-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Description
First of all, i love the new proxy feature!!
Is your feature request related to a problem? Please describe.
Yes. It's frustrating that the new built-in Reverse Proxy forces authentication for all requests, even if the device is already securely connected to the Netbird VPN network.
Describe the solution you'd like
I would like an option to bypass proxy authentication (SSO/Password) based on the Source IP or CIDR. For example, allowing the internal Netbird subnet (e.g., 100.64.0.0/10) to connect without facing an additional login screen.
Describe alternatives you've considered
- Bypassing the proxy entirely via Split-DNS directly to the target server, but this breaks the SSL certificate on the endpoint.
- Setting up a third-party proxy like Pangolin or a custom Traefik instance that supports IP whitelisting. However, I'd prefer to use Netbird's convenient all-in-one proxy solution.
Additional context
This is specifically needed for Split-DNS setups: Active VPN clients resolve the domain to the Netbird proxy's internal IP. This keeps the SSL certificate valid, but currently forces a redundant SSO login for users who are already authenticated via the VPN.