[GH-ISSUE #5445] netbird expose : self-hosted NetBird 0.66.0 ERR_SSL_PROTOCOL_ERROR #11466

Closed
opened 2026-08-05 01:29:46 -04:00 by saavagebueno · 3 comments
Owner

Originally created by @openapphub on GitHub (Feb 25, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5445

Describe the problem

When exposing a local service using netbird expose 18081 on a self-hosted NetBird 0.66.0 instance, the generated proxy URL (https://qprct7whb0nq.proxy.xxx.com) is inaccessible. The browser returns ERR_SSL_PROTOCOL_ERROR. I have attempted to recreate the service more than 5 times, but the issue persists.

To Reproduce

  1. Run on a self-hosted NetBird 0.66.0 instance:
    netbird expose 18081
    
  2. The system returns success message:
    Service exposed successfully!
      Name:     qprct7whb0nq
      URL:      https://qprct7whb0nq.proxy.xxx.com
      Domain:   qprct7whb0nq.proxy.xxx.com
      Protocol: http
      Port:     18081
    
  3. Access the URL in a browser
  4. See error: ERR_SSL_PROTOCOL_ERROR

Expected behavior

The exposed service should be accessible via HTTPS without SSL/TLS errors.

Debug output

  1. Local curl test shows TLS internal error:
curl -k -v -H "Host: netbird.xxx.com" https://localhost/relay/
...
TLSv1.3 (IN), TLS alert, internal error (592)
OpenSSL/3.0.18: error:0A000438:SSL routines::tlsv1 alert internal error
  1. Traefik logs show critical warnings:
WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? 
WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4"}) for container "/netbird-proxy".
WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label?
WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label?
  1. Key observations:
  • Traefik cannot find the expected netbird network and falls back to netbird_netbird
  • gRPC communication (signal and management services) works correctly (returns 200)
  • HTTP to HTTPS redirect works correctly (308)
  • The issue occurs during TLS handshake (tlsv1 alert internal error)

Are you using NetBird Cloud?
No, self-hosted (0.66.0)

NetBird version
0.66.0

Is any other VPN software installed?
No

Additional context

This appears to be a Docker network naming issue. Traefik expects the network name to be netbird, but the actual Docker network name is netbird_netbird (with the compose project prefix). While Traefik can automatically fall back to the correct network, this might be affecting TLS certificate generation or routing configuration, leading to HTTPS handshake failures.

The gRPC services (management/signal) are working fine, suggesting the issue is specific to the TLS proxy functionality.

Have you tried these troubleshooting steps?

