[GH-ISSUE #5579] Custom Zone records are not removed when the Netbird client disconnects #10815

New Issue

saavagebueno · 2026-08-05T01:27:22-04:00

saavagebueno commented

2026-08-05 01:27:22 -04:00

Originally created by @sbeaudry-qms on GitHub (Mar 11, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5579

Custom Zones break after disconnection

Custom zones work wonderfully when connected, but when the netbird client (at least in 0.66.3 on Windows 11) disconnects, the zone no longer reverts to the pre-connected state, and name resolution for the zone is broken. I believe that whichever mechanism is being used on the the local adapter to intercept the requests, and redirect them to the netbird server DNS is not being properly cleaned up when disconnecting.

I use custom zone records to specify the netbird IP addresses (100.110,x,x) of known resources on my network that are running the netbird client, to cause netbird clients to communicate with those servers via the netbird IP range when connected. (I believe this is the intended purpose of the Custom Zones).

To Reproduce

Steps to reproduce the behavior:

Select a host/zone/DNS domain that already exists on your network/in the world without netbird (myhost.contoso.local).
from a client, before connecting to netbird, ping the host by name.. name resolution happens immediately via normal DNS, returning a public/private IP address (192.168.1.x)
In the netbird console, Create a Zone that matches a DNS domain that already exists outside of netbird (contoso.local)
In the netbird console, Create a host record in that zone (myhost.contoso.local) and specify a netbird ranged IP address (100.110.x.x)
Connect a netbird client that is scoped to the distribution group the zone applies to.
From the client, ping the host record you created in step 2. Name resolution works perfectly, but this time returns the netbird IP Address of the host (100.110.x.x), as expected.
Disconnect the netbird client.
Try to ping ANY host in the zone that was created. Name resolution will fail.
- A packet capture will show that all DNS requests for the zone/domain are being sent to 100.110.255.254 via the regular network adapter. Because the netbird adapter is not up, it is not reachable, and ALL DNS for the zone now fails.
The only way to resolve network communication I've found is to reboot the client machine.

** Expected behaviour **

The DNS redirection/interception that is put in place when the netbird connection is brought up should be removed when the connection is terminated/disconnected.

NetBird version
WIndows 11 - Netbird 0.66.3

Is any other VPN software installed?
No

Originally created by @sbeaudry-qms on GitHub (Mar 11, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5579 **Custom Zones break after disconnection** Custom zones work wonderfully when connected, but when the netbird client (at least in 0.66.3 on Windows 11) disconnects, the zone no longer reverts to the pre-connected state, and name resolution for the zone is broken. I believe that whichever mechanism is being used on the the local adapter to intercept the requests, and redirect them to the netbird server DNS is not being properly cleaned up when disconnecting. I use custom zone records to specify the netbird IP addresses (100.110,x,x) of known resources on my network that are running the netbird client, to cause netbird clients to communicate with those servers via the netbird IP range when connected. (I believe this is the intended purpose of the Custom Zones). **To Reproduce** Steps to reproduce the behavior: 1. Select a host/zone/DNS domain that already exists on your network/in the world without netbird (myhost.contoso.local). 2. from a client, before connecting to netbird, ping the host by name.. name resolution happens immediately via normal DNS, returning a public/private IP address (192.168.1.x) 3. In the netbird console, Create a Zone that matches a DNS domain that already exists outside of netbird (contoso.local) 4. In the netbird console, Create a host record in that zone (myhost.contoso.local) and specify a netbird ranged IP address (100.110.x.x) 5. Connect a netbird client that is scoped to the distribution group the zone applies to. 6. From the client, ping the host record you created in step 2. Name resolution works perfectly, but this time returns the netbird IP Address of the host (100.110.x.x), as expected. 7. Disconnect the netbird client. 8. Try to ping ANY host in the zone that was created. Name resolution will fail. - A packet capture will show that all DNS requests for the zone/domain are being sent to 100.110.255.254 via the regular network adapter. Because the netbird adapter is not up, it is not reachable, and ALL DNS for the zone now fails. 10. The only way to resolve network communication I've found is to reboot the client machine. ** Expected behaviour ** The DNS redirection/interception that is put in place when the netbird connection is brought up should be removed when the connection is terminated/disconnected. **NetBird version** WIndows 11 - Netbird 0.66.3 **Is any other VPN software installed?** No

saavagebueno added the triage-needed label 2026-08-05 01:27:22 -04:00

saavagebueno commented

2026-08-05 01:27:22 -04:00

@sbeaudry-qms commented on GitHub (Mar 11, 2026):

I've done some more investigation into this. The NrptRules are being properly removed from the registry (Get-DnsClientNrptRule shows an empty rules list after the shutdown), but the DnsCache is still serving the stale records. Windows now seems to block restarting the DnsCache to clear/flush the entries.

