Improve screenshot quality and add access restrictions screenshot (#675)
|
After Width: | Height: | Size: 159 KiB |
|
Before Width: | Height: | Size: 15 KiB After Width: | Height: | Size: 36 KiB |
|
Before Width: | Height: | Size: 53 KiB After Width: | Height: | Size: 52 KiB |
|
Before Width: | Height: | Size: 50 KiB After Width: | Height: | Size: 59 KiB |
|
Before Width: | Height: | Size: 54 KiB After Width: | Height: | Size: 69 KiB |
|
Before Width: | Height: | Size: 72 KiB After Width: | Height: | Size: 185 KiB |
|
Before Width: | Height: | Size: 132 KiB After Width: | Height: | Size: 123 KiB |
|
Before Width: | Height: | Size: 161 KiB After Width: | Height: | Size: 151 KiB |
|
Before Width: | Height: | Size: 59 KiB After Width: | Height: | Size: 156 KiB |
|
Before Width: | Height: | Size: 57 KiB After Width: | Height: | Size: 149 KiB |
|
Before Width: | Height: | Size: 58 KiB After Width: | Height: | Size: 148 KiB |
|
Before Width: | Height: | Size: 192 KiB After Width: | Height: | Size: 178 KiB |
@@ -3,7 +3,7 @@ import {Note, Warning} from "@/components/mdx"
|
|||||||
export const description =
|
export const description =
|
||||||
'Configure SSO, password, PIN, and header authentication methods, plus IP and country access restrictions, for NetBird Reverse Proxy services.'
|
'Configure SSO, password, PIN, and header authentication methods, plus IP and country access restrictions, for NetBird Reverse Proxy services.'
|
||||||
|
|
||||||
# Reverse Proxy Authentication
|
# Reverse Proxy Authentication and Access Restrictions
|
||||||
|
|
||||||
NetBird Reverse Proxy supports multiple authentication methods and connection-level access restrictions to control who can access your exposed services. You can enable one or more methods on each service, or leave a service completely public. Authentication and access restrictions are configured per service in the **Authentication** tab when creating or editing a service.
|
NetBird Reverse Proxy supports multiple authentication methods and connection-level access restrictions to control who can access your exposed services. You can enable one or more methods on each service, or leave a service completely public. Authentication and access restrictions are configured per service in the **Authentication** tab when creating or editing a service.
|
||||||
|
|
||||||
@@ -135,6 +135,10 @@ Access restrictions control which connections are allowed to reach your service
|
|||||||
|
|
||||||
Access restrictions are evaluated **before** authentication. If a connection is blocked by an IP or country rule, it is rejected immediately without any authentication check.
|
Access restrictions are evaluated **before** authentication. If a connection is blocked by an IP or country rule, it is rejected immediately without any authentication check.
|
||||||
|
|
||||||
|
<p>
|
||||||
|
<img src="/docs-static/img/manage/reverse-proxy/authentication/access-restrictions-geo-ip.png" alt="Authentication tab showing all available authentication methods" className="imagewrapper"/>
|
||||||
|
</p>
|
||||||
|
|
||||||
### IP CIDR restrictions
|
### IP CIDR restrictions
|
||||||
|
|
||||||
You can define IP allowlists and blocklists using CIDR notation:
|
You can define IP allowlists and blocklists using CIDR notation:
|
||||||
|
|||||||