Skip to content

Commit 2542578

Browse files
nazarewknazarewk
committed
feat: add Routing Peer Access Policies diagram
1 parent cfb2c28 commit 2542578

File tree

3 files changed

+176
-0
lines changed

3 files changed

+176
-0
lines changed

‎public/docs-static/img/how-to-guides/routing-peer-policies.drawio‎

Lines changed: 154 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,154 @@
1+
<mxfile host="Electron" agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) draw.io/26.1.1 Chrome/134.0.6998.205 Electron/35.6.0 Safari/537.36" version="26.1.1">
2+
<diagram name="Page-1" id="cSO_DhjBtIs-y8T3Yu-b">
3+
<mxGraphModel dx="1475" dy="853" grid="0" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="0" pageScale="1" pageWidth="827" pageHeight="1169" background="#18181B" math="0" shadow="0">
4+
<root>
5+
<mxCell id="0" />
6+
<mxCell id="1" parent="0" />
7+
<mxCell id="tk96eruObW772T1n_iph-12" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;fillColor=#d5e8d4;strokeColor=#82b366;exitX=1;exitY=0.5;exitDx=0;exitDy=0;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-25" target="tk96eruObW772T1n_iph-20" edge="1">
8+
<mxGeometry relative="1" as="geometry" />
9+
</mxCell>
10+
<mxCell id="tk96eruObW772T1n_iph-17" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;fillColor=#d5e8d4;strokeColor=#82b366;exitX=1;exitY=0.5;exitDx=0;exitDy=0;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-25" target="tk96eruObW772T1n_iph-21" edge="1">
11+
<mxGeometry relative="1" as="geometry">
12+
<Array as="points">
13+
<mxPoint x="211" y="508" />
14+
<mxPoint x="211" y="648" />
15+
</Array>
16+
</mxGeometry>
17+
</mxCell>
18+
<mxCell id="tk96eruObW772T1n_iph-18" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;fillColor=#d5e8d4;strokeColor=#82b366;exitX=1;exitY=0.5;exitDx=0;exitDy=0;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-25" target="tk96eruObW772T1n_iph-19" edge="1">
19+
<mxGeometry relative="1" as="geometry">
20+
<Array as="points">
21+
<mxPoint x="211" y="508" />
22+
<mxPoint x="211" y="366" />
23+
</Array>
24+
</mxGeometry>
25+
</mxCell>
26+
<mxCell id="tk96eruObW772T1n_iph-37" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-21" target="tk96eruObW772T1n_iph-23" edge="1">
27+
<mxGeometry relative="1" as="geometry" />
28+
</mxCell>
29+
<mxCell id="tk96eruObW772T1n_iph-27" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-22" target="tk96eruObW772T1n_iph-26" edge="1">
30+
<mxGeometry relative="1" as="geometry" />
31+
</mxCell>
32+
<mxCell id="tk96eruObW772T1n_iph-28" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-23" target="tk96eruObW772T1n_iph-26" edge="1">
33+
<mxGeometry relative="1" as="geometry" />
34+
</mxCell>
35+
<mxCell id="tk96eruObW772T1n_iph-29" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;entryX=0;entryY=0.5;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-24" target="tk96eruObW772T1n_iph-26" edge="1">
36+
<mxGeometry relative="1" as="geometry" />
37+
</mxCell>
38+
<mxCell id="tk96eruObW772T1n_iph-41" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=1;exitDx=0;exitDy=0;entryX=0.75;entryY=0;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-19" target="tk96eruObW772T1n_iph-23" edge="1">
39+
<mxGeometry relative="1" as="geometry" />
40+
</mxCell>
41+
<mxCell id="tk96eruObW772T1n_iph-42" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=0.75;exitDx=0;exitDy=0;entryX=0.25;entryY=0;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-19" target="tk96eruObW772T1n_iph-24" edge="1">
42+
<mxGeometry relative="1" as="geometry">
43+
<Array as="points">
44+
<mxPoint x="244" y="590" />
45+
<mxPoint x="434" y="590" />
46+
</Array>
47+
</mxGeometry>
48+
</mxCell>
49+
<mxCell id="tk96eruObW772T1n_iph-44" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0;exitY=0.25;exitDx=0;exitDy=0;entryX=0.25;entryY=1;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;startArrow=none;startFill=0;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-21" target="tk96eruObW772T1n_iph-22" edge="1">
50+
<mxGeometry relative="1" as="geometry">
51+
<Array as="points">
52+
<mxPoint x="259" y="641" />
53+
<mxPoint x="259" y="408" />
54+
<mxPoint x="433" y="408" />
55+
</Array>
56+
</mxGeometry>
57+
</mxCell>
58+
<mxCell id="tk96eruObW772T1n_iph-51" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=1;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-20" target="tk96eruObW772T1n_iph-22" edge="1">
59+
<mxGeometry relative="1" as="geometry">
60+
<Array as="points">
