ProtoReflect() protoreflect.Message
type PortInfo ¶
type PortInfo struct {
// Types that are assignable to PortSelection:
//
// *PortInfo_Port
// *PortInfo_Range_
PortSelection isPortInfo_PortSelection `protobuf_oneof:"portSelection"`
// contains filtered or unexported fields
}
func (*PortInfo) Descriptor
deprecated
func (*PortInfo) GetPortSelection ¶
func (m *PortInfo) GetPortSelection() isPortInfo_PortSelection
func (*PortInfo) GetRange ¶
func (x *PortInfo) GetRange() *PortInfo_Range
func (*PortInfo) ProtoMessage ¶
func (*PortInfo) ProtoMessage()
func (*PortInfo) ProtoReflect ¶
func (x *PortInfo) ProtoReflect() protoreflect.Message
type PortInfo_Port ¶
type PortInfo_Port struct {
Port uint32 `protobuf:"varint,1,opt,name=port,proto3,oneof"`
}
type PortInfo_Range ¶
type PortInfo_Range struct {
Start uint32 `protobuf:"varint,1,opt,name=start,proto3" json:"start,omitempty"`
End uint32 `protobuf:"varint,2,opt,name=end,proto3" json:"end,omitempty"`
// contains filtered or unexported fields
}
func (*PortInfo_Range) Descriptor
deprecated
func (*PortInfo_Range) Descriptor() ([]byte, []int)
Deprecated: Use PortInfo_Range.ProtoReflect.Descriptor instead.
func (*PortInfo_Range) GetEnd ¶
func (x *PortInfo_Range) GetEnd() uint32
func (*PortInfo_Range) GetStart ¶
func (x *PortInfo_Range) GetStart() uint32
func (*PortInfo_Range) ProtoMessage ¶
func (*PortInfo_Range) ProtoMessage()
func (*PortInfo_Range) ProtoReflect ¶
func (x *PortInfo_Range) ProtoReflect() protoreflect.Message
func (*PortInfo_Range) Reset ¶
func (x *PortInfo_Range) Reset()
func (*PortInfo_Range) String ¶
func (x *PortInfo_Range) String() string
type PortInfo_Range_ ¶
type PortInfo_Range_ struct {
Range *PortInfo_Range `protobuf:"bytes,2,opt,name=range,proto3,oneof"`
}
type ProtectedHostConfig ¶
type ProtectedHostConfig struct {
HostConfig *HostConfig `protobuf:"bytes,1,opt,name=hostConfig,proto3" json:"hostConfig,omitempty"`
User string `protobuf:"bytes,2,opt,name=user,proto3" json:"user,omitempty"`
Password string `protobuf:"bytes,3,opt,name=password,proto3" json:"password,omitempty"`
// contains filtered or unexported fields
}
ProtectedHostConfig is similar to HostConfig but has additional user and password Mostly used for TURN servers
func (*ProtectedHostConfig) Descriptor
deprecated
func (*ProtectedHostConfig) Descriptor() ([]byte, []int)
Deprecated: Use ProtectedHostConfig.ProtoReflect.Descriptor instead.
func (*ProtectedHostConfig) GetHostConfig ¶
func (x *ProtectedHostConfig) GetHostConfig() *HostConfig
func (*ProtectedHostConfig) GetPassword ¶
func (x *ProtectedHostConfig) GetPassword() string
func (*ProtectedHostConfig) GetUser ¶
func (x *ProtectedHostConfig) GetUser() string
func (*ProtectedHostConfig) ProtoMessage ¶
func (*ProtectedHostConfig) ProtoMessage()
func (*ProtectedHostConfig) ProtoReflect ¶
func (x *ProtectedHostConfig) ProtoReflect() protoreflect.Message
func (*ProtectedHostConfig) Reset ¶
func (x *ProtectedHostConfig) Reset()
func (*ProtectedHostConfig) String ¶
func (x *ProtectedHostConfig) String() string
type ProviderConfig ¶
type ProviderConfig struct {
// An IDP application client id
ClientID string `protobuf:"bytes,1,opt,name=ClientID,proto3" json:"ClientID,omitempty"`
// Deprecated: use embedded IdP for providers that require a client secret (e.g. Google Workspace).
//
// Deprecated: Do not use.
ClientSecret string `protobuf:"bytes,2,opt,name=ClientSecret,proto3" json:"ClientSecret,omitempty"`
// An IDP API domain
// Deprecated. Use a DeviceAuthEndpoint and TokenEndpoint
Domain string `protobuf:"bytes,3,opt,name=Domain,proto3" json:"Domain,omitempty"`
// An Audience for validation
Audience string `protobuf:"bytes,4,opt,name=Audience,proto3" json:"Audience,omitempty"`
// DeviceAuthEndpoint is an endpoint to request device authentication code.
DeviceAuthEndpoint string `protobuf:"bytes,5,opt,name=DeviceAuthEndpoint,proto3" json:"DeviceAuthEndpoint,omitempty"`
// TokenEndpoint is an endpoint to request auth token.
TokenEndpoint string `protobuf:"bytes,6,opt,name=TokenEndpoint,proto3" json:"TokenEndpoint,omitempty"`
// Scopes provides the scopes to be included in the token request
Scope string `protobuf:"bytes,7,opt,name=Scope,proto3" json:"Scope,omitempty"`
// UseIDToken indicates if the id token should be used for authentication
UseIDToken bool `protobuf:"varint,8,opt,name=UseIDToken,proto3" json:"UseIDToken,omitempty"`
// AuthorizationEndpoint is the endpoint of an IDP manager where clients can obtain authorization code.
AuthorizationEndpoint string `protobuf:"bytes,9,opt,name=AuthorizationEndpoint,proto3" json:"AuthorizationEndpoint,omitempty"`
// RedirectURLs handles authorization code from IDP manager
RedirectURLs []string `protobuf:"bytes,10,rep,name=RedirectURLs,proto3" json:"RedirectURLs,omitempty"`
// DisablePromptLogin makes the PKCE flow to not prompt the user for login
DisablePromptLogin bool `protobuf:"varint,11,opt,name=DisablePromptLogin,proto3" json:"DisablePromptLogin,omitempty"`
// LoginFlags sets the PKCE flow login details
LoginFlag uint32 `protobuf:"varint,12,opt,name=LoginFlag,proto3" json:"LoginFlag,omitempty"`
// contains filtered or unexported fields
}
ProviderConfig has all attributes needed to initiate a device/pkce authorization flow
func (*ProviderConfig) Descriptor
deprecated
func (*ProviderConfig) Descriptor() ([]byte, []int)
Deprecated: Use ProviderConfig.ProtoReflect.Descriptor instead.
func (*ProviderConfig) GetAudience ¶
func (x *ProviderConfig) GetAudience() string
func (*ProviderConfig) GetAuthorizationEndpoint ¶
func (x *ProviderConfig) GetAuthorizationEndpoint() string
func (*ProviderConfig) GetClientID ¶
func (x *ProviderConfig) GetClientID() string
func (*ProviderConfig) GetClientSecret
deprecated
func (x *ProviderConfig) GetClientSecret() string
Deprecated: Do not use.
func (*ProviderConfig) GetDeviceAuthEndpoint ¶
func (x *ProviderConfig) GetDeviceAuthEndpoint() string
func (*ProviderConfig) GetDisablePromptLogin ¶
func (x *ProviderConfig) GetDisablePromptLogin() bool
func (*ProviderConfig) GetDomain ¶
func (x *ProviderConfig) GetDomain() string
func (*ProviderConfig) GetLoginFlag ¶
func (x *ProviderConfig) GetLoginFlag() uint32
func (*ProviderConfig) GetRedirectURLs ¶
func (x *ProviderConfig) GetRedirectURLs() []string
func (*ProviderConfig) GetScope ¶
func (x *ProviderConfig) GetScope() string
func (*ProviderConfig) GetTokenEndpoint ¶
func (x *ProviderConfig) GetTokenEndpoint() string
func (*ProviderConfig) GetUseIDToken ¶
func (x *ProviderConfig) GetUseIDToken() bool
func (*ProviderConfig) ProtoMessage ¶
func (*ProviderConfig) ProtoMessage()
func (*ProviderConfig) ProtoReflect ¶
func (x *ProviderConfig) ProtoReflect() protoreflect.Message
func (*ProviderConfig) Reset ¶
func (x *ProviderConfig) Reset()
func (*ProviderConfig) String ¶
func (x *ProviderConfig) String() string
type ProxyCapabilities ¶ added in v0.67.0
type ProxyCapabilities struct {
// Whether the proxy can bind arbitrary ports for TCP/UDP/TLS services.
SupportsCustomPorts *bool `` /* 127-byte string literal not displayed */
// Whether the proxy requires a subdomain label in front of its cluster domain.
// When true, accounts cannot use the cluster domain bare.
RequireSubdomain *bool `protobuf:"varint,2,opt,name=require_subdomain,json=requireSubdomain,proto3,oneof" json:"require_subdomain,omitempty"`
// Whether the proxy has CrowdSec configured and can enforce IP reputation checks.
SupportsCrowdsec *bool `protobuf:"varint,3,opt,name=supports_crowdsec,json=supportsCrowdsec,proto3,oneof" json:"supports_crowdsec,omitempty"`
// Whether the proxy is running embedded in the netbird client and serving
// exclusively over the WireGuard tunnel (i.e. `netbird proxy` rather than
// the standalone netbird-proxy binary). Surfaces upstream so dashboards can
// distinguish per-peer / private clusters from centralised ones.
Private *bool `protobuf:"varint,4,opt,name=private,proto3,oneof" json:"private,omitempty"`
// Whether the proxy enforces ProxyMapping.private (fails closed on ValidateTunnelPeer failure). Management MUST NOT stream private mappings to proxies that don't claim this.
SupportsPrivateService *bool `` /* 136-byte string literal not displayed */
// contains filtered or unexported fields
}
ProxyCapabilities describes what a proxy can handle.
func (*ProxyCapabilities) Descriptor
deprecated
added in
v0.67.0
func (*ProxyCapabilities) Descriptor() ([]byte, []int)
Deprecated: Use ProxyCapabilities.ProtoReflect.Descriptor instead.
func (*ProxyCapabilities) GetPrivate ¶ added in v0.72.0
func (x *ProxyCapabilities) GetPrivate() bool
func (*ProxyCapabilities) GetRequireSubdomain ¶ added in v0.67.0
func (x *ProxyCapabilities) GetRequireSubdomain() bool
func (*ProxyCapabilities) GetSupportsCrowdsec ¶ added in v0.69.0
func (x *ProxyCapabilities) GetSupportsCrowdsec() bool
func (*ProxyCapabilities) GetSupportsCustomPorts ¶ added in v0.67.0
func (x *ProxyCapabilities) GetSupportsCustomPorts() bool
func (*ProxyCapabilities) GetSupportsPrivateService ¶ added in v0.72.0
func (x *ProxyCapabilities) GetSupportsPrivateService() bool
func (*ProxyCapabilities) ProtoMessage ¶ added in v0.67.0
func (*ProxyCapabilities) ProtoMessage()
func (*ProxyCapabilities) ProtoReflect ¶ added in v0.67.0
func (x *ProxyCapabilities) ProtoReflect() protoreflect.Message
func (*ProxyCapabilities) Reset ¶ added in v0.67.0
func (x *ProxyCapabilities) Reset()
func (*ProxyCapabilities) String ¶ added in v0.67.0
func (x *ProxyCapabilities) String() string
type ProxyInboundListener ¶ added in v0.72.0
type ProxyInboundListener struct {
// Tunnel IP the embedded netstack listens on. Same address other peers
// in the account see for the proxy peer.
TunnelIp string `protobuf:"bytes,1,opt,name=tunnel_ip,json=tunnelIp,proto3" json:"tunnel_ip,omitempty"`
// TLS port served on tunnel_ip (auto-detected, default 443).
HttpsPort uint32 `protobuf:"varint,2,opt,name=https_port,json=httpsPort,proto3" json:"https_port,omitempty"`
// Plain-HTTP port served on tunnel_ip (auto-detected, default 80).
