netbird icon indicating copy to clipboard operation
netbird copied to clipboard

Exit node

Open FarisZR opened this issue 2 years ago • 45 comments

Tailscale/headscale supports using exit nodes for using the network as a full mesh VPN.

This feature is very important for me, as I want to have a single IP, which gives me full speed while I'm in LAN, while being accessible from outside the network.

i would be using it mostly from mobile, related #213

FarisZR avatar Mar 27 '22 22:03 FarisZR

I agree. A mobile client that supports always-on VPN and starts on boot linked to a centralized exit node would be heaven 😇

mrbluecoat avatar Jul 05 '22 21:07 mrbluecoat

Dropping by a year later -- Android client and cloud control panel look nice! Still no 0.0.0.0/0 route option though...

mrbluecoat avatar Jun 01 '23 04:06 mrbluecoat

+1 for the feature.

himekifee avatar Nov 18 '23 11:11 himekifee

+1

codyro avatar Nov 23 '23 01:11 codyro

+1

jonathanspw avatar Nov 23 '23 01:11 jonathanspw

+1

the-infrequency avatar Nov 24 '23 11:11 the-infrequency

+1

lorenzo95 avatar Nov 24 '23 23:11 lorenzo95

+1. The only thing missing before switching completely to netbird

morki83 avatar Dec 01 '23 09:12 morki83

Any progress?

tiagogbarbosa avatar Dec 12 '23 01:12 tiagogbarbosa

+1

houpi avatar Dec 12 '23 05:12 houpi

+1

victor-rsibillon avatar Dec 12 '23 05:12 victor-rsibillon

+1

alexunderboots avatar Dec 16 '23 14:12 alexunderboots

exit nodes has been sheduled for Q3 in 2023 https://github.com/netbirdio/netbird/projects/2#card-85699571

still unsure if it is currently worked on. @braginini it would be nice to get some feedback on the progress. thanks

tribor avatar Dec 18 '23 11:12 tribor

+1 for this

SamB-GB avatar Jan 03 '24 11:01 SamB-GB

+1 For this as well... it's really needed for mobile devices on untrusted networks, right now I need to run wireguard separately for the full tunnel and NetBird for when I just need overlay mode. It should be selectable on the clients as well (e.g. "Full Tunnel Mode" vs "Overlay Mode").

j007bond007 avatar Jan 04 '24 14:01 j007bond007

I would really like this feature.

purple-emily avatar Jan 10 '24 23:01 purple-emily

+1

europacafe avatar Jan 30 '24 02:01 europacafe

+2

PavelNiedoba avatar Jan 30 '24 19:01 PavelNiedoba

+1

PatrickHuetter avatar Feb 01 '24 07:02 PatrickHuetter

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

PavelNiedoba avatar Feb 01 '24 14:02 PavelNiedoba

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

How does this work? How did you get this working? I want to have my private nodes connected via ipv6 and have access to ipv4 public internet via one exit node (that has both, ipv4 and ipv6 to public internet).

PatrickHuetter avatar Feb 01 '24 14:02 PatrickHuetter

this feature will be available next month (March 2024) according to the public roadmap 🥳 https://github.com/netbirdio/netbird/projects/2#card-91718215

tribor avatar Feb 06 '24 11:02 tribor

Actually netbird is using COTURN tunneling, which does something very similar like exit nodes. You can access networks behind NAT, but this is very poorly documented.

COTURN is used as a relay server and can’t be used as an exit node. It is just a “dummy proxy” that forwards peer-to-peer encrypted traffic between machines when no p2p connection is possible.

https://docs.netbird.io/about-netbird/how-netbird-works#relay-service

braginini avatar Feb 06 '24 17:02 braginini

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

mrbluecoat avatar Feb 09 '24 16:02 mrbluecoat

Whoa! NetBird CEO and Co-founder @braginini personally replying to a GitHub issue?! That just made my day. 🌟

Thank you, @mrbluecoat, for the kind words. Everyone on our team gets hands dirty :)

P.S. Your article https://netbird.io/knowledge-hub/using-xdp-ebpf-to-share-default-dns-port-between-resolvers was fascinating -- really helps unmask the technically challenging "magic" that goes on behind the scenes. Keep up the great work - we're all fans here

Thanks! The team has put a lot of effort into making it work. We will publish more. Stay tuned ;)

braginini avatar Feb 11 '24 10:02 braginini

Glad to see this exit nodes (route 0.0.0.0) to be coming soon.... its really the only missing feature stopping me from coming over from tailscale.

TheLinuxGuy avatar Feb 27 '24 06:02 TheLinuxGuy

Is there any update on this? Netbird's speed currently outperforms some of its competition.

vysecurity avatar Mar 27 '24 05:03 vysecurity

+1 we really need this

realsteel85 avatar Mar 27 '24 06:03 realsteel85

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

TheRedScreen64 avatar Mar 27 '24 18:03 TheRedScreen64

Apparently it has been added for linux clients in #1667. But what about the other clients? Is it also planned for them this or next month?

A new version v0.26.4 was released that supports Linux. Update the client, and the 0.0.0.0/0 routes should work already. Windows is in the review, and we should finish it by the end of the week. Mac is next. The release should be there next week. Mobile clients are a little tricky, but we are at full power!

braginini avatar Mar 27 '24 19:03 braginini