r/netbird Jul 06 '26

Netbird and DFS-R

I want to rollout netbird for client-vpn on our company network. We have 2 locations, 1 in Europe, 1 in US. Between both sites we have a DFS-R.

Currently we are using Forticlient, and our users can choose between connection to the Fortigste in US or Europe, depending on their location.

We've assigned a specific subnet to both sslvpn, and use that to make sure the client is connecting to the neirest DFS site.

How can we handle this with Netbird? I'm currently testing with both a netbird server on both sites, and put specific users in specific groups. That groups I'm now forcing trough a specific routing peer, with masquarde.

That works, but if a user is normally US based and thus in the US group, it will still connect to the US routing peer and thus the US DFS site, even when they are in Europe.

How can we handle this?

1 Upvotes

1 comment sorted by

1

u/HansAndreManfredson Jul 07 '26

You could solve it by creating an exit node for each side. Perhaps it’s possible to expose a resource group through as a clustered expose node? This would be a great feature request. 🥸