61+
<mxPoint x="448" y="417" />
62+
</Array>
63+
</mxGeometry>
64+
</mxCell>
65+
<mxCell id="tk96eruObW772T1n_iph-52" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.25;exitY=1;exitDx=0;exitDy=0;entryX=0.75;entryY=0;entryDx=0;entryDy=0;fillColor=#f8cecc;strokeColor=#b85450;fontColor=#FFFFFF;" parent="1" source="tk96eruObW772T1n_iph-20" target="tk96eruObW772T1n_iph-24" edge="1">
66+
<mxGeometry relative="1" as="geometry">
67+
<Array as="points">
68+
<mxPoint x="295" y="551" />
69+
<mxPoint x="464" y="551" />
70+
</Array>
71+
</mxGeometry>
72+
</mxCell>
73+
<mxCell id="umXztfVjdRR0Wzl4TO7n-1" value="" style="group;fontColor=#FFFFFF;" parent="1" vertex="1" connectable="0">
74+
<mxGeometry x="279" y="351" width="199" height="31" as="geometry" />
75+
</mxCell>
76+
<mxCell id="tk96eruObW772T1n_iph-7" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/netbird.png;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-1" vertex="1">
77+
<mxGeometry x="64" y="7" width="24" height="17.45" as="geometry" />
78+
</mxCell>
79+
<mxCell id="tk96eruObW772T1n_iph-19" value="100.79.0.1" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-1" vertex="1">
80+
<mxGeometry width="60" height="30" as="geometry" />
81+
</mxCell>
82+
<mxCell id="tk96eruObW772T1n_iph-22" value="192.168.1.1" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-1" vertex="1">
83+
<mxGeometry x="139" y="1" width="60" height="30" as="geometry" />
84+
</mxCell>
85+
<mxCell id="fFz2IB4M-ZeV7vwJNDiT-5" value="&lt;font style=&quot;&quot;&gt;router-3&lt;/font&gt;" style="fontColor=#FFFFFF;verticalAlign=bottom;verticalLabelPosition=top;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.load_balancer;" parent="umXztfVjdRR0Wzl4TO7n-1" vertex="1">
86+
<mxGeometry x="92.32999999999998" y="9" width="46.67" height="14" as="geometry" />
87+
</mxCell>
88+
<mxCell id="tk96eruObW772T1n_iph-33" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-1" source="tk96eruObW772T1n_iph-19" target="tk96eruObW772T1n_iph-22" edge="1">
89+
<mxGeometry relative="1" as="geometry" />
90+
</mxCell>
91+
<mxCell id="umXztfVjdRR0Wzl4TO7n-2" value="" style="group;fontColor=#FFFFFF;" parent="1" vertex="1" connectable="0">
92+
<mxGeometry x="281" y="633" width="198" height="30.220000000000027" as="geometry" />
93+
</mxCell>
94+
<mxCell id="tk96eruObW772T1n_iph-9" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/netbird.png;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-2" vertex="1">
95+
<mxGeometry x="63" y="7" width="24" height="17.45" as="geometry" />
96+
</mxCell>
97+
<mxCell id="tk96eruObW772T1n_iph-21" value="100.79.0.3" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-2" vertex="1">
98+
<mxGeometry width="60" height="30" as="geometry" />
99+
</mxCell>
100+
<mxCell id="tk96eruObW772T1n_iph-24" value="192.168.1.3" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-2" vertex="1">
101+
<mxGeometry x="138" y="0.22000000000002728" width="60" height="30" as="geometry" />
102+
</mxCell>
103+
<mxCell id="fFz2IB4M-ZeV7vwJNDiT-4" value="&lt;font style=&quot;&quot;&gt;router-3&lt;/font&gt;" style="fontColor=#FFFFFF;verticalAlign=bottom;verticalLabelPosition=top;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.load_balancer;" parent="umXztfVjdRR0Wzl4TO7n-2" vertex="1">
104+
<mxGeometry x="91.33000000000004" y="8.220000000000027" width="46.67" height="14" as="geometry" />
105+
</mxCell>
106+
<mxCell id="tk96eruObW772T1n_iph-35" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-2" source="tk96eruObW772T1n_iph-21" target="tk96eruObW772T1n_iph-24" edge="1">
107+
<mxGeometry relative="1" as="geometry" />
108+
</mxCell>
109+
<mxCell id="umXztfVjdRR0Wzl4TO7n-3" value="" style="group;fontColor=#FFFFFF;" parent="1" vertex="1" connectable="0">
110+
<mxGeometry x="280" y="492" width="199" height="30.480000000000018" as="geometry" />
111+
</mxCell>
112+
<mxCell id="tk96eruObW772T1n_iph-8" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/netbird.png;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-3" vertex="1">
113+
<mxGeometry x="64" y="6.75" width="24" height="17.45" as="geometry" />
114+
</mxCell>
115+
<mxCell id="tk96eruObW772T1n_iph-20" value="100.79.0.2" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-3" vertex="1">
116+
<mxGeometry y="0.4800000000000182" width="60" height="30" as="geometry" />
117+
</mxCell>
118+
<mxCell id="tk96eruObW772T1n_iph-23" value="192.168.1.2" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-3" vertex="1">
119+
