Update reverse proxy docs for Rosenpass support

This commit is contained in:
Viktor Liu
2026-07-14 14:50:06 +02:00
parent 3ab1e21f80
commit 349beba181

View File

@@ -13,9 +13,9 @@ NetBird Reverse Proxy lets you expose internal services running on peers or behi
<Note>
**Self-hosted requirement:** Self-hosted deployments **must** use [Traefik](/selfhosted/external-reverse-proxy) as their external reverse proxy. Traefik is the only supported reverse proxy that provides TLS passthrough, which is required for the Reverse Proxy feature to function correctly.
</Note>
<Warning>
The Reverse Proxy feature does not currently support Rosenpass. If your network relies on this feature, reverse proxy services will not function as expected.
</Warning>
<Note>
**Rosenpass:** The Reverse Proxy works with [Rosenpass](/client/post-quantum-cryptography)-enabled peers. The proxy runs Rosenpass in permissive mode, establishing a post-quantum-secured tunnel with peers that have Rosenpass enabled and falling back to standard WireGuard for peers that do not. Self-hosted deployments can turn this off with `NB_PROXY_ROSENPASS=false` on the proxy, but then Rosenpass-enabled peers cannot be reached through the proxy.
</Note>
## How it works