  • Checked Traefik logs
  • Multiple service recreations
  • Verified gRPC services are working
  • Confirmed port 443 is listening
  • Checked firewall settings
  • Restarted NetBird client
Originally created by @openapphub on GitHub (Feb 25, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5445 **Describe the problem** When exposing a local service using `netbird expose 18081` on a self-hosted NetBird 0.66.0 instance, the generated proxy URL (`https://qprct7whb0nq.proxy.xxx.com`) is inaccessible. The browser returns `ERR_SSL_PROTOCOL_ERROR`. I have attempted to recreate the service more than 5 times, but the issue persists. **To Reproduce** 1. Run on a self-hosted NetBird 0.66.0 instance: ```bash netbird expose 18081 ``` 2. The system returns success message: ``` Service exposed successfully! Name: qprct7whb0nq URL: https://qprct7whb0nq.proxy.xxx.com Domain: qprct7whb0nq.proxy.xxx.com Protocol: http Port: 18081 ``` 3. Access the URL in a browser 4. See error: ERR_SSL_PROTOCOL_ERROR **Expected behavior** The exposed service should be accessible via HTTPS without SSL/TLS errors. **Debug output** 1. Local curl test shows TLS internal error: ```bash curl -k -v -H "Host: netbird.xxx.com" https://localhost/relay/ ... TLSv1.3 (IN), TLS alert, internal error (592) OpenSSL/3.0.18: error:0A000438:SSL routines::tlsv1 alert internal error ``` 2. Traefik logs show critical warnings: ``` WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4"}) for container "/netbird-proxy". WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? ``` 3. Key observations: - Traefik cannot find the expected `netbird` network and falls back to `netbird_netbird` - gRPC communication (signal and management services) works correctly (returns 200) - HTTP to HTTPS redirect works correctly (308) - The issue occurs during TLS handshake (tlsv1 alert internal error) **Are you using NetBird Cloud?** No, self-hosted (0.66.0) **NetBird version** 0.66.0 **Is any other VPN software installed?** No **Additional context** This appears to be a Docker network naming issue. Traefik expects the network name to be `netbird`, but the actual Docker network name is `netbird_netbird` (with the compose project prefix). While Traefik can automatically fall back to the correct network, this might be affecting TLS certificate generation or routing configuration, leading to HTTPS handshake failures. The gRPC services (management/signal) are working fine, suggesting the issue is specific to the TLS proxy functionality. **Have you tried these troubleshooting steps?** - [x] Checked Traefik logs - [x] Multiple service recreations - [x] Verified gRPC services are working - [x] Confirmed port 443 is listening - [ ] Checked firewall settings - [ ] Restarted NetBird client
saavagebueno added the triage-needed label 2026-08-05 01:29:46 -04:00
Author
Owner

@openapphub commented on GitHub (Feb 25, 2026):

root@hk517925943183:~/netbird# ss -tlnp | grep 443
LISTEN 0      8192          0.0.0.0:443        0.0.0.0:*    users:(("docker-proxy",pid=896822,fd=8))
LISTEN 0      8192             [::]:443           [::]:*    users:(("docker-proxy",pid=896830,fd=8))
root@hk517925943183:~/netbird# curl -I http://localhost/relay/
HTTP/1.1 308 Permanent Redirect
Location: https://localhost/relay/
Date: Wed, 25 Feb 2026 09:30:01 GMT
Content-Length: 18

root@hk517925943183:~/netbird# docker logs netbird-traefik --tail 50
More details on: https://doc.traefik.io/traefik/contributing/data-collection/

2026-02-25T09:28:14Z INF Starting provider aggregator *aggregator.ProviderAggregator
2026-02-25T09:28:14Z INF Starting provider *file.Provider
2026-02-25T09:28:14Z INF Starting provider *traefik.Provider
2026-02-25T09:28:14Z INF Starting provider *docker.Provider
2026-02-25T09:28:14Z INF Starting provider *acme.ChallengeTLSALPN
2026-02-25T09:28:14Z INF Starting provider *acme.Provider
2026-02-25T09:28:14Z INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=letsencrypt.acme
2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? container=proxy-netbird-2170de5f284861bb8f649ba75cd0a763db3f2a8b479171b510b3904f3d77785d providerName=docker serviceName=proxy-tls
2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-proxy". container=proxy-netbird-2170de5f284861bb8f649ba75cd0a763db3f2a8b479171b510b3904f3d77785d providerName=docker serviceName=proxy-tls
2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server-h2c
2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-server". container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server-h2c
2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server
2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-server". container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server
2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-19ccd19bf76d97723075dbe5182085ee8f8d25020a3c4bb8eec4911ba6e4bed4 providerName=docker serviceName=dashboard
2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-dashboard". container=dashboard-netbird-19ccd19bf76d97723075dbe5182085ee8f8d25020a3c4bb8eec4911ba6e4bed4 providerName=docker serviceName=dashboard
82.158.225.84 - - [25/Feb/2026:09:28:17 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 4 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:19 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 5 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:19 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 6 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:21 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 10 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:23 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 11 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:24 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 13 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:24 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 15 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:25 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 16 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:26 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 17 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:26 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 18 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:27 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 19 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:29 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 21 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:32 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 22 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:35 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 23 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:37 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 24 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:38 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 25 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:28:46 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 27 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
38.95.76.217 - - [25/Feb/2026:09:28:46 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 28 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:28:47 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 30 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:29:00 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 31 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
38.95.76.217 - - [25/Feb/2026:09:29:01 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 32 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:29:10 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 34 "netbird-grpc@docker" "h2c://172.30.0.3:80" 2ms
82.158.225.84 - - [25/Feb/2026:09:29:10 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 35 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:29:32 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 36 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:29:45 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 37 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:29:48 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 38 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
192.42.116.45 - - [25/Feb/2026:09:29:49 +0000] "GET / HTTP/1.0" 404 19 "-" "-" 39 "-" "-" 0ms
38.135.25.142 - - [25/Feb/2026:09:29:51 +0000] "GET / HTTP/1.0" 404 19 "-" "-" 40 "-" "-" 0ms
82.158.225.84 - - [25/Feb/2026:09:30:05 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 42 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.100 - - [25/Feb/2026:09:30:20 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 43 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
82.158.225.84 - - [25/Feb/2026:09:30:27 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 44 "netbird-grpc@docker" "h2c://172.30.0.3:80" 2ms
82.158.225.84 - - [25/Feb/2026:09:30:38 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 45 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms
192.42.116.45 - - [25/Feb/2026:09:30:42 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 46 "-" "-" 0ms
