mirror of
https://github.com/netbirdio/docs.git
synced 2026-08-28 02:31:28 +02:00
Update reverse proxy docs for Rosenpass support
This commit is contained in:
@@ -13,9 +13,9 @@ NetBird Reverse Proxy lets you expose internal services running on peers or behi
|
||||
<Note>
|
||||
**Self-hosted requirement:** Self-hosted deployments **must** use [Traefik](/selfhosted/external-reverse-proxy) as their external reverse proxy. Traefik is the only supported reverse proxy that provides TLS passthrough, which is required for the Reverse Proxy feature to function correctly.
|
||||
</Note>
|
||||
<Warning>
|
||||
The Reverse Proxy feature does not currently support Rosenpass. If your network relies on this feature, reverse proxy services will not function as expected.
|
||||
</Warning>
|
||||
<Note>
|
||||
**Rosenpass:** The Reverse Proxy works with [Rosenpass](/client/post-quantum-cryptography)-enabled peers. The proxy runs Rosenpass in permissive mode, establishing a post-quantum-secured tunnel with peers that have Rosenpass enabled and falling back to standard WireGuard for peers that do not. Self-hosted deployments can turn this off with `NB_PROXY_ROSENPASS=false` on the proxy, but then Rosenpass-enabled peers cannot be reached through the proxy.
|
||||
</Note>
|
||||
|
||||
## How it works
|
||||
|
||||
|
||||
Reference in New Issue
Block a user