Peer expiration lower than 1h #2212

Closed
opened 2025-11-20 07:05:56 -05:00 by saavagebueno · 2 comments
Owner

Originally created by @o-rey on GitHub (Aug 20, 2025).

PCIDSS states that all idle connections must be terminated after 15 min of inactivity.
Right now minimum interval of inactivity in Netbird is 1 hour.
Please consider lowering it to 15 min.

Originally created by @o-rey on GitHub (Aug 20, 2025). PCIDSS states that all idle connections must be terminated after 15 min of inactivity. Right now minimum interval of inactivity in Netbird is 1 hour. Please consider lowering it to 15 min.
saavagebueno added the peer-managementfeature-request labels 2025-11-20 07:05:56 -05:00
Author
Owner

@nazarewk commented on GitHub (Aug 20, 2025):

I am not sure we are on the same page here:

Image

You seem to be mistaking the session expiration (selectable in hours or days) for the inactivity period (always 10 minutes).

The Session Expirations enforces how often the user should be required to re-login in the client application while actively working. As an example, with a standard 8-hour workday, setting it lower than 8 hours would require the user to sign in at least twice a day.

The "Require login after disconnect" setting determines how long the device can be turned off for without requiring re-login. For example: the user put his computer to sleep while going for a lunch, he would be required to sign in when he's back (unless he was back within 10 minutes and turned the computer back on)

Further customization of those values is not supported by the web Dashboard interface, but can still be specified as granularly as "seconds" through the API or web browser's Network inspector:

Image
@nazarewk commented on GitHub (Aug 20, 2025): I am not sure we are on the same page here: <img width="866" height="488" alt="Image" src="https://github.com/user-attachments/assets/667cf63e-d1e8-40fb-90c7-6452803349e1" /> You seem to be mistaking the session expiration (selectable in hours or days) for the inactivity period (always 10 minutes). The Session Expirations enforces how often the user should be required to re-login in the client application while actively working. As an example, with a standard 8-hour workday, setting it lower than 8 hours would require the user to sign in at least twice a day. The "Require login after disconnect" setting determines how long the device can be turned off for without requiring re-login. For example: the user put his computer to sleep while going for a lunch, he would be required to sign in when he's back (unless he was back within 10 minutes and turned the computer back on) Further customization of those values is not supported by the web Dashboard interface, but can still be specified as granularly as "seconds" through the API or web browser's Network inspector: <img width="2560" height="1416" alt="Image" src="https://github.com/user-attachments/assets/b691777b-a2a5-4bab-add4-16e545bc1121" />
Author
Owner

@o-rey commented on GitHub (Aug 20, 2025):

Thanks

@o-rey commented on GitHub (Aug 20, 2025): Thanks
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2212