HttpPort uint32 `protobuf:"varint,3,opt,name=http_port,json=httpPort,proto3" json:"http_port,omitempty"`
// contains filtered or unexported fields
}
ProxyInboundListener describes a per-account inbound listener that the proxy has bound on the embedded netstack of the account's WireGuard client. Surfaced so dashboards can render "this account is reachable at <tunnel_ip>:<https_port> on this proxy".
func (*ProxyInboundListener) Descriptor
deprecated
added in
v0.72.0
func (*ProxyInboundListener) Descriptor() ([]byte, []int)
Deprecated: Use ProxyInboundListener.ProtoReflect.Descriptor instead.
func (*ProxyInboundListener) GetHttpPort ¶ added in v0.72.0
func (x *ProxyInboundListener) GetHttpPort() uint32
func (*ProxyInboundListener) GetHttpsPort ¶ added in v0.72.0
func (x *ProxyInboundListener) GetHttpsPort() uint32
func (*ProxyInboundListener) GetTunnelIp ¶ added in v0.72.0
func (x *ProxyInboundListener) GetTunnelIp() string
func (*ProxyInboundListener) ProtoMessage ¶ added in v0.72.0
func (*ProxyInboundListener) ProtoMessage()
func (*ProxyInboundListener) ProtoReflect ¶ added in v0.72.0
func (x *ProxyInboundListener) ProtoReflect() protoreflect.Message
func (*ProxyInboundListener) Reset ¶ added in v0.72.0
func (x *ProxyInboundListener) Reset()
func (*ProxyInboundListener) String ¶ added in v0.72.0
func (x *ProxyInboundListener) String() string
type ProxyMapping ¶ added in v0.65.0
type ProxyMapping struct {
Type ProxyMappingUpdateType `protobuf:"varint,1,opt,name=type,proto3,enum=management.ProxyMappingUpdateType" json:"type,omitempty"`
Id string `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`
AccountId string `protobuf:"bytes,3,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
Domain string `protobuf:"bytes,4,opt,name=domain,proto3" json:"domain,omitempty"`
Path []*PathMapping `protobuf:"bytes,5,rep,name=path,proto3" json:"path,omitempty"`
AuthToken string `protobuf:"bytes,6,opt,name=auth_token,json=authToken,proto3" json:"auth_token,omitempty"`
Auth *Authentication `protobuf:"bytes,7,opt,name=auth,proto3" json:"auth,omitempty"`
// When true, the original Host header from the client request is passed
// through to the backend instead of being rewritten to the backend's address.
PassHostHeader bool `protobuf:"varint,8,opt,name=pass_host_header,json=passHostHeader,proto3" json:"pass_host_header,omitempty"`
// When true, Location headers in backend responses are rewritten to replace
// the backend address with the public-facing domain.
RewriteRedirects bool `protobuf:"varint,9,opt,name=rewrite_redirects,json=rewriteRedirects,proto3" json:"rewrite_redirects,omitempty"`
// Service mode: "http", "tcp", "udp", or "tls".
Mode string `protobuf:"bytes,10,opt,name=mode,proto3" json:"mode,omitempty"`
// For L4/TLS: the port the proxy listens on.
ListenPort int32 `protobuf:"varint,11,opt,name=listen_port,json=listenPort,proto3" json:"listen_port,omitempty"`
AccessRestrictions *AccessRestrictions `protobuf:"bytes,12,opt,name=access_restrictions,json=accessRestrictions,proto3" json:"access_restrictions,omitempty"`
// NetBird-only: the proxy MUST call ValidateTunnelPeer and fail closed; operator auth schemes are bypassed.
Private bool `protobuf:"varint,13,opt,name=private,proto3" json:"private,omitempty"`
// contains filtered or unexported fields
}
func (*ProxyMapping) Descriptor
deprecated
added in
v0.65.0
func (*ProxyMapping) Descriptor() ([]byte, []int)
Deprecated: Use ProxyMapping.ProtoReflect.Descriptor instead.
func (*ProxyMapping) GetAccessRestrictions ¶ added in v0.67.0
func (x *ProxyMapping) GetAccessRestrictions() *AccessRestrictions
func (*ProxyMapping) GetAccountId ¶ added in v0.65.0
func (x *ProxyMapping) GetAccountId() string
func (*ProxyMapping) GetAuth ¶ added in v0.65.0
func (x *ProxyMapping) GetAuth() *Authentication
func (*ProxyMapping) GetAuthToken ¶ added in v0.65.0
func (x *ProxyMapping) GetAuthToken() string
func (*ProxyMapping) GetDomain ¶ added in v0.65.0
func (x *ProxyMapping) GetDomain() string
func (*ProxyMapping) GetId ¶ added in v0.65.0
func (x *ProxyMapping) GetId() string
func (*ProxyMapping) GetListenPort ¶ added in v0.67.0
func (x *ProxyMapping) GetListenPort() int32
func (*ProxyMapping) GetMode ¶ added in v0.67.0
func (x *ProxyMapping) GetMode() string
func (*ProxyMapping) GetPassHostHeader ¶ added in v0.65.0
func (x *ProxyMapping) GetPassHostHeader() bool
func (*ProxyMapping) GetPath ¶ added in v0.65.0
func (x *ProxyMapping) GetPath() []*PathMapping
func (*ProxyMapping) GetPrivate ¶ added in v0.72.0
func (x *ProxyMapping) GetPrivate() bool
func (*ProxyMapping) GetRewriteRedirects ¶ added in v0.65.0
func (x *ProxyMapping) GetRewriteRedirects() bool
func (*ProxyMapping) GetType ¶ added in v0.65.0
func (x *ProxyMapping) GetType() ProxyMappingUpdateType
func (*ProxyMapping) ProtoMessage ¶ added in v0.65.0
func (*ProxyMapping) ProtoMessage()
func (*ProxyMapping) ProtoReflect ¶ added in v0.65.0
func (x *ProxyMapping) ProtoReflect() protoreflect.Message
func (*ProxyMapping) Reset ¶ added in v0.65.0
func (x *ProxyMapping) Reset()
func (*ProxyMapping) String ¶ added in v0.65.0
func (x *ProxyMapping) String() string
type ProxyMappingUpdateType ¶ added in v0.65.0
type ProxyMappingUpdateType int32
const ( ProxyMappingUpdateType_UPDATE_TYPE_CREATED ProxyMappingUpdateType = 0 ProxyMappingUpdateType_UPDATE_TYPE_MODIFIED ProxyMappingUpdateType = 1 ProxyMappingUpdateType_UPDATE_TYPE_REMOVED ProxyMappingUpdateType = 2 )
func (ProxyMappingUpdateType) Descriptor ¶ added in v0.65.0
func (ProxyMappingUpdateType) Descriptor() protoreflect.EnumDescriptor
func (ProxyMappingUpdateType) Enum ¶ added in v0.65.0
func (x ProxyMappingUpdateType) Enum() *ProxyMappingUpdateType
func (ProxyMappingUpdateType) EnumDescriptor
deprecated
added in
v0.65.0
func (ProxyMappingUpdateType) EnumDescriptor() ([]byte, []int)
Deprecated: Use ProxyMappingUpdateType.Descriptor instead.
func (ProxyMappingUpdateType) Number ¶ added in v0.65.0
func (x ProxyMappingUpdateType) Number() protoreflect.EnumNumber
func (ProxyMappingUpdateType) String ¶ added in v0.65.0
func (x ProxyMappingUpdateType) String() string
func (ProxyMappingUpdateType) Type ¶ added in v0.65.0
func (ProxyMappingUpdateType) Type() protoreflect.EnumType
type ProxyPatch ¶ added in v0.75.0
type ProxyPatch struct {
Peers []*RemotePeerConfig `protobuf:"bytes,1,rep,name=peers,proto3" json:"peers,omitempty"`
OfflinePeers []*RemotePeerConfig `protobuf:"bytes,2,rep,name=offline_peers,json=offlinePeers,proto3" json:"offline_peers,omitempty"`
FirewallRules []*FirewallRule `protobuf:"bytes,3,rep,name=firewall_rules,json=firewallRules,proto3" json:"firewall_rules,omitempty"`
Routes []*Route `protobuf:"bytes,4,rep,name=routes,proto3" json:"routes,omitempty"`
RouteFirewallRules []*RouteFirewallRule `protobuf:"bytes,5,rep,name=route_firewall_rules,json=routeFirewallRules,proto3" json:"route_firewall_rules,omitempty"`
ForwardingRules []*ForwardingRule `protobuf:"bytes,6,rep,name=forwarding_rules,json=forwardingRules,proto3" json:"forwarding_rules,omitempty"`
// contains filtered or unexported fields
}
ProxyPatch carries NetworkMap fragments that don't fit the component-graph model — they're pre-expanded by external controllers (BYOP / port-forwarding proxies) and injected post-Calculate. Fields use the legacy wire types because the proxy delivers them pre-formed; there is no raw component shape to convert from. Empty when no proxy is active.
func (*ProxyPatch) Descriptor
deprecated
added in
v0.75.0
func (*ProxyPatch) Descriptor() ([]byte, []int)
Deprecated: Use ProxyPatch.ProtoReflect.Descriptor instead.
func (*ProxyPatch) GetFirewallRules ¶ added in v0.75.0
func (x *ProxyPatch) GetFirewallRules() []*FirewallRule
func (*ProxyPatch) GetForwardingRules ¶ added in v0.75.0
func (x *ProxyPatch) GetForwardingRules() []*ForwardingRule
func (*ProxyPatch) GetOfflinePeers ¶ added in v0.75.0
func (x *ProxyPatch) GetOfflinePeers() []*RemotePeerConfig
func (*ProxyPatch) GetPeers ¶ added in v0.75.0
func (x *ProxyPatch) GetPeers() []*RemotePeerConfig
func (*ProxyPatch) GetRouteFirewallRules ¶ added in v0.75.0
func (x *ProxyPatch) GetRouteFirewallRules() []*RouteFirewallRule
func (*ProxyPatch) GetRoutes ¶ added in v0.75.0
func (x *ProxyPatch) GetRoutes() []*Route
func (*ProxyPatch) ProtoMessage ¶ added in v0.75.0
func (*ProxyPatch) ProtoMessage()
func (*ProxyPatch) ProtoReflect ¶ added in v0.75.0
func (x *ProxyPatch) ProtoReflect() protoreflect.Message
func (*ProxyPatch) Reset ¶ added in v0.75.0
func (x *ProxyPatch) Reset()
func (*ProxyPatch) String ¶ added in v0.75.0
func (x *ProxyPatch) String() string
type ProxyServiceClient ¶ added in v0.65.0
type ProxyServiceClient interface {
GetMappingUpdate(ctx context.Context, in *GetMappingUpdateRequest, opts ...grpc.CallOption) (ProxyService_GetMappingUpdateClient, error)
// SyncMappings is a bidirectional stream that replaces GetMappingUpdate for
// new proxies. The proxy sends an initial SyncMappingsRequest to start the
// stream and then sends an ack after each batch is fully processed.
// Management waits for the ack before sending the next batch, providing
// application-level back-pressure during large initial syncs.
// Old proxies continue using GetMappingUpdate; old management servers
// return Unimplemented for this RPC and proxies fall back.
SyncMappings(ctx context.Context, opts ...grpc.CallOption) (ProxyService_SyncMappingsClient, error)
SendAccessLog(ctx context.Context, in *SendAccessLogRequest, opts ...grpc.CallOption) (*SendAccessLogResponse, error)
Authenticate(ctx context.Context, in *AuthenticateRequest, opts ...grpc.CallOption) (*AuthenticateResponse, error)
SendStatusUpdate(ctx context.Context, in *SendStatusUpdateRequest, opts ...grpc.CallOption) (*SendStatusUpdateResponse, error)
CreateProxyPeer(ctx context.Context, in *CreateProxyPeerRequest, opts ...grpc.CallOption) (*CreateProxyPeerResponse, error)
GetOIDCURL(ctx context.Context, in *GetOIDCURLRequest, opts ...grpc.CallOption) (*GetOIDCURLResponse, error)
// ValidateSession validates a session token and checks user access permissions.
// Called by the proxy after receiving a session token from OIDC callback.
ValidateSession(ctx context.Context, in *ValidateSessionRequest, opts ...grpc.CallOption) (*ValidateSessionResponse, error)
// ValidateTunnelPeer resolves an inbound peer by its WireGuard tunnel IP and
// checks the resolved user's access against the service's access_groups.
