[GH-ISSUE #5796] Not working with CNAME records on NixOS #11087

Open
opened 2026-08-05 01:28:26 -04:00 by saavagebueno · 1 comment
Owner

Originally created by @insightfulbriyan on GitHub (Apr 3, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5796

Describe the problem

I've just created fresh installation of NixOS and installed NetBird on my computer. The problem I encountered was that I couldn't access a site whose DNS record was of type CNAME.

To Reproduce

Steps to reproduce the behavior:

  1. Connect to NetBird
  2. Have a DNS records as follows:
  • foo.example.com A 69.69.69.69
  • bar.example.com CNAME foo.example.com
  1. Try to ping or otherwise request bar.example.com
  2. Get no response

ping foo.example.com
PING foo.example.com (69.69.69.69) 56(84) bytes of data.
64 bytes from 69.69.69.69: icmp_seq=1 ttl=54 time=15.7 ms
64 bytes from 69.69.69.69: icmp_seq=2 ttl=54 time=18.3 ms
64 bytes from 69.69.69.69: icmp_seq=3 ttl=54 time=17.7 ms
^C
--- foo.example.com ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 15.688/17.201/18.264/1.099 ms

ping bar.example.com
ping: bar.example.com: Name or service not known

i manually changed IPs and domain names in command output above for privacy

Expected behavior

I expected to be able to ping/request the site in browser.

Are you using NetBird Cloud?

I'm using self-hosted NetBird.

NetBird version

0.60.2

Is any other VPN software installed?

WireGuard

Debug output

To help us resolve the problem, please attach the following anonymized status output

Peers detail:
redacted.vpn.anon-uSC97.domain:
NetBird IP: redacted/32
Public key: redacted
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 16 minutes, 20 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

redacted.vpn.anon-uSC97.domain:
NetBird IP: redacted/32
Public key: redacted
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 16 minutes, 20 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

redacted.vpn.anon-uSC97.domain:
NetBird IP: redacted/32
Public key: redacted
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 16 minutes, 20 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

redacted.vpn.anon-uSC97.domain:
NetBird IP: redacted/32
Public key: redacted
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 16 minutes, 20 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

+about 20 more clients

Events:
[INFO] SYSTEM (6fb3ce00-cfa9-46ad-bc16-6bd959090a7d)
Message: Network map updated
Time: 1 hour, 21 minutes ago
[INFO] SYSTEM (bcecd515-84ed-401f-bff1-0c5498b13b3f)
Message: Network map updated
Time: 1 hour, 18 minutes ago
[INFO] SYSTEM (4433939d-17e4-4713-9c68-0202bea76d92)
Message: Network map updated
Time: 1 hour, 6 minutes ago
[INFO] SYSTEM (09189e04-8c54-44c8-8fff-d9f0459e8d7a)
Message: Network map updated
Time: 1 hour, 6 minutes ago
[INFO] SYSTEM (86ad4f10-f56c-4953-bf6d-355accbd3ecf)
Message: Network map updated
Time: 23 minutes, 10 seconds ago
[INFO] SYSTEM (4760bde3-b96a-460a-b2ed-415a1f65ef6d)
Message: Network map updated
Time: 23 minutes, 7 seconds ago
[INFO] SYSTEM (1f0d9d82-d7f8-4ae2-b563-0b6d2f0127fd)
Message: Network map updated
Time: 21 minutes, 42 seconds ago
[INFO] SYSTEM (62a400dd-4d97-4a60-9458-0494b3d2a35f)
Message: Network map updated
Time: 19 minutes, 27 seconds ago
[INFO] SYSTEM (c0086e96-3952-4647-ad31-bcc8d0b314a1)
Message: Network map updated
Time: 19 minutes, 2 seconds ago
[INFO] SYSTEM (35bf8df0-12dd-4fa2-a84b-cde418df3dec)
Message: Network map updated
Time: 16 minutes, 20 seconds ago
OS: linux/amd64
Daemon version: 0.60.2
CLI version: 0.60.2
Profile: default
Management: Connected to https://vpn.anon-uSC97.domain:443
Signal: Connected to https://vpn.anon-uSC97.domain:443
Relays:
[stun:vpn.anon-uSC97.domain:3478] is Checking...
[rels://vpn.anon-uSC97.domain:443] is Available
Nameservers:
[9.9.9.9:53, 149.112.112.112:53] for [.] is Available
FQDN: redacted.vpn.anon-uSC97.domain
NetBird IP: redacted/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: false
SSH Server: Disabled
Networks: -
Forwarding rules: 0
Peers count: 6/25 Connected

Additional context
After manually adding the IP "42.42.42.42 bar.example.com" in my hosts it now works.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions -> fresh install from Nix package manager
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @insightfulbriyan on GitHub (Apr 3, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5796 **Describe the problem** I've just created fresh installation of NixOS and installed NetBird on my computer. The problem I encountered was that I couldn't access a site whose DNS record was of type CNAME. **To Reproduce** Steps to reproduce the behavior: 1. Connect to NetBird 2. Have a DNS records as follows: - foo.example.com A 69.69.69.69 - bar.example.com CNAME foo.example.com 3. Try to ping or otherwise request bar.example.com 4. Get no response ping foo.example.com PING foo.example.com (69.69.69.69) 56(84) bytes of data. 64 bytes from 69.69.69.69: icmp_seq=1 ttl=54 time=15.7 ms 64 bytes from 69.69.69.69: icmp_seq=2 ttl=54 time=18.3 ms 64 bytes from 69.69.69.69: icmp_seq=3 ttl=54 time=17.7 ms ^C --- foo.example.com ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2003ms rtt min/avg/max/mdev = 15.688/17.201/18.264/1.099 ms ping bar.example.com ping: bar.example.com: Name or service not known _i manually changed IPs and domain names in command output above for privacy_ **Expected behavior** I expected to be able to ping/request the site in browser. **Are you using NetBird Cloud?** I'm using self-hosted NetBird. **NetBird version** 0.60.2 **Is any other VPN software installed?** WireGuard **Debug output** To help us resolve the problem, please attach the following anonymized status output Peers detail: redacted.vpn.anon-uSC97.domain: NetBird IP: redacted/32 Public key: redacted Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 16 minutes, 20 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s redacted.vpn.anon-uSC97.domain: NetBird IP: redacted/32 Public key: redacted Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 16 minutes, 20 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s redacted.vpn.anon-uSC97.domain: NetBird IP: redacted/32 Public key: redacted Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 16 minutes, 20 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s redacted.vpn.anon-uSC97.domain: NetBird IP: redacted/32 Public key: redacted Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 16 minutes, 20 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s +about 20 more clients Events: [INFO] SYSTEM (6fb3ce00-cfa9-46ad-bc16-6bd959090a7d) Message: Network map updated Time: 1 hour, 21 minutes ago [INFO] SYSTEM (bcecd515-84ed-401f-bff1-0c5498b13b3f) Message: Network map updated Time: 1 hour, 18 minutes ago [INFO] SYSTEM (4433939d-17e4-4713-9c68-0202bea76d92) Message: Network map updated Time: 1 hour, 6 minutes ago [INFO] SYSTEM (09189e04-8c54-44c8-8fff-d9f0459e8d7a) Message: Network map updated Time: 1 hour, 6 minutes ago [INFO] SYSTEM (86ad4f10-f56c-4953-bf6d-355accbd3ecf) Message: Network map updated Time: 23 minutes, 10 seconds ago [INFO] SYSTEM (4760bde3-b96a-460a-b2ed-415a1f65ef6d) Message: Network map updated Time: 23 minutes, 7 seconds ago [INFO] SYSTEM (1f0d9d82-d7f8-4ae2-b563-0b6d2f0127fd) Message: Network map updated Time: 21 minutes, 42 seconds ago [INFO] SYSTEM (62a400dd-4d97-4a60-9458-0494b3d2a35f) Message: Network map updated Time: 19 minutes, 27 seconds ago [INFO] SYSTEM (c0086e96-3952-4647-ad31-bcc8d0b314a1) Message: Network map updated Time: 19 minutes, 2 seconds ago [INFO] SYSTEM (35bf8df0-12dd-4fa2-a84b-cde418df3dec) Message: Network map updated Time: 16 minutes, 20 seconds ago OS: linux/amd64 Daemon version: 0.60.2 CLI version: 0.60.2 Profile: default Management: Connected to https://vpn.anon-uSC97.domain:443 Signal: Connected to https://vpn.anon-uSC97.domain:443 Relays: [stun:vpn.anon-uSC97.domain:3478] is Checking... [rels://vpn.anon-uSC97.domain:443] is Available Nameservers: [9.9.9.9:53, 149.112.112.112:53] for [.] is Available FQDN: redacted.vpn.anon-uSC97.domain NetBird IP: redacted/16 Interface type: Kernel Quantum resistance: false Lazy connection: false SSH Server: Disabled Networks: - Forwarding rules: 0 Peers count: 6/25 Connected **Additional context** After manually adding the IP "42.42.42.42 bar.example.com" in my hosts it now works. **Have you tried these troubleshooting steps?** - [ ] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions -> fresh install from Nix package manager - [ ] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:28:26 -04:00
Author
Owner

@jnfrati commented on GitHub (Apr 7, 2026):

@insightfulbriyan are the DNS records registered within Netbird's DNS functionality?

<!-- gh-comment-id:4198515191 --> @jnfrati commented on GitHub (Apr 7, 2026): @insightfulbriyan are the DNS records registered within Netbird's DNS functionality?
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#11087