LAN conections are relayed while using network routes #996

Open
opened 2025-11-20 05:21:20 -05:00 by saavagebueno · 4 comments
Owner

Originally created by @krishne35 on GitHub (Jun 20, 2024).

Describe the problem
Im trying to expose ip range 10.0.0.0/16 on a linux machine running arch with netbird the problem is when i do expose it and assgin a peer to the said route it will not connect to the peer directly insted its relayed while im connected to wifi (LAN) which resulting is hight bandwidth usage

To Reproduce
Create two peers one on linux and one on android
route ip range 10.0.0.0/16 adn assign it to Android peer and try to access the ip while conected to Same network
it will be relayed insted of direct connection
Expected behavior
connect to peer directly when on same lan

Are you using NetBird Cloud?
Im using default Management

NetBird version

Linux: 0.28.0
Android: 0.27.9

Originally created by @krishne35 on GitHub (Jun 20, 2024). **Describe the problem** Im trying to expose ip range 10.0.0.0/16 on a linux machine running arch with netbird the problem is when i do expose it and assgin a peer to the said route it will not connect to the peer directly insted its relayed while im connected to wifi (LAN) which resulting is hight bandwidth usage **To Reproduce** Create two peers one on linux and one on android route ip range 10.0.0.0/16 adn assign it to Android peer and try to access the ip while conected to Same network it will be relayed insted of direct connection **Expected behavior** connect to peer directly when on same lan **Are you using NetBird Cloud?** Im using default Management **NetBird version** Linux: 0.28.0 Android: 0.27.9
saavagebueno added the feature-requestclientroutes labels 2025-11-20 05:21:20 -05:00
Author
Owner

@pascal-fischer commented on GitHub (Jun 20, 2024):

Hi @krishne35,
this is how the system works at the moment. You can disable the route on your peer manually so it will not route traffic when you are in the office and switch it back on when you leave. We will see what we can for the client to detect that by itself and not route while on the same lan.

@pascal-fischer commented on GitHub (Jun 20, 2024): Hi @krishne35, this is how the system works at the moment. You can disable the route on your peer manually so it will not route traffic when you are in the office and switch it back on when you leave. We will see what we can for the client to detect that by itself and not route while on the same lan.
Author
Owner

@krishne35 commented on GitHub (Jun 20, 2024):

Well we can't do that on android client sadly
One option would be to allow lan implementation of tailscale

@krishne35 commented on GitHub (Jun 20, 2024): Well we can't do that on android client sadly One option would be to allow lan implementation of tailscale
Author
Owner

@pascal-fischer commented on GitHub (Jun 20, 2024):

Ah true, android does not implement this yet. Another option that might work for the time being is using posture checks. If you have the policy to access the exit node you can set up the ip range posture check to not allow connection to the exit node this way the route will not be assigned as the routing peer is offline. As the routing peer should also be on the local lan and is therefore accessible this might be an option for you?

@pascal-fischer commented on GitHub (Jun 20, 2024): Ah true, android does not implement this yet. Another option that might work for the time being is using posture checks. If you have the policy to access the exit node you can set up the ip range posture check to not allow connection to the exit node this way the route will not be assigned as the routing peer is offline. As the routing peer should also be on the local lan and is therefore accessible this might be an option for you?
Author
Owner

@krishne35 commented on GitHub (Jun 20, 2024):

that way beyond my skill set xd ill wait from some toggle xd
also there is atleast 5 devices that will be using it so this trick might not work seemlessly
i guess ill stick to tailscale for now and keep an eye here

@krishne35 commented on GitHub (Jun 20, 2024): that way beyond my skill set xd ill wait from some toggle xd also there is atleast 5 devices that will be using it so this trick might not work seemlessly i guess ill stick to tailscale for now and keep an eye here
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#996