[GH-ISSUE #1512] Andriod phone: connected to 0/5 peers, no internet #2537

New Issue

Closed

opened 2026-08-05 00:47:39 -04:00 by saavagebueno · 19 comments

saavagebueno commented 2026-08-05 00:47:39 -04:00

Owner

Copy Link

Originally created by @europacafe on GitHub (Jan 31, 2024).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/1512

Phone: Xiaomi Mi10T Pro, Android 12
Netbird app: v.0.24.4, Netbird cloud
When I initially added my phone to a new peer, everything was working fine, but later it no longer saw other peers (Windows, iPad, Unraid, Debian). The app displayed connected 0/5 peers. Tried disconnecting and connecting several times to no avail. The only solution is to create a new peer again (by changing server--->use netbird server), then it started working again for a while before no peer connected.

I use it at home and tried it with and without wifi connection.

NetBird status -d output: (n/a)

Originally created by @europacafe on GitHub (Jan 31, 2024). Original GitHub issue: https://github.com/netbirdio/netbird/issues/1512 Phone: Xiaomi Mi10T Pro, Android 12 Netbird app: v.0.24.4, Netbird cloud When I initially added my phone to a new peer, everything was working fine, but later it no longer saw other peers (Windows, iPad, Unraid, Debian). The app displayed connected 0/5 peers. Tried disconnecting and connecting several times to no avail. The only solution is to create a new peer again (by changing server--->use netbird server), then it started working again for a while before no peer connected. I use it at home and tried it with and without wifi connection. **NetBird status -d output:** (n/a) 

saavagebueno added the clientAndroidtriage labels 2026-08-05 00:47:39 -04:00

saavagebueno closed this issue 2026-08-05 00:47:39 -04:00

saavagebueno commented 2026-08-05 00:47:39 -04:00

Author

Owner

Copy Link

@Luxosity commented on GitHub (Mar 26, 2024):

Phone: Google Pixel 6a, Android 14
Netbird Android app: v.0.0.20, Netbird Agent: 0.25.6, Netbird Selfhosted

Having the same issue. Never worked for me. Reinstalled app and have the same issue. Shows its connected in the Admin portal. It also shows there is an update to 0.26.3 but unsure how to update the agent for the android app since 0.0.20 is the latest.

<!-- gh-comment-id:2020798791 --> @Luxosity commented on GitHub (Mar 26, 2024): Phone: Google Pixel 6a, Android 14 Netbird Android app: v.0.0.20, Netbird Agent: 0.25.6, Netbird Selfhosted Having the same issue. Never worked for me. Reinstalled app and have the same issue. Shows its connected in the Admin portal. It also shows there is an update to 0.26.3 but unsure how to update the agent for the android app since 0.0.20 is the latest.

saavagebueno commented 2026-08-05 00:47:39 -04:00

Author

Owner

Copy Link

@ptpu commented on GitHub (Apr 3, 2024):

Having the same issue. Never worked for me. Reinstalled app and have the same issue. Shows its connected in the Admin portal

<!-- gh-comment-id:2035425266 --> @ptpu commented on GitHub (Apr 3, 2024): Having the same issue. Never worked for me. Reinstalled app and have the same issue. Shows its connected in the Admin portal

saavagebueno commented 2026-08-05 00:47:39 -04:00

Author

Owner

Copy Link

@jumski commented on GitHub (Apr 8, 2024):

I have the same issue. Pixel 6, grapheneos. Disabled battery optimizations

<!-- gh-comment-id:2042127831 --> @jumski commented on GitHub (Apr 8, 2024): I have the same issue. Pixel 6, grapheneos. Disabled battery optimizations

saavagebueno commented 2026-08-05 00:47:39 -04:00

Author

Owner

Copy Link

@pappz commented on GitHub (Apr 9, 2024):

Hello!
Are you using any policy or route settings? Could you send me logs from Android device? Here is the guide on how can you collect it.

<!-- gh-comment-id:2044462088 --> @pappz commented on GitHub (Apr 9, 2024): Hello! Are you using any policy or route settings? Could you send me logs from Android device? [Here](https://docs.netbird.io/how-to/troubleshooting-client#on-android) is the guide on how can you collect it.

saavagebueno commented 2026-08-05 00:47:39 -04:00

Author

Owner

Copy Link

@jumski commented on GitHub (Apr 11, 2024):

Hey @pappz .

I do not use any policies but i have a route defined.
I haven't added any devices to its group (my omission) so it should not be in effect right?

Logs from my phone (I redacted peer IDs, probably over cautious).

04-11 10:40:04.214 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A>
04-11 10:40:04.244 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:04.244 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:04.245 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:04.245 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:40:04.391 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation
04-11 10:40:05.174 E/GoLog   ( 2792): [TRAC] [question: {latency.discord.media. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:05.213 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 36.809977ms to query the upstream 192.168.1.100:53
04-11 10:40:13.995 E/GoLog   ( 2792): [TRAC] [question: {www.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:14.006 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 10.478353ms to query the upstream 192.168.1.100:53
04-11 10:40:14.943 E/GoLog   ( 2792): [TRAC] [question: {footprints-pa.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:15.003 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 58.430501ms to query the upstream 192.168.1.100:53
04-11 10:40:17.004 E/GoLog   ( 2792): [TRAC] [question: {firebaselogging.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:17.012 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 6.917806ms to query the upstream 192.168.1.100:53
04-11 10:40:20.974 E/GoLog   ( 2792): [TRAC] [question: {play.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:20.986 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 11.559367ms to query the upstream 192.168.1.100:53
04-11 10:40:21.413 E/GoLog   ( 2792): [TRAC] [question: {androidpay-users-pa.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:40:21.492 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 79.2323ms to query the upstream 192.168.1.100:53
04-11 10:40:25.334 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C>
04-11 10:40:25.353 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0
04-11 10:40:25.361 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed
04-11 10:40:25.366 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C>
04-11 10:40:25.380 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s
04-11 10:40:25.987 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C>
04-11 10:40:26.006 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:26.007 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:26.007 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:26.007 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:40:26.053 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation
04-11 10:40:32.682 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B>
04-11 10:40:32.682 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0
04-11 10:40:32.682 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed
04-11 10:40:32.684 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B>
04-11 10:40:32.684 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s
04-11 10:40:33.698 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B>
04-11 10:40:33.710 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:33.710 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:33.710 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:33.710 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:40:33.755 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation
04-11 10:40:45.644 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A>
04-11 10:40:45.644 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0
04-11 10:40:45.646 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed
04-11 10:40:45.647 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A>
04-11 10:40:45.648 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s
04-11 10:40:47.093 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A>
04-11 10:40:47.133 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:47.135 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:47.135 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:40:47.135 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:40:47.185 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation
04-11 10:41:07.230 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B>
04-11 10:41:07.230 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0
04-11 10:41:07.230 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed
04-11 10:41:07.232 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B>
04-11 10:41:07.232 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s
04-11 10:41:08.772 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C>
04-11 10:41:08.773 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0
04-11 10:41:08.773 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed
04-11 10:41:08.775 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C>
04-11 10:41:08.775 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s
04-11 10:41:09.006 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B>
04-11 10:41:09.016 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:09.016 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:09.016 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:09.016 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:41:09.059 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation
04-11 10:41:10.635 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C>
04-11 10:41:10.668 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:10.669 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:10.670 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:41:10.759 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation
04-11 10:41:20.059 E/GoLog   ( 2792): [TRAC] [question: {g.whatsapp.net. 1 1}] client/internal/dns/upstream.go:73 received an upstream question
04-11 10:41:20.069 E/GoLog   ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 9.297038ms to query the upstream 192.168.1.100:53
04-11 10:41:28.441 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A>
04-11 10:41:28.441 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0
04-11 10:41:28.441 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A>
04-11 10:41:28.441 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s
04-11 10:41:28.441 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed
04-11 10:41:30.202 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A>
04-11 10:41:30.231 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:30.231 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:30.232 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:30.232 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:41:30.348 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation
04-11 10:41:42.536 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B>
04-11 10:41:42.536 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0
04-11 10:41:42.537 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed
04-11 10:41:42.539 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B>
04-11 10:41:42.542 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s
04-11 10:41:44.329 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B>
04-11 10:41:44.372 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:44.373 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:44.373 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:44.373 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:41:44.423 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation
04-11 10:41:53.485 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C>
04-11 10:41:53.486 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0
04-11 10:41:53.486 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed
04-11 10:41:53.486 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C>
04-11 10:41:53.486 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s
04-11 10:41:54.086 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C>
04-11 10:41:54.108 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:54.109 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:54.110 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:41:54.110 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:41:54.204 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation
04-11 10:42:11.602 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A>
04-11 10:42:11.602 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0
04-11 10:42:11.602 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed
04-11 10:42:11.604 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A>
04-11 10:42:11.605 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s
04-11 10:42:13.106 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A>
04-11 10:42:13.125 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:13.125 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:13.125 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:13.125 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:42:13.166 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation
04-11 10:42:17.900 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B>
04-11 10:42:17.901 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0
04-11 10:42:17.902 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed
04-11 10:42:17.903 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B>
04-11 10:42:17.904 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s
04-11 10:42:19.880 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B>
04-11 10:42:19.883 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:19.884 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:19.884 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:42:19.919 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation
04-11 10:42:36.927 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C>
04-11 10:42:36.927 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0
04-11 10:42:36.927 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C>
04-11 10:42:36.927 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s
04-11 10:42:36.928 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed
04-11 10:42:37.738 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C>
04-11 10:42:37.756 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:37.756 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:37.756 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:37.756 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:42:37.799 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation
04-11 10:42:53.398 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B>
04-11 10:42:53.398 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0
04-11 10:42:53.398 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed
04-11 10:42:53.400 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B>
04-11 10:42:53.400 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s
04-11 10:42:54.422 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A>
04-11 10:42:54.422 E/GoLog   ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0
04-11 10:42:54.422 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed
04-11 10:42:54.423 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A>
04-11 10:42:54.424 E/GoLog   ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s
04-11 10:42:54.840 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B>
04-11 10:42:54.870 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:54.871 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:54.872 E/GoLog   ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied
04-11 10:42:54.872 E/GoLog   ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed
04-11 10:42:54.924 E/GoLog   ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation
04-

