I have a GLInet travel router that is a peer connected to my Netbird network, I’d like to have any client that connects to my router to have access to the peers the travel router has access to, but still be able to access the regular internet that is being passed through by my router. Is this possible?

Ultimately I’m trying to get the TV at my girlfriend’s place to be able to access my Jellyfin instance over Netbird. According to the Netbird documentation, exit nodes and routes are depricated and should not be used, but I’m struggling hard with getting it to work with Networks.

  • I’ve created a group with my GLInet router, my Jellyfin instance, and my home server (Which hosts Jellyfin) all in the group called “Travel”.
  • I’ve created a Network called “Home” in Netbird
  • Within the “Home” network I’ve created a resource called “Jellyfin” with the IP address set to it’s Netbird IP address, and an access control group where all members of the “Travel” group have access to all ports of the “Jellyfin” resource.
  • I’ve created two routing peers within the network, one is the GLInet router and the other is my home server. Both of these are Netbird peers with Netbird installed on them.

I am very confused overall, and could use a hand if anyone wanted to walk me through what I’m doing wrong.

  • Leon@pawb.socialEnglish
    2·
    2 hours ago

    I have Netbird hosted on my VPS, and have my home server act as a routing exit node, as well as the way I access stuff on my home network.

    In essence, my setup looks like this

    1. Network Routing > Networks, I’ve set up a network called Home Network LAN which exposes a Subnet for my home network, lit. the IPs I use locally. (192.168…), called Home Subnet
    2. Access Control > Groups I have a group called Home Network Users, within which I’ve put the devices that should be able to access the home network (my phone, my laptop, not the servers).
    3. Access Control > Policies sets up a policy called Home Network Access, which has Home Network Users as a source, and the Home Subnet as a destination.

    I think that’s about it, really. If I am outside of my home network, I connect my Netbird VPN and I can access any and all things on my home network using the direct internal network IPs from anywhere. I have also set up the home server as a routing exit node, and added an Adguard instance as a DNS server so I can use my private network domains as well.

    So basically I can connect to my Jellyfin instance either via direct home-IP (192.168.x.5 or whatever) or via jellyfin.home.arpa

    I am not sure your travel router needs to be a routing peer.

    I am also rubbish at network things, so if you have follow-up questions I’ll probably struggle to understand them.

    • tapdattl@lemmy.worldOPEnglish
      1·
      2 hours ago

      Well you’re better at this networking stuff than I am, that’s for sure. I appreciate you taking the time to answer my questions!

      The reason I’m using the travel router is because the TV at my girlfriend’s place does not have the ability to connect to Netbird directly, so I can’t reach back to my home server’s Jellyfin instance through the TV. There is a Jellyfin app available on the TV, but without Netbird it can’t reach back home.

      What I’m trying to do is have the travel router (which is a Netbird peer) proxy any requests it recieved for netbird resources to clients connected to it, sort of like a reverse exit node.

      • Leon@pawb.socialEnglish
        2·
        2 hours ago

        I think in that case you should just put your travel router as a user of the group that accesses the home network.

        If I set my phone to be a WiFi hotspot with my Netbird VPN on, my tablet can connect to my phone’s hotspot and access my home network even if my tablet doesn’t have the VPN on it.

        So in that case I guess the router would be a peer, yeah!

        Did you manage to get it working in the end?

        • tapdattl@lemmy.worldOPEnglish
          2·
          2 hours ago

          Fascinating, I’m going to have to test connecting the TV to my phone.

          I haven’t gotten home yet so no testing yet, but I’ve got several plans to try out now. I’ll report back what I find!

    • tapdattl@lemmy.worldOPEnglish
      1·
      2 hours ago

      Yeah that was a very informative read, I might have to sit down and re-map all my devices, currently they’re all on the default “anyone can talk to anyone” topography

  • kata1yst@sh.itjust.worksEnglish
    2·
    12 hours ago

    What do you mean “the IP address set to it’s Netbird IP address”? In Netbird everything is referenced by it’s LAN address.

    • tapdattl@lemmy.worldOPEnglish
      2·
      9 hours ago

      The 100.88.79.162 address in the picture I attached, or the general 100.xxx.xxx.xxx style address that netbird assigns peers

            • Leon@pawb.socialEnglish
              2·
              3 hours ago

              Yeah. It had upwards of 40 comments in the < 24h it was running. It wasn’t up-front about it though. Initially I thought it was just some person feeding questions into an LLM and pasting the responses. I guess it’s not very different from that, though.

              I think it’s what spawned this post.

              • tapdattl@lemmy.worldOPEnglish
                2·
                2 hours ago

                Ugh I hate that, I post questions to communities specifically to have community and engagement and conversation. If I wanted to talk to a computer (which I don’t) I’d ask a computer.

                • Leon@pawb.socialEnglish
                  2·
                  2 hours ago

                  Right? If someone wants to use an LLM to troubleshoot they’d do that. Making a (unmarked) bot account to essentially fulfil that function is a bit redundant.