<mxGeometry x="139" width="60" height="30" as="geometry" />
120+
</mxCell>
121+
<mxCell id="fFz2IB4M-ZeV7vwJNDiT-3" value="&lt;font style=&quot;&quot;&gt;router-2&lt;/font&gt;" style="fontColor=#FFFFFF;verticalAlign=bottom;verticalLabelPosition=top;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.load_balancer;" parent="umXztfVjdRR0Wzl4TO7n-3" vertex="1">
122+
<mxGeometry x="90.17000000000002" y="8.470000000000027" width="46.67" height="14" as="geometry" />
123+
</mxCell>
124+
<mxCell id="tk96eruObW772T1n_iph-34" style="edgeStyle=orthogonalEdgeStyle;rounded=0;orthogonalLoop=1;jettySize=auto;html=1;exitX=0.5;exitY=0;exitDx=0;exitDy=0;entryX=0.5;entryY=0;entryDx=0;entryDy=0;fillColor=#d5e8d4;strokeColor=#82b366;fontColor=#FFFFFF;" parent="umXztfVjdRR0Wzl4TO7n-3" source="tk96eruObW772T1n_iph-20" target="tk96eruObW772T1n_iph-23" edge="1">
125+
<mxGeometry relative="1" as="geometry" />
126+
</mxCell>
127+
<mxCell id="RaU5KfkkpcU7UawoV4SE-11" value="&lt;h2 style=&quot;margin-top: 0px;&quot;&gt;&lt;span style=&quot;text-wrap-mode: nowrap;&quot;&gt;Network Resource Access Policies&lt;/span&gt;&lt;/h2&gt;&lt;p&gt;Resource:&amp;nbsp;&lt;b&gt;192.168.1.0/24&amp;nbsp;&lt;/b&gt;assigned to&amp;nbsp;&lt;b&gt;&lt;font style=&quot;color: rgb(184, 84, 80);&quot;&gt;Resource&#39;s Group&lt;/font&gt;&lt;/b&gt;&lt;br&gt;Routing Peers:&amp;nbsp;&lt;b&gt;&lt;font style=&quot;color: rgb(130, 179, 102);&quot;&gt;Router&#39;s Group&lt;/font&gt;&lt;/b&gt;&amp;nbsp;containing 3 Peers&lt;br&gt;&lt;font style=&quot;color: rgb(255, 255, 255);&quot;&gt;Access Policy 1:&lt;/font&gt;&lt;font&gt; &lt;font style=&quot;color: rgb(184, 84, 80);&quot;&gt;&lt;b style=&quot;&quot;&gt;User&#39;s Group&lt;/b&gt; &amp;gt; &lt;b style=&quot;&quot;&gt;Resource&#39;s Group&lt;/b&gt;&lt;/font&gt;&lt;/font&gt;&lt;br&gt;Access Policy 2: &lt;font style=&quot;color: rgb(130, 179, 102);&quot;&gt;&lt;b style=&quot;&quot;&gt;User&#39;s Group&lt;/b&gt; &amp;gt; &lt;b style=&quot;&quot;&gt;Router&#39;s Group&lt;/b&gt;&lt;/font&gt;&lt;/p&gt;" style="text;html=1;whiteSpace=wrap;overflow=hidden;rounded=0;fontColor=#FFFFFF;align=center;verticalAlign=middle;" vertex="1" parent="1">
128+
<mxGeometry x="148" y="187" width="422" height="119" as="geometry" />
129+
</mxCell>
130+
<mxCell id="RaU5KfkkpcU7UawoV4SE-12" value="" style="group" vertex="1" connectable="0" parent="1">
131+
<mxGeometry x="92" y="455.67" width="90" height="66" as="geometry" />
132+
</mxCell>
133+
<mxCell id="fFz2IB4M-ZeV7vwJNDiT-12" value="&lt;font style=&quot;&quot;&gt;User&lt;/font&gt;" style="fontColor=#FFFFFF;verticalAlign=bottom;verticalLabelPosition=top;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.laptop;" parent="RaU5KfkkpcU7UawoV4SE-12" vertex="1">
134+
<mxGeometry x="15" width="60" height="33" as="geometry" />
135+
</mxCell>
136+
<mxCell id="tk96eruObW772T1n_iph-10" value="" style="shape=image;verticalLabelPosition=bottom;labelBackgroundColor=default;verticalAlign=top;aspect=fixed;imageAspect=0;image=https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/png/netbird.png;fontColor=#FFFFFF;" parent="RaU5KfkkpcU7UawoV4SE-12" vertex="1">
137+
<mxGeometry y="41" width="24" height="17.45" as="geometry" />
138+
</mxCell>
139+
<mxCell id="tk96eruObW772T1n_iph-25" value="100.79.1.123" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;" parent="RaU5KfkkpcU7UawoV4SE-12" vertex="1">
140+
<mxGeometry x="30" y="36" width="60" height="30" as="geometry" />
141+
</mxCell>
142+
<mxCell id="RaU5KfkkpcU7UawoV4SE-14" value="" style="group" vertex="1" connectable="0" parent="1">
143+
<mxGeometry x="570" y="451.67" width="60" height="70.00000000000006" as="geometry" />
144+
</mxCell>
145+
<mxCell id="tk96eruObW772T1n_iph-26" value="192.168.1.51" style="text;html=1;align=center;verticalAlign=middle;whiteSpace=wrap;rounded=0;fontSize=10;fontColor=#FFFFFF;flipH=0;" parent="RaU5KfkkpcU7UawoV4SE-14" vertex="1">
146+
<mxGeometry y="40" width="60" height="30" as="geometry" />
147+
</mxCell>
148+
<mxCell id="fFz2IB4M-ZeV7vwJNDiT-2" value="LAN server" style="fontColor=#FFFFFF;verticalAlign=bottom;verticalLabelPosition=top;labelPosition=center;align=center;html=1;outlineConnect=0;fillColor=#CCCCCC;strokeColor=#6881B3;gradientColor=none;gradientDirection=north;strokeWidth=2;shape=mxgraph.networks.server;flipH=0;" parent="RaU5KfkkpcU7UawoV4SE-14" vertex="1">
149+
<mxGeometry x="12" width="36" height="40" as="geometry" />
150+
</mxCell>
151+
</root>
152+
</mxGraphModel>
153+
</diagram>
154+
</mxfile>

