Exit node #130

@mrbluecoat commented on GitHub (Jul 5, 2022):

I agree. A mobile client that supports always-on VPN and starts on boot linked to a centralized exit node would be heaven 😇

@mrbluecoat commented on GitHub (Jul 5, 2022): I agree. A mobile client that supports always-on VPN and starts on boot linked to a centralized exit node would be heaven 😇

saavagebueno commented

@mrbluecoat commented on GitHub (Jun 1, 2023):

Dropping by a year later -- Android client and cloud control panel look nice! Still no 0.0.0.0/0 route option though...

@mrbluecoat commented on GitHub (Jun 1, 2023): Dropping by a year later -- Android client and cloud control panel look nice! Still no `0.0.0.0/0` route option though...

saavagebueno commented

@himekifee commented on GitHub (Nov 18, 2023):

+1 for the feature.

@himekifee commented on GitHub (Nov 18, 2023): +1 for the feature.

saavagebueno commented

@codyro commented on GitHub (Nov 22, 2023):

+1

@codyro commented on GitHub (Nov 22, 2023): +1

saavagebueno commented

@jonathanspw commented on GitHub (Nov 22, 2023):

+1

@jonathanspw commented on GitHub (Nov 22, 2023): +1

saavagebueno commented

@the-infrequency commented on GitHub (Nov 24, 2023):

+1

@the-infrequency commented on GitHub (Nov 24, 2023): +1

saavagebueno commented

@lorenzo95 commented on GitHub (Nov 24, 2023):

+1

@lorenzo95 commented on GitHub (Nov 24, 2023): +1

saavagebueno commented

@morki83 commented on GitHub (Dec 1, 2023):

+1. The only thing missing before switching completely to netbird

@morki83 commented on GitHub (Dec 1, 2023): +1. The only thing missing before switching completely to netbird

saavagebueno commented

@tiagogbarbosa commented on GitHub (Dec 11, 2023):

Any progress?

@tiagogbarbosa commented on GitHub (Dec 11, 2023): Any progress?

saavagebueno commented

@houpi commented on GitHub (Dec 12, 2023):

+1

@houpi commented on GitHub (Dec 12, 2023): +1

saavagebueno commented

@victor-rsibillon commented on GitHub (Dec 12, 2023):

+1

@victor-rsibillon commented on GitHub (Dec 12, 2023): +1

saavagebueno commented

@alexunderboots commented on GitHub (Dec 16, 2023):

+1

@alexunderboots commented on GitHub (Dec 16, 2023): +1

saavagebueno commented

@tribor commented on GitHub (Dec 18, 2023):

exit nodes has been sheduled for Q3 in 2023
https://github.com/netbirdio/netbird/projects/2#card-85699571

still unsure if it is currently worked on. @braginini it would be nice to get some feedback on the progress. thanks

@tribor commented on GitHub (Dec 18, 2023): exit nodes has been sheduled for Q3 in 2023 https://github.com/netbirdio/netbird/projects/2#card-85699571 still unsure if it is currently worked on. @braginini it would be nice to get some feedback on the progress. thanks

saavagebueno commented

@SamB-GB commented on GitHub (Jan 3, 2024):

+1 for this

@SamB-GB commented on GitHub (Jan 3, 2024): +1 for this

saavagebueno commented

@j007bond007 commented on GitHub (Jan 4, 2024):

+1 For this as well... it's really needed for mobile devices on untrusted networks, right now I need to run wireguard separately for the full tunnel and NetBird for when I just need overlay mode. It should be selectable on the clients as well (e.g. "Full Tunnel Mode" vs "Overlay Mode").

@j007bond007 commented on GitHub (Jan 4, 2024): +1 For this as well... it's really needed for mobile devices on untrusted networks, right now I need to run wireguard separately for the full tunnel and NetBird for when I just need overlay mode. It should be selectable on the clients as well (e.g. "Full Tunnel Mode" vs "Overlay Mode").

saavagebueno commented

@purple-emily commented on GitHub (Jan 10, 2024):

I would really like this feature.

@purple-emily commented on GitHub (Jan 10, 2024): I would really like this feature.

saavagebueno commented

@europacafe commented on GitHub (Jan 29, 2024):

+1

@europacafe commented on GitHub (Jan 29, 2024): +1

saavagebueno commented

@PavelNiedoba commented on GitHub (Jan 30, 2024):

+2

@PavelNiedoba commented on GitHub (Jan 30, 2024): +2

saavagebueno commented

@PatrickHuetter commented on GitHub (Feb 1, 2024):

+1

@PatrickHuetter commented on GitHub (Feb 1, 2024): +1

saavagebueno commented

@PavelNiedoba commented on GitHub (Feb 1, 2024):

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

@PavelNiedoba commented on GitHub (Feb 1, 2024): Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

saavagebueno commented

@PatrickHuetter commented on GitHub (Feb 1, 2024):

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

How does this work? How did you get this working? I want to have my private nodes connected via ipv6 and have access to ipv4 public internet via one exit node (that has both, ipv4 and ipv6 to public internet).

@PatrickHuetter commented on GitHub (Feb 1, 2024): > Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented. How does this work? How did you get this working? I want to have my private nodes connected via ipv6 and have access to ipv4 public internet via one exit node (that has both, ipv4 and ipv6 to public internet).

saavagebueno commented

@tribor commented on GitHub (Feb 6, 2024):

this feature will be available next month (March 2024) according to the public roadmap 🥳
https://github.com/netbirdio/netbird/projects/2#card-91718215

@tribor commented on GitHub (Feb 6, 2024): this feature will be available next month (March 2024) according to the public roadmap 🥳 https://github.com/netbirdio/netbird/projects/2#card-91718215

saavagebueno commented

https://docs.netbird.io/about-netbird/how-netbird-works#relay-service

@braginini commented on GitHub (Feb 6, 2024):

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

COTURN is used as a relay server and can’t be used as an exit node. It is just a “dummy proxy” that forwards peer-to-peer encrypted traffic between machines when no p2p connection is possible.

@braginini commented on GitHub (Feb 6, 2024): > Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented. COTURN is used as a relay server and can’t be used as an exit node. It is just a “dummy proxy” that forwards peer-to-peer encrypted traffic between machines when no p2p connection is possible. https://docs.netbird.io/about-netbird/how-netbird-works#relay-service

saavagebueno commented

@mrbluecoat commented on GitHub (Feb 9, 2024):

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

@mrbluecoat commented on GitHub (Feb 9, 2024): Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟 P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

saavagebueno commented

@braginini commented on GitHub (Feb 11, 2024):

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

Thank you, @mrbluecoat, for the kind words. Everyone on our team gets hands dirty :)

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

Thanks! The team has put a lot of effort into making it work. We will publish more. Stay tuned ;)

@braginini commented on GitHub (Feb 11, 2024): > Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟 Thank you, @mrbluecoat, for the kind words. Everyone on our team gets hands dirty :) > P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here Thanks! The team has put a lot of effort into making it work. We will publish more. Stay tuned ;)

saavagebueno commented

@TheLinuxGuy commented on GitHub (Feb 27, 2024):

Glad to see this exit nodes (route 0.0.0.0) to be coming soon.... its really the only missing feature stopping me from coming over from tailscale.

@TheLinuxGuy commented on GitHub (Feb 27, 2024): Glad to see this exit nodes (route 0.0.0.0) to be coming soon.... its really the only missing feature stopping me from coming over from tailscale.

saavagebueno commented

@vysecurity commented on GitHub (Mar 27, 2024):

Is there any update on this? Netbird's speed currently outperforms some of its competition.

@vysecurity commented on GitHub (Mar 27, 2024): Is there any update on this? Netbird's speed currently outperforms some of its competition.

saavagebueno commented

@realsteel85 commented on GitHub (Mar 27, 2024):

+1 we really need this

@realsteel85 commented on GitHub (Mar 27, 2024): +1 we really need this

saavagebueno commented

@TheRedScreen64 commented on GitHub (Mar 27, 2024):

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

@TheRedScreen64 commented on GitHub (Mar 27, 2024): Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

saavagebueno commented

@braginini commented on GitHub (Mar 27, 2024):

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

A new version v0.26.4 was released that supports Linux. Update the client, and the 0.0.0.0/0 routes should work already.
Windows is in the review, and we should finish it by the end of the week. Mac is next. The release should be there next week.
Mobile clients are a little tricky, but we are at full power!

@braginini commented on GitHub (Mar 27, 2024): > Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month? A new version [v0.26.4](https://github.com/netbirdio/netbird/releases/tag/v0.26.4) was released that supports Linux. Update the client, and the 0.0.0.0/0 routes should work already. Windows is in the review, and we should finish it by the end of the week. Mac is next. The release should be there next week. Mobile clients are a little tricky, but we are at full power!

saavagebueno commented

@Zaunei commented on GitHub (Apr 3, 2024):

It is planned to have a selection in the client whether you can accept the default route or not?

