Multiple session timeouts for different policies #2278

Open
opened 2025-11-20 07:06:55 -05:00 by saavagebueno · 0 comments
Owner

Originally created by @PatrLind on GitHub (Sep 14, 2025).

Is your feature request related to a problem? Please describe.
Not sure my terminology is accurate here, but I hope you understand what I'm trying to say.

Some of the services I have are more important to secure than others. For example I have some services that currently are accessible without a VPN connection that I would like to put behind VPN access only. However, it's a bit inconvenient for users to have to log in every day to start accessing these services. For those services it would be nice to maybe have a session timeout of maybe 1-3 months, maybe indefinitely.
Some services like production server SSH access should definitely not have that long lived sessions. They should maybe have their sessions be re-authenticated once every hour or so.

Describe the solution you'd like
When I connect the NetBird client I would like for it to somehow have support for multiple sessions within a profile. Maybe like a profile level where I can upgrade a to a higher level session to gain more access (by authenticating the session again).

Describe alternatives you've considered
Maybe this could be solved with multiple profiles in the client connecting to the same backend many times but with different accounts, but I'm not sure how that would work if there were overlapping policies.

Originally created by @PatrLind on GitHub (Sep 14, 2025). **Is your feature request related to a problem? Please describe.** Not sure my terminology is accurate here, but I hope you understand what I'm trying to say. Some of the services I have are more important to secure than others. For example I have some services that currently are accessible without a VPN connection that I would like to put behind VPN access only. However, it's a bit inconvenient for users to have to log in every day to start accessing these services. For those services it would be nice to maybe have a session timeout of maybe 1-3 months, maybe indefinitely. Some services like production server SSH access should definitely not have that long lived sessions. They should maybe have their sessions be re-authenticated once every hour or so. **Describe the solution you'd like** When I connect the NetBird client I would like for it to somehow have support for multiple sessions within a profile. Maybe like a profile level where I can upgrade a to a higher level session to gain more access (by authenticating the session again). **Describe alternatives you've considered** Maybe this could be solved with multiple profiles in the client connecting to the same backend many times but with different accounts, but I'm not sure how that would work if there were overlapping policies.
saavagebueno added the feature-request label 2025-11-20 07:06:55 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2278