The only method I've been successful with, short of rebooting the machine, is killing the DnsCache process by PID, and letting windows respawn it (admittedly about as elegant as my singing voice at a karaoke bar). Still, it was better than having to reboot to get my network back. Obviously not a proper solution, but passing it on to maybe save you a few minutes of investigation (and providing the following PowerShell code for anyone else that comes across this issue needing an immediate fix (can't call it a solution).

$dnsPid = (Get-WmiObject Win32_Service -Filter "Name='Dnscache'").ProcessId
Write-Host "Will kill PID: $dnsPid"
Stop-Process -Id $dnsPid -Force

@sbeaudry-qms commented on GitHub (Mar 11, 2026): I've done some more investigation into this. The NrptRules are being properly removed from the registry (Get-DnsClientNrptRule shows an empty rules list after the shutdown), but the DnsCache is still serving the stale records. Windows now seems to block restarting the DnsCache to clear/flush the entries. The only method I've been successful with, short of rebooting the machine, is killing the DnsCache process by PID, and letting windows respawn it (admittedly about as elegant as my singing voice at a karaoke bar). Still, it was better than having to reboot to get my network back. Obviously not a proper solution, but passing it on to maybe save you a few minutes of investigation (and providing the following PowerShell code for anyone else that comes across this issue needing an immediate fix (can't call it a solution). $dnsPid = (Get-WmiObject Win32_Service -Filter "Name='Dnscache'").ProcessId Write-Host "Will kill PID: $dnsPid" Stop-Process -Id $dnsPid -Force

saavagebueno commented

2026-08-05 01:27:22 -04:00

@martin1ehm commented on GitHub (Apr 28, 2026):

Any news on this? This seems related to #3468 and #3356 as well. (and #4386 ?)

The NetBird Windows client (v 0.70.0) still appears to leave the Windows DNS Client / Dnscache / NRPT in a broken state after disconnecting, especially after a temporary network interruption while NetBird is connected.

Also, the configured Match Domains do not seem to be respected reliably. In my case, vpn.yourdomain.com is not included in any Match Domain, but after the disconnect/reconnect scenario it still stops resolving through the normal Windows resolver path.

Repro:

Connect NetBird on Windows 11
While NetBird is connected, interrupt the internet connection
Restore the internet connection
Disconnect NetBird
Try to resolve vpn.yourdomain.com

Observed behavior:

ping vpn.mydomain.com
Host not found / cannot resolve

This also breaks communication with the Windows domain environment. (like #2895 ?)
After this happens, the internal windowsdomain.local names that are intentionally configured in NetBird DNS Match Domains no longer resolve either.

As a result, domain-related communication is affected as well, including access to domain controllers, file servers, and other AD-integrated services that rely on the internal DNS zone.

I am looking for a permanent solution for this.

Maybe I missed something in the NetBird DNS/client configuration, but currently the only reliable recovery seems to be restarting the Windows laptop - this is not acceptable for daily use, especially for non-admin users and remote workers.

Is there any known working NetBird Windows client version where this DNS / Match Domains / Dnscache issue does not occur?

