search

netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
11.34k stars 520 forks source link

Multiple domains #1377

Open TheRouce opened 11 months ago

TheRouce commented 11 months ago

Is your feature request related to a problem? Please describe. In some cases the domain or TLD I've used (.network) to setup netbird is blocked, for instance university wifi. If I could use a separate domain with a more conventional TLD then I could be a bit more flexible with my usage of netbird.

Unfortunately these block lists can be very sensitive, for a time they blocked users from accessing Github. That was a very long appeal process to finally get it unblocked so we could access repositories for projects.

Describe the solution you'd like Simply an option to specify a second domain, I could either do this in the caddy file or have netbird handle creating the caddy file after specifying the second domain with the environment variables

Describe alternatives you've considered Another option would be to use the server's IP address because most of the time it's a domain based block

mlsmaycon commented 11 months ago

Hello, @TheRouce, the domain you are referring to the one set for the NetBird control layer?

From your university wifi, you can connect to the server's IP address without using the domain. If so, that might mean that the block is at the DNS level, in this case, can you test setting an entry in your machine's host file with your current .netbird domain and the IP address?

TheRouce commented 11 months ago

Sorry I didn't make this more clear in the issue, I cannot connect via an IP address which lead me to believe it is deeper than DNS or that netbird didn't support it. I've also attempted to use my own DNS with no luck.

I'm realizing that it might make more sense to pursue my ticket with the university further. Alternatively, we've been considering netbird for remote access to the school's servers, and using netbird.io might actually be a more reliable option.

TheRouce commented 10 months ago

After simply just pointing a second domain to the server's IP, It loads but I get this image And I get this when I run netbird up on the second domain, using port 80 as I'm not sure how I would go about requesting a cert on a second domain with netbird's stack

2024-01-17T14:41:18-05:00 WARN client/cmd/root.go:188: retrying Login to the Management service in 1.201019174s due to error rpc error: code = Unknown desc = getting device authorization flow info failed with error: rpc error: code = Unavailable desc = error reading from server: EOF