Secure Bridge (VPN)

To give you powerful insights from your data, AnalytAI needs to “talk” to your database. If your database is on your personal computer or a private office server, it is usually hidden from the internet for safety.

The Secure Bridge (powered by NetBird) creates a private, encrypted mesh network between AnalytAI and your machine — no complicated firewall rules or port forwarding required.

---

Why do I need this?

1. Safety First: Your database stays completely hidden from the public internet. Only AnalytAI can reach it through this private mesh network.
2. Zero Configuration: You don’t need to touch your router settings, open ports, or set up “port forwarding.” NetBird handles all of that automatically.
3. End-to-End Encryption: Every byte of data travelling through the bridge is encrypted using WireGuard — a modern, high-speed VPN protocol trusted across the industry.

---

How It Works

When you add a VPN device in AnalytAI, the system generates one-time setup instructions. You install the NetBird client on your machine, run the generated command, and your device joins the secure mesh network. AnalytAI can then reach your database directly over the private network without your data ever touching the public internet.

┌──────────────┐         Encrypted Tunnel          ┌──────────────┐
│  Your Machine│ ◄──── WireGuard (NetBird) ────►   │   AnalytAI   │
│  (Database)  │       100.x.x.x ↔ 100.x.x.x      │   Server     │
└──────────────┘                                    └──────────────┘

---

🪟 Windows Setup Guide

1. Generate Setup Instructions

1. Log into the AnalytAI Dashboard.
2. Go to Settings → VPN Connections.
3. Click “Add Device”, give it a name (e.g. “Office PC”), and click Create.
4. Copy the generated command — it is shown only once, so save it somewhere safe.

2. Install NetBird

1. Download the NetBird client from netbird.io/download.
2. Run the installer and follow the prompts.

3. Connect to the Bridge

1. Open PowerShell as Administrator (right-click Start → “Windows PowerShell (Admin)”).
2. Run the command shown in AnalytAI:

netbird up --management-url https://netbird.analytai.in --setup-key <SETUP_KEY>

---

🍎 Mac Setup Guide

1. Install NetBird

Open your Terminal and run:

brew install netbirdio/tap/netbird
sudo netbird service install
sudo netbird service start

2. Connect to the Bridge

Use the command from AnalytAI after clicking Add Device:

netbird up --management-url https://netbird.analytai.in --setup-key <SETUP_KEY>

---

🐧 Linux Setup Guide

1. Install NetBird

Open your Terminal and run:

curl -fsSL https://pkgs.netbird.io/install.sh | sh

2. Connect to the Bridge

Use the command from AnalytAI after clicking Add Device:

netbird up --management-url https://netbird.analytai.in --setup-key <SETUP_KEY>

---

Verify Connection ✅

After running the connect command, verify everything is working:

netbird status

You should see output like:

Management: Connected
NetBird IP: 100.x.x.x
Interface: netbird0

In the AnalytAI dashboard, your device should now show as Connected 🟢.

---

Managing Your Devices

From the AnalytAI Dashboard → Settings → VPN Connections, you can:

• Add Device to generate one-time connection instructions.
• View all your connected devices and their live status.
• Delete a device permanently to revoke its access.

---

💡 Troubleshooting

• Permission Denied? Always run your terminal or PowerShell as Administrator (Windows) or use sudo (Mac / Linux).
• Key Expired? Setup instructions expire after 30 days by default for security. Generate fresh instructions by clicking Add Device again.
• Connection Timeout? Make sure the NetBird service is running — sudo netbird service start on Mac / Linux.
• Already registered? If your device was previously connected, run netbird down first, then netbird up again with the new key.

Using Docker?

If your database runs inside a Docker container, you can install NetBird on the host machine of the Docker container rather than the container itself. As long as your database port (e.g. 5432) is exposed to the host, AnalytAI will be able to reach it through the VPN.