(Used AI for translation - sorry)

@martin1ehm commented on GitHub (Apr 28, 2026): Any news on this? This seems related to #3468 and #3356 as well. (and #4386 ?) The NetBird Windows client (v 0.70.0) still appears to leave the Windows DNS Client / Dnscache / NRPT in a broken state after disconnecting, especially after a temporary network interruption while NetBird is connected. Also, the configured Match Domains do not seem to be respected reliably. In my case, vpn.yourdomain.com is not included in any Match Domain, but after the disconnect/reconnect scenario it still stops resolving through the normal Windows resolver path. Repro: 1. Connect NetBird on Windows 11 2. While NetBird is connected, interrupt the internet connection 3. Restore the internet connection 4. Disconnect NetBird 5. Try to resolve vpn.yourdomain.com Observed behavior: ``` ping vpn.mydomain.com Host not found / cannot resolve ``` This also breaks communication with the Windows domain environment. (like #2895 ?) After this happens, the internal `windowsdomain.local` names that are intentionally configured in NetBird DNS Match Domains no longer resolve either. As a result, domain-related communication is affected as well, including access to domain controllers, file servers, and other AD-integrated services that rely on the internal DNS zone. I am looking for a permanent solution for this. Maybe I missed something in the NetBird DNS/client configuration, but currently the only reliable recovery seems to be restarting the Windows laptop - this is not acceptable for daily use, especially for non-admin users and remote workers. Is there any known working NetBird Windows client version where this DNS / Match Domains / Dnscache issue does not occur? (Used AI for translation - sorry)

saavagebueno commented

2026-08-05 01:27:22 -04:00

@martin1ehm commented on GitHub (May 8, 2026):

I found a workaround, although I’m not sure why this particular setup works, whether it is intended behavior, or whether it is suitable as a long-term solution.

I added two DNS server entries on the NetBird server:

The internal company DNS (192.168...) as server for all domains.
The exact same DNS server again, but with match domains configured -> windowsdomain.local.

Using only entry 1 or only entry 2 does not solve the issue. The problem only disappears when both entries are configured together.

(I have a static DNS entry in the Windows hosts file pointing to the VPS where my NetBird server is running. However, this alone did not solve the issue.)

I will continue testing this, but so far it looks like it is working.

UPDATE: It doesn't work reliably - Problem still existing with 0.71.0, 0.71.1 and 0.71.2...

@martin1ehm commented on GitHub (May 8, 2026): I found a workaround, although I’m not sure why this particular setup works, whether it is intended behavior, or whether it is suitable as a long-term solution. I added two DNS server entries on the NetBird server: 1. The internal company DNS (192.168...) as server for all domains. 2. The exact same DNS server again, but with match domains configured -> `windowsdomain.local`. Using only entry 1 or only entry 2 does not solve the issue. The problem only disappears when both entries are configured together. (I have a static DNS entry in the Windows hosts file pointing to the VPS where my NetBird server is running. However, this alone did not solve the issue.) I will continue testing this, but so far it looks like it is working. UPDATE: It doesn't work reliably - Problem still existing with 0.71.0, 0.71.1 and 0.71.2...

saavagebueno commented

2026-08-05 01:27:22 -04:00

@Enrica-r commented on GitHub (Aug 3, 2026):

I can provide some additional findings from a Windows 11 system running NetBird 0.76.1.

The behavior appears to be related to Windows DNS policy/NRPT entries not being removed when NetBird disconnects.

Environment

Windows 11
NetBird client: 0.76.1
Self-hosted NetBird management
Interface type: Userspace
NetBird DNS is intentionally used for several custom zones

My NetBird DNS configuration contains, among others:

sv.example.ch → 192.168.30.1:53
dev.example.ch → 192.168.30.1:53
martin.example2.ch → 192.168.179.2:53
marcelle.example2.ch → 192.168.1.2:53

When NetBird is connected, DNS works correctly.

However, after:

netbird down

the Windows DNS policies remain present.

For example:

Get-DnsClientNrptPolicy | Select-Object Namespace,NameServers

still returns:

.dev.example.ch              100.93.255.254
.sv.example.ch               100.93.255.254
.martin.example2.ch       100.93.255.254
.marcelle.example2.ch     100.93.255.254
.netbird.selfhosted           100.93.255.254
...

This remains unchanged even after NetBird reports:

Disconnected

The normal Windows DNS configuration is different and is working correctly:

DNS server: 192.168.102.2

For example, after netbird down:

nslookup dev.example.ch

successfully returns:

Server:  adguard.enrica.example2.ch
Address: 192.168.102.2

Name:    dev.example.ch
Address: 192.168.30.25

However:

Resolve-DnsName dev.guggach.ch

times out, and applications using the Windows DNS resolver cannot resolve the hostname.

This strongly suggests that the remaining Windows DNS policy is intercepting the query before the normal DNS configuration can be used.

