Deploy netbird in OpenWrt router > assign IP to netbird0 interface

[cmonty14]

Describe the problem I have installed netbird package on OpenWrt. Starting service netbird works w/o problems. Now I need to setup an interface and firewall rules. For this I'm referring to OpenWrt wiki > Tailscale. Here it's documented to modify /etc/init.d/tailscale by adding procd_append_param command --tun tailscale0.

Is there a similar configuration available for NetBird? Currently my router shows this interface: wt0

Are you using NetBird Cloud? yes

NetBird version 0.24.3

NetBird status -d output: Peers detail: Daemon version: 0.24.3 CLI version: 0.24.3 Management: Connected to https://api.wiretrustee.com:443 Signal: Connected to https://signal.netbird.io:443 FQDN: myopenwrt.netbird.cloud NetBird IP: 100.125.92.171/16 Interface type: Kernel Peers count: 0/0 Connected

[wehagy]

For me to make netbird work on openwrt snapshot:

• Install netbird and kmod-wireguard (dependency not installed by default, I have opened a PR, waiting merge). https://github.com/openwrt/packages/pull/23926

  opkg update
  opkg install netbird kmod-wireguard

• Stop netbird, login via setup keys, need to be created in netbird interface, and start netbird again:

  service netbird stop
  netbird login --setup-key <put your setup key here>
  service netbird start

• Go to luci Network -> Interfaces -> Add new interface... and Save:

  • Name: netbird
  • Protocol: Unmanaged
  • Device: wt0

• Create a new firewall zone in Luci Network -> Firewall -> Zones -> Add and Save & Apply:

  • Name: netbird
  • Input: accept
  • Output: accept
  • Intra zone forward: accept
  • Covered networks: netbird
  • Allow forward to destination zones: lan put **wan** if you want to use exit node
  • Allow forward from source zones: lan

I guess that's all, I'm assuming you know how to set things up in the netbird interface.

[cmonty14]

I'm assuming you know how to set things up in the netbird interface.

Could you please share your recommendations for setting up netbird interface?

[wehagy]

Oops, I realized that my previous answer is dubious, when I say netbird interface I mean the web interface, configuring keys, routes, and access groups. The netbird wt0 interface does not need to do anything, just what is described above.

But the most important part is in the firewall where you may or may not be more or less restrictive, I configure it in the way I described above, so I can connect to the VPN just as the VPN can connect to my network, but I configure who can or cannot connect via the netbird web interface.