‎public/docs-static/img/how-to-guides/routing-peer-policies.drawio.png‎

136 KB
Loading

‎src/pages/how-to/networks.mdx‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,28 @@ See the example below with a policy that allows the group `Berlin Office` to acc
7373
Policies for domains or wildcard domains applied to peers with IP ranges might influence access control for those peers, as their destination ranges include any IPs. Therefore, we recommend creating networks with routing peers dedicated to domain and wildcard domains to prevent unwanted access. In upcoming releases, we will provide a fix for this behavior.
7474
</Note>
7575

76+
### Managing access to and through the Routing Peers
77+
78+
Routing Peer's local IP address is managed in line with the standard Operating System network access management.
79+
Access to Resources accessible from behind the Routing Peer is managed independently of the access to the services
80+
running directly on the Routing Peer, even if the locally assigned IP address overlaps with the routed network range.
81+
82+
This means:
83+
- you might observe seemingly "random" results depending on which Routing Peer is handling your requests,
84+
- access to Resources does not require access to the Routing Peer itself,
85+
- this will still establish connectivity to the Routing Peer (eg: in `netbird status -d`), but any traffic destined
86+
for the Routing Peer will be denied,
87+
- access to the Routing Peer's local IP address needs to be explicitly allowed,
88+
- you can access _other_ Routing Peers in HA group by their local IP addresses, because they are now effectively
89+
remote IP addresses,
90+
91+
Following diagram explains the differences visually with red/green color denoting Access Policies governing
92+
the specific connections:
93+
94+
<p>
95+
<img src="/docs-static/img/how-to-guides/routing-peer-policies.drawio.png" alt="routing-peer-policies" className="imagewrapper-big"/>
96+
</p>
97+
7698
## Enable DNS wildcard routing
7799
When you configure wildcard domains as resources, you need to enable DNS wildcard routing. Which has an additional effect in comparison to the previous DNS routes behavior from Network routes; it switches the DNS resolution to the routing peer instead of the local client system.
78100
This is also useful for regular DNS routes when you want to resolve the domain names using the routing peer's IP infrastructure, which will allow for more restricted access control rules in newer versions of the clients (**1**) and for the traffic to go to a near routing peer service.

0 commit comments

Comments
 (0)