@Zaunei commented on GitHub (Apr 3, 2024): It is planned to have a selection in the client whether you can accept the default route or not?

saavagebueno commented

@vysecurity commented on GitHub (Apr 3, 2024):

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

@vysecurity commented on GitHub (Apr 3, 2024): Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

saavagebueno commented

@mrbluecoat commented on GitHub (Apr 3, 2024):

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :)

@mrbluecoat commented on GitHub (Apr 3, 2024): > Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time. To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :)

saavagebueno commented

@PatrickHuetter commented on GitHub (Apr 3, 2024):

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :)

My use case needs both scenarios 😄

@PatrickHuetter commented on GitHub (Apr 3, 2024): > > Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time. > > To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :) My use case needs both scenarios 😄

saavagebueno commented

@vysecurity commented on GitHub (Apr 3, 2024):

How about a setting. If user is in group modify-exit-node then they can select from a list specified in that group. Else they cannot modify.

The panel can always override the exit.

@vysecurity commented on GitHub (Apr 3, 2024): How about a setting. If user is in group modify-exit-node then they can select from a list specified in that group. Else they cannot modify. The panel can always override the exit.

saavagebueno commented

@aki263 commented on GitHub (Apr 8, 2024):

I have set a route of 0.0.0.0/0 so all the traffic in from a clients goes throug a exit node but I want to exclude local client range like 192.168.0.0/16. How can I have sort of split tunnel where local ips are not covered by netbird?

For now I am using https://www.procustodibus.com/blog/2021/03/wireguard-allowedips-calculator/ to add like 10 routes but looking something simpler as every client will have different ipranges that they use locally.

@aki263 commented on GitHub (Apr 8, 2024): I have set a route of `0.0.0.0/0` so all the traffic in from a clients goes throug a exit node but I want to exclude local client range like `192.168.0.0/16`. How can I have sort of split tunnel where local ips are not covered by netbird? For now I am using https://www.procustodibus.com/blog/2021/03/wireguard-allowedips-calculator/ to add like 10 routes but looking something simpler as every client will have different ipranges that they use locally.

saavagebueno commented

@mlsmaycon commented on GitHub (Apr 8, 2024):

Hello @aki263 are the private routes locally or in an internal gateway?

Can you confirm with traceroute or tracert that the routes are going via the exit node?

@mlsmaycon commented on GitHub (Apr 8, 2024): Hello @aki263 are the private routes locally or in an internal gateway? Can you confirm with traceroute or tracert that the routes are going via the exit node?

saavagebueno commented

@mrbluecoat commented on GitHub (Apr 15, 2024):

For those in a mixed-vendor environment running both Tailscale and NetBird: https://mrkaran.dev/posts/travel-tailscale/

@mrbluecoat commented on GitHub (Apr 15, 2024): For those in a mixed-vendor environment running both Tailscale _and_ NetBird: https://mrkaran.dev/posts/travel-tailscale/

saavagebueno commented

@svardie commented on GitHub (Apr 15, 2024):

When mobile clients will support exit nodes?

@svardie commented on GitHub (Apr 15, 2024): When mobile clients will support exit nodes?

saavagebueno commented

@mlsmaycon commented on GitHub (May 10, 2024):

Hello folks,

We've just released a new android version with exit node support.

Please check it out https://play.google.com/store/apps/details?id=io.netbird.client

The iOS version is under Apple's review and should be available over the next days.

@mlsmaycon commented on GitHub (May 10, 2024): Hello folks, We've just released a new android version with exit node support. Please check it out https://play.google.com/store/apps/details?id=io.netbird.client The iOS version is under Apple's review and should be available over the next days.

saavagebueno commented

@greatbody commented on GitHub (May 10, 2024):

Hello folks,

We've just released a new android version with exit node support.

Please check it out https://play.google.com/store/apps/details?id=io.netbird.client

The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.

It was 4 of 6 peers connected, but now its 0 of 6 peers connected.

No other change except upgrading of netbird app.

