[GH-ISSUE #5672] ICE Agent is not initialized yet on android app #11845

Open
opened 2026-08-05 01:31:18 -04:00 by saavagebueno · 2 comments
Owner

Originally created by @sammm8989 on GitHub (Mar 24, 2026).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/5672

Describe the problem

On the android app we have connectivity problems. The app can authenticate to our self-hosted peer. But the peer doesn't connect, can be seen by "0 out of 1 Peers connected". Digging further in the problem we found out that no ICE packets are sent. Which we saw by tcpdumping on the server peer. ICE fails so the wireguard connection cannot be made. We found following logs:

03-23 16:13:12.043 10117 10193 E GoLog    : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/conn.go:280 OnRemoteAnswer, priority: None, status ICE: Disconnected, status relay: Disconnected
03-23 16:13:12.043 10117 10193 E GoLog    : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/handshaker.go:105 received answer, running version development, remote WireGuard listen port 11000, session id: <REDACTED_SESSION_ID>
03-23 16:13:12.043 10117 10193 E GoLog    : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_relay.go:49 Relay is not supported by remote peer
03-23 16:13:12.043 10117 10193 E GoLog    : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_relay.go:49 Relay is not supported by remote peer
03-23 16:13:12.045 10117 10499 E GoLog    : [DEBG] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:154 OnRemoteCandidate from peer <REDACTED_PEER_ID> -> udp4 host <REDACTED_IP>:11000 (resolved: <REDACTED_IP>:11000) candidate:<REDACTED_CANDIDATE_HASH>
03-23 16:13:12.045 10117 10499 E GoLog    : [WARN] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:156 ICE Agent is not initialized yet
03-23 16:13:12.046 10117 10499 E GoLog    : [DEBG] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:154 OnRemoteCandidate from peer <REDACTED_PEER_ID> -> udp4 srflx <REDACTED_IP>:11000 related 0.0.0.0:11000 (resolved: <REDACTED_IP>:11000) candidate:<REDACTED_CANDIDATE_HASH>
03-23 16:13:12.046 10117 10499 E GoLog    : [WARN] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:156 ICE Agent is not initialized yet

We get a ip from the range but cannot sent packages over the Wireguard tunnel. On the management server we see that we are connected.
Uninstalling and installing the app doesn't fix the problem.

To Reproduce

Steps to reproduce the behavior:

  1. Install Netbird android app from play store
  2. Change management url to self-hosted infra
  3. Connect -> authenticate
  4. Result => connected
  5. Disconnect
  6. Go to Android Settings -> Apps -> Apps management -> Netbird -> Storage usage -> Clear data
  7. Repeat steps 1-3
  8. Result authenticated but "0 of 1 Peers connected"

Expected behavior

It should read "1 of 1 Peers connected" and we should be able to send packages over the Wireguard tunnel.

Are you using NetBird Cloud?

We self-host management server, signal server, STUN, zitadel and OIDC.

NetBird version

We use following versions:

  • Android app: v0.3.2 (core 0.64.1)
  • Server-peer, management and signal (v0.64.5)

Is any other VPN software installed?

No

Debug output

netbird status -dA for the broken peer
<REDACTED_DEVICE_NAME>.domain:
NetBird IP: <REDACTED_INTERNAL_IP>
Public key: <REDACTED_PUBLIC_KEY>
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 16 hours, 47 minutes ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context
We could reproduce this error on two different androids, didn't find a way to fix this bug:

OS: Android 16
Kernel: 6.1.134

and

OS: Android 16
Kernel: 6.1.134

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @sammm8989 on GitHub (Mar 24, 2026). Original GitHub issue: https://github.com/netbirdio/netbird/issues/5672 **Describe the problem** On the android app we have connectivity problems. The app can authenticate to our self-hosted peer. But the peer doesn't connect, can be seen by "0 out of 1 Peers connected". Digging further in the problem we found out that no ICE packets are sent. Which we saw by tcpdumping on the server peer. ICE fails so the wireguard connection cannot be made. We found following logs: ``` 03-23 16:13:12.043 10117 10193 E GoLog : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/conn.go:280 OnRemoteAnswer, priority: None, status ICE: Disconnected, status relay: Disconnected 03-23 16:13:12.043 10117 10193 E GoLog : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/handshaker.go:105 received answer, running version development, remote WireGuard listen port 11000, session id: <REDACTED_SESSION_ID> 03-23 16:13:12.043 10117 10193 E GoLog : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_relay.go:49 Relay is not supported by remote peer 03-23 16:13:12.043 10117 10193 E GoLog : [INFO] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_relay.go:49 Relay is not supported by remote peer 03-23 16:13:12.045 10117 10499 E GoLog : [DEBG] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:154 OnRemoteCandidate from peer <REDACTED_PEER_ID> -> udp4 host <REDACTED_IP>:11000 (resolved: <REDACTED_IP>:11000) candidate:<REDACTED_CANDIDATE_HASH> 03-23 16:13:12.045 10117 10499 E GoLog : [WARN] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:156 ICE Agent is not initialized yet 03-23 16:13:12.046 10117 10499 E GoLog : [DEBG] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:154 OnRemoteCandidate from peer <REDACTED_PEER_ID> -> udp4 srflx <REDACTED_IP>:11000 related 0.0.0.0:11000 (resolved: <REDACTED_IP>:11000) candidate:<REDACTED_CANDIDATE_HASH> 03-23 16:13:12.046 10117 10499 E GoLog : [WARN] [peer: <REDACTED_PEER_ID>] client/internal/peer/worker_ice.go:156 ICE Agent is not initialized yet ``` We get a ip from the range but cannot sent packages over the Wireguard tunnel. On the management server we see that we are connected. Uninstalling and installing the app doesn't fix the problem. **To Reproduce** Steps to reproduce the behavior: 1. Install Netbird android app from play store 2. Change management url to self-hosted infra 3. Connect -> authenticate 4. Result => connected 5. Disconnect 6. Go to Android Settings -> Apps -> Apps management -> Netbird -> Storage usage -> Clear data 7. Repeat steps 1-3 8. Result authenticated but "0 of 1 Peers connected" **Expected behavior** It should read "1 of 1 Peers connected" and we should be able to send packages over the Wireguard tunnel. **Are you using NetBird Cloud?** We self-host management server, signal server, STUN, zitadel and OIDC. **NetBird version** We use following versions: * Android app: v0.3.2 (core 0.64.1) * Server-peer, management and signal (v0.64.5) **Is any other VPN software installed?** No **Debug output** **netbird status -dA for the broken peer** <REDACTED_DEVICE_NAME>.domain: NetBird IP: <REDACTED_INTERNAL_IP> Public key: <REDACTED_PUBLIC_KEY> Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 16 hours, 47 minutes ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** We could reproduce this error on two different androids, didn't find a way to fix this bug: OS: Android 16 Kernel: 6.1.134 and OS: Android 16 Kernel: 6.1.134 **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:31:18 -04:00
Author
Owner

@pierrechapuis commented on GitHub (Apr 1, 2026):

I have a similar issue.

Self-hosted NetBird server.

An Android device is connected to our NetBird network.

On the NetBird server side, everything seems ok, the Android device sees peers connected to it, and vice-versa.

But from the Android device itself, it shows 0 out of X connected.

No issue on the iOS counterpart.

<!-- gh-comment-id:4171873471 --> @pierrechapuis commented on GitHub (Apr 1, 2026): I have a similar issue. Self-hosted NetBird server. An Android device is connected to our NetBird network. On the NetBird server side, everything seems ok, the **Android device sees peers connected to it**, and vice-versa. **But from the Android device itself, it shows _0 out of X connected_.** No issue on the iOS counterpart.
Author
Owner

@MattFromTheFuture commented on GitHub (Apr 6, 2026):

I also can confirm I'm having the same issue, I can only connect via relay on the Android client.

<!-- gh-comment-id:4192834389 --> @MattFromTheFuture commented on GitHub (Apr 6, 2026): I also can confirm I'm having the same issue, I can only connect via relay on the Android client.
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#11845