<!-- gh-comment-id:3958533422 --> @openapphub commented on GitHub (Feb 25, 2026): ``` root@hk517925943183:~/netbird# ss -tlnp | grep 443 LISTEN 0 8192 0.0.0.0:443 0.0.0.0:* users:(("docker-proxy",pid=896822,fd=8)) LISTEN 0 8192 [::]:443 [::]:* users:(("docker-proxy",pid=896830,fd=8)) root@hk517925943183:~/netbird# curl -I http://localhost/relay/ HTTP/1.1 308 Permanent Redirect Location: https://localhost/relay/ Date: Wed, 25 Feb 2026 09:30:01 GMT Content-Length: 18 root@hk517925943183:~/netbird# docker logs netbird-traefik --tail 50 More details on: https://doc.traefik.io/traefik/contributing/data-collection/ 2026-02-25T09:28:14Z INF Starting provider aggregator *aggregator.ProviderAggregator 2026-02-25T09:28:14Z INF Starting provider *file.Provider 2026-02-25T09:28:14Z INF Starting provider *traefik.Provider 2026-02-25T09:28:14Z INF Starting provider *docker.Provider 2026-02-25T09:28:14Z INF Starting provider *acme.ChallengeTLSALPN 2026-02-25T09:28:14Z INF Starting provider *acme.Provider 2026-02-25T09:28:14Z INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=letsencrypt.acme 2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? container=proxy-netbird-2170de5f284861bb8f649ba75cd0a763db3f2a8b479171b510b3904f3d77785d providerName=docker serviceName=proxy-tls 2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-proxy". container=proxy-netbird-2170de5f284861bb8f649ba75cd0a763db3f2a8b479171b510b3904f3d77785d providerName=docker serviceName=proxy-tls 2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server-h2c 2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-server". container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server-h2c 2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server 2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-server". container=netbird-server-netbird-cbd8d19ac096b6b303aad7f4b7b66b58be18e0faa6c7839822faffcd23bd98f4 providerName=docker serviceName=netbird-server 2026-02-25T09:28:14Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-19ccd19bf76d97723075dbe5182085ee8f8d25020a3c4bb8eec4911ba6e4bed4 providerName=docker serviceName=dashboard 2026-02-25T09:28:14Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "3a3b57cde6da6d3fd0337bfe5f5ab38f2788ccb20d6c65cf403a66f59fca144e"}) for container "/netbird-dashboard". container=dashboard-netbird-19ccd19bf76d97723075dbe5182085ee8f8d25020a3c4bb8eec4911ba6e4bed4 providerName=docker serviceName=dashboard 82.158.225.84 - - [25/Feb/2026:09:28:17 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 4 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:19 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 5 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:19 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 6 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:21 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 10 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:23 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 11 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:24 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 13 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:24 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 15 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:25 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 16 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:26 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 17 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:26 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 18 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:27 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 19 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:29 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 21 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:32 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 22 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:35 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 23 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:37 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 24 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:38 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 25 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:28:46 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 27 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 38.95.76.217 - - [25/Feb/2026:09:28:46 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 28 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:28:47 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 30 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:29:00 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 31 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 38.95.76.217 - - [25/Feb/2026:09:29:01 +0000] "POST /management.ManagementService/GetServerKey HTTP/2.0" 200 61 "-" "-" 32 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:29:10 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 34 "netbird-grpc@docker" "h2c://172.30.0.3:80" 2ms 82.158.225.84 - - [25/Feb/2026:09:29:10 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 35 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:29:32 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 36 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:29:45 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 37 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:29:48 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 38 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 192.42.116.45 - - [25/Feb/2026:09:29:49 +0000] "GET / HTTP/1.0" 404 19 "-" "-" 39 "-" "-" 0ms 38.135.25.142 - - [25/Feb/2026:09:29:51 +0000] "GET / HTTP/1.0" 404 19 "-" "-" 40 "-" "-" 0ms 82.158.225.84 - - [25/Feb/2026:09:30:05 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 42 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.100 - - [25/Feb/2026:09:30:20 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 43 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 82.158.225.84 - - [25/Feb/2026:09:30:27 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 44 "netbird-grpc@docker" "h2c://172.30.0.3:80" 2ms 82.158.225.84 - - [25/Feb/2026:09:30:38 +0000] "POST /signalexchange.SignalExchange/Send HTTP/2.0" 200 5 "-" "-" 45 "netbird-grpc@docker" "h2c://172.30.0.3:80" 1ms 192.42.116.45 - - [25/Feb/2026:09:30:42 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 46 "-" "-" 0ms ```
Author
Owner

