netbirdio / netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.
https://netbird.io
BSD 3-Clause "New" or "Revised" License
10.78k stars 486 forks source link

Ignore "network routes" on specific networks #932

Open sevrage opened 1 year ago

sevrage commented 1 year ago

Hello,

My on-premises router has access (lan2lan vpn) to specific client networks 1-When I'm working remotely I can access those specific client networks by using "network routes" configurations. 2-When I'm working on-premises I don't need the "network routes" configuration because the computers on the local networks are routed through the router that knows those client networks, but because netbird has the "network routes" configuration the routing is made by netbird.

Is it possible to make some sort of bypass when I'm on-premises? Like ignoring the specific client network routes if netbird is on a specific LAN

I also have the on-premises LAN in the "network routes", maybe associate the specific client networks to this network so netbird knows that when it's on that LAN it does not need to route those child routes.

network examples: on-premises LAN - 192.168.100.x client network - 10.60.0.x router 192.168.100.1 lan2lan vpn configurations to the client networks

Thanks

fbzhong commented 1 year ago

Yes, I need this features too!

One of a possible solution could be let user config a script before applying network routes, if the script returns other than 0, the network route item would be skipped.

fbzhong commented 1 year ago

Or, if my device could directly access any of routine peers, which mean they are in the same lan network, skip that route item.

fbzhong commented 1 year ago

@mlsmaycon any thoughts about this new feature request? Maybe we could write some code on that.

krishne35 commented 3 months ago

Any update on this?

fbzhong commented 3 months ago

The "Network Routes" feature in client could solve this issue perfectly. CleanShot 2024-06-20 at 13 55 23@2x

krishne35 commented 3 months ago

I'm on android don't think such feature exist for android yet Also in tailscale there is a simple toggle "allow lan" which bypasses any routes and connect to peer directly