Another interesting finding

netbird up --disable-dns does not appear to clean up the existing policy.

After:

netbird down
netbird up --disable-dns

netbird debug config correctly reports:

"disableDns": true

but the existing Windows DNS policies are still present:

.dev.example.ch    100.93.255.254
.sv.example.ch     100.93.255.254
...

So disableDns appears to disable NetBird DNS behavior for the current configuration, but does not remove the DNS policies that were previously installed.

NRPT / policy store observation

Interestingly:

Get-DnsClientNrptRule

returns nothing, while:

Get-DnsClientNrptPolicy

shows the NetBird-related policies.

The following registry policy location also exists:

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig

Furthermore, the NetBird debug output contains:

detected GPO DNS policy configuration, using policy store

This may be relevant to why the policies survive disconnect.

Reproduction

The issue is reliably reproducible:

Connect with netbird up
Verify that the custom zones resolve correctly
Run netbird down
Check Get-DnsClientNrptPolicy
The NetBird DNS policies are still present
Resolve-DnsName for the affected custom zones times out
nslookup, explicitly using the local DNS server, still resolves the names successfully
Rebooting Windows clears the problem

This also explains why simply restarting the Windows DNS Client service does not seem to be a practical workaround. The service cannot be stopped normally because other services depend on it, and Restart-Service Dnscache -Force also fails.

The important distinction in my case is that I do want NetBird DNS while connected. The expected behavior is therefore:

NetBird connected → NetBird DNS policies active
NetBird disconnected → NetBird DNS policies removed and Windows returns to the normal local DNS configuration

At the moment, the second part does not happen.

Hopefully these details help identify where the Windows DNS policy is being installed and why it is not being cleaned up on disconnect.

@Enrica-r commented on GitHub (Aug 3, 2026): I can provide some additional findings from a Windows 11 system running NetBird 0.76.1. The behavior appears to be related to Windows DNS policy/NRPT entries not being removed when NetBird disconnects. ### Environment * Windows 11 * NetBird client: 0.76.1 * Self-hosted NetBird management * Interface type: Userspace * NetBird DNS is intentionally used for several custom zones My NetBird DNS configuration contains, among others: * `sv.example.ch` → `192.168.30.1:53` * `dev.example.ch` → `192.168.30.1:53` * `martin.example2.ch` → `192.168.179.2:53` * `marcelle.example2.ch` → `192.168.1.2:53` When NetBird is connected, DNS works correctly. However, after: ```powershell netbird down ``` the Windows DNS policies remain present. For example: ```powershell Get-DnsClientNrptPolicy | Select-Object Namespace,NameServers ``` still returns: ```text .dev.example.ch 100.93.255.254 .sv.example.ch 100.93.255.254 .martin.example2.ch 100.93.255.254 .marcelle.example2.ch 100.93.255.254 .netbird.selfhosted 100.93.255.254 ... ``` This remains unchanged even after NetBird reports: ```text Disconnected ``` The normal Windows DNS configuration is different and is working correctly: ```text DNS server: 192.168.102.2 ``` For example, after `netbird down`: ```powershell nslookup dev.example.ch ``` successfully returns: ```text Server: adguard.enrica.example2.ch Address: 192.168.102.2 Name: dev.example.ch Address: 192.168.30.25 ``` However: ```powershell Resolve-DnsName dev.guggach.ch ``` times out, and applications using the Windows DNS resolver cannot resolve the hostname. This strongly suggests that the remaining Windows DNS policy is intercepting the query before the normal DNS configuration can be used. ### Another interesting finding `netbird up --disable-dns` does not appear to clean up the existing policy. After: ```powershell netbird down netbird up --disable-dns ``` `netbird debug config` correctly reports: ```json "disableDns": true ``` but the existing Windows DNS policies are still present: ```text .dev.example.ch 100.93.255.254 .sv.example.ch 100.93.255.254 ... ``` So `disableDns` appears to disable NetBird DNS behavior for the current configuration, but does not remove the DNS policies that were previously installed. ### NRPT / policy store observation Interestingly: ```powershell Get-DnsClientNrptRule ``` returns nothing, while: ```powershell Get-DnsClientNrptPolicy ``` shows the NetBird-related policies. The following registry policy location also exists: ```text HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig ``` Furthermore, the NetBird debug output contains: ```text detected GPO DNS policy configuration, using policy store ``` This may be relevant to why the policies survive disconnect. ### Reproduction The issue is reliably reproducible: 1. Connect with `netbird up` 2. Verify that the custom zones resolve correctly 3. Run `netbird down` 4. Check `Get-DnsClientNrptPolicy` 5. The NetBird DNS policies are still present 6. `Resolve-DnsName` for the affected custom zones times out 7. `nslookup`, explicitly using the local DNS server, still resolves the names successfully 8. Rebooting Windows clears the problem This also explains why simply restarting the Windows DNS Client service does not seem to be a practical workaround. The service cannot be stopped normally because other services depend on it, and `Restart-Service Dnscache -Force` also fails. The important distinction in my case is that I **do want NetBird DNS while connected**. The expected behavior is therefore: * NetBird connected → NetBird DNS policies active * NetBird disconnected → NetBird DNS policies removed and Windows returns to the normal local DNS configuration At the moment, the second part does not happen. Hopefully these details help identify where the Windows DNS policy is being installed and why it is not being cleaned up on disconnect.

