diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/access-restrictions-geo-ip.png b/public/docs-static/img/manage/reverse-proxy/authentication/access-restrictions-geo-ip.png new file mode 100644 index 00000000..7630e998 Binary files /dev/null and b/public/docs-static/img/manage/reverse-proxy/authentication/access-restrictions-geo-ip.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/auth-no-auth-warning.png b/public/docs-static/img/manage/reverse-proxy/authentication/auth-no-auth-warning.png index 224f85fe..b8a7cf8f 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/authentication/auth-no-auth-warning.png and b/public/docs-static/img/manage/reverse-proxy/authentication/auth-no-auth-warning.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/auth-password-modal.png b/public/docs-static/img/manage/reverse-proxy/authentication/auth-password-modal.png index c0e292ac..50cc7f0d 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/authentication/auth-password-modal.png and b/public/docs-static/img/manage/reverse-proxy/authentication/auth-password-modal.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/auth-pin-modal.png b/public/docs-static/img/manage/reverse-proxy/authentication/auth-pin-modal.png index 5e202da7..75aa699f 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/authentication/auth-pin-modal.png and b/public/docs-static/img/manage/reverse-proxy/authentication/auth-pin-modal.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/auth-sso-modal.png b/public/docs-static/img/manage/reverse-proxy/authentication/auth-sso-modal.png index 25373f3a..f89d74ec 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/authentication/auth-sso-modal.png and b/public/docs-static/img/manage/reverse-proxy/authentication/auth-sso-modal.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/authentication/reverse-proxy-add-service-auth.png b/public/docs-static/img/manage/reverse-proxy/authentication/reverse-proxy-add-service-auth.png index 68f1da64..6eee18f6 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/authentication/reverse-proxy-add-service-auth.png and b/public/docs-static/img/manage/reverse-proxy/authentication/reverse-proxy-add-service-auth.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-access-control-modal.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-access-control-modal.png index 508b7a3c..69921d9e 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-access-control-modal.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-access-control-modal.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-auth.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-auth.png index fc99e252..17f740a4 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-auth.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-auth.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-details.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-details.png index faf238d4..236fcf19 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-details.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-details.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-settings.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-settings.png index ebdcc717..869dc4cf 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-settings.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-service-settings.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-target.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-target.png index 88b2a08c..47025422 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-target.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-add-target.png differ diff --git a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-auth-modal.png b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-auth-modal.png index 432c8cc6..ff548d52 100644 Binary files a/public/docs-static/img/manage/reverse-proxy/reverse-proxy-auth-modal.png and b/public/docs-static/img/manage/reverse-proxy/reverse-proxy-auth-modal.png differ diff --git a/src/pages/manage/reverse-proxy/authentication.mdx b/src/pages/manage/reverse-proxy/authentication.mdx index 1cac1a23..e1ebd81b 100644 --- a/src/pages/manage/reverse-proxy/authentication.mdx +++ b/src/pages/manage/reverse-proxy/authentication.mdx @@ -3,7 +3,7 @@ import {Note, Warning} from "@/components/mdx" export const description = 'Configure SSO, password, PIN, and header authentication methods, plus IP and country access restrictions, for NetBird Reverse Proxy services.' -# Reverse Proxy Authentication +# Reverse Proxy Authentication and Access Restrictions NetBird Reverse Proxy supports multiple authentication methods and connection-level access restrictions to control who can access your exposed services. You can enable one or more methods on each service, or leave a service completely public. Authentication and access restrictions are configured per service in the **Authentication** tab when creating or editing a service. @@ -135,6 +135,10 @@ Access restrictions control which connections are allowed to reach your service Access restrictions are evaluated **before** authentication. If a connection is blocked by an IP or country rule, it is rejected immediately without any authentication check. +

+ Authentication tab showing all available authentication methods +

+ ### IP CIDR restrictions You can define IP allowlists and blocklists using CIDR notation: