Commit Graph

107 Commits

Author SHA1 Message Date
ad72c41347 ClientConnection no longer has public fields. 2024-09-08 11:16:49 +02:00
db1d908d06 a lot of work to get prometheus monitoring better.
Now the duration is updated every second to get more accurate readings. Also, the time series are now cleaned up when they no longer exists. Previously, all time series were deleted and then everything was setup from scratch.
2024-09-08 11:16:49 +02:00
1c92fcb03e much more clean handling of concurrency in the converge server by separating the administration from the matchmaking by putting admin in a separate package. 2024-09-08 11:16:49 +02:00
f82b21b845 activity detection implemented for sftp. 2024-09-08 11:16:49 +02:00
b8715bcbe8 eliminated the stop times. Not a good idea to have this metric because it starts becoming relevant after an agent has stopped and so it has basically unlimited lifetime which is not good. 2024-09-08 11:16:49 +02:00
1be96d8742 Added agent_start_time, agent_stop_time, client_start_time, and client_stop_time metrics. 2024-09-08 11:16:49 +02:00
c2ec1ce117 Added agent uid to the client info so that client and agent can be correlated in prometheus/grafana. 2024-09-08 11:16:49 +02:00
c4bc07b0e0 nov showing a message that the rendez-vous id is generated. 2024-09-08 11:16:49 +02:00
5b7d51f210 Code is more robust and should now never try to send a notification to a web client that can block, using a context with cancellation. 2024-09-08 11:16:49 +02:00
4a3448dcc3 wsproxy now giving a more friendly error message when there is a protocol mismatch describing what the user should do. 2024-09-08 11:16:49 +02:00
128be0ebb5 Added client environment info to the prometheus metrics as labels. 2024-09-08 11:16:49 +02:00
f3d0074f17 added environment info from the client. 2024-09-08 11:16:49 +02:00
Erik Brakkee
b4b962d859 remove some console logs in the javascript
prometheus now listening on separate port
fixed powershell command for setting up authorized keys.
2024-09-08 11:16:49 +02:00
f62b81cbfb cumulative counters implemented. 2024-09-08 11:16:49 +02:00
97d34424ca prometheus monitoring now more complete. Including a guid to uniquely identify agents and clients. 2024-09-08 11:16:49 +02:00
Erik Brakkee
135fd081d8 prometheus support step 1
updates to documentation.
2024-09-08 11:16:49 +02:00
2366b78e95 ClientId is now a string instead of an int. 2024-09-08 11:16:49 +02:00
ae60b77eec public id is now shown on the sessions page since authorized keys are
used which is safer.
2024-09-08 11:16:49 +02:00
cd953c5edf eliminated the username. 2024-09-08 11:16:49 +02:00
d134f1e944 better messages when the user modifies the .authorized_keys file from
within the session.
2024-09-08 11:16:49 +02:00
Erik Brakkee
d109c72f66 removed password based access
authorized keys can now be modified within the session.
keep last set of keys when no valid keys were found and keys are changed during the session .
2024-09-08 11:16:49 +02:00
1b1f8f2167 A lot of work in getting cut and paste from the UI to
work properly.

Wrote two web components. One for cut and paste in general, and another for code samples.
2024-09-08 11:16:49 +02:00
51be117200 Simple validation of the id and the authorized keys. 2024-09-08 11:16:49 +02:00
2cf73feef5 More clean handling of the contextpath.
Now using long option names for the options of converge to be consistent with the other components.
2024-09-08 11:16:49 +02:00
75e1bd77ba Alternative contextpath is now supported.
This will simplify hosting in cases where you have no control over DNS but only over one domain.
2024-09-08 11:16:49 +02:00
9456665a6f Preparation for alternative context path.
The contextpath parameter in converge.go is
temporary and should be removed later. What is needed is autodetectio of the context path for the usage page and passing on the context for rendering.
2024-09-08 11:16:49 +02:00
b41317c598 Lots of work on making easier interactive documentation, especially to make working with SSH public keys really easy.
Next step is to do more validation in the UI.
Specifically:
* validate authorized keys
* detection of accidental use of a private key

Then, password based access can be disabled.
2024-09-08 11:16:49 +02:00
49db7578a7 large parts of the usage is now dynamic.
Still need to generate instructions for authorized keys. A lot of troubleshooting for the form to cookie persistence.
2024-09-08 11:16:49 +02:00
62b51a6d09 work in progress:
* usage page now has more dynamic part where user
  can enter id and publis ssh keys and the server will
  generate the appropriate commmands to execute depending on the local and remote shell.
2024-09-08 11:16:49 +02:00
Erik Brakkee
830594740b * session will now expire some time after last user
activity and updated documentation.
* downloads will now download again. Because of hx-boost
  the downloads where rendered in the browser. Now
  disabling hx-boost for the downloads section.
* relative link for sessions page
2024-09-08 11:16:49 +02:00
a9bd539175 Updated documentation:
* remote shell usage for linux, cmd, and powershell
* help of wsproxy.
2024-09-08 11:16:49 +02:00
adee89cc08 Now by default wsproxy uses a specific protocol to establish connections to the server. It does this by adding the ?wsproxy query parameter.
The server then sends it the protocol version and the client connection info describing whether an agent was found or not. This improves usability for users.

With the --raw option it bypasses this query parameter and wsproxy then works in the old way as a simple stdio-websocket connector. It then still works with converge server but can also be used for simple websocket troubleshooting.
2024-09-08 11:16:49 +02:00
Erik Brakkee
e141007f0a Now displaying agent number instead of id.
Passing timezone to server side for rendering of time stamps
Configuration of preferred shells.
2024-09-08 11:16:49 +02:00
d6fc2e4118 Rendering status as HTML tables. 2024-09-08 11:16:49 +02:00
638dffd143 doing the same thing as before but now rendering the
status using a template.
2024-09-08 11:16:49 +02:00
Erik Brakkee
882f97fa17 many small changes
* removed the Async utility
* now using Ping message to webclient for keep alive instaed of actual content
* added remote shell to AgentInfo
* retry of connections to the agent
* better logging for SynchronizeStreams
2024-09-08 11:16:49 +02:00
9d460b9cf3 usage fix (agent was renamed by intellij to session)
Now using embedded timezone database by go so setting the TZ variable will work.
2024-09-08 11:16:49 +02:00
d6d2d5648c Live updates of the sessions.
V1 in ascii-art. To be improved.
2024-09-08 11:16:49 +02:00
100771a7ba restructuring 2024-09-08 11:16:49 +02:00
60d641a1a4 When a duplicate id is requested the server now allocates a new unique id so that the session can be handled anyway. 2024-09-08 11:16:49 +02:00
816e8d8609 refactoring towards being able to send events from Admin to UI (websocket) without exposing connection info but only metadata. 2024-09-08 11:16:49 +02:00
0e8ed86be3 basic htmx with server sending content to the client over a websocket is now working. This only worked when text message where being sent so the websocket handling had to be made configurable with a 'text' boolean field. 2024-09-08 11:16:49 +02:00
f6ea7a56a9 tabbed interface. 2024-09-08 11:16:49 +02:00
e0771c095b split up in separate pages. 2024-09-08 11:16:49 +02:00
80a536c70e docs page now working again. 2024-09-08 11:16:49 +02:00
8fd17ed75d Split up the main page into different parts. 2024-09-08 11:16:49 +02:00
fcfe8a6637 Split up the main page into different parts. 2024-09-08 11:16:49 +02:00
4b05d7e8d8 Now rendering the index.html using the Templ library.
This is in preparation for:
1. creating a base page
2. using tabs: Home, Using, Downloads, Status
3. htmx
2024-09-08 11:16:49 +02:00
e01a2bc729 Added pprof to convergeserver and optionally to
the agent if PPROF_PORT is set.

Fixed issue with converge server not cleaning up goroutines because of blocking channel. Made sure to create channels with > 1 size everywhere it can be done. The blocking behavior of a default channel size is mostly in the way.

Known issue: Killing the SSH client will lead to the server side process not being terminated and some goroutines still running in the agent. This would require additional investigation to solve. The remote processes are still being cleaned up ok (at least on linux) when the agent exits.

This should not be an issue at all since the agent is a short-lived process and when running in a containerized environment with containers running on demand the cleanup will definitely work.
2024-09-08 11:16:49 +02:00
788050df32 Unique ids for clients generated by converge server and made available to the ssh session through a net.Conn extension that passes the ID to the SSH session through the LocalAddr(). 2024-09-08 11:16:49 +02:00