Skip to content

[Feature Request] Reverse Proxy: Allow Auth Bypass based on Source IP / CIDR #5556

@NoNaccc

Description

@NoNaccc

First of all, i love the new proxy feature!!

Is your feature request related to a problem? Please describe.
Yes. It's frustrating that the new built-in Reverse Proxy forces authentication for all requests, even if the device is already securely connected to the Netbird VPN network.

Describe the solution you'd like
I would like an option to bypass proxy authentication (SSO/Password) based on the Source IP or CIDR. For example, allowing the internal Netbird subnet (e.g., 100.64.0.0/10) to connect without facing an additional login screen.

Describe alternatives you've considered

  • Bypassing the proxy entirely via Split-DNS directly to the target server, but this breaks the SSL certificate on the endpoint.
  • Setting up a third-party proxy like Pangolin or a custom Traefik instance that supports IP whitelisting. However, I'd prefer to use Netbird's convenient all-in-one proxy solution.

Additional context
This is specifically needed for Split-DNS setups: Active VPN clients resolve the domain to the Netbird proxy's internal IP. This keeps the SSL certificate valid, but currently forces a redundant SSO login for users who are already authenticated via the VPN.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions