{"rid":"egress/netbird-reverse-proxy","card":{"rid":"egress/netbird-reverse-proxy","eid":"netbird","topic":"egress","slug":"netbird-reverse-proxy","provider":"NetBird Reverse Proxy","url":"https://docs.netbird.io/manage/reverse-proxy","domain":"netbird.io","category":"WireGuard overlay with public L4 proxy","tier":"free","verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","confidence":"unverified","binding":"none","identity_kind":"email","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":"cli,rest","egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-23T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-23","stale_on":"2026-11-06","n_evidence":3,"usd_month":null,"usd_per_tb_month":null,"summary":"NetBird Free is 0 EUR, 'up to 5 users', '100 machines'; the pricing page lists P2P connections, Networks, SSO, access controls, Private DNS, Network Routes a...","duplicate_of":null,"n_unknown":2},"record":{"topic":"egress","slug":"netbird-reverse-proxy","provider":"NetBird Reverse Proxy","url":"https://docs.netbird.io/manage/reverse-proxy","category":"WireGuard overlay with public L4 proxy","tier":"free","free_tier":{"stated":"NetBird Free is 0 EUR, 'up to 5 users', '100 machines'; the pricing page lists P2P connections, Networks, SSO, access controls, Private DNS, Network Routes and NetBird SSH, and does not list Reverse Proxy on any plan.","unit":"users","metered_on":"identity-count","source_url":"https://netbird.io/pricing","read_on":"2026-10-23","notes":""},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://docs.netbird.io/manage/reverse-proxy","notes":""},"retention":{"stated":"not applicable","days":null,"source_url":"https://docs.netbird.io/manage/reverse-proxy","notes":""},"egress":{"terms":"none published: the pricing page charges per active user and machine and states no byte allowance; ingress: tcp+udp","metered":false,"free_allowance":"none published","price_per_tb":null,"source_url":"https://docs.netbird.io/manage/reverse-proxy"},"interface":["cli","rest"],"interface_detail":"'The netbird expose command lets peers expose local services to the public internet through the NetBird reverse proxy'","tooling":"netbird CLI or the dashboard; no WireGuard client needed","chaining":"turns a free VM running only the NetBird agent into a host with a public TCP or UDP port on a NetBird domain, which removes the need for a tunnel broker prefix","limits":[{"kind":"volume-quota","value":"none stated; billing is per active user and machine","source":"https://netbird.io/pricing"}],"limits_note":"","binding":"none","binding_note":"No byte quota and no rate is published, so nothing in the vocabulary fails at 1 TiB/month. Whether the feature is available on the free plan at all is the open question, and that is a plan gate rather than a limit kind.","identity_cost":{"kind":"email","detail":"'No credit card is required.' A NetBird account, which on Free is up to 5 users, with social SSO available.","country":"None"},"reliability_note":"UDP sessions are reaped after an idle timeout; ephemeral expose sessions die 90 seconds after the daemon stops renewing; Rosenpass is not supported with the reverse proxy.","confidence":"unverified","confidence_note":"The L4 TCP and UDP capability is documented in the vendor's docs. Whether the free plan includes Reverse Proxy is not: it is absent from every plan list on the pricing page. One sentence naming the plan that includes it would raise this to documented.","evidence":[{"url":"https://docs.netbird.io/manage/reverse-proxy","date":"2026-10-23","proved":"HTTP and L4 modes, the UDP relay with session tracking, the public domain with automatic TLS, and the WireGuard tunnel to the peer"},{"url":"https://netbird.io/pricing","date":"2026-10-23","proved":"Free is 0 EUR with up to 5 users and 100 machines, and Reverse Proxy appears in no plan list"},{"url":"https://docs.netbird.io/manage/reverse-proxy/expose-from-cli","date":"2026-10-23","proved":"'This supports both HTTP and L4 (TCP, UDP, TLS) protocols' and the ephemeral session model"}],"verdict":"qualifies-with-caveat","verified_at":"2026-10-23T00:00:00.000Z","price_per_tb_month":"EUR 0 on Free, subject to whether the feature is included","notes":"This is the only free-plan path found where a WireGuard peer gets a public TCP and UDP listener with no card and no account review, provided the feature is not gated. L4 services listen on a port on the proxy cluster and several services can share a port; custom ports depend on a cluster flag. A self-hosted deployment needs Traefik. The alternative reading, that Reverse Proxy is paid, cannot be excluded from the pages read, which is why the rung is unverified rather than documented. L4 services carry no browser SSO, only IP and country restrictions. Re-read 2026-10-23: the docs open with 'Availability: Reverse Proxy is currently in beta', and netbird expose needs an account administrator to enable Peer Expose and name allowed peer groups.","extras":{"wg_path":"inside-udp","wg_detail":"'Incoming traffic to that domain is received at the NetBird proxy cluster, then forwarded through an encrypted NetBird tunnel to the target peer.' The diagram is labelled 'through WireGuard tunnel', so the WireGuard datagram rides NetBird's own transport rather than a .conf the client holds.","ingress":"tcp+udp","volume_tib_month":null,"volume_stated":"none published: the pricing page charges per active user and machine and states no byte allowance","bytes_transit":"yes","transit_note":"NetBird's proxy cluster terminates the public side and forwards over its WireGuard mesh"}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:volume-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price-per-tb","num":0,"unit":"TB","per":"month","currency":"EUR","usd":0,"fx_date":"2026-10-23","parse":"ok"}],"unknown":[["$.per_object_cap.stated","not-applicable"],["$.retention.stated","not-applicable"]],"history":[],"drift":[]}