search

netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
10.95k stars 494 forks source link

Exit node #289

Closed FarisZR closed 5 months ago

FarisZR commented 2 years ago

Tailscale/headscale supports using exit nodes for using the network as a full mesh VPN.

This feature is very important for me, as I want to have a single IP, which gives me full speed while I'm in LAN, while being accessible from outside the network.

i would be using it mostly from mobile, related #213

mrbluecoat commented 2 years ago

I agree. A mobile client that supports always-on VPN and starts on boot linked to a centralized exit node would be heaven 😇

mrbluecoat commented 1 year ago

Dropping by a year later -- Android client and cloud control panel look nice! Still no 0.0.0.0/0 route option though...

himekifee commented 11 months ago

+1 for the feature.

codyro commented 11 months ago

+1

jonathanspw commented 11 months ago

+1

the-infrequency commented 11 months ago

+1

lorenzo95 commented 11 months ago

+1

morki83 commented 10 months ago

+1. The only thing missing before switching completely to netbird

tiagogbarbosa commented 10 months ago

Any progress?

houpi commented 10 months ago

+1

victor-rsibillon commented 10 months ago

+1

alexunderboots commented 10 months ago

+1

tribor commented 10 months ago

exit nodes has been sheduled for Q3 in 2023 https://github.com/netbirdio/netbird/projects/2#card-85699571

still unsure if it is currently worked on. @braginini it would be nice to get some feedback on the progress. thanks

SamB-GB commented 9 months ago

+1 for this

j007bond007 commented 9 months ago

+1 For this as well... it's really needed for mobile devices on untrusted networks, right now I need to run wireguard separately for the full tunnel and NetBird for when I just need overlay mode. It should be selectable on the clients as well (e.g. "Full Tunnel Mode" vs "Overlay Mode").

purple-emily commented 9 months ago

I would really like this feature.

europacafe commented 8 months ago

+1

PavelNiedoba commented 8 months ago

+2

PatrickHuetter commented 8 months ago

+1

PavelNiedoba commented 8 months ago

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

PatrickHuetter commented 8 months ago

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

How does this work? How did you get this working? I want to have my private nodes connected via ipv6 and have access to ipv4 public internet via one exit node (that has both, ipv4 and ipv6 to public internet).

tribor commented 8 months ago

this feature will be available next month (March 2024) according to the public roadmap 🥳 https://github.com/netbirdio/netbird/projects/2#card-91718215

braginini commented 8 months ago

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

COTURN is used as a relay server and can’t be used as an exit node. It is just a “dummy proxy” that forwards peer-to-peer encrypted traffic between machines when no p2p connection is possible.

https://docs.netbird.io/about-netbird/how-netbird-works#relay-service

mrbluecoat commented 8 months ago

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

braginini commented 8 months ago

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

Thank you, @mrbluecoat, for the kind words. Everyone on our team gets hands dirty :)

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

Thanks! The team has put a lot of effort into making it work. We will publish more. Stay tuned ;)

TheLinuxGuy commented 7 months ago

Glad to see this exit nodes (route 0.0.0.0) to be coming soon.... its really the only missing feature stopping me from coming over from tailscale.

vysecurity commented 7 months ago

Is there any update on this? Netbird's speed currently outperforms some of its competition.

realsteel85 commented 7 months ago

+1 we really need this

TheRedScreen64 commented 7 months ago

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

braginini commented 7 months ago

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

A new version v0.26.4 was released that supports Linux. Update the client, and the 0.0.0.0/0 routes should work already. Windows is in the review, and we should finish it by the end of the week. Mac is next. The release should be there next week. Mobile clients are a little tricky, but we are at full power!

Zaunei commented 6 months ago

It is planned to have a selection in the client whether you can accept the default route or not?

vysecurity commented 6 months ago

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

mrbluecoat commented 6 months ago

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :)

PatrickHuetter commented 6 months ago

Could we select exit nodes via the app? We don't really want to go into the panel to switch exit nodes all the time.

