Oh lord, that's easy.... lol

Thank you

What do you think of adding a prometheus metrics endpoint to netmaker to make it easy to monitor netmaker? 🙂

Hey, we have a prometheus exporter for netmaker metrics , but that's a feature available as part of netmaker-pro version 🙌 Using these metrics you could observe performance of your network( network latency, node connectivity , node up time, data exchanged between nodes etc.)

Oh that’s so cool, how can I get my hands on it? 🙂 I really would love to use it to monitor my netmaker setup 🙂

Oh that’s so cool how can I get my hands

Hello... I'm new here and looking for a way to implement an overlay network for management of serveres that I have all over the place, without having to open firewalls everwhere I look 🙂 I have been testing Netmaker extensively last week, and especially the capability to overcome NAT and firewalls has been challenging. The NAT holepunching feature seems to rely only on uPNP in a firewall. And I do not control most of the firewalls that I have servers behind, so that really is not an option for me. The NAT solution that works all the time is assigning a relay node to a "hard to reach" node. I have a few questions regarding this that I hope the community here has experience with and can demystify: - Can I assign multiple relay nodes to the same node? I would like this for redundancy purposes. It seems that I can set this up, and the graph in the server does show the correct topology (showing a nodes hanging off 2 relay nodes). However, there is NO connectivity between any of the nodes in the network, until I remove one OR the other relay. Is this a bug or working as intended? - I realise that the way redundancy for the server works, if either by setting up a redundant loadbalancer + 2 or 3 instances of netmaker-server and a redundant database. And since it seems the network pretty rapidly stops working when a server is down, here is no way around a redundant server. Can I still select a redundant server as a relay and that way create a redundant relay node in the network?

- Are there any plans to create a more flexible ACL system? Even though the current method appears very flexible, it will become hard to view on the webinterface with 100+ nodes in a matrix. It would be more useful to create groups of nodes and define access between those. I f.eks. need to have managed servers isolated from eachother, which can only access a few management nodes or bastion server. And a bastion server that can access all servers or perhaps only a subset of servers.

I would like to emphasize that I think Netmaker is brilliant work and he speed of development is very encouraging.

I have looked at tailscale (sorry, not trying to discuss another product), or rather headscale for selfhosting, and it has a number of interesting concepts that would help me a lot: - Automatic relay selection. Either some common ones, or simply my own DERP servers. And it appears to work well, for redundancy and automatically overcoming NAT/firewall issues. - The ACLs in there are pretty mindblowing, as it allows to make filters on machine groups and users... and it also allows for protocol selection and ports. This allows for the network at seperate servers from each other and only allow for SSH to certain servers from a bastion server or group of management servers to the managed nodes. All managed from the server. It would be awesome if something similar could be considered adding to the roadmap of Netmaker.

Thanks in advance for your time and input... it is a magical product already now and extremely useful for home use for sure 🙂 The concept of ingress and egress nodes is brilliant and very easy to use.

Hello I m new here and looking for a way

Hi. Is it possible to change port for communicating between netmaker server and netmaker clients? I want to hide dashbord. from public access via host firewall. But if I blocked a port 443, my netmaker clients will not communicate with server too. Thank you

Hi Is it possible to change port for

I just saw https://github.com/gravitl/netmaker/pull/1500 how worried should I be?

Just found netmaker, it seems like it's pretty much exactly what I'm looking for in order to handle communication between our edge nodes. I just have one question, which is am I able to join the network without announcing any ranges? Seems like something we'd just deploy on the same machine as the edge nodes, so there's no reason to assign a whole range to the node, just the single IP

Just found netmaker it seems like it s

hi all, has anyone successfully used netclinet on a pfsense router? (the freebsd version I mean) I thought it might make life easier with egress firewalling (so not all internal services are accessible)

Is possible to use records from a network DNS when connecting as external client in ingress mode?

Is possible to use records from a

Hole punching just doesn't seem to work for the clients at the office network, so I thought about using the local (DMZ) server as a relay, because that one actually can be connected to. Unfortunately once I turn this node into a relay, all the nodes I want it to relay attempt to connect to it by using the public ip address of the server, instead of the local ip address. This normally wouldn't cause issues, but in this network it fails (because trying to connect to the public IP address from within the network always fails) So is there something I can do about that? 🤔

Hi. How do I prevent some nodes from being able to visit some external networks?

I have some odd situations where in some local ISP networks (and using alongside Mullvad or proton VPNs), where netmaker is accessible, but no other nodes are. I have no idea how to troubleshoot or fix this

Preventing nodes access to external networks

Is it possible to customize the default listen port from 51821 to something else?

While ingress clients get an IP from the network's subnet their traffic has as origin the IP of the "ingress server". Is there a way to change it?

So the external clients cant be firewalled individually.

While ingress clients get an IP from the

Hello, where can I find the docs for locking down my dashboard? 🙂

Sweet! Disconnect option