mirror of
https://github.com/netbirdio/docs.git
synced 2026-10-27 15:09:04 +01:00
docs: note that the routing peer decrypts traffic before forwarding it
This commit is contained in:
@@ -90,7 +90,7 @@ A network resource policy grants access to the network **behind** the routing pe
|
|||||||
Here is the whole path, end to end:
|
Here is the whole path, end to end:
|
||||||
|
|
||||||
1. Your client encrypts the packet and sends it through the tunnel to the routing peer.
|
1. Your client encrypts the packet and sends it through the tunnel to the routing peer.
|
||||||
2. The routing peer forwards it onto the local network toward the resource.
|
2. The routing peer decrypts the packet and forwards it onto the local network toward the resource.
|
||||||
3. By default the routing peer **masquerades** the traffic, rewriting the source to its own LAN IP, so the destination network needs no awareness of NetBird.
|
3. By default the routing peer **masquerades** the traffic, rewriting the source to its own LAN IP, so the destination network needs no awareness of NetBird.
|
||||||
4. Replies follow the reverse path. The connection is stateful, so return traffic needs no extra policy.
|
4. Replies follow the reverse path. The connection is stateful, so return traffic needs no extra policy.
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user