@greatbody commented on GitHub (May 10, 2024): > Hello folks, > > We've just released a new android version with exit node support. > > Please check it out https://play.google.com/store/apps/details?id=io.netbird.client > > The iOS version is under Apple's review and should be available over the next days. Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. It was 4 of 6 peers connected, but now its 0 of 6 peers connected. No other change except upgrading of netbird app.

saavagebueno commented

@mlsmaycon commented on GitHub (May 10, 2024):

The iOS app is live, you can download it here:
https://apps.apple.com/us/app/netbird-p2p-vpn/id6469329339

@mlsmaycon commented on GitHub (May 10, 2024): The iOS app is live, you can download it here: https://apps.apple.com/us/app/netbird-p2p-vpn/id6469329339

saavagebueno commented

@mlsmaycon commented on GitHub (May 10, 2024):

Hello folks,
We've just released a new android version with exit node support.
Please check it out https://play.google.com/store/apps/details?id=io.netbird.client
The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.

It was 4 of 6 peers connected, but now its 0 of 6 peers connected.

No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

@mlsmaycon commented on GitHub (May 10, 2024): > > Hello folks, > > We've just released a new android version with exit node support. > > Please check it out https://play.google.com/store/apps/details?id=io.netbird.client > > The iOS version is under Apple's review and should be available over the next days. > > Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. > > It was 4 of 6 peers connected, but now its 0 of 6 peers connected. > > No other change except upgrading of netbird app. Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

saavagebueno commented

@greatbody commented on GitHub (May 10, 2024):

Hello folks,
We've just released a new android version with exit node support.
Please check it out https://play.google.com/store/apps/details?id=io.netbird.client
The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.
It was 4 of 6 peers connected, but now its 0 of 6 peers connected.
No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

Share more findings:

Clear Android App storage
Phone connected to WiFi network only
Login Again
Only "2 of 6 Peers connected"
Now switch to "5G" network
We get "4 of 6 Peers connected"
There are 4 peers except this Phone connected all the time

@greatbody commented on GitHub (May 10, 2024): > > > Hello folks, > > > We've just released a new android version with exit node support. > > > Please check it out https://play.google.com/store/apps/details?id=io.netbird.client > > > The iOS version is under Apple's review and should be available over the next days. > > > > > > Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. > > It was 4 of 6 peers connected, but now its 0 of 6 peers connected. > > No other change except upgrading of netbird app. > > Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us? Share more findings: 1. Clear Android App storage 2. Phone connected to WiFi network only 3. Login Again 4. Only "2 of 6 Peers connected" 5. Now switch to "5G" network 6. We get "4 of 6 Peers connected" 7. There are 4 peers except this Phone connected all the time

saavagebueno commented

@svardie commented on GitHub (May 12, 2024):

Looks like network routes doesn't work on new client for me.

@svardie commented on GitHub (May 12, 2024): Looks like network routes doesn't work on new client for me.

saavagebueno commented

@mlsmaycon commented on GitHub (May 22, 2024):

@svardie can you open a new github issue for your case? There is a share logs option in the Advanced menu that would help us troubleshoot the problem.

@mlsmaycon commented on GitHub (May 22, 2024): @svardie can you open a new github issue for your case? There is a share logs option in the Advanced menu that would help us troubleshoot the problem.

saavagebueno commented

@mlsmaycon commented on GitHub (May 22, 2024):

Hello folks,
We've just released a new android version with exit node support.
Please check it out https://play.google.com/store/apps/details?id=io.netbird.client
The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.
It was 4 of 6 peers connected, but now its 0 of 6 peers connected.
No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

Share more findings:

Clear Android App storage

Phone connected to WiFi network only

Login Again

Only "2 of 6 Peers connected"

Now switch to "5G" network

We get "4 of 6 Peers connected"

There are 4 peers except this Phone connected all the time

From the logs you've shared we found an issue with DNS and the fix will be in the next release.

@mlsmaycon commented on GitHub (May 22, 2024): > > > > Hello folks, > > > > We've just released a new android version with exit node support. > > > > Please check it out https://play.google.com/store/apps/details?id=io.netbird.client > > > > The iOS version is under Apple's review and should be available over the next days. > > > > > > > > > Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. > > > It was 4 of 6 peers connected, but now its 0 of 6 peers connected. > > > No other change except upgrading of netbird app. > > > > > > Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us? > > Share more findings: > > 1. Clear Android App storage > 2. Phone connected to WiFi network only > 3. Login Again > 4. Only "2 of 6 Peers connected" > 5. Now switch to "5G" network > 6. We get "4 of 6 Peers connected" > 7. There are 4 peers except this Phone connected all the time From the logs you've shared we found an issue with DNS and the fix will be in the next release.

saavagebueno commented