I have a GLInet travel router that is a peer connected to my Netbird network, I'd like to have any client that connects to my router to have access to the peers the travel router has access to, but still be able to access the regular internet that is being passed through by my router. Is this possible?

Ultimately I'm trying to get the TV at my girlfriend's place to be able to access my Jellyfin instance over Netbird. According to the Netbird documentation, exit nodes and routes are depricated and should not be used, but I'm struggling hard with getting it to work with Networks.

• I've created a group with my GLInet router, my Jellyfin instance, and my home server (Which hosts Jellyfin) all in the group called "Travel".
• I've created a Network called "Home" in Netbird
• Within the "Home" network I've created a resource called "Jellyfin" with the IP address set to it's Netbird IP address, and an access control group where all members of the "Travel" group have access to all ports of the "Jellyfin" resource.
• I've created two routing peers within the network, one is the GLInet router and the other is my home server. Both of these are Netbird peers with Netbird installed on them.

I am very confused overall, and could use a hand if anyone wanted to walk me through what I'm doing wrong.

I had a hard time too when I first tried to get netbird going but reading the https://docs.netbird.io/manage/access-control section of the docs cleared things up, especially the part about not putting all your devices in the same group.

What do you mean "the IP address set to it's Netbird IP address"? In Netbird everything is referenced by it's LAN address.

The 100.88.79.162 address in the picture I attached, or the general 100.xxx.xxx.xxx style address that netbird assigns peers

Was miawoo an AI bot?

Yeah. It had upwards of 40 comments in the < 24h it was running. It wasn't up-front about it though. Initially I thought it was just some person feeding questions into an LLM and pasting the responses. I guess it's not very different from that, though.

I think it's what spawned this post.

I have Netbird hosted on my VPS, and have my home server act as a routing exit node, as well as the way I access stuff on my home network.

In essence, my setup looks like this

1. Network Routing > Networks, I've set up a network called Home Network LAN which exposes a Subnet for my home network, lit. the IPs I use locally. (192.168...), called Home Subnet
2. Access Control > Groups I have a group called Home Network Users, within which I've put the devices that should be able to access the home network (my phone, my laptop, not the servers).
3. Access Control > Policies sets up a policy called Home Network Access, which has Home Network Users as a source, and the Home Subnet as a destination.

I think that's about it, really. If I am outside of my home network, I connect my Netbird VPN and I can access any and all things on my home network using the direct internal network IPs from anywhere. I have also set up the home server as a routing exit node, and added an Adguard instance as a DNS server so I can use my private network domains as well.

So basically I can connect to my Jellyfin instance either via direct home-IP (192.168.x.5 or whatever) or via jellyfin.home.arpa

I am not sure your travel router needs to be a routing peer.

I am also rubbish at network things, so if you have follow-up questions I'll probably struggle to understand them.

Ugh I hate that, I post questions to communities specifically to have community and engagement and conversation. If I wanted to talk to a computer (which I don't) I'd ask a computer.

Well you're better at this networking stuff than I am, that's for sure. I appreciate you taking the time to answer my questions!

The reason I'm using the travel router is because the TV at my girlfriend's place does not have the ability to connect to Netbird directly, so I can't reach back to my home server's Jellyfin instance through the TV. There is a Jellyfin app available on the TV, but without Netbird it can't reach back home.

What I'm trying to do is have the travel router (which is a Netbird peer) proxy any requests it recieved for netbird resources to clients connected to it, sort of like a reverse exit node.

Yeah that was a very informative read, I might have to sit down and re-map all my devices, currently they're all on the default "anyone can talk to anyone" topography

Right? If someone wants to use an LLM to troubleshoot they'd do that. Making a (unmarked) bot account to essentially fulfil that function is a bit redundant.

I think in that case you should just put your travel router as a user of the group that accesses the home network.

If I set my phone to be a WiFi hotspot with my Netbird VPN on, my tablet can connect to my phone's hotspot and access my home network even if my tablet doesn't have the VPN on it.

So in that case I guess the router would be a peer, yeah!

Did you manage to get it working in the end?

Fascinating, I'm going to have to test connecting the TV to my phone.

I haven't gotten home yet so no testing yet, but I've got several plans to try out now. I'll report back what I find!

Looking forward to it, I'm invested now haha!

Is the travel router at her place? It needs to be. I don't think Netbird/Tailscale work backwards like that. If you have access to a Raspberry Pi or just an extra computer you can leave at her place, you can run netbird and use socat to forward the port to that computer so her tv can access it. You wouldn't even need the router.