<!-- gh-comment-id:2049241840 --> @jumski commented on GitHub (Apr 11, 2024): Hey @pappz . I do not use any policies but i have a route defined. I haven't added any devices to its group (my omission) so it should not be in effect right? Logs from my phone (I redacted peer IDs, probably over cautious). ``` 04-11 10:40:04.214 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A> 04-11 10:40:04.244 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:04.244 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:04.245 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:04.245 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:40:04.391 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation 04-11 10:40:05.174 E/GoLog ( 2792): [TRAC] [question: {latency.discord.media. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:05.213 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 36.809977ms to query the upstream 192.168.1.100:53 04-11 10:40:13.995 E/GoLog ( 2792): [TRAC] [question: {www.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:14.006 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 10.478353ms to query the upstream 192.168.1.100:53 04-11 10:40:14.943 E/GoLog ( 2792): [TRAC] [question: {footprints-pa.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:15.003 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 58.430501ms to query the upstream 192.168.1.100:53 04-11 10:40:17.004 E/GoLog ( 2792): [TRAC] [question: {firebaselogging.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:17.012 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 6.917806ms to query the upstream 192.168.1.100:53 04-11 10:40:20.974 E/GoLog ( 2792): [TRAC] [question: {play.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:20.986 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 11.559367ms to query the upstream 192.168.1.100:53 04-11 10:40:21.413 E/GoLog ( 2792): [TRAC] [question: {androidpay-users-pa.googleapis.com. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:40:21.492 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 79.2323ms to query the upstream 192.168.1.100:53 04-11 10:40:25.334 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C> 04-11 10:40:25.353 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0 04-11 10:40:25.361 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed 04-11 10:40:25.366 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C> 04-11 10:40:25.380 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s 04-11 10:40:25.987 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C> 04-11 10:40:26.006 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:26.007 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:26.007 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:26.007 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:40:26.053 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation 04-11 10:40:32.682 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B> 04-11 10:40:32.682 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0 04-11 10:40:32.682 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed 04-11 10:40:32.684 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B> 04-11 10:40:32.684 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s 04-11 10:40:33.698 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B> 04-11 10:40:33.710 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:33.710 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:33.710 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:33.710 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:40:33.755 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation 04-11 10:40:45.644 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A> 04-11 10:40:45.644 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0 04-11 10:40:45.646 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed 04-11 10:40:45.647 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A> 04-11 10:40:45.648 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s 04-11 10:40:47.093 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A> 04-11 10:40:47.133 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:47.135 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:47.135 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:40:47.135 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:40:47.185 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation 04-11 10:41:07.230 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B> 04-11 10:41:07.230 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0 04-11 10:41:07.230 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed 04-11 10:41:07.232 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B> 04-11 10:41:07.232 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s 04-11 10:41:08.772 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C> 04-11 10:41:08.773 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0 04-11 10:41:08.773 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed 04-11 10:41:08.775 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C> 04-11 10:41:08.775 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s 04-11 10:41:09.006 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B> 04-11 10:41:09.016 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:09.016 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:09.016 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:09.016 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:41:09.059 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation 04-11 10:41:10.635 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C> 04-11 10:41:10.668 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:10.669 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:10.670 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:41:10.759 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation 04-11 10:41:20.059 E/GoLog ( 2792): [TRAC] [question: {g.whatsapp.net. 1 1}] client/internal/dns/upstream.go:73 received an upstream question 04-11 10:41:20.069 E/GoLog ( 2792): [TRAC] client/internal/dns/upstream.go:116 took 9.297038ms to query the upstream 192.168.1.100:53 04-11 10:41:28.441 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A> 04-11 10:41:28.441 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0 04-11 10:41:28.441 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A> 04-11 10:41:28.441 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s 04-11 10:41:28.441 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed 04-11 10:41:30.202 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A> 04-11 10:41:30.231 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:30.231 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:30.232 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:30.232 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:41:30.348 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation 04-11 10:41:42.536 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B> 04-11 10:41:42.536 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0 04-11 10:41:42.537 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed 04-11 10:41:42.539 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B> 04-11 10:41:42.542 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s 04-11 10:41:44.329 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B> 04-11 10:41:44.372 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:44.373 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:44.373 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