SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-07-28 08:52:37 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Relays/Exit nodes/Subnet routers #291

New Issue
Closed
opened 2025-11-20 05:09:11 -05:00 by saavagebueno · 7 comments
saavagebueno commented 2025-11-20 05:09:11 -05:00
Owner
Copy Link

Originally created by @alexlyee on GitHub (Mar 9, 2023).

The only feature that I see in Netmaker that I'm really missing out on here is the ability to advertise routes. I think this is essentially what #289 was getting at, but I'd like to be more specific because I think generalizing this problem hits a lot of birds (oughsorry!) with the same stone:

  • If a client/user advertises other addresses within the network (i.e. 100.0.0.0/8) to be routable from them, they have elected themselves to be a potential fallback path (fallback router?) for the network. This would be particularly desirable for me because I'm hosting mine on a little VPS and really would rather not have to worry about an unknowing family member or friend hitting my monthly data limit because NAT tunneling was unsuccessful between them and, say, the NAS.
  • If a client/user advertises their LAN network addresses, they may be called a local exit node.
  • If a client/user advertises any other addresses, this would make them an exit node. Without this feature, I've got to use a separate Wireguard tunnel on my PC to use netbird to access my things and exit through my home network the way I'd like. And without this feature, I don't think I could use the mobile app for my use case.

Maybe this differentiation would be useful for UI and for buttons for toggling the three on and off.

edit: this was also mentioned, upvoted, but not replied to, in this discussion.

Originally created by @alexlyee on GitHub (Mar 9, 2023). The only feature that I see [in Netmaker](https://github.com/gravitl/netmaker) that I'm really missing out on here is the ability to advertise routes. I think this is essentially what #289 was getting at, but I'd like to be more specific because I think generalizing this problem hits a lot of birds (oughsorry!) with the same stone: - If a client/user advertises other addresses within the network (i.e. 100.0.0.0/8) to be routable from them, they have **elected themselves to be a potential fallback path (fallback router?) for the network**. This would be particularly desirable for me because I'm hosting mine on a little VPS and really would rather not have to worry about an unknowing family member or friend hitting my monthly data limit because NAT tunneling was unsuccessful between them and, say, the NAS. - If a client/user advertises their LAN network addresses, they may be called a **local exit node.** - If a client/user advertises any other addresses, this would make them an **exit node.** Without this feature, I've got to use a separate Wireguard tunnel on my PC to use netbird to access my things and exit through my home network the way I'd like. And without this feature, I don't think I could use the mobile app for my use case. Maybe this differentiation would be useful for UI and for buttons for toggling the three on and off. edit: this was also mentioned, upvoted, but not replied to, in [this discussion](https://github.com/netbirdio/netbird/discussions/587).
saavagebueno commented 2025-11-20 05:09:12 -05:00
Author
Owner
Copy Link

@bmullan commented on GitHub (Mar 10, 2023):

@alexlyee lexlyee

Isn't this what you are asking for?
Routing traffic to private networks

@bmullan commented on GitHub (Mar 10, 2023): @alexlyee lexlyee Isn't this what you are asking for? **[Routing traffic to private networks](https://netbird.io/docs/how-to-guides/network-routes)**
saavagebueno commented 2025-11-20 05:09:12 -05:00
Author
Owner
Copy Link

@alexlyee commented on GitHub (Mar 10, 2023):

@bmullan you're right 🤦 I assumed this wasn't implemented because #289 wasn't.

thanks for the heads-up

@alexlyee commented on GitHub (Mar 10, 2023): @bmullan you're right 🤦 I assumed this wasn't implemented because #289 wasn't. thanks for the heads-up
saavagebueno commented 2025-11-20 05:09:12 -05:00
Author
Owner
Copy Link

@mrbluecoat commented on GitHub (Jun 1, 2023):

@alexlyee lexlyee

Isn't this what you are asking for? Routing traffic to private networks

updated link

@mrbluecoat commented on GitHub (Jun 1, 2023): > @alexlyee lexlyee > > Isn't this what you are asking for? **[Routing traffic to private networks](https://netbird.io/docs/how-to-guides/network-routes)** [_updated link_](https://docs.netbird.io/how-to/routing-traffic-to-private-networks)
saavagebueno commented 2025-11-20 05:09:12 -05:00
Author
Owner
Copy Link

@alexlyee commented on GitHub (Jun 1, 2023):

@alexlyee lexlyee

Isn't this what you are asking for? Routing traffic to private networks

updated link

👍 also in reading what I originally wrote I realize I closed this issue but I was really asking about relay nodes like netmaker has

@alexlyee commented on GitHub (Jun 1, 2023): > > @alexlyee lexlyee > > > > > > Isn't this what you are asking for? **[Routing traffic to private networks](https://netbird.io/docs/how-to-guides/network-routes)** > > > > [_updated link_](https://docs.netbird.io/how-to/routing-traffic-to-private-networks) 👍 also in reading what I originally wrote I realize I closed this issue but I was really asking about relay nodes like netmaker has
saavagebueno commented 2025-11-20 05:09:13 -05:00
Author
Owner
Copy Link

@PavelNiedoba commented on GitHub (Jan 31, 2024):

I cannot get netbird network (the one starting with 100.) to work with nodes without public IP. I have multiple private networks. Each one have router with public IP where I can configure port forward. Inside those networks I have clients which I want to be available within netbird network. I cannot find documentation how to do that.

@PavelNiedoba commented on GitHub (Jan 31, 2024): I cannot get netbird network (the one starting with 100.) to work with nodes without public IP. I have multiple private networks. Each one have router with public IP where I can configure port forward. Inside those networks I have clients which I want to be available within netbird network. I cannot find documentation how to do that.
saavagebueno commented 2025-11-20 05:09:13 -05:00
Author
Owner
Copy Link

@PatrickHuetter commented on GitHub (Feb 1, 2024):

I cannot get netbird network (the one starting with 100.) to work with nodes without public IP. I have multiple private networks. Each one have router with public IP where I can configure port forward. Inside those networks I have clients which I want to be available within netbird network. I cannot find documentation how to do that.

Similar setup for me. Because netbird is missing exit node feature i can't use it and have to rely on headscale. Already compared all overlay network solutions out there and netbird has the possibilty to outline all of them IF they implement exit node feature.

In my case i have IPv6 only machines that need access to IPv4 internet. Having one dual stack machine in my network and marking this machine as exit node all other ipv6-only machines are able to connect to the internet (public network) using this dual stack machine as gateway.

@PatrickHuetter commented on GitHub (Feb 1, 2024): > I cannot get netbird network (the one starting with 100.) to work with nodes without public IP. I have multiple private networks. Each one have router with public IP where I can configure port forward. Inside those networks I have clients which I want to be available within netbird network. I cannot find documentation how to do that. Similar setup for me. Because netbird is missing exit node feature i can't use it and have to rely on headscale. Already compared all overlay network solutions out there and netbird has the possibilty to outline all of them **IF** they implement exit node feature. In my case i have IPv6 only machines that need access to IPv4 internet. Having one dual stack machine in my network and marking this machine as exit node all other ipv6-only machines are able to connect to the internet (public network) using this dual stack machine as gateway.
saavagebueno commented 2025-11-20 05:09:13 -05:00
Author
Owner
Copy Link

@PavelNiedoba commented on GitHub (Feb 1, 2024):

I fixed my port forwarding and netbird can now go behind NAT. Documentation should be improved, it's very high level.

@PavelNiedoba commented on GitHub (Feb 1, 2024): I fixed my port forwarding and netbird can now go behind NAT. Documentation should be improved, it's very high level.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#291
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?