To offer another perspective, my use case needs a device zero-touch approach controlled by the panel, preferably without the ability for an end-user to turn off the exit node. Hard to please everyone, I guess :)

My use case needs both scenarios 😄

vysecurity commented 6 months ago

How about a setting. If user is in group modify-exit-node then they can select from a list specified in that group. Else they cannot modify.

The panel can always override the exit.

aki263 commented 6 months ago

I have set a route of 0.0.0.0/0 so all the traffic in from a clients goes throug a exit node but I want to exclude local client range like 192.168.0.0/16. How can I have sort of split tunnel where local ips are not covered by netbird?

For now I am using https://www.procustodibus.com/blog/2021/03/wireguard-allowedips-calculator/ to add like 10 routes but looking something simpler as every client will have different ipranges that they use locally.

mlsmaycon commented 6 months ago

Hello @aki263 are the private routes locally or in an internal gateway?

Can you confirm with traceroute or tracert that the routes are going via the exit node?

mrbluecoat commented 6 months ago

For those in a mixed-vendor environment running both Tailscale and NetBird: https://mrkaran.dev/posts/travel-tailscale/

svardie commented 6 months ago

When mobile clients will support exit nodes?

mlsmaycon commented 5 months ago

Hello folks,

We've just released a new android version with exit node support.

Please check it out https://play.google.com/store/apps/details?id=io.netbird.client

The iOS version is under Apple's review and should be available over the next days.

greatbody commented 5 months ago

Hello folks,

We've just released a new android version with exit node support.

Please check it out https://play.google.com/store/apps/details?id=io.netbird.client

The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.

It was 4 of 6 peers connected, but now its 0 of 6 peers connected.

No other change except upgrading of netbird app.

mlsmaycon commented 5 months ago

The iOS app is live, you can download it here: https://apps.apple.com/us/app/netbird-p2p-vpn/id6469329339

mlsmaycon commented 5 months ago

Hello folks, We've just released a new android version with exit node support. Please check it out https://play.google.com/store/apps/details?id=io.netbird.client The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers.

It was 4 of 6 peers connected, but now its 0 of 6 peers connected.

No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

greatbody commented 5 months ago

Hello folks, We've just released a new android version with exit node support. Please check it out https://play.google.com/store/apps/details?id=io.netbird.client The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. It was 4 of 6 peers connected, but now its 0 of 6 peers connected. No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

Share more findings:

  1. Clear Android App storage
  2. Phone connected to WiFi network only
  3. Login Again
  4. Only "2 of 6 Peers connected"
  5. Now switch to "5G" network
  6. We get "4 of 6 Peers connected"
  7. There are 4 peers except this Phone connected all the time
svardie commented 5 months ago

Looks like network routes doesn't work on new client for me.

mlsmaycon commented 5 months ago

@svardie can you open a new github issue for your case? There is a share logs option in the Advanced menu that would help us troubleshoot the problem.

mlsmaycon commented 5 months ago

Hello folks, We've just released a new android version with exit node support. Please check it out https://play.google.com/store/apps/details?id=io.netbird.client The iOS version is under Apple's review and should be available over the next days.

Just upgrade through Google play, looks like we have bug here. v0.0.20 works fine, but v0.0.21 shows 0 connected peer VS 6 peers. It was 4 of 6 peers connected, but now its 0 of 6 peers connected. No other change except upgrading of netbird app.

Can you access the advanced menu, enable trace logs. Disconnected and connected again, then after 1 minute share the logs with us?

Share more findings:

  1. Clear Android App storage
  2. Phone connected to WiFi network only
  3. Login Again
  4. Only "2 of 6 Peers connected"
  5. Now switch to "5G" network
  6. We get "4 of 6 Peers connected"
  7. There are 4 peers except this Phone connected all the time

From the logs you've shared we found an issue with DNS and the fix will be in the next release.

mlsmaycon commented 5 months ago

Guys I will be closing this one. Please open new issues with your findings.

Thanks for the patience, and we hope you enjoy the feature!!