this post was submitted on 18 Oct 2026
19 points (95.2% liked)

Selfhosted

63076 readers
724 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
 

I have a GLInet travel router that is a peer connected to my Netbird network, I'd like to have any client that connects to my router to have access to the peers the travel router has access to, but still be able to access the regular internet that is being passed through by my router. Is this possible?

Ultimately I'm trying to get the TV at my girlfriend's place to be able to access my Jellyfin instance over Netbird. According to the Netbird documentation, exit nodes and routes are depricated and should not be used, but I'm struggling hard with getting it to work with Networks.

  • I've created a group with my GLInet router, my Jellyfin instance, and my home server (Which hosts Jellyfin) all in the group called "Travel".
  • I've created a Network called "Home" in Netbird
  • Within the "Home" network I've created a resource called "Jellyfin" with the IP address set to it's Netbird IP address, and an access control group where all members of the "Travel" group have access to all ports of the "Jellyfin" resource.
  • I've created two routing peers within the network, one is the GLInet router and the other is my home server. Both of these are Netbird peers with Netbird installed on them.

I am very confused overall, and could use a hand if anyone wanted to walk me through what I'm doing wrong.

all 19 comments
sorted by: hot top controversial new old
[–] Dojan@pawb.social 4 points 1 day ago* (last edited 1 day ago) (1 children)

I have Netbird hosted on my VPS, and have my home server act as a routing exit node, as well as the way I access stuff on my home network.

In essence, my setup looks like this

  1. Network Routing > Networks, I've set up a network called Home Network LAN which exposes a Subnet for my home network, lit. the IPs I use locally. (192.168...), called Home Subnet
  2. Access Control > Groups I have a group called Home Network Users, within which I've put the devices that should be able to access the home network (my phone, my laptop, not the servers).
  3. Access Control > Policies sets up a policy called Home Network Access, which has Home Network Users as a source, and the Home Subnet as a destination.

I think that's about it, really. If I am outside of my home network, I connect my Netbird VPN and I can access any and all things on my home network using the direct internal network IPs from anywhere. I have also set up the home server as a routing exit node, and added an Adguard instance as a DNS server so I can use my private network domains as well.

So basically I can connect to my Jellyfin instance either via direct home-IP (192.168.x.5 or whatever) or via jellyfin.home.arpa

I am not sure your travel router needs to be a routing peer.

I am also rubbish at network things, so if you have follow-up questions I'll probably struggle to understand them.

[–] tapdattl@lemmy.world 1 points 1 day ago* (last edited 1 day ago) (2 children)

Well you're better at this networking stuff than I am, that's for sure. I appreciate you taking the time to answer my questions!

The reason I'm using the travel router is because the TV at my girlfriend's place does not have the ability to connect to Netbird directly, so I can't reach back to my home server's Jellyfin instance through the TV. There is a Jellyfin app available on the TV, but without Netbird it can't reach back home.

What I'm trying to do is have the travel router (which is a Netbird peer) proxy any requests it recieved for netbird resources to clients connected to it, sort of like a reverse exit node.

[–] ulemmyagain@lemmy.world 1 points 9 hours ago

Is the travel router at her place? It needs to be. I don't think Netbird/Tailscale work backwards like that. If you have access to a Raspberry Pi or just an extra computer you can leave at her place, you can run netbird and use socat to forward the port to that computer so her tv can access it. You wouldn't even need the router.

[–] Dojan@pawb.social 2 points 1 day ago (1 children)

I think in that case you should just put your travel router as a user of the group that accesses the home network.

If I set my phone to be a WiFi hotspot with my Netbird VPN on, my tablet can connect to my phone's hotspot and access my home network even if my tablet doesn't have the VPN on it.

So in that case I guess the router would be a peer, yeah!

Did you manage to get it working in the end?

[–] tapdattl@lemmy.world 2 points 1 day ago (1 children)

Fascinating, I'm going to have to test connecting the TV to my phone.

I haven't gotten home yet so no testing yet, but I've got several plans to try out now. I'll report back what I find!

[–] Dojan@pawb.social 2 points 1 day ago

Looking forward to it, I'm invested now haha!

[–] Blip6338@lemmy.ca 5 points 1 day ago (1 children)

I had a hard time too when I first tried to get netbird going but reading the https://docs.netbird.io/manage/access-control section of the docs cleared things up, especially the part about not putting all your devices in the same group.

[–] tapdattl@lemmy.world 2 points 1 day ago

Yeah that was a very informative read, I might have to sit down and re-map all my devices, currently they're all on the default "anyone can talk to anyone" topography

[–] kata1yst@sh.itjust.works 2 points 1 day ago (1 children)

What do you mean "the IP address set to it's Netbird IP address"? In Netbird everything is referenced by it's LAN address.

[–] tapdattl@lemmy.world 2 points 1 day ago

The 100.88.79.162 address in the picture I attached, or the general 100.xxx.xxx.xxx style address that netbird assigns peers