sendnrw/netbird-docs
2
0
Fork 0
mirror of https://github.com/netbirdio/docs.git synced 2026-04-16 07:26:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Browser Client Backend (#436)

Browse Source 
* include backend behavior

* drop 44338
This commit is contained in:
Pascal Fischer
2025-10-01 17:41:05 +02:00
committed by GitHub
parent 81ed300b8c
commit 937018f810
3 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

BIN
public/docs-static/img/how-to-guides/browser-client/temporary-peers-filter.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 45 KiB

BIN
public/docs-static/img/how-to-guides/browser-client/temporary-policies-filter.png Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 46 KiB

21
src/pages/about-netbird/browser-client-architecture.mdx
View File

@@ -54,6 +54,27 @@ RDP connections use the IronRDP WASM module with a custom RDCleanPath bridge:
- **Function**: Bridges RDP traffic from the RDCleanPath proxy through NetBird tunnels to the target RDP server
- **Security**: Handles certificate validation and caching
### Management Server
To support the Browser Client functionality, the NetBird management server uses two resources:
#### Temporary Peer
The WebAssembly NetBird Client will register as a temporary peer with the management server. The temporary peer will live as long as the connection is active.
Once the connection is closed, the temporary peer will be automatically removed from the management server. This happens after 10 minutes of inactivity.
For the WebAssembly NetBird Client all peers will be named as `{browser}-browser-client` (e.g. `safari-17-browser-client`).
<p>
<img src="/docs-static/img/how-to-guides/browser-client/temporary-peers-filter.png" alt="temporary-peers-filter" className="imagewrapper-big"/>
</p>
#### Temporary Policy
To allow the registered WebAssembly NetBird Client to connect to the target peer, a temporary policy will be created. The temporary policy will allow access to the target peer on ports 22 (SSH), 3389 (RDP).
The policy will be created P2P with no groups required. This way the client will only connect to one other peer. Once either of the peers (source or destination) is removed, the temporary policy will be automatically removed from the management server.
The policies for the WebAssembly NetBird Client will be named as `Temporary access policy for peer {browser-client-name}` (e.g. `Temporary access policy for peer safari-17-browser-client`).
<p>
<img src="/docs-static/img/how-to-guides/browser-client/temporary-policies-filter.png" alt="temporary-policies-filter" className="imagewrapper-big"/>
</p>
## Connection Flow
### 1. Temporary Access Registration