ADORSYS-GIS / ADORSYS-GIS/openstack

Netbird Installation and Network Monitoring

Ouverte
#64 0 commentaires 0 réactions 1 personne assignée Réclamée par @Donemmanuelo Voir sur GitHub
Langage dominant
Shell
Étoiles
0
Forks
1
Métriques de merge des PR
Aucune PR mergée en 30 j

Description

### Description
This ticket involves setting up a secure peer-to-peer mesh network using Netbird and establishing robust monitoring.

### Sub-tasks
- [ ] **2.1: Control Plane Deployment**
- [ ] Decide between Netbird Cloud and a self-hosted control plane.
- [ ] If self-hosting, provision the necessary infrastructure.

- [ ] **2.2: Client Installation and Configuration**
- [ ] Install Netbird clients using OS-native packages on all target devices.
- [ ] Enable IP forwarding only on designated gateway nodes.
- [ ] Automate client installation and configuration where possible.

- [ ] **2.3: Access Control and Security**
- [ ] Implement default-deny ACLs as a baseline.
- [ ] Define granular, least-privilege access rules for groups and services.
- [ ] Configure split tunneling and per-group DNS settings.
- [ ] Enforce SSO/OIDC for user authentication.
- [ ] Establish a process for regular WireGuard key rotation.

- [ ] **2.4: Observability and Monitoring**
- [ ] Integrate system and Netbird logs with a central SIEM.
- [ ] Implement monitoring to track device posture and connectivity status.
- [ ] Set up alerts for critical network events.

- [ ] **2.5: Network Troubleshooting and Maintenance**
- [ ] Document troubleshooting steps, including validation of outbound UDP traffic.
- [ ] Schedule periodic reviews of group memberships, ACLs, and network routes.

### Relevant Links
- [NetBird Documentation](https://docs.netbird.io/)
- [NetBird GitHub Repository](https://github.com/netbirdio/netbird)

Guide de contribution

Aucun guide de contribution indexé pour ce dépôt

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.