Can local Mesh VPN Node subnet's be included in advertisements to other Mesh VPN Nodes? #152

Closed
opened 2025-11-20 05:07:07 -05:00 by saavagebueno · 7 comments
Owner

Originally created by @bmullan on GitHub (Jul 23, 2022).

Some of the other Mesh VPN tools I've used (VPNCloud & Nebula for 2 examples) support the ability for the Config for a Node in the Mesh to specify local Subnets to include in Peer advertisements.

With Containers (Docker, LXD etc) this is very useful in that the Mesh VPN has its Endpoint on the Host but each Container(s) on that Host (which are on their own 10.x.x.x non-routable subnet) can be reachable over the Mesh VPN also.

I hope I'm explaining the above functionality well enough.

Does Netbird support something like this?

thanks for any info

Brian

Originally created by @bmullan on GitHub (Jul 23, 2022). Some of the other Mesh VPN tools I've used (VPNCloud & Nebula for 2 examples) support the ability for the Config for a Node in the Mesh to specify local Subnets to include in Peer advertisements. With Containers (Docker, LXD etc) this is very useful in that the Mesh VPN has its Endpoint on the Host but each Container(s) on that Host (which are on their own 10.x.x.x non-routable subnet) can be reachable over the Mesh VPN also. I hope I'm explaining the above functionality well enough. Does Netbird support something like this? thanks for any info Brian
Author
Owner

@braginini commented on GitHub (Jul 23, 2022):

@bmullan Hey Brian.
Thank you for trying out NetBird :) I think that what you are talking about is a "router node" feature that @mlsmaycon started working on already. Not yet supported, but coming very soon.
@mlsmaycon any other thoughts?

@braginini commented on GitHub (Jul 23, 2022): @bmullan Hey Brian. Thank you for trying out NetBird :) I think that what you are talking about is a "router node" feature that @mlsmaycon started working on already. Not yet supported, but coming very soon. @mlsmaycon any other thoughts?
Author
Owner

@bmullan commented on GitHub (Jul 23, 2022):

The term "Router Node" makes me think we are both talking about the same
capability!

Thanks.

Brian

On Sat, Jul 23, 2022, 5:18 PM Misha Bragin @.***> wrote:

@bmullan https://github.com/bmullan
Hey Brian.
Thank you for trying out NetBird :) I think that what you are talking
about is a "router node" feature that @mlsmaycon
https://github.com/mlsmaycon started working on already. Not yet
supported.
@mlsmaycon https://github.com/mlsmaycon other thoughts?


Reply to this email directly, view it on GitHub
https://github.com/netbirdio/netbird/issues/395#issuecomment-1193189841,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AAM23J4U4ZSYIG24POZLME3VVRORXANCNFSM54OBWIYA
.
You are receiving this because you were mentioned.Message ID:
@.***>

@bmullan commented on GitHub (Jul 23, 2022): The term "Router Node" makes me think we are both talking about the same capability! Thanks. Brian On Sat, Jul 23, 2022, 5:18 PM Misha Bragin ***@***.***> wrote: > @bmullan <https://github.com/bmullan> > Hey Brian. > Thank you for trying out NetBird :) I think that what you are talking > about is a "router node" feature that @mlsmaycon > <https://github.com/mlsmaycon> started working on already. Not yet > supported. > @mlsmaycon <https://github.com/mlsmaycon> other thoughts? > > — > Reply to this email directly, view it on GitHub > <https://github.com/netbirdio/netbird/issues/395#issuecomment-1193189841>, > or unsubscribe > <https://github.com/notifications/unsubscribe-auth/AAM23J4U4ZSYIG24POZLME3VVRORXANCNFSM54OBWIYA> > . > You are receiving this because you were mentioned.Message ID: > ***@***.***> >
Author
Owner

@braginini commented on GitHub (Jul 25, 2022):

We will let you know @bmullan once delivered!

@braginini commented on GitHub (Jul 25, 2022): We will let you know @bmullan once delivered!
Author
Owner

@bmullan commented on GitHub (Sep 28, 2022):

@mlsmaycon
@braginini

I was following the work you were doing in this "router node" feature that might enable advertisement of Container ... LXD (or Docker) subnets across the Mesh.

It seemed like you were completing work on it so I was wondering if its been released and if there was documentation about how to utilize it yet?

Thanks
Brian

@bmullan commented on GitHub (Sep 28, 2022): @mlsmaycon @braginini I was following the work you were doing in this "router node" feature that might enable advertisement of Container ... LXD (or Docker) subnets across the Mesh. It seemed like you were completing work on it so I was wondering if its been released and if there was documentation about how to utilize it yet? Thanks Brian
Author
Owner

@mlsmaycon commented on GitHub (Sep 29, 2022):

Hello @bmullan we've completed the first step for the feature, it includes:

  • Route private networks via one or multiple peers
  • Masquerade traffic from NetBird network to those networks

With these features, you are able to route traffic with linux peers, including containers (requires --privileged flag to enable ip forwarding)

The documentation is: https://netbird.io/docs/how-to-guides/network-routes

We are now working on DNS and after that will return to this feature to add:

  • Routing group tags, to distribute routes only to a set of peers
  • Internet gateway like routing. Basically routing all traffic of peer via another peer (0.0.0.0/0)
@mlsmaycon commented on GitHub (Sep 29, 2022): Hello @bmullan we've completed the first step for the feature, it includes: - Route private networks via one or multiple peers - Masquerade traffic from NetBird network to those networks With these features, you are able to route traffic with linux peers, including containers (requires --privileged flag to enable ip forwarding) The documentation is: https://netbird.io/docs/how-to-guides/network-routes We are now working on DNS and after that will return to this feature to add: - Routing group tags, to distribute routes only to a set of peers - Internet gateway like routing. Basically routing all traffic of peer via another peer (0.0.0.0/0)
Author
Owner

@bmullan commented on GitHub (Apr 18, 2025):

@mlsmaycon @braginini

I been implementing/using Netbird.

However, I still have not found if/how this might be implemented?

its been a couple years since I asked this question. The link in the previous comment no longer works.

Is there any Guide or Youtube Video that talks about how to do this?

Or... is this perhaps it?

Thanks
Brian

@bmullan commented on GitHub (Apr 18, 2025): @mlsmaycon @braginini I been implementing/using Netbird. However, _[I still have not found if/how this might be implemented?](https://github.com/netbirdio/netbird/issues/395#issuecomment-1261811121)_ its been a couple years since I asked this question. The link in the previous comment no longer works. Is there any Guide or Youtube Video that talks about how to do this? **_[Or... is this perhaps it?](https://docs.netbird.io/how-to/routing-traffic-to-private-networks)_** Thanks Brian
Author
Owner

@nazarewk commented on GitHub (Apr 18, 2025):

@bmullan I believe you are looking for either Networks with Resources and Routing Peers or (the old) Network Routes feature?

There is also a troubleshooting guide I have recently extended that explains how to set up and verify such use cases at https://docs.netbird.io/how-to/troubleshooting-client#debugging-access-to-network-resources

@nazarewk commented on GitHub (Apr 18, 2025): @bmullan I believe you are looking for either [Networks with Resources and Routing Peers](https://docs.netbird.io/how-to/networks) or (the old) Network Routes feature? There is also a troubleshooting guide I have recently extended that explains how to set up and verify such use cases at https://docs.netbird.io/how-to/troubleshooting-client#debugging-access-to-network-resources
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#152