Sign in to join this conversation.

Branches Tags

main

claude/agent-network-test-cases-p743vw

android/gui-integration

revert/component-types

feat-post_quantum_ml_kem

ice-stun-wg-demux

dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c

agent-network-setup-poc

dependabot/go_modules/aws-sdk-8f849ebaed

dependabot/github_actions/actions-a940c7c866

dependabot/go_modules/otel-e34c790afd

dependabot/go_modules/testcontainers-de325c0dd6

dependabot/go_modules/wireguard-dbd6b95108

dependabot/go_modules/pion-5f703e1eca

dependabot/go_modules/gorm-2271c8195b

fix-login-needed-check

dependabot/go_modules/google.golang.org/grpc-1.82.1

fix/ui-gtk3-support

enterprise-traefik-and-migration-fixes

disambiguate_p2p_metrics

revert/component-types-hookup

embedded-vnc

feature/ios-ssh

docs/agent-network-docs-update

dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.3

dependabot/go_modules/github.com/pion/stun/v3-3.1.5

fix-ssh-authorized-users-multi-rule

peer-acl-multi-source

reverse-proxy-crowdsec-appsec

reverse-proxy-allow-match-or

client-local-metrics

lazy-conn-per-peer

lazy-conn-rosenpass

dependabot/go_modules/github.com/gopacket/gopacket-1.7.0

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.6

dependabot/go_modules/github.com/pires/go-proxyproto-0.15.0

dependabot/go_modules/github.com/jackc/pgx/v5-5.10.0

dependabot/go_modules/github.com/oapi-codegen/runtime-1.6.0

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.4

dependabot/go_modules/github.com/pkg/sftp-1.13.11

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0

ssh-windows-privilege-check

fix/explicit-cors-handling

fix/remove-math-rand

test/gui-memory-leak-fix

fix/ui-status-dispatch

install-script-ui-dependencies

fix/grpc-get-network-map

fix/subscribe-status-coalesce

fix/tray-menu-item-leak

fix/windows-tray-race

feature/changeset

worktree-dns-route-qtype-fallthrough

mdm_integration

mlsmaycon-patch-2

feat/agent-network-ollama

proxy-tunnel-cache-ttl-env

coderabbitai/utg/1e5b0a5

grpc-acl

test/battery-drain

components-impl-drop-indexes-use-xids-no-resource-policy-map

fix/nmap-relevant-groups

e2e-guardrail-blocks-unselected-model

fix/lazyconn-cold-start-allowed-ips

vertex-guardrails-model-access-e2e

add-atomic-cache-ops

refactor/relay-foreign-cache

ci/trigger-release-tests

feature/kimi-3-agent-networks-dns-warmup

feature/dns-lazy-conn-warmup

daemon-ipc-acl

feature/ui-translation-key-parity-check

refactor/relay-foreign-cache-tests

fix/lazyconn-idle-keep-wg-peer

dmitri-propagate-auth-grant-types-on-combined

0.74.7-branch

diagnose-empty-vs-corrupt-state

windows-sleep-detector

fix/cli-up-wait-for-daemon

rp_key_persistency

feature/native-grpc

0.74.6-branch

0.74.6-branch-sync

0.74.5-branch-sync

0.74.4-branch

fix/remove-stale-peers-removal

fix/remove-stale-proxy-logic

fix/nsis-preserve-autostart-on-upgrade

refactor/peer-event-bus

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.3

dependabot/go_modules/github.com/pkg/sftp-1.13.10

components-impl-drop-indexes

fix-reset-aggregation-window-flake

dependabot/go_modules/github.com/pion/dtls/v3-3.1.5

0.74.x

fix/relay-states-lock

update-process-pkg

update-gopsutil-v4

fix/relay_states_lock

increase-sysinfo-timeout

dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1

dependabot/go_modules/github.com/eko/gocache/store/redis/v4-4.2.6

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.3