// Acts as a fast-path equivalent of OIDC for requests originating on the
// netbird mesh: when the source IP maps to a known peer in the calling
// account and that peer is in the service's access_groups, the proxy can
// issue a session cookie without redirecting through the OIDC flow.
// Mirrors ValidateSession's response shape.
ValidateTunnelPeer(ctx context.Context, in *ValidateTunnelPeerRequest, opts ...grpc.CallOption) (*ValidateTunnelPeerResponse, error)
// CheckLLMPolicyLimits is the pre-flight RPC the proxy calls before each
// LLM request. Management runs the per-policy headroom selection across
// every policy authorising the caller's user / groups for the resolved
// provider and returns the chosen attribution policy + group, or a deny
// when no applicable policy has headroom > 0.
CheckLLMPolicyLimits(ctx context.Context, in *CheckLLMPolicyLimitsRequest, opts ...grpc.CallOption) (*CheckLLMPolicyLimitsResponse, error)
// RecordLLMUsage is the post-flight RPC the proxy calls after the upstream
// returns. Increments the per-(dimension, window) counters for the
// attribution policy chosen by CheckLLMPolicyLimits.
RecordLLMUsage(ctx context.Context, in *RecordLLMUsageRequest, opts ...grpc.CallOption) (*RecordLLMUsageResponse, error)
}
ProxyServiceClient is the client API for ProxyService service.
For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
func NewProxyServiceClient ¶ added in v0.65.0
func NewProxyServiceClient(cc grpc.ClientConnInterface) ProxyServiceClient
type ProxyServiceServer ¶ added in v0.65.0
type ProxyServiceServer interface {
GetMappingUpdate(*GetMappingUpdateRequest, ProxyService_GetMappingUpdateServer) error
// SyncMappings is a bidirectional stream that replaces GetMappingUpdate for
// new proxies. The proxy sends an initial SyncMappingsRequest to start the
// stream and then sends an ack after each batch is fully processed.
// Management waits for the ack before sending the next batch, providing
// application-level back-pressure during large initial syncs.
// Old proxies continue using GetMappingUpdate; old management servers
// return Unimplemented for this RPC and proxies fall back.
SyncMappings(ProxyService_SyncMappingsServer) error
SendAccessLog(context.Context, *SendAccessLogRequest) (*SendAccessLogResponse, error)
Authenticate(context.Context, *AuthenticateRequest) (*AuthenticateResponse, error)
SendStatusUpdate(context.Context, *SendStatusUpdateRequest) (*SendStatusUpdateResponse, error)
CreateProxyPeer(context.Context, *CreateProxyPeerRequest) (*CreateProxyPeerResponse, error)
GetOIDCURL(context.Context, *GetOIDCURLRequest) (*GetOIDCURLResponse, error)
// ValidateSession validates a session token and checks user access permissions.
// Called by the proxy after receiving a session token from OIDC callback.
ValidateSession(context.Context, *ValidateSessionRequest) (*ValidateSessionResponse, error)
// ValidateTunnelPeer resolves an inbound peer by its WireGuard tunnel IP and
// checks the resolved user's access against the service's access_groups.
// Acts as a fast-path equivalent of OIDC for requests originating on the
// netbird mesh: when the source IP maps to a known peer in the calling
// account and that peer is in the service's access_groups, the proxy can
// issue a session cookie without redirecting through the OIDC flow.
// Mirrors ValidateSession's response shape.
ValidateTunnelPeer(context.Context, *ValidateTunnelPeerRequest) (*ValidateTunnelPeerResponse, error)
// CheckLLMPolicyLimits is the pre-flight RPC the proxy calls before each
// LLM request. Management runs the per-policy headroom selection across
// every policy authorising the caller's user / groups for the resolved
// provider and returns the chosen attribution policy + group, or a deny
// when no applicable policy has headroom > 0.
CheckLLMPolicyLimits(context.Context, *CheckLLMPolicyLimitsRequest) (*CheckLLMPolicyLimitsResponse, error)
// RecordLLMUsage is the post-flight RPC the proxy calls after the upstream
// returns. Increments the per-(dimension, window) counters for the
// attribution policy chosen by CheckLLMPolicyLimits.
RecordLLMUsage(context.Context, *RecordLLMUsageRequest) (*RecordLLMUsageResponse, error)
// contains filtered or unexported methods
}
ProxyServiceServer is the server API for ProxyService service. All implementations must embed UnimplementedProxyServiceServer for forward compatibility
type ProxyService_GetMappingUpdateClient ¶ added in v0.65.0
type ProxyService_GetMappingUpdateClient interface {
Recv() (*GetMappingUpdateResponse, error)
grpc.ClientStream
}
type ProxyService_GetMappingUpdateServer ¶ added in v0.65.0
type ProxyService_GetMappingUpdateServer interface {
Send(*GetMappingUpdateResponse) error
grpc.ServerStream
}
type ProxyService_SyncMappingsClient ¶ added in v0.71.3
type ProxyService_SyncMappingsClient interface {
Send(*SyncMappingsRequest) error
Recv() (*SyncMappingsResponse, error)
grpc.ClientStream
}
type ProxyService_SyncMappingsServer ¶ added in v0.71.3
type ProxyService_SyncMappingsServer interface {
Send(*SyncMappingsResponse) error
Recv() (*SyncMappingsRequest, error)
grpc.ServerStream
}
type ProxyStatus ¶ added in v0.65.0
type ProxyStatus int32
const ( ProxyStatus_PROXY_STATUS_PENDING ProxyStatus = 0 ProxyStatus_PROXY_STATUS_ACTIVE ProxyStatus = 1 ProxyStatus_PROXY_STATUS_TUNNEL_NOT_CREATED ProxyStatus = 2 ProxyStatus_PROXY_STATUS_CERTIFICATE_PENDING ProxyStatus = 3 ProxyStatus_PROXY_STATUS_CERTIFICATE_FAILED ProxyStatus = 4 ProxyStatus_PROXY_STATUS_ERROR ProxyStatus = 5 )
func (ProxyStatus) Descriptor ¶ added in v0.65.0
func (ProxyStatus) Descriptor() protoreflect.EnumDescriptor
func (ProxyStatus) Enum ¶ added in v0.65.0
func (x ProxyStatus) Enum() *ProxyStatus
func (ProxyStatus) EnumDescriptor
deprecated
added in
v0.65.0
func (ProxyStatus) EnumDescriptor() ([]byte, []int)
Deprecated: Use ProxyStatus.Descriptor instead.
func (ProxyStatus) Number ¶ added in v0.65.0
func (x ProxyStatus) Number() protoreflect.EnumNumber
func (ProxyStatus) String ¶ added in v0.65.0
func (x ProxyStatus) String() string
func (ProxyStatus) Type ¶ added in v0.65.0
func (ProxyStatus) Type() protoreflect.EnumType
type RecordLLMUsageRequest ¶ added in v0.74.0
type RecordLLMUsageRequest struct {
AccountId string `protobuf:"bytes,1,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
UserId string `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
// group_id is the selected policy's attribution group, recorded against the
// policy window (window_seconds).
GroupId string `protobuf:"bytes,3,opt,name=group_id,json=groupId,proto3" json:"group_id,omitempty"`
WindowSeconds int64 `protobuf:"varint,4,opt,name=window_seconds,json=windowSeconds,proto3" json:"window_seconds,omitempty"`
TokensInput int64 `protobuf:"varint,5,opt,name=tokens_input,json=tokensInput,proto3" json:"tokens_input,omitempty"`
TokensOutput int64 `protobuf:"varint,6,opt,name=tokens_output,json=tokensOutput,proto3" json:"tokens_output,omitempty"`
CostUsd float64 `protobuf:"fixed64,7,opt,name=cost_usd,json=costUsd,proto3" json:"cost_usd,omitempty"`
// group_ids is the caller's full group membership, used to fan the same
// usage out to every applicable account-level budget rule's own window.
GroupIds []string `protobuf:"bytes,8,rep,name=group_ids,json=groupIds,proto3" json:"group_ids,omitempty"`
// contains filtered or unexported fields
}
RecordLLMUsageRequest is the post-flight increment the proxy posts after the upstream call. Counters are keyed on (account, dimension, window).
func (*RecordLLMUsageRequest) Descriptor
deprecated
added in
v0.74.0
func (*RecordLLMUsageRequest) Descriptor() ([]byte, []int)
Deprecated: Use RecordLLMUsageRequest.ProtoReflect.Descriptor instead.
func (*RecordLLMUsageRequest) GetAccountId ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetAccountId() string
func (*RecordLLMUsageRequest) GetCostUsd ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetCostUsd() float64
func (*RecordLLMUsageRequest) GetGroupId ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetGroupId() string
func (*RecordLLMUsageRequest) GetGroupIds ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetGroupIds() []string
func (*RecordLLMUsageRequest) GetTokensInput ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetTokensInput() int64
func (*RecordLLMUsageRequest) GetTokensOutput ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetTokensOutput() int64
func (*RecordLLMUsageRequest) GetUserId ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetUserId() string
func (*RecordLLMUsageRequest) GetWindowSeconds ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) GetWindowSeconds() int64
func (*RecordLLMUsageRequest) ProtoMessage ¶ added in v0.74.0
func (*RecordLLMUsageRequest) ProtoMessage()
func (*RecordLLMUsageRequest) ProtoReflect ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) ProtoReflect() protoreflect.Message
func (*RecordLLMUsageRequest) Reset ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) Reset()
func (*RecordLLMUsageRequest) String ¶ added in v0.74.0
func (x *RecordLLMUsageRequest) String() string
type RecordLLMUsageResponse ¶ added in v0.74.0
type RecordLLMUsageResponse struct {
// contains filtered or unexported fields
}
func (*RecordLLMUsageResponse) Descriptor
deprecated
added in
v0.74.0
func (*RecordLLMUsageResponse) Descriptor() ([]byte, []int)
Deprecated: Use RecordLLMUsageResponse.ProtoReflect.Descriptor instead.
func (*RecordLLMUsageResponse) ProtoMessage ¶ added in v0.74.0
func (*RecordLLMUsageResponse) ProtoMessage()
func (*RecordLLMUsageResponse) ProtoReflect ¶ added in v0.74.0
func (x *RecordLLMUsageResponse) ProtoReflect() protoreflect.Message
func (*RecordLLMUsageResponse) Reset ¶ added in v0.74.0
func (x *RecordLLMUsageResponse) Reset()
func (*RecordLLMUsageResponse) String ¶ added in v0.74.0
func (x *RecordLLMUsageResponse) String() string
type RelayConfig ¶
type RelayConfig struct {
Urls []string `protobuf:"bytes,1,rep,name=urls,proto3" json:"urls,omitempty"`
TokenPayload string `protobuf:"bytes,2,opt,name=tokenPayload,proto3" json:"tokenPayload,omitempty"`
TokenSignature string `protobuf:"bytes,3,opt,name=tokenSignature,proto3" json:"tokenSignature,omitempty"`
// contains filtered or unexported fields
}
func (*RelayConfig) Descriptor
deprecated
func (*RelayConfig) Descriptor() ([]byte, []int)
Deprecated: Use RelayConfig.ProtoReflect.Descriptor instead.
func (*RelayConfig) GetTokenPayload ¶
func (x *RelayConfig) GetTokenPayload() string
func (*RelayConfig) GetTokenSignature ¶
func (x *RelayConfig) GetTokenSignature() string
func (*RelayConfig) GetUrls ¶
func (x *RelayConfig) GetUrls() []string
func (*RelayConfig) ProtoMessage ¶
func (*RelayConfig) ProtoMessage()
func (*RelayConfig) ProtoReflect ¶
func (x *RelayConfig) ProtoReflect() protoreflect.Message
func (*RelayConfig) Reset ¶
func (x *RelayConfig) Reset()
func (*RelayConfig) String ¶
func (x *RelayConfig) String() string
type RemotePeerConfig ¶
type RemotePeerConfig struct {
// A WireGuard public key of a remote peer
WgPubKey string `protobuf:"bytes,1,opt,name=wgPubKey,proto3" json:"wgPubKey,omitempty"`
// WireGuard allowed IPs of a remote peer e.g. [10.30.30.1/32]
AllowedIps []string `protobuf:"bytes,2,rep,name=allowedIps,proto3" json:"allowedIps,omitempty"`
// SSHConfig is a SSH config of the remote peer. SSHConfig.sshPubKey should be ignored because peer knows it's SSH key.
SshConfig *SSHConfig `protobuf:"bytes,3,opt,name=sshConfig,proto3" json:"sshConfig,omitempty"`
// Peer fully qualified domain name
Fqdn string `protobuf:"bytes,4,opt,name=fqdn,proto3" json:"fqdn,omitempty"`
AgentVersion string `protobuf:"bytes,5,opt,name=agentVersion,proto3" json:"agentVersion,omitempty"`
// contains filtered or unexported fields
}
RemotePeerConfig represents a configuration of a remote peer. The properties are used to configure WireGuard Peers sections
func (*RemotePeerConfig) Descriptor
deprecated
func (*RemotePeerConfig) Descriptor() ([]byte, []int)
Deprecated: Use RemotePeerConfig.ProtoReflect.Descriptor instead.
func (*RemotePeerConfig) GetAgentVersion ¶
func (x *RemotePeerConfig) GetAgentVersion() string
func (*RemotePeerConfig) GetAllowedIps ¶
func (x *RemotePeerConfig) GetAllowedIps() []string
func (*RemotePeerConfig) GetFqdn ¶
func (x *RemotePeerConfig) GetFqdn() string
func (*RemotePeerConfig) GetSshConfig ¶
func (x *RemotePeerConfig) GetSshConfig() *SSHConfig
func (*RemotePeerConfig) GetWgPubKey ¶
func (x *RemotePeerConfig) GetWgPubKey() string
func (*RemotePeerConfig) ProtoMessage ¶
func (*RemotePeerConfig) ProtoMessage()
func (*RemotePeerConfig) ProtoReflect ¶
func (x *RemotePeerConfig) ProtoReflect() protoreflect.Message
func (*RemotePeerConfig) Reset ¶
func (x *RemotePeerConfig) Reset()
func (*RemotePeerConfig) String ¶
func (x *RemotePeerConfig) String() string
type RenewExposeRequest ¶ added in v0.66.0
type RenewExposeRequest struct {
Domain string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
// contains filtered or unexported fields
}
func (*RenewExposeRequest) Descriptor
deprecated
added in
v0.66.0
func (*RenewExposeRequest) Descriptor() ([]byte, []int)
Deprecated: Use RenewExposeRequest.ProtoReflect.Descriptor instead.
func (*RenewExposeRequest) GetDomain ¶ added in v0.66.0
func (x *RenewExposeRequest) GetDomain() string
func (*RenewExposeRequest) ProtoMessage ¶ added in v0.66.0
func (*RenewExposeRequest) ProtoMessage()
func (*RenewExposeRequest) ProtoReflect ¶ added in v0.66.0
func (x *RenewExposeRequest) ProtoReflect() protoreflect.Message
func (*RenewExposeRequest) Reset ¶ added in v0.66.0
func (x *RenewExposeRequest) Reset()
func (*RenewExposeRequest) String ¶ added in v0.66.0
func (x *RenewExposeRequest) String() string
type RenewExposeResponse ¶ added in v0.66.0
type RenewExposeResponse struct {
// contains filtered or unexported fields
}
func (*RenewExposeResponse) Descriptor
deprecated
added in
v0.66.0
func (*RenewExposeResponse) Descriptor() ([]byte, []int)
Deprecated: Use RenewExposeResponse.ProtoReflect.Descriptor instead.
func (*RenewExposeResponse) ProtoMessage ¶ added in v0.66.0
func (*RenewExposeResponse) ProtoMessage()
func (*RenewExposeResponse) ProtoReflect ¶ added in v0.66.0
func (x *RenewExposeResponse) ProtoReflect() protoreflect.Message
func (*RenewExposeResponse) Reset ¶ added in v0.66.0
func (x *RenewExposeResponse) Reset()
func (*RenewExposeResponse) String ¶ added in v0.66.0
func (x *RenewExposeResponse) String() string
type ResourceCompact ¶ added in v0.75.0
type ResourceCompact struct {
Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
PeerIndexSet bool `protobuf:"varint,2,opt,name=peer_index_set,json=peerIndexSet,proto3" json:"peer_index_set,omitempty"`
PeerIndex uint32 `protobuf:"varint,3,opt,name=peer_index,json=peerIndex,proto3" json:"peer_index,omitempty"`
// contains filtered or unexported fields
}
ResourceCompact mirrors types.Resource. Used by PolicyCompact to carry rule.SourceResource / rule.DestinationResource when the rule targets a specific resource (typically a peer) rather than groups. peer_index_set tells whether peer_index is valid (proto3 uint32 cannot disambiguate "0" from "unset"); set only when type == "peer".
func (*ResourceCompact) Descriptor
deprecated
added in
v0.75.0
func (*ResourceCompact) Descriptor() ([]byte, []int)
Deprecated: Use ResourceCompact.ProtoReflect.Descriptor instead.
func (*ResourceCompact) GetPeerIndex ¶ added in v0.75.0
func (x *ResourceCompact) GetPeerIndex() uint32
func (*ResourceCompact) GetPeerIndexSet ¶ added in v0.75.0
func (x *ResourceCompact) GetPeerIndexSet() bool
func (*ResourceCompact) GetType ¶ added in v0.75.0
func (x *ResourceCompact) GetType() string
func (*ResourceCompact) ProtoMessage ¶ added in v0.75.0
func (*ResourceCompact) ProtoMessage()
func (*ResourceCompact) ProtoReflect ¶ added in v0.75.0
func (x *ResourceCompact) ProtoReflect() protoreflect.Message
func (*ResourceCompact) Reset ¶ added in v0.75.0
func (x *ResourceCompact) Reset()
func (*ResourceCompact) String ¶ added in v0.75.0
func (x *ResourceCompact) String() string
type Route ¶
type Route struct {
ID string `protobuf:"bytes,1,opt,name=ID,proto3" json:"ID,omitempty"`
Network string `protobuf:"bytes,2,opt,name=Network,proto3" json:"Network,omitempty"`
NetworkType int64 `protobuf:"varint,3,opt,name=NetworkType,proto3" json:"NetworkType,omitempty"`
Peer string `protobuf:"bytes,4,opt,name=Peer,proto3" json:"Peer,omitempty"`
Metric int64 `protobuf:"varint,5,opt,name=Metric,proto3" json:"Metric,omitempty"`
Masquerade bool `protobuf:"varint,6,opt,name=Masquerade,proto3" json:"Masquerade,omitempty"`
NetID string `protobuf:"bytes,7,opt,name=NetID,proto3" json:"NetID,omitempty"`
Domains []string `protobuf:"bytes,8,rep,name=Domains,proto3" json:"Domains,omitempty"`
KeepRoute bool `protobuf:"varint,9,opt,name=keepRoute,proto3" json:"keepRoute,omitempty"`
SkipAutoApply bool `protobuf:"varint,10,opt,name=skipAutoApply,proto3" json:"skipAutoApply,omitempty"`
// contains filtered or unexported fields
}
Route represents a route.Route object
func (*Route) Descriptor
deprecated
func (*Route) GetDomains ¶
func (*Route) GetKeepRoute ¶
func (*Route) GetMasquerade ¶
func (*Route) GetNetwork ¶
func (*Route) GetNetworkType ¶
func (*Route) GetSkipAutoApply ¶ added in v0.55.0
func (*Route) ProtoMessage ¶
func (*Route) ProtoMessage()
func (*Route) ProtoReflect ¶
func (x *Route) ProtoReflect() protoreflect.Message
type RouteFirewallRule ¶
type RouteFirewallRule struct {
// sourceRanges IP ranges of the routing peers.
SourceRanges []string `protobuf:"bytes,1,rep,name=sourceRanges,proto3" json:"sourceRanges,omitempty"`
// Action to be taken by the firewall when the rule is applicable.
Action RuleAction `protobuf:"varint,2,opt,name=action,proto3,enum=management.RuleAction" json:"action,omitempty"`
// Network prefix for the routed network.
Destination string `protobuf:"bytes,3,opt,name=destination,proto3" json:"destination,omitempty"`
// Protocol of the routed network.
Protocol RuleProtocol `protobuf:"varint,4,opt,name=protocol,proto3,enum=management.RuleProtocol" json:"protocol,omitempty"`
// Details about the port.
PortInfo *PortInfo `protobuf:"bytes,5,opt,name=portInfo,proto3" json:"portInfo,omitempty"`
// IsDynamic indicates if the route is a DNS route.
IsDynamic bool `protobuf:"varint,6,opt,name=isDynamic,proto3" json:"isDynamic,omitempty"`
// Domains is a list of domains for which the rule is applicable.
Domains []string `protobuf:"bytes,7,rep,name=domains,proto3" json:"domains,omitempty"`
// CustomProtocol is a custom protocol ID.
CustomProtocol uint32 `protobuf:"varint,8,opt,name=customProtocol,proto3" json:"customProtocol,omitempty"`
// PolicyID is the ID of the policy that this rule belongs to
PolicyID []byte `protobuf:"bytes,9,opt,name=PolicyID,proto3" json:"PolicyID,omitempty"`
// RouteID is the ID of the route that this rule belongs to
RouteID string `protobuf:"bytes,10,opt,name=RouteID,proto3" json:"RouteID,omitempty"`
// contains filtered or unexported fields
}
RouteFirewallRule signifies a firewall rule applicable for a routed network.
func (*RouteFirewallRule) Descriptor
deprecated
func (*RouteFirewallRule) Descriptor() ([]byte, []int)
Deprecated: Use RouteFirewallRule.ProtoReflect.Descriptor instead.
func (*RouteFirewallRule) GetAction ¶
func (x *RouteFirewallRule) GetAction() RuleAction
func (*RouteFirewallRule) GetCustomProtocol ¶
func (x *RouteFirewallRule) GetCustomProtocol() uint32
func (*RouteFirewallRule) GetDestination ¶
func (x *RouteFirewallRule) GetDestination() string
func (*RouteFirewallRule) GetDomains ¶
func (x *RouteFirewallRule) GetDomains() []string
func (*RouteFirewallRule) GetIsDynamic ¶
func (x *RouteFirewallRule) GetIsDynamic() bool
func (*RouteFirewallRule) GetPolicyID ¶
func (x *RouteFirewallRule) GetPolicyID() []byte
func (*RouteFirewallRule) GetPortInfo ¶
func (x *RouteFirewallRule) GetPortInfo() *PortInfo
func (*RouteFirewallRule) GetProtocol ¶
func (x *RouteFirewallRule) GetProtocol() RuleProtocol
func (*RouteFirewallRule) GetRouteID ¶
func (x *RouteFirewallRule) GetRouteID() string
func (*RouteFirewallRule) GetSourceRanges ¶
func (x *RouteFirewallRule) GetSourceRanges() []string
func (*RouteFirewallRule) ProtoMessage ¶
func (*RouteFirewallRule) ProtoMessage()
func (*RouteFirewallRule) ProtoReflect ¶
func (x *RouteFirewallRule) ProtoReflect() protoreflect.Message
func (*RouteFirewallRule) Reset ¶
func (x *RouteFirewallRule) Reset()
func (*RouteFirewallRule) String ¶
func (x *RouteFirewallRule) String() string
type RouteRaw ¶ added in v0.75.0
type RouteRaw struct {
Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"` // public_id
NetId string `protobuf:"bytes,2,opt,name=net_id,json=netId,proto3" json:"net_id,omitempty"`
Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
// Either network_cidr (e.g. "10.0.0.0/16") or domains is set, not both.
NetworkCidr string `protobuf:"bytes,4,opt,name=network_cidr,json=networkCidr,proto3" json:"network_cidr,omitempty"`
Domains []string `protobuf:"bytes,5,rep,name=domains,proto3" json:"domains,omitempty"`
KeepRoute bool `protobuf:"varint,6,opt,name=keep_route,json=keepRoute,proto3" json:"keep_route,omitempty"`
// Routing peer reference: peer_index_set tells whether peer_index is valid
// (proto3 uint32 cannot disambiguate "0" from "unset"). Mutually exclusive
// with peer_group_ids.
//
// peer_index decodes back to types.Peer.ID (the peer's xid string), NOT
// to its WireGuard public key. This matches the server-side data flow:
// c.Routes carry route.Peer = peer.ID, and getRoutingPeerRoutes mutates
// it to peer.Key only after the route has been admitted to the network
// map. Decoders MUST set Route.Peer = peer.ID; the legacy Calculate()
// path will substitute the WG key downstream.