@Nordlicht-13 commented on GitHub (Apr 20, 2026):

When starting up
docker compose up
[+] up 5/5
✔ Network netbird_netbird Created 0.1s
✔ Container netbird-traefik Created 0.2s
✔ Container netbird-dashboard Created 0.2s
✔ Container netbird-server Created 0.1s
✔ Container netbird-proxy Created 0.1s
Attaching to netbird-dashboard, netbird-proxy, netbird-server, netbird-traefik

I also get this warnings and an error from netbird-traefik:

...
netbird-traefik  | 2026-04-20T07:50:08Z WRN Traefik can reject some encoded characters in the request path. When your backend is not fully compliant with [RFC 3986](https://datatracker.ietf.org/doc/html/rfc3986), it is recommended to set these options to `false` to avoid split-view situation. Refer to the documentation for more details: https://doc.traefik.io/traefik/v3.6/migrate/v3/#encoded-characters-configuration-default-values
netbird-traefik  | 2026-04-20T07:50:08Z INF Traefik version 3.6.13 built on 2026-04-07T09:58:57Z version=3.6.13
...
netbird-traefik  | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? container=proxy-netbird-fa56dac4081ee32857e416fcb7c80d075175990af2d10eaeaddcc47ce710427f providerName=docker serviceName=proxy-tls
netbird-traefik  | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-proxy". container=proxy-netbird-fa56dac4081ee32857e416fcb7c80d075175990af2d10eaeaddcc47ce710427f providerName=docker serviceName=proxy-tls
netbird-traefik  | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-4eee854a95b14e93365099182b753de91bc1960bff6d1a847b360af9acb8f056 providerName=docker serviceName=dashboard
netbird-traefik  | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-dashboard". container=dashboard-netbird-4eee854a95b14e93365099182b753de91bc1960bff6d1a847b360af9acb8f056 providerName=docker serviceName=dashboard
netbird-traefik  | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server-h2c
netbird-traefik  | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-server". container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server-h2c
netbird-traefik  | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server
netbird-traefik  | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-server". container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server
...
netbird-traefik  | 2026-04-20T07:50:10Z ERR Error while dialing backend error="dial tcp 172.30.0.4:8443: connect: connection refused"
<!-- gh-comment-id:4279014381 --> @Nordlicht-13 commented on GitHub (Apr 20, 2026): When starting up docker compose up [+] up 5/5 ✔ Network netbird_netbird Created 0.1s ✔ Container netbird-traefik Created 0.2s ✔ Container netbird-dashboard Created 0.2s ✔ Container netbird-server Created 0.1s ✔ Container netbird-proxy Created 0.1s Attaching to netbird-dashboard, netbird-proxy, netbird-server, netbird-traefik I also get this warnings and an error from netbird-traefik: ``` ... netbird-traefik | 2026-04-20T07:50:08Z WRN Traefik can reject some encoded characters in the request path. When your backend is not fully compliant with [RFC 3986](https://datatracker.ietf.org/doc/html/rfc3986), it is recommended to set these options to `false` to avoid split-view situation. Refer to the documentation for more details: https://doc.traefik.io/traefik/v3.6/migrate/v3/#encoded-characters-configuration-default-values netbird-traefik | 2026-04-20T07:50:08Z INF Traefik version 3.6.13 built on 2026-04-07T09:58:57Z version=3.6.13 ... netbird-traefik | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-proxy". Maybe you're missing the project's prefix in the label? container=proxy-netbird-fa56dac4081ee32857e416fcb7c80d075175990af2d10eaeaddcc47ce710427f providerName=docker serviceName=proxy-tls netbird-traefik | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.4" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-proxy". container=proxy-netbird-fa56dac4081ee32857e416fcb7c80d075175990af2d10eaeaddcc47ce710427f providerName=docker serviceName=proxy-tls netbird-traefik | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-dashboard". Maybe you're missing the project's prefix in the label? container=dashboard-netbird-4eee854a95b14e93365099182b753de91bc1960bff6d1a847b360af9acb8f056 providerName=docker serviceName=dashboard netbird-traefik | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.2" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-dashboard". container=dashboard-netbird-4eee854a95b14e93365099182b753de91bc1960bff6d1a847b360af9acb8f056 providerName=docker serviceName=dashboard netbird-traefik | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server-h2c netbird-traefik | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-server". container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server-h2c netbird-traefik | 2026-04-20T07:50:09Z WRN Could not find network named "netbird" for container "/netbird-server". Maybe you're missing the project's prefix in the label? container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server netbird-traefik | 2026-04-20T07:50:09Z WRN Defaulting to first available network (&{"netbird_netbird" "172.30.0.3" '\x00' "" "ed172a01c0528e4582a5c836c7bf20bd5cd641c5319091541e3d7675a5f8dd0e"}) for container "/netbird-server". container=netbird-server-netbird-e9cbcddd0d82cd2c1b944285ddf5816ee929189cddcb163506a442afca46d13c providerName=docker serviceName=netbird-server ... netbird-traefik | 2026-04-20T07:50:10Z ERR Error while dialing backend error="dial tcp 172.30.0.4:8443: connect: connection refused" ```
Author
Owner

@masterwishx commented on GitHub (Jun 17, 2026):

Have same issue with auto install netbird + trafiek

So we have network: netbird_netbird, but trafiek use netbird

So we should change trafiek network name to: netbird_netbird

Or change network name to netbird

Should be auto install fixed?

<!-- gh-comment-id:4730005342 --> @masterwishx commented on GitHub (Jun 17, 2026): Have same issue with auto install netbird + trafiek So we have network: `netbird_netbird`, but trafiek use `netbird` So we should change trafiek network name to: `netbird_netbird` Or change network name to `netbird` Should be auto install fixed?
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#11466