fix/fail-to-create-upnp-port-mapping-on-opnsense-firewall

0.74.3-branch

fix/routeselector-atomic-exit-node

netmap_progressive_alignment

nmap/components-impl

dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2

dependabot/go_modules/github.com/oapi-codegen/runtime-1.4.2

dependabot/go_modules/github.com/gopacket/gopacket-1.6.1

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0

dependabot/go_modules/github.com/pires/go-proxyproto-0.12.0

fix/signal-watchdog-sync-stop

docs/agent-network

test/affected-logic

fix/revert-ice-filter

refactor/simplify-affected-peers

pascal-filter-policies-by-direction

claude/lock-contention-peer-connect-g8t6au

dmitri-filter-policies-by-direction

refactor/migrate-profiles-to-go

profile-bindings-ios

fix/skip-restart-unchanged-route

fix/mgmt-cache-async-resolve

refactor/wails-update-105

client_lifetime_serialization_refactor

fix/browser-ssh-2

fix/ipv6-and-netstack-accept-loop

fix/browser-ssh

profile-id-name-test

refactor/mgmt-bootstrap

feat/getting-started-unified-wizard

socket-grpc-permissions

fix/mysql-index-migration

windows-dns-firewall

tests/enable-race-on-tests

ui-refactor-gtk3

feature/affected-peers-grpc

profile-id

lazyconn-first-packet-fix-v2

claude/focused-gates-VMTgb

ui-tray-linux-leftclick

fix/ctx-enrichment

daemon-owner

feature/android-client-ssh

worktree-accept-ra-forwarding

nmap/combined-deploy

task/align_protobuff_toolset

feature/session-extend

add-json-yaml-flags

refactor/ephemeral-cleanup

claude/webtransport-relay-wasm-mUjY9

claude/vnc-udp-feasibility-6KB1U

fix/wgport-config

e2e-windows-dns-combined

fix/login-cmd-root-flags

feat/reseller-openapi-spec

github-issue-resolver

add-steamos-support

fix-darwin-uninstaller

flutter-test

ci/freebsd-pkg-bootstrap

cached-serial-check-on-sync

fix-mgmt-cache-bypass-overlay

revert-easyjson-5938

revert-ice-5820

revert-firewalld-5928

refactor/permissions-manager

revert-dns-5935-systemd-resolved

revert-dns-5935-5945

revert-dns-5945-mgmt-cache

feature/log-most-busy-peers

prototype/ui-wails

coderabbitai/utg/8ae8f20

feature/use-peer-fqdn-on-https

release/0.68.3

add-slack-channel

claude/rdp-token-passthrough-eNcqW

transparent-proxy

fix/macos-stale-route-eexist

crowdsec-selfhosted

fix/remove-otel-units

entire/checkpoints/v1

fix/getting-started

feat/static-connectors-combined-server

feature/use-local-keys-embedded

feature/fleetdm

set-env-only-if-not-fork

feature/expose-has-channel

fix/connection-status-race

fix/filter-cgnat-cni-ice-candidates

feature/check-cert-locker-before-acme

test/proxy-fixes

test/proxy-mtu

prototype/ui-tauri

test/proxy-speed

fix-reused-ports

feat/migrate-to-embedded-idp

feature/add-serial-to-proxy-merged

deploy/proxy-serial

test/connection

feature/disable-legacy-port

feature/flag-to-disable-legacy-port

test/perftest

fix/http-redirect

poc-token-command

dn-reverse-proxy

prototype/reverse-proxy-rename

prototype/reverse-proxy-logs-pagination

feature/client-metrics

prototype/reverse-proxy-clusters

debug-dns-route

fix/win-dns-batch

add-extra-route-logs

job-stream-notify-disconnection-eof

deploy/secrets-manager

trigger-proxy-update

bug/update-ios-client-code-build-tags

sync-client-netmap-serial

log/conn-disconn

nmap/compaction-deploy

ci-win-test

feature/disk-encryption-check

wasm-debug

swap-dns-prio

fix/dex-config

feature/migrate-auto-groups-to-table

nmap/compaction

dex-nocgo-stub

feature/exclude-terraform-from-rate-limiting

test-freebsd

retries-refactor

coderabbitai/docstrings/b7e98ac

feat/integrate-zitadel

bug/ios-hanging-reconection

zitadel-idp

feat/network-map-serial

refactor/get-account-no-users

feat/auto-upgrade

feature/report-high-pat-id

feature/temporary-access-for-resource

fix/nmap-fwrules

dont-restart-dns

prototype/ui

update-gomobile

go-dns-for-ice

wasm-ldflags

test-ldflags

wasmbuild-test

feature/networks-s2s

vk/compare-nmaps

dbg/bothmaps

reorder-dns-shutdown

fix/relay-reconnection-race

fix/nmap-exitnodes

vk/debug/nmap-both

move-licensed-code

feat/better-daemon-connection-lost-message

feat/auto-update-2

test/timings

refactor/getaccount-raw

tests/nmap-getaccount

refactor/nmap

refactor/nmap-limit-buffer

feature/detect-mac-wakeup

feature/extract-modules

quick-setings

feat/sync-limiter

feature/store-cache-impl

fix-install-version

feature/store-metrics

feature/metrics-on-store

feature/use-gorm-cache

loadtest-signal

unsymmetrical-squash

refactor/reducate-signaling

test/update-reduce

feature/store-cache

feature/remote-debug

cli-ws-proxy-backend-addr

feat/mgmt-map-serial

snyk-fix-d9d0081a4c7f9137bdb59d0d50a141a2

snyk-fix-7415cea5a11acd66753540ca2c598c63

job-yml-update

feature/android-allow-selecting-routes

fix/up-sequence

fix/dns-hash-update

snyk-fix-967adae9863f17f108ce8948d9117b8d

log/getaccount-by-peer

signal-suppressor

dns-exit-node

feature/auto-updates

feature/cache-srv-key

merged-fixes

fix/missed-offers-and-debug

debug-and-fixes

poc-wasm-clean-backend-s2s

test/remote-debug

debug-api

fix/remove-gpo-if-empty

fix/test-freebsd

fix/mysql-setup

fix/remove-logout-btn

handle-existing-domain-user

chore/unify-domain-validation

snyk-fix-c5fafc8a50ce1f29046e25a1fc346185

feat/profile-edit-btn

snyk-fix-a54966211e18d4cf67e5a2757cc006d1

log-short-id

feat/logout-ephemeral

log-checks

batch-wg-ops

nb-interface-default

feat/aws-integration

add/race-test

feature/relay-feature-versioning

fix/systemd-service-logs

poc/preprocessed-map

add-account-onboarding

bind-ipv6

fix/merge-main

logs/peerlogs-addpeer

feature/net-297-network-migration

feature/support-skip-auto-apply-exit-node-routes

set-cmd

set-command-with-cursor

feature/limit-update-channel

stop-using-locking-share

feature/poc-lazy-detection

feature/net-248-removal-of-sync-mutex-locks

test/multiple-peer-logging

preresolve

add-ns-punnycode-support

apply-routes-early

windows-search-domains

fix/connecting-route-filter

feature/management/rest-client/impersonate

debug-local-records

resource-fields-snake-case

test/grpc-rate-limit

traffic-correlation-policy

feature/rest-client-options

feat/events-metrics

feature/buf-cli

test/add-ratelimiter

test/remove-write-lock-on-add-peer

fix/add-peer-semaphore

feature/users-roles-endpoint

mlsmaycon-patch-1

debug-user-role

chore/primary-key-on-networks

feature/update-account-peers-buffer-startup

remove-ubuntu2004-runners

refactor/permissions-no-pat-allowed

ref/logrus-factory

use-conntrack-zone

deploy/permissions-account

feature/lazy-connection-idle

ref/improve-test-cov

restore-pr-3440

test/increase-grpc-timeouts

feat/buffer-account-peers-update

test/networkmapgeneration-changes

feature/base-manager

feature/flow-receiver

chore/benchmark-with-large-runner

refactor/handshake-initiator

client/ui-update-systray-icons

userspace-router

wgwatcher-test

output-if-key-already-exists

fix/relay-reconnection

feature/port-forwarding-client-codecleaning

detached2

test/callbacks-nil-iceconninfo

refactor/optimize-peer-expiration

enable-udp-port-for-docker-template

fix/relay-update

feature/apply-posture-netmap

fix/group-update-existing-resource

conntrack-stats

upgrade-okta-sdk

multi-price

test/conn-stat

set-min-parallel-tests-for-management

dns-interceptor

debug-dns

router-dns

add-static-system-info

debug-0.29.4

debug-0.33.0

account-refactoring

relay/2800_quic

route-get-account-refactoring

test/seed-random-routes

feature/get-account-refactoring

test/reconnect-race-condition

refactor/get-account-usage

feature/add-session-id-to-update-channel

improve-ipv4conn

fix/async-pion-event-handling

debug

add-offload

feature/validate-group-association-debug

fix/limit-conn-for-sqlite

test/engine-iface

test/transaction-for-jwt-sync

fix/engine-stop-in-foreground

feature/add-mysql-support

test-migration

refactor/header-size-values

relay/eliminate-gob

test/signal-dispatcher-with-relay

relay/debug

validate-icon

feature/ipv6-support

use-pre-expanded-peers-map

feature/use-signal-dispatcher

validate/peer-status

add-read-write-times

fix/sync-peer-race

feature/relay-status

netmap

evaluate/network-map-hash

fix/lower-dns-resolve-interval-on-fail

feature/relay

fix/go-mod-version

upgrade-nftables

synology-userspace-mode

fix/use-ip-for-default-routes-on-darwin

fix/proxy_close

enable-release-workflow-on-pr

deploy/peer-performance

feature/permanent-turn

feature/permanent-turn-proxy

deploy/posture-check-sqlite

feature/optimize_sqlite_save

debug-ios-behavior

fix/delete-route-only-after-adding

tshoot/windows-logger

remove-new-routing

refactor/eliminate-repo-dependency

add-arm-to-ci

refactor-demo-account-object

test/abc2

test/abc

send-ssh-rosenpass-config-meta

refactor-demo

ensure-schedule-never-runs-non-positive

feature/peer-validator-groupmgm

feature/peer-validator-fix

fix/include-active-dashboard-users

fix/handle-canceling-schedule

fix/geo-download

debug-google-workspace

yury/resolve-ip-to-location

feature/extend-sysinfo

sqlite-async-peer-status

yury/add-postgresql-store

fix/route

test-build

posture-checks-poc

debug-keycloak-idp

poc/netstack

for-pascal-tmp

peer-logout-management

manual-peer-logout

detached

chore/refactor-management

test/dns-bind

fix/enforce-acl-for-containers

yury/use-sync-map-in-updatechannel

fix/events-key-handling

filter-cache-on-load-account

fix/user-expiration

handle-user-context-cancellation

nb-client-k8s-statefulset

fake-addr

fix/iptables_in_docker

ebpf-debug

update-getting-started-flow-use-postgres

fix/peer_list_notification

feature/device-authentication-with-client-secret

feature/keep_alive

feat-groups-from-jwt

separate_proxy_from_wgconfig

fix/wg_conn

wg_conn_fix

wg_bind_parallel_processing

fix-rollback-get-acls

proxy_cfg_cleanup

performance-improvement-rego

update-lock-log-level

feat-client-side-acl

refactor/move_grpcserver_logic_to_account_manager

feature/event-storage

feature/update-idp-redeeming-invite

feature/api-peer-info

return-groupminimum-setupkey

feature/interface-bind

documentation_enhancement

fix-peer-registration

ssh

users_cache

pass-client-caller

client_caller_type

revert-283-feat-fix-windows-installer

periodic-peer-updates

ebpf

braginini/wasm

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: DYNR/netbird#10815