PeerIndexSet bool `protobuf:"varint,7,opt,name=peer_index_set,json=peerIndexSet,proto3" json:"peer_index_set,omitempty"`
PeerIndex uint32 `protobuf:"varint,8,opt,name=peer_index,json=peerIndex,proto3" json:"peer_index,omitempty"`
PeerGroupIds []string `protobuf:"bytes,9,rep,name=peer_group_ids,json=peerGroupIds,proto3" json:"peer_group_ids,omitempty"`
NetworkType int32 `protobuf:"varint,10,opt,name=network_type,json=networkType,proto3" json:"network_type,omitempty"`
Masquerade bool `protobuf:"varint,11,opt,name=masquerade,proto3" json:"masquerade,omitempty"`
Metric int32 `protobuf:"varint,12,opt,name=metric,proto3" json:"metric,omitempty"`
Enabled bool `protobuf:"varint,13,opt,name=enabled,proto3" json:"enabled,omitempty"`
GroupIds []string `protobuf:"bytes,14,rep,name=group_ids,json=groupIds,proto3" json:"group_ids,omitempty"`
AccessControlGroupIds []string `` /* 129-byte string literal not displayed */
SkipAutoApply bool `protobuf:"varint,16,opt,name=skip_auto_apply,json=skipAutoApply,proto3" json:"skip_auto_apply,omitempty"`
// contains filtered or unexported fields
}
RouteRaw mirrors *route.Route (the domain type), trimmed to fields that types.NetworkMapComponents.Calculate() reads. Group references are public_ids; the routing peer (when set) is referenced by index into NetworkMapComponentsFull.peers.
func (*RouteRaw) Descriptor
deprecated
added in
v0.75.0
func (*RouteRaw) GetAccessControlGroupIds ¶ added in v0.75.0
func (*RouteRaw) GetDescription ¶ added in v0.75.0
func (*RouteRaw) GetDomains ¶ added in v0.75.0
func (*RouteRaw) GetEnabled ¶ added in v0.75.0
func (*RouteRaw) GetGroupIds ¶ added in v0.75.0
func (*RouteRaw) GetKeepRoute ¶ added in v0.75.0
func (*RouteRaw) GetMasquerade ¶ added in v0.75.0
func (*RouteRaw) GetNetworkCidr ¶ added in v0.75.0
func (*RouteRaw) GetNetworkType ¶ added in v0.75.0
func (*RouteRaw) GetPeerGroupIds ¶ added in v0.75.0
func (*RouteRaw) GetPeerIndex ¶ added in v0.75.0
func (*RouteRaw) GetPeerIndexSet ¶ added in v0.75.0
func (*RouteRaw) GetSkipAutoApply ¶ added in v0.75.0
func (*RouteRaw) ProtoMessage ¶ added in v0.75.0
func (*RouteRaw) ProtoMessage()
func (*RouteRaw) ProtoReflect ¶ added in v0.75.0
func (x *RouteRaw) ProtoReflect() protoreflect.Message
type RuleAction ¶
type RuleAction int32
const ( RuleAction_ACCEPT RuleAction = 0 RuleAction_DROP RuleAction = 1 )
func (RuleAction) Descriptor ¶
func (RuleAction) Descriptor() protoreflect.EnumDescriptor
func (RuleAction) Enum ¶
func (x RuleAction) Enum() *RuleAction
func (RuleAction) EnumDescriptor
deprecated
func (RuleAction) EnumDescriptor() ([]byte, []int)
Deprecated: Use RuleAction.Descriptor instead.
func (RuleAction) Number ¶
func (x RuleAction) Number() protoreflect.EnumNumber
func (RuleAction) String ¶
func (x RuleAction) String() string
func (RuleAction) Type ¶
func (RuleAction) Type() protoreflect.EnumType
type RuleDirection ¶
type RuleDirection int32
const ( RuleDirection_IN RuleDirection = 0 RuleDirection_OUT RuleDirection = 1 )
func (RuleDirection) Descriptor ¶
func (RuleDirection) Descriptor() protoreflect.EnumDescriptor
func (RuleDirection) Enum ¶
func (x RuleDirection) Enum() *RuleDirection
func (RuleDirection) EnumDescriptor
deprecated
func (RuleDirection) EnumDescriptor() ([]byte, []int)
Deprecated: Use RuleDirection.Descriptor instead.
func (RuleDirection) Number ¶
func (x RuleDirection) Number() protoreflect.EnumNumber
func (RuleDirection) String ¶
func (x RuleDirection) String() string
func (RuleDirection) Type ¶
func (RuleDirection) Type() protoreflect.EnumType
type RuleProtocol ¶
type RuleProtocol int32
const ( RuleProtocol_UNKNOWN RuleProtocol = 0 RuleProtocol_ALL RuleProtocol = 1 RuleProtocol_TCP RuleProtocol = 2 RuleProtocol_UDP RuleProtocol = 3 RuleProtocol_ICMP RuleProtocol = 4 RuleProtocol_CUSTOM RuleProtocol = 5 // NETBIRD_SSH (types.PolicyRuleProtocolType "netbird-ssh") is the marker // policy rule that drives SSH-server activation in Calculate(). The legacy // proto.FirewallRule path doesn't ship this value (Calculate already // expands SSH rules into TCP/22 before encoding), but the components path // ships RAW policies — the client must see this protocol to derive // AuthorizedUsers locally. RuleProtocol_NETBIRD_SSH RuleProtocol = 6 )
func (RuleProtocol) Descriptor ¶
func (RuleProtocol) Descriptor() protoreflect.EnumDescriptor
func (RuleProtocol) Enum ¶
func (x RuleProtocol) Enum() *RuleProtocol
func (RuleProtocol) EnumDescriptor
deprecated
func (RuleProtocol) EnumDescriptor() ([]byte, []int)
Deprecated: Use RuleProtocol.Descriptor instead.
func (RuleProtocol) Number ¶
func (x RuleProtocol) Number() protoreflect.EnumNumber
func (RuleProtocol) String ¶
func (x RuleProtocol) String() string
func (RuleProtocol) Type ¶
func (RuleProtocol) Type() protoreflect.EnumType
type SSHAuth ¶ added in v0.61.0
type SSHAuth struct {
// UserIDClaim is the JWT claim to be used to get the users ID
UserIDClaim string `protobuf:"bytes,1,opt,name=UserIDClaim,proto3" json:"UserIDClaim,omitempty"`
// AuthorizedUsers is a list of hashed user IDs authorized to access this peer via SSH
AuthorizedUsers [][]byte `protobuf:"bytes,2,rep,name=AuthorizedUsers,proto3" json:"AuthorizedUsers,omitempty"`
// MachineUsers is a map of machine user names to their corresponding indexes in the AuthorizedUsers list
MachineUsers map[string]*MachineUserIndexes `` /* 185-byte string literal not displayed */
// contains filtered or unexported fields
}
func (*SSHAuth) Descriptor
deprecated
added in
v0.61.0
func (*SSHAuth) GetAuthorizedUsers ¶ added in v0.61.0
func (*SSHAuth) GetMachineUsers ¶ added in v0.61.0
func (x *SSHAuth) GetMachineUsers() map[string]*MachineUserIndexes
func (*SSHAuth) GetUserIDClaim ¶ added in v0.61.0
func (*SSHAuth) ProtoMessage ¶ added in v0.61.0
func (*SSHAuth) ProtoMessage()
func (*SSHAuth) ProtoReflect ¶ added in v0.61.0
func (x *SSHAuth) ProtoReflect() protoreflect.Message
type SSHConfig ¶
type SSHConfig struct {
// sshEnabled indicates whether a SSH server is enabled on this peer
SshEnabled bool `protobuf:"varint,1,opt,name=sshEnabled,proto3" json:"sshEnabled,omitempty"`
// sshPubKey is a SSH public key of a peer to be added to authorized_hosts.
// This property should be ignore if SSHConfig comes from PeerConfig.
SshPubKey []byte `protobuf:"bytes,2,opt,name=sshPubKey,proto3" json:"sshPubKey,omitempty"`
JwtConfig *JWTConfig `protobuf:"bytes,3,opt,name=jwtConfig,proto3" json:"jwtConfig,omitempty"`
// contains filtered or unexported fields
}
SSHConfig represents SSH configurations of a peer.
func (*SSHConfig) Descriptor
deprecated
func (*SSHConfig) GetJwtConfig ¶ added in v0.60.0
func (*SSHConfig) GetSshEnabled ¶
func (*SSHConfig) GetSshPubKey ¶
func (*SSHConfig) ProtoMessage ¶
func (*SSHConfig) ProtoMessage()
func (*SSHConfig) ProtoReflect ¶
func (x *SSHConfig) ProtoReflect() protoreflect.Message
type SendAccessLogRequest ¶ added in v0.65.0
type SendAccessLogRequest struct {
Log *AccessLog `protobuf:"bytes,1,opt,name=log,proto3" json:"log,omitempty"`
// contains filtered or unexported fields
}
SendAccessLogRequest consists of one or more AccessLogs from a Proxy.
func (*SendAccessLogRequest) Descriptor
deprecated
added in
v0.65.0
func (*SendAccessLogRequest) Descriptor() ([]byte, []int)
Deprecated: Use SendAccessLogRequest.ProtoReflect.Descriptor instead.
func (*SendAccessLogRequest) GetLog ¶ added in v0.65.0
func (x *SendAccessLogRequest) GetLog() *AccessLog
func (*SendAccessLogRequest) ProtoMessage ¶ added in v0.65.0
func (*SendAccessLogRequest) ProtoMessage()
func (*SendAccessLogRequest) ProtoReflect ¶ added in v0.65.0
func (x *SendAccessLogRequest) ProtoReflect() protoreflect.Message
func (*SendAccessLogRequest) Reset ¶ added in v0.65.0
func (x *SendAccessLogRequest) Reset()
func (*SendAccessLogRequest) String ¶ added in v0.65.0
func (x *SendAccessLogRequest) String() string
type SendAccessLogResponse ¶ added in v0.65.0
type SendAccessLogResponse struct {
// contains filtered or unexported fields
}
SendAccessLogResponse is intentionally empty to allow for future expansion.
func (*SendAccessLogResponse) Descriptor
deprecated
added in
v0.65.0
func (*SendAccessLogResponse) Descriptor() ([]byte, []int)
Deprecated: Use SendAccessLogResponse.ProtoReflect.Descriptor instead.
func (*SendAccessLogResponse) ProtoMessage ¶ added in v0.65.0
func (*SendAccessLogResponse) ProtoMessage()
func (*SendAccessLogResponse) ProtoReflect ¶ added in v0.65.0
func (x *SendAccessLogResponse) ProtoReflect() protoreflect.Message
func (*SendAccessLogResponse) Reset ¶ added in v0.65.0
func (x *SendAccessLogResponse) Reset()
func (*SendAccessLogResponse) String ¶ added in v0.65.0
func (x *SendAccessLogResponse) String() string
type SendStatusUpdateRequest ¶ added in v0.65.0
type SendStatusUpdateRequest struct {
ServiceId string `protobuf:"bytes,1,opt,name=service_id,json=serviceId,proto3" json:"service_id,omitempty"`
AccountId string `protobuf:"bytes,2,opt,name=account_id,json=accountId,proto3" json:"account_id,omitempty"`
Status ProxyStatus `protobuf:"varint,3,opt,name=status,proto3,enum=management.ProxyStatus" json:"status,omitempty"`
CertificateIssued bool `protobuf:"varint,4,opt,name=certificate_issued,json=certificateIssued,proto3" json:"certificate_issued,omitempty"`
ErrorMessage *string `protobuf:"bytes,5,opt,name=error_message,json=errorMessage,proto3,oneof" json:"error_message,omitempty"`
// Per-account inbound listener state for the account that owns
// service_id. Populated only when --private is enabled and the
// embedded client for the account is up. Field numbers >=50 reserved
// for observability extensions.
InboundListener *ProxyInboundListener `protobuf:"bytes,50,opt,name=inbound_listener,json=inboundListener,proto3,oneof" json:"inbound_listener,omitempty"`
// contains filtered or unexported fields
}
SendStatusUpdateRequest is sent by the proxy to update its status
func (*SendStatusUpdateRequest) Descriptor
deprecated
added in
v0.65.0
func (*SendStatusUpdateRequest) Descriptor() ([]byte, []int)
Deprecated: Use SendStatusUpdateRequest.ProtoReflect.Descriptor instead.
func (*SendStatusUpdateRequest) GetAccountId ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) GetAccountId() string
func (*SendStatusUpdateRequest) GetCertificateIssued ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) GetCertificateIssued() bool
func (*SendStatusUpdateRequest) GetErrorMessage ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) GetErrorMessage() string
func (*SendStatusUpdateRequest) GetInboundListener ¶ added in v0.72.0
func (x *SendStatusUpdateRequest) GetInboundListener() *ProxyInboundListener
func (*SendStatusUpdateRequest) GetServiceId ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) GetServiceId() string
func (*SendStatusUpdateRequest) GetStatus ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) GetStatus() ProxyStatus
func (*SendStatusUpdateRequest) ProtoMessage ¶ added in v0.65.0
func (*SendStatusUpdateRequest) ProtoMessage()
func (*SendStatusUpdateRequest) ProtoReflect ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) ProtoReflect() protoreflect.Message
func (*SendStatusUpdateRequest) Reset ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) Reset()
func (*SendStatusUpdateRequest) String ¶ added in v0.65.0
func (x *SendStatusUpdateRequest) String() string
type SendStatusUpdateResponse ¶ added in v0.65.0
type SendStatusUpdateResponse struct {
// contains filtered or unexported fields
}
SendStatusUpdateResponse is intentionally empty to allow for future expansion
func (*SendStatusUpdateResponse) Descriptor
deprecated
added in
v0.65.0
func (*SendStatusUpdateResponse) Descriptor() ([]byte, []int)
Deprecated: Use SendStatusUpdateResponse.ProtoReflect.Descriptor instead.
func (*SendStatusUpdateResponse) ProtoMessage ¶ added in v0.65.0
func (*SendStatusUpdateResponse) ProtoMessage()
func (*SendStatusUpdateResponse) ProtoReflect ¶ added in v0.65.0
func (x *SendStatusUpdateResponse) ProtoReflect() protoreflect.Message
func (*SendStatusUpdateResponse) Reset ¶ added in v0.65.0
func (x *SendStatusUpdateResponse) Reset()
func (*SendStatusUpdateResponse) String ¶ added in v0.65.0
func (x *SendStatusUpdateResponse) String() string
type ServerKeyResponse ¶
type ServerKeyResponse struct {
// Server's Wireguard public key
Key string `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
// Key expiration timestamp after which the key should be fetched again by the client
ExpiresAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=expiresAt,proto3" json:"expiresAt,omitempty"`
// Version of the Netbird Management Service protocol
Version int32 `protobuf:"varint,3,opt,name=version,proto3" json:"version,omitempty"`
// contains filtered or unexported fields
}
func (*ServerKeyResponse) Descriptor
deprecated
func (*ServerKeyResponse) Descriptor() ([]byte, []int)
Deprecated: Use ServerKeyResponse.ProtoReflect.Descriptor instead.
func (*ServerKeyResponse) GetExpiresAt ¶
func (x *ServerKeyResponse) GetExpiresAt() *timestamppb.Timestamp
func (*ServerKeyResponse) GetKey ¶
func (x *ServerKeyResponse) GetKey() string
func (*ServerKeyResponse) GetVersion ¶
func (x *ServerKeyResponse) GetVersion() int32
func (*ServerKeyResponse) ProtoMessage ¶
func (*ServerKeyResponse) ProtoMessage()
func (*ServerKeyResponse) ProtoReflect ¶
func (x *ServerKeyResponse) ProtoReflect() protoreflect.Message
func (*ServerKeyResponse) Reset ¶
func (x *ServerKeyResponse) Reset()
func (*ServerKeyResponse) String ¶
func (x *ServerKeyResponse) String() string
type SimpleRecord ¶
type SimpleRecord struct {
Name string `protobuf:"bytes,1,opt,name=Name,proto3" json:"Name,omitempty"`
Type int64 `protobuf:"varint,2,opt,name=Type,proto3" json:"Type,omitempty"`
Class string `protobuf:"bytes,3,opt,name=Class,proto3" json:"Class,omitempty"`
TTL int64 `protobuf:"varint,4,opt,name=TTL,proto3" json:"TTL,omitempty"`
RData string `protobuf:"bytes,5,opt,name=RData,proto3" json:"RData,omitempty"`
// contains filtered or unexported fields
}
SimpleRecord represents a dns.SimpleRecord
func (*SimpleRecord) Descriptor
deprecated
func (*SimpleRecord) Descriptor() ([]byte, []int)
Deprecated: Use SimpleRecord.ProtoReflect.Descriptor instead.
func (*SimpleRecord) GetClass ¶
func (x *SimpleRecord) GetClass() string
func (*SimpleRecord) GetName ¶
func (x *SimpleRecord) GetName() string
func (*SimpleRecord) GetRData ¶
func (x *SimpleRecord) GetRData() string
func (*SimpleRecord) GetTTL ¶
func (x *SimpleRecord) GetTTL() int64
func (*SimpleRecord) GetType ¶
func (x *SimpleRecord) GetType() int64
func (*SimpleRecord) ProtoMessage ¶
func (*SimpleRecord) ProtoMessage()
func (*SimpleRecord) ProtoReflect ¶
func (x *SimpleRecord) ProtoReflect() protoreflect.Message
func (*SimpleRecord) Reset ¶
func (x *SimpleRecord) Reset()
func (*SimpleRecord) String ¶
func (x *SimpleRecord) String() string
type StopExposeRequest ¶ added in v0.66.0
type StopExposeRequest struct {
Domain string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
// contains filtered or unexported fields
}
func (*StopExposeRequest) Descriptor
deprecated
added in
v0.66.0
func (*StopExposeRequest) Descriptor() ([]byte, []int)
Deprecated: Use StopExposeRequest.ProtoReflect.Descriptor instead.
func (*StopExposeRequest) GetDomain ¶ added in v0.66.0
func (x *StopExposeRequest) GetDomain() string
func (*StopExposeRequest) ProtoMessage ¶ added in v0.66.0
func (*StopExposeRequest) ProtoMessage()
func (*StopExposeRequest) ProtoReflect ¶ added in v0.66.0
func (x *StopExposeRequest) ProtoReflect() protoreflect.Message
func (*StopExposeRequest) Reset ¶ added in v0.66.0
func (x *StopExposeRequest) Reset()
func (*StopExposeRequest) String ¶ added in v0.66.0
func (x *StopExposeRequest) String() string
type StopExposeResponse ¶ added in v0.66.0
type StopExposeResponse struct {
// contains filtered or unexported fields
}
func (*StopExposeResponse) Descriptor
deprecated
added in
v0.66.0
func (*StopExposeResponse) Descriptor() ([]byte, []int)
Deprecated: Use StopExposeResponse.ProtoReflect.Descriptor instead.
func (*StopExposeResponse) ProtoMessage ¶ added in v0.66.0
func (*StopExposeResponse) ProtoMessage()
func (*StopExposeResponse) ProtoReflect ¶ added in v0.66.0
func (x *StopExposeResponse) ProtoReflect() protoreflect.Message
func (*StopExposeResponse) Reset ¶ added in v0.66.0
func (x *StopExposeResponse) Reset()
func (*StopExposeResponse) String ¶ added in v0.66.0
func (x *StopExposeResponse) String() string
type SyncMappingsAck ¶ added in v0.71.3
type SyncMappingsAck struct {
// contains filtered or unexported fields
}
SyncMappingsAck is sent by the proxy after it has fully processed a batch. Management waits for this before sending the next batch.
func (*SyncMappingsAck) Descriptor
deprecated
added in
v0.71.3
func (*SyncMappingsAck) Descriptor() ([]byte, []int)
Deprecated: Use SyncMappingsAck.ProtoReflect.Descriptor instead.
func (*SyncMappingsAck) ProtoMessage ¶ added in v0.71.3
func (*SyncMappingsAck) ProtoMessage()
func (*SyncMappingsAck) ProtoReflect ¶ added in v0.71.3
func (x *SyncMappingsAck) ProtoReflect() protoreflect.Message
func (*SyncMappingsAck) Reset ¶ added in v0.71.3
func (x *SyncMappingsAck) Reset()
func (*SyncMappingsAck) String ¶ added in v0.71.3
func (x *SyncMappingsAck) String() string
type SyncMappingsInit ¶ added in v0.71.3
type SyncMappingsInit struct {
ProxyId string `protobuf:"bytes,1,opt,name=proxy_id,json=proxyId,proto3" json:"proxy_id,omitempty"`
Version string `protobuf:"bytes,2,opt,name=version,proto3" json:"version,omitempty"`
StartedAt *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=started_at,json=startedAt,proto3" json:"started_at,omitempty"`
Address string `protobuf:"bytes,4,opt,name=address,proto3" json:"address,omitempty"`
Capabilities *ProxyCapabilities `protobuf:"bytes,5,opt,name=capabilities,proto3" json:"capabilities,omitempty"`
// contains filtered or unexported fields
}
SyncMappingsInit is the first message on the stream, carrying the same identification fields as GetMappingUpdateRequest.
func (*SyncMappingsInit) Descriptor
deprecated
added in
v0.71.3
func (*SyncMappingsInit) Descriptor() ([]byte, []int)
Deprecated: Use SyncMappingsInit.ProtoReflect.Descriptor instead.
func (*SyncMappingsInit) GetAddress ¶ added in v0.71.3
func (x *SyncMappingsInit) GetAddress() string
func (*SyncMappingsInit) GetCapabilities ¶ added in v0.71.3
func (x *SyncMappingsInit) GetCapabilities() *ProxyCapabilities
func (*SyncMappingsInit) GetProxyId ¶ added in v0.71.3
func (x *SyncMappingsInit) GetProxyId() string
func (*SyncMappingsInit) GetStartedAt ¶ added in v0.71.3
func (x *SyncMappingsInit) GetStartedAt() *timestamppb.Timestamp
func (*SyncMappingsInit) GetVersion ¶ added in v0.71.3
func (x *SyncMappingsInit) GetVersion() string
func (*SyncMappingsInit) ProtoMessage ¶ added in v0.71.3
func (*SyncMappingsInit) ProtoMessage()
func (*SyncMappingsInit) ProtoReflect ¶ added in v0.71.3
func (x *SyncMappingsInit) ProtoReflect() protoreflect.Message
func (*SyncMappingsInit) Reset ¶ added in v0.71.3
func (x *SyncMappingsInit) Reset()
func (*SyncMappingsInit) String ¶ added in v0.71.3
func (x *SyncMappingsInit) String() string
type SyncMappingsRequest ¶ added in v0.71.3
type SyncMappingsRequest struct {
// Types that are assignable to Msg:
//
// *SyncMappingsRequest_Init
// *SyncMappingsRequest_Ack
Msg isSyncMappingsRequest_Msg `protobuf_oneof:"msg"`
// contains filtered or unexported fields
}
SyncMappingsRequest is sent by the proxy on the bidirectional SyncMappings stream. The first message MUST be an init; all subsequent messages MUST be acks.
func (*SyncMappingsRequest) Descriptor
deprecated
added in
v0.71.3
func (*SyncMappingsRequest) Descriptor() ([]byte, []int)
Deprecated: Use SyncMappingsRequest.ProtoReflect.Descriptor instead.
func (*SyncMappingsRequest) GetAck ¶ added in v0.71.3
func (x *SyncMappingsRequest) GetAck() *SyncMappingsAck
func (*SyncMappingsRequest) GetInit ¶ added in v0.71.3
func (x *SyncMappingsRequest) GetInit() *SyncMappingsInit
func (*SyncMappingsRequest) GetMsg ¶ added in v0.71.3
func (m *SyncMappingsRequest) GetMsg() isSyncMappingsRequest_Msg
func (*SyncMappingsRequest) ProtoMessage ¶ added in v0.71.3
func (*SyncMappingsRequest) ProtoMessage()
func (*SyncMappingsRequest) ProtoReflect ¶ added in v0.71.3
func (x *SyncMappingsRequest) ProtoReflect() protoreflect.Message
func (*SyncMappingsRequest) Reset ¶ added in v0.71.3
func (x *SyncMappingsRequest) Reset()
func (*SyncMappingsRequest) String ¶ added in v0.71.3
func (x *SyncMappingsRequest) String() string
type SyncMappingsRequest_Ack ¶ added in v0.71.3
type SyncMappingsRequest_Ack struct {
Ack *SyncMappingsAck `protobuf:"bytes,2,opt,name=ack,proto3,oneof"`
}
type SyncMappingsRequest_Init ¶ added in v0.71.3
type SyncMappingsRequest_Init struct {
Init *SyncMappingsInit `protobuf:"bytes,1,opt,name=init,proto3,oneof"`
}
type SyncMappingsResponse ¶ added in v0.71.3
type SyncMappingsResponse struct {
Mapping []*ProxyMapping `protobuf:"bytes,1,rep,name=mapping,proto3" json:"mapping,omitempty"`
// initial_sync_complete is set on the last message of the initial snapshot.
InitialSyncComplete bool `protobuf:"varint,2,opt,name=initial_sync_complete,json=initialSyncComplete,proto3" json:"initial_sync_complete,omitempty"`
// contains filtered or unexported fields
}
SyncMappingsResponse is a batch of mappings sent by management. Identical semantics to GetMappingUpdateResponse.
func (*SyncMappingsResponse) Descriptor
deprecated
added in
v0.71.3
func (*SyncMappingsResponse) Descriptor() ([]byte, []int)
Deprecated: Use SyncMappingsResponse.ProtoReflect.Descriptor instead.
func (*SyncMappingsResponse) GetInitialSyncComplete ¶ added in v0.71.3
func (x *SyncMappingsResponse) GetInitialSyncComplete() bool
func (*SyncMappingsResponse) GetMapping ¶ added in v0.71.3
func (x *SyncMappingsResponse) GetMapping() []*ProxyMapping
func (*SyncMappingsResponse) ProtoMessage ¶ added in v0.71.3
func (*SyncMappingsResponse) ProtoMessage()
func (*SyncMappingsResponse) ProtoReflect ¶ added in v0.71.3
func (x *SyncMappingsResponse) ProtoReflect() protoreflect.Message
func (*SyncMappingsResponse) Reset ¶ added in v0.71.3
func (x *SyncMappingsResponse) Reset()
func (*SyncMappingsResponse) String ¶ added in v0.71.3
func (x *SyncMappingsResponse) String() string
type SyncMetaRequest ¶
type SyncMetaRequest struct {
// Meta data of the peer
Meta *PeerSystemMeta `protobuf:"bytes,1,opt,name=meta,proto3" json:"meta,omitempty"`
// contains filtered or unexported fields
}
func (*SyncMetaRequest) Descriptor
deprecated
func (*SyncMetaRequest) Descriptor() ([]byte, []int)
Deprecated: Use SyncMetaRequest.ProtoReflect.Descriptor instead.
func (*SyncMetaRequest) GetMeta ¶
func (x *SyncMetaRequest) GetMeta() *PeerSystemMeta
func (*SyncMetaRequest) ProtoMessage ¶
func (*SyncMetaRequest) ProtoMessage()
func (*SyncMetaRequest) ProtoReflect ¶
func (x *SyncMetaRequest) ProtoReflect() protoreflect.Message
func (*SyncMetaRequest) Reset ¶
func (x *SyncMetaRequest) Reset()
func (*SyncMetaRequest) String ¶
func (x *SyncMetaRequest) String() string
type SyncRequest ¶
type SyncRequest struct {
// Meta data of the peer
Meta *PeerSystemMeta `protobuf:"bytes,1,opt,name=meta,proto3" json:"meta,omitempty"`
// contains filtered or unexported fields
}
func (*SyncRequest) Descriptor
deprecated
func (*SyncRequest) Descriptor() ([]byte, []int)
Deprecated: Use SyncRequest.ProtoReflect.Descriptor instead.
func (*SyncRequest) GetMeta ¶
func (x *SyncRequest) GetMeta() *PeerSystemMeta
func (*SyncRequest) ProtoMessage ¶
func (*SyncRequest) ProtoMessage()
func (*SyncRequest) ProtoReflect ¶
func (x *SyncRequest) ProtoReflect() protoreflect.Message
func (*SyncRequest) Reset ¶
func (x *SyncRequest) Reset()
func (*SyncRequest) String ¶
func (x *SyncRequest) String() string
type SyncResponse ¶
type SyncResponse struct {
// Global config
NetbirdConfig *NetbirdConfig `protobuf:"bytes,1,opt,name=netbirdConfig,proto3" json:"netbirdConfig,omitempty"`
// Deprecated. Use NetworkMap.PeerConfig
PeerConfig *PeerConfig `protobuf:"bytes,2,opt,name=peerConfig,proto3" json:"peerConfig,omitempty"`
// Deprecated. Use NetworkMap.RemotePeerConfig
RemotePeers []*RemotePeerConfig `protobuf:"bytes,3,rep,name=remotePeers,proto3" json:"remotePeers,omitempty"`
// Indicates whether remotePeers array is empty or not to bypass protobuf null and empty array equality.
// Deprecated. Use NetworkMap.remotePeersIsEmpty
RemotePeersIsEmpty bool `protobuf:"varint,4,opt,name=remotePeersIsEmpty,proto3" json:"remotePeersIsEmpty,omitempty"`
NetworkMap *NetworkMap `protobuf:"bytes,5,opt,name=NetworkMap,proto3" json:"NetworkMap,omitempty"`
// Posture checks to be evaluated by client
Checks []*Checks `protobuf:"bytes,6,rep,name=Checks,proto3" json:"Checks,omitempty"`
// 3-state session deadline. Carried on every Sync snapshot so admin-side
// changes propagate live without a client reconnect.
//
// field unset (nil) → snapshot carries no info; client keeps the
// deadline it already had
// set, seconds=0 nanos=0 → explicit "expiry disabled" or peer is not
// SSO-registered; client clears its anchor
// set, valid timestamp → new absolute UTC deadline
SessionExpiresAt *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=sessionExpiresAt,proto3" json:"sessionExpiresAt,omitempty"`
// NetworkMapEnvelope carries the component-based wire format for peers that
// advertise PeerCapabilityComponentNetworkMap. When set, NetworkMap (field 5)
// is left empty: management ships components and the client runs Calculate()
// locally instead of receiving an expanded NetworkMap.
NetworkMapEnvelope *NetworkMapEnvelope `protobuf:"bytes,8,opt,name=NetworkMapEnvelope,proto3" json:"NetworkMapEnvelope,omitempty"`
Version int32 `protobuf:"varint,9,opt,name=Version,proto3" json:"Version,omitempty"`
// contains filtered or unexported fields
}
SyncResponse represents a state that should be applied to the local peer (e.g. Netbird servers config as well as local peer and remote peers configs)
func (*SyncResponse) Descriptor
deprecated
func (*SyncResponse) Descriptor() ([]byte, []int)
Deprecated: Use SyncResponse.ProtoReflect.Descriptor instead.
func (*SyncResponse) GetChecks ¶
func (x *SyncResponse) GetChecks() []*Checks
func (*SyncResponse) GetNetbirdConfig ¶
func (x *SyncResponse) GetNetbirdConfig() *NetbirdConfig
func (*SyncResponse) GetNetworkMap ¶
func (x *SyncResponse) GetNetworkMap() *NetworkMap
func (*SyncResponse) GetNetworkMapEnvelope ¶ added in v0.75.0
func (x *SyncResponse) GetNetworkMapEnvelope() *NetworkMapEnvelope
func (*SyncResponse) GetPeerConfig ¶
func (x *SyncResponse) GetPeerConfig() *PeerConfig
func (*SyncResponse) GetRemotePeers ¶
func (x *SyncResponse) GetRemotePeers() []*RemotePeerConfig
func (*SyncResponse) GetRemotePeersIsEmpty ¶
func (x *SyncResponse) GetRemotePeersIsEmpty() bool
func (*SyncResponse) GetSessionExpiresAt ¶ added in v0.72.0
func (x *SyncResponse) GetSessionExpiresAt() *timestamppb.Timestamp
func (*SyncResponse) GetVersion ¶ added in v0.75.0
func (x *SyncResponse) GetVersion() int32
func (*SyncResponse) ProtoMessage ¶
func (*SyncResponse) ProtoMessage()
func (*SyncResponse) ProtoReflect ¶
func (x *SyncResponse) ProtoReflect() protoreflect.Message
func (*SyncResponse) Reset ¶
func (x *SyncResponse) Reset()
func (*SyncResponse) String ¶
func (x *SyncResponse) String() string
type UnimplementedManagementServiceServer ¶
type UnimplementedManagementServiceServer struct {
}
UnimplementedManagementServiceServer must be embedded to have forward compatible implementations.
func (UnimplementedManagementServiceServer) CreateExpose ¶ added in v0.66.0
func (UnimplementedManagementServiceServer) CreateExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) ExtendAuthSession ¶ added in v0.72.0
func (UnimplementedManagementServiceServer) ExtendAuthSession(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) GetDeviceAuthorizationFlow ¶
func (UnimplementedManagementServiceServer) GetDeviceAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) GetPKCEAuthorizationFlow ¶
func (UnimplementedManagementServiceServer) GetPKCEAuthorizationFlow(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) GetServerKey ¶
func (UnimplementedManagementServiceServer) GetServerKey(context.Context, *Empty) (*ServerKeyResponse, error)
func (UnimplementedManagementServiceServer) Login ¶
func (UnimplementedManagementServiceServer) Login(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) Logout ¶
func (UnimplementedManagementServiceServer) Logout(context.Context, *EncryptedMessage) (*Empty, error)
func (UnimplementedManagementServiceServer) RenewExpose ¶ added in v0.66.0
func (UnimplementedManagementServiceServer) RenewExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) StopExpose ¶ added in v0.66.0
func (UnimplementedManagementServiceServer) StopExpose(context.Context, *EncryptedMessage) (*EncryptedMessage, error)
func (UnimplementedManagementServiceServer) SyncMeta ¶
func (UnimplementedManagementServiceServer) SyncMeta(context.Context, *EncryptedMessage) (*Empty, error)
type UnimplementedProxyServiceServer ¶ added in v0.65.0
type UnimplementedProxyServiceServer struct {
}
UnimplementedProxyServiceServer must be embedded to have forward compatible implementations.
func (UnimplementedProxyServiceServer) Authenticate ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) Authenticate(context.Context, *AuthenticateRequest) (*AuthenticateResponse, error)
func (UnimplementedProxyServiceServer) CheckLLMPolicyLimits ¶ added in v0.74.0
func (UnimplementedProxyServiceServer) CheckLLMPolicyLimits(context.Context, *CheckLLMPolicyLimitsRequest) (*CheckLLMPolicyLimitsResponse, error)
func (UnimplementedProxyServiceServer) CreateProxyPeer ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) CreateProxyPeer(context.Context, *CreateProxyPeerRequest) (*CreateProxyPeerResponse, error)
func (UnimplementedProxyServiceServer) GetMappingUpdate ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) GetMappingUpdate(*GetMappingUpdateRequest, ProxyService_GetMappingUpdateServer) error
func (UnimplementedProxyServiceServer) GetOIDCURL ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) GetOIDCURL(context.Context, *GetOIDCURLRequest) (*GetOIDCURLResponse, error)
func (UnimplementedProxyServiceServer) RecordLLMUsage ¶ added in v0.74.0
func (UnimplementedProxyServiceServer) RecordLLMUsage(context.Context, *RecordLLMUsageRequest) (*RecordLLMUsageResponse, error)
func (UnimplementedProxyServiceServer) SendAccessLog ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) SendAccessLog(context.Context, *SendAccessLogRequest) (*SendAccessLogResponse, error)
func (UnimplementedProxyServiceServer) SendStatusUpdate ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) SendStatusUpdate(context.Context, *SendStatusUpdateRequest) (*SendStatusUpdateResponse, error)
func (UnimplementedProxyServiceServer) SyncMappings ¶ added in v0.71.3
func (UnimplementedProxyServiceServer) SyncMappings(ProxyService_SyncMappingsServer) error
func (UnimplementedProxyServiceServer) ValidateSession ¶ added in v0.65.0
func (UnimplementedProxyServiceServer) ValidateSession(context.Context, *ValidateSessionRequest) (*ValidateSessionResponse, error)
func (UnimplementedProxyServiceServer) ValidateTunnelPeer ¶ added in v0.72.0
func (UnimplementedProxyServiceServer) ValidateTunnelPeer(context.Context, *ValidateTunnelPeerRequest) (*ValidateTunnelPeerResponse, error)
type UnsafeManagementServiceServer ¶
type UnsafeManagementServiceServer interface {
// contains filtered or unexported methods
}
UnsafeManagementServiceServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to ManagementServiceServer will result in compilation errors.
type UnsafeProxyServiceServer ¶ added in v0.65.0
type UnsafeProxyServiceServer interface {
// contains filtered or unexported methods
}
UnsafeProxyServiceServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to ProxyServiceServer will result in compilation errors.
type UserIDList ¶ added in v0.75.0
type UserIDList struct {
UserIds []string `protobuf:"bytes,1,rep,name=user_ids,json=userIds,proto3" json:"user_ids,omitempty"`
// contains filtered or unexported fields
}
UserIDList is a list of user ids — used as the value type in NetworkMapComponentsFull.group_id_to_user_ids.
func (*UserIDList) Descriptor
deprecated
added in
v0.75.0
func (*UserIDList) Descriptor() ([]byte, []int)
Deprecated: Use UserIDList.ProtoReflect.Descriptor instead.
func (*UserIDList) GetUserIds ¶ added in v0.75.0
func (x *UserIDList) GetUserIds() []string
func (*UserIDList) ProtoMessage ¶ added in v0.75.0
func (*UserIDList) ProtoMessage()
func (*UserIDList) ProtoReflect ¶ added in v0.75.0
func (x *UserIDList) ProtoReflect() protoreflect.Message
func (*UserIDList) Reset ¶ added in v0.75.0
func (x *UserIDList) Reset()
func (*UserIDList) String ¶ added in v0.75.0
func (x *UserIDList) String() string
type UserNameList ¶ added in v0.75.0
type UserNameList struct {
Names []string `protobuf:"bytes,1,rep,name=names,proto3" json:"names,omitempty"`
// contains filtered or unexported fields
}
UserNameList is a list of local-user names — used as the value type in PolicyCompact.authorized_groups.
func (*UserNameList) Descriptor
deprecated
added in
v0.75.0
func (*UserNameList) Descriptor() ([]byte, []int)
Deprecated: Use UserNameList.ProtoReflect.Descriptor instead.
func (*UserNameList) GetNames ¶ added in v0.75.0
func (x *UserNameList) GetNames() []string
func (*UserNameList) ProtoMessage ¶ added in v0.75.0
func (*UserNameList) ProtoMessage()
func (*UserNameList) ProtoReflect ¶ added in v0.75.0
func (x *UserNameList) ProtoReflect() protoreflect.Message
func (*UserNameList) Reset ¶ added in v0.75.0
func (x *UserNameList) Reset()
func (*UserNameList) String ¶ added in v0.75.0
func (x *UserNameList) String() string
type ValidateSessionRequest ¶ added in v0.65.0
type ValidateSessionRequest struct {
Domain string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
SessionToken string `protobuf:"bytes,2,opt,name=session_token,json=sessionToken,proto3" json:"session_token,omitempty"`
// contains filtered or unexported fields
}
func (*ValidateSessionRequest) Descriptor
deprecated
added in
v0.65.0
func (*ValidateSessionRequest) Descriptor() ([]byte, []int)
Deprecated: Use ValidateSessionRequest.ProtoReflect.Descriptor instead.
func (*ValidateSessionRequest) GetDomain ¶ added in v0.65.0
func (x *ValidateSessionRequest) GetDomain() string
func (*ValidateSessionRequest) GetSessionToken ¶ added in v0.65.0
func (x *ValidateSessionRequest) GetSessionToken() string
func (*ValidateSessionRequest) ProtoMessage ¶ added in v0.65.0
func (*ValidateSessionRequest) ProtoMessage()
func (*ValidateSessionRequest) ProtoReflect ¶ added in v0.65.0
func (x *ValidateSessionRequest) ProtoReflect() protoreflect.Message
func (*ValidateSessionRequest) Reset ¶ added in v0.65.0
func (x *ValidateSessionRequest) Reset()
func (*ValidateSessionRequest) String ¶ added in v0.65.0
func (x *ValidateSessionRequest) String() string
type ValidateSessionResponse ¶ added in v0.65.0
type ValidateSessionResponse struct {
Valid bool `protobuf:"varint,1,opt,name=valid,proto3" json:"valid,omitempty"`
UserId string `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
UserEmail string `protobuf:"bytes,3,opt,name=user_email,json=userEmail,proto3" json:"user_email,omitempty"`
DeniedReason string `protobuf:"bytes,4,opt,name=denied_reason,json=deniedReason,proto3" json:"denied_reason,omitempty"`
// peer_group_ids carries the calling user's group memberships so the
// proxy can authorise policy-aware middlewares without an additional
// management round-trip.
PeerGroupIds []string `protobuf:"bytes,5,rep,name=peer_group_ids,json=peerGroupIds,proto3" json:"peer_group_ids,omitempty"`
// peer_group_names carries the human-readable display names for the
// ids in peer_group_ids, ordered identically (positional pairing).
// Stamped onto upstream requests as X-NetBird-Groups so downstream
// services can read names rather than opaque ids.
PeerGroupNames []string `protobuf:"bytes,6,rep,name=peer_group_names,json=peerGroupNames,proto3" json:"peer_group_names,omitempty"`
// contains filtered or unexported fields
}
func (*ValidateSessionResponse) Descriptor
deprecated
added in
v0.65.0
func (*ValidateSessionResponse) Descriptor() ([]byte, []int)
Deprecated: Use ValidateSessionResponse.ProtoReflect.Descriptor instead.
func (*ValidateSessionResponse) GetDeniedReason ¶ added in v0.65.0
func (x *ValidateSessionResponse) GetDeniedReason() string
func (*ValidateSessionResponse) GetPeerGroupIds ¶ added in v0.72.0
func (x *ValidateSessionResponse) GetPeerGroupIds() []string
func (*ValidateSessionResponse) GetPeerGroupNames ¶ added in v0.72.0
func (x *ValidateSessionResponse) GetPeerGroupNames() []string
func (*ValidateSessionResponse) GetUserEmail ¶ added in v0.65.0
func (x *ValidateSessionResponse) GetUserEmail() string
func (*ValidateSessionResponse) GetUserId ¶ added in v0.65.0
func (x *ValidateSessionResponse) GetUserId() string
func (*ValidateSessionResponse) GetValid ¶ added in v0.65.0
func (x *ValidateSessionResponse) GetValid() bool
func (*ValidateSessionResponse) ProtoMessage ¶ added in v0.65.0
func (*ValidateSessionResponse) ProtoMessage()
func (*ValidateSessionResponse) ProtoReflect ¶ added in v0.65.0
func (x *ValidateSessionResponse) ProtoReflect() protoreflect.Message
func (*ValidateSessionResponse) Reset ¶ added in v0.65.0
func (x *ValidateSessionResponse) Reset()
func (*ValidateSessionResponse) String ¶ added in v0.65.0
func (x *ValidateSessionResponse) String() string
type ValidateTunnelPeerRequest ¶ added in v0.72.0
type ValidateTunnelPeerRequest struct {
TunnelIp string `protobuf:"bytes,1,opt,name=tunnel_ip,json=tunnelIp,proto3" json:"tunnel_ip,omitempty"`
Domain string `protobuf:"bytes,2,opt,name=domain,proto3" json:"domain,omitempty"`
// contains filtered or unexported fields
}
ValidateTunnelPeerRequest carries the inbound peer's tunnel IP and the service domain whose group requirements should gate access. The calling account is inferred from the proxy's gRPC metadata (ProxyToken).
func (*ValidateTunnelPeerRequest) Descriptor
deprecated
added in
v0.72.0
func (*ValidateTunnelPeerRequest) Descriptor() ([]byte, []int)
Deprecated: Use ValidateTunnelPeerRequest.ProtoReflect.Descriptor instead.
func (*ValidateTunnelPeerRequest) GetDomain ¶ added in v0.72.0
func (x *ValidateTunnelPeerRequest) GetDomain() string
func (*ValidateTunnelPeerRequest) GetTunnelIp ¶ added in v0.72.0
func (x *ValidateTunnelPeerRequest) GetTunnelIp() string
func (*ValidateTunnelPeerRequest) ProtoMessage ¶ added in v0.72.0
func (*ValidateTunnelPeerRequest) ProtoMessage()
func (*ValidateTunnelPeerRequest) ProtoReflect ¶ added in v0.72.0
func (x *ValidateTunnelPeerRequest) ProtoReflect() protoreflect.Message
func (*ValidateTunnelPeerRequest) Reset ¶ added in v0.72.0
func (x *ValidateTunnelPeerRequest) Reset()
func (*ValidateTunnelPeerRequest) String ¶ added in v0.72.0
func (x *ValidateTunnelPeerRequest) String() string
type ValidateTunnelPeerResponse ¶ added in v0.72.0
type ValidateTunnelPeerResponse struct {
Valid bool `protobuf:"varint,1,opt,name=valid,proto3" json:"valid,omitempty"`
UserId string `protobuf:"bytes,2,opt,name=user_id,json=userId,proto3" json:"user_id,omitempty"`
UserEmail string `protobuf:"bytes,3,opt,name=user_email,json=userEmail,proto3" json:"user_email,omitempty"`
DeniedReason string `protobuf:"bytes,4,opt,name=denied_reason,json=deniedReason,proto3" json:"denied_reason,omitempty"`
// session_token is set only when valid is true. Same shape as the JWT
// the OIDC flow produces — proxy installs it via setSessionCookie so the
// tunnel fast-path is indistinguishable from OIDC for subsequent requests.
SessionToken string `protobuf:"bytes,5,opt,name=session_token,json=sessionToken,proto3" json:"session_token,omitempty"`
// peer_group_ids carries the resolved peer's user group memberships so
// the proxy can authorise policy-aware middlewares without an additional
// management round-trip.
PeerGroupIds []string `protobuf:"bytes,6,rep,name=peer_group_ids,json=peerGroupIds,proto3" json:"peer_group_ids,omitempty"`
// peer_group_names carries the human-readable display names for the
// ids in peer_group_ids, ordered identically (positional pairing).
// Stamped onto upstream requests as X-NetBird-Groups so downstream
// services can read names rather than opaque ids.
PeerGroupNames []string `protobuf:"bytes,7,rep,name=peer_group_names,json=peerGroupNames,proto3" json:"peer_group_names,omitempty"`
// contains filtered or unexported fields
}
ValidateTunnelPeerResponse mirrors ValidateSessionResponse plus a freshly minted session_token: when valid is true, the proxy installs the token as a session cookie so subsequent requests skip the management round-trip, matching the OIDC flow's UX. denied_reason values:
"peer_not_found" — no peer with that tunnel IP in the calling account "no_user" — peer exists but is not bound to a user "service_not_found" "account_mismatch" "not_in_group" — peer resolved but not in service.access_groups
func (*ValidateTunnelPeerResponse) Descriptor
deprecated
added in
v0.72.0
func (*ValidateTunnelPeerResponse) Descriptor() ([]byte, []int)
Deprecated: Use ValidateTunnelPeerResponse.ProtoReflect.Descriptor instead.
func (*ValidateTunnelPeerResponse) GetDeniedReason ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetDeniedReason() string
func (*ValidateTunnelPeerResponse) GetPeerGroupIds ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetPeerGroupIds() []string
func (*ValidateTunnelPeerResponse) GetPeerGroupNames ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetPeerGroupNames() []string
func (*ValidateTunnelPeerResponse) GetSessionToken ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetSessionToken() string
func (*ValidateTunnelPeerResponse) GetUserEmail ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetUserEmail() string
func (*ValidateTunnelPeerResponse) GetUserId ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetUserId() string
func (*ValidateTunnelPeerResponse) GetValid ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) GetValid() bool
func (*ValidateTunnelPeerResponse) ProtoMessage ¶ added in v0.72.0
func (*ValidateTunnelPeerResponse) ProtoMessage()
func (*ValidateTunnelPeerResponse) ProtoReflect ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) ProtoReflect() protoreflect.Message
func (*ValidateTunnelPeerResponse) Reset ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) Reset()
func (*ValidateTunnelPeerResponse) String ¶ added in v0.72.0
func (x *ValidateTunnelPeerResponse) String() string