ADORSYS-GIS / ADORSYS-GIS/openstack

Netbird Installation and Network Monitoring

未关闭
#64 0 条评论 0 个 reaction 已指派 1 人 已被 @Donemmanuelo 认领 在 GitHub 查看
主要语言
Shell
星标
0
派生
1
PR 合并指标
30 天内没有已合并 PR

描述

### Description
This ticket involves setting up a secure peer-to-peer mesh network using Netbird and establishing robust monitoring.

### Sub-tasks
- [ ] **2.1: Control Plane Deployment**
- [ ] Decide between Netbird Cloud and a self-hosted control plane.
- [ ] If self-hosting, provision the necessary infrastructure.

- [ ] **2.2: Client Installation and Configuration**
- [ ] Install Netbird clients using OS-native packages on all target devices.
- [ ] Enable IP forwarding only on designated gateway nodes.
- [ ] Automate client installation and configuration where possible.

- [ ] **2.3: Access Control and Security**
- [ ] Implement default-deny ACLs as a baseline.
- [ ] Define granular, least-privilege access rules for groups and services.
- [ ] Configure split tunneling and per-group DNS settings.
- [ ] Enforce SSO/OIDC for user authentication.
- [ ] Establish a process for regular WireGuard key rotation.

- [ ] **2.4: Observability and Monitoring**
- [ ] Integrate system and Netbird logs with a central SIEM.
- [ ] Implement monitoring to track device posture and connectivity status.
- [ ] Set up alerts for critical network events.

- [ ] **2.5: Network Troubleshooting and Maintenance**
- [ ] Document troubleshooting steps, including validation of outbound UDP traffic.
- [ ] Schedule periodic reviews of group memberships, ACLs, and network routes.

### Relevant Links
- [NetBird Documentation](https://docs.netbird.io/)
- [NetBird GitHub Repository](https://github.com/netbirdio/netbird)

贡献指南

这个仓库没有索引到贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。