sendnrw/netbird-docs
2
0
Fork 0
mirror of https://github.com/netbirdio/docs.git synced 2026-04-19 00:46:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update faq.mdx / make TURN firewall rule recommended (#207)

Browse Source 
* Update faq.mdx

make the TURN firewall rule recommended - it's needed for peers to connect consistently

* Update src/pages/about-netbird/faq.mdx

Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>

* Update src/pages/about-netbird/faq.mdx

Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>

---------

Co-authored-by: Maycon Santos <mlsmaycon@gmail.com>
This commit is contained in:
Stuart Cardall
2024-08-12 12:17:57 +00:00
committed by GitHub
parent a90b010ec6
commit d955b3d928
1 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
src/pages/about-netbird/faq.mdx
View File

@@ -9,7 +9,14 @@ NetBird's agent doesn't require any incoming port to be open; It negotiates the
### Outgoing ports
NetBird usually won't need open ports, but sometimes you or your IT team needs to secure and verify
all outgoing traffic, and that may affect how NetBird clients connect to the [control layer](/about-netbird/how-netbird-works)
and negotiate the peer-to-peer connections.
and negotiate the peer-to-peer connections.
<Note>
Allowing the outbound **Relay (TURN)** service below is **recommended** in more restricted networks for reliable peer connections. This will also improve the reliability of your [High Availability Routes](https://docs.netbird.io/how-to/routing-traffic-to-private-networks#high-availability-routes).
</Note>
<Note>
If using `fail2ban` or similar, you should whitelist each netbird.io endpoint below.
</Note>
Below is the list of NetBird hosted endpoints and ports they listen to:
* Management service:
@@ -27,6 +34,8 @@ Below is the list of NetBird hosted endpoints and ports they listen to:
* **Port range**: UDP/80,443 and TCP/443-65535
* **IPv4**: The list is dynamic and geo-distributed; we advise you to check the nearest cluster with the following command:
* `nslookup turn.netbird.io`
* In more restricted environments, `netbird status` will show `keepalive ping failed` errors without a firewall rule for TURN
* Example `nftables` outbound firewall rule: `ip daddr turn.netbird.io tcp dport 443-65535 accept`
## Why and what are the anonymous usage metrics?