NetBird reverse proxy adds path-based auth: per-path SSO, bypass, or block on public apps
philipvollet · x · 2026-11-04
NetBird's reverse proxy now supports path-based auth: previously one login rule applied to an entire app; now each HTTP target path can have its own access policy.
Three per-path settings:
- Use service authentication (default): apply the service's SSO/password/PIN/header auth
- Bypass authentication: skip SSO/password/PIN/header, but CIDR, country and CrowdSec restrictions still apply — useful for /webhooks/ or /healthz
- Block access: return 403 without contacting the backend — for /admin or /metrics
Combined with exposing private apps on a public domain without opening ports, you can require SSO on /, allow unauthenticated webhooks, and hard-block admin paths from the public internet. Docs at docs.netbird.io.
More from Infra
- Black Friday nears: Reddit asks for a cost-effective rig for light-to-medium local LLM inference — f1yingbanana · 2026-11-04
- Claude Code fan wants to go local: OpenCode vs Codex vs Claude Code pointed at a local endpoint — Generic_Name_Here · 2026-11-04
- Ramp data: Google's cached-token share is less than half its peers', signaling agentic AI gap — Sufficient-Bat-9880 · 2026-11-04
- Elon Musk reportedly stockpiling utility transformers and gas turbines for AI buildout — PTrubey · 2026-11-04
- Intel and Micron say supply, not demand, caps server growth ahead of AMD's Q4 guide — tengyanAI · 2026-11-04
- DeepSeek open-sources DeepInfer inference engine delivering 26,000+ tokens/sec per GPU — bycloud · 2026-11-04