Skip to content

Forward UDP 443 for QUIC in external relay setup #946

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
0xMudit wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Forward UDP 443 for QUIC in external relay setup #946

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion src/pages/selfhosted/maintenance/scaling/set-up-external-relays.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ For each relay server you want to deploy:
- Public IP address
- A domain name pointing to the server (e.g., `relay-us.example.com`)
- Docker installed
- Firewall ports open: **80/tcp** (Let's Encrypt HTTP challenge), **443/tcp** (relay), and **3478/udp** (STUN). If you configure multiple STUN ports, open all of them
- Firewall ports open: **80/tcp** (Let's Encrypt HTTP challenge), **443/tcp** and **443/udp** (relay: WebSocket and QUIC), and **3478/udp** (STUN). If you configure multiple STUN ports, open all of them

## Generate Authentication Secret

Expand Down Expand Up @@ -68,7 +68,10 @@ services:
container_name: netbird-relay
restart: unless-stopped
ports:
# TCP for the WebSocket transport
- '443:443'
# UDP for QUIC; without the /udp suffix Docker forwards TCP only
- '443:443/udp'
# Expose all ports listed in NB_STUN_PORTS
- '3478:3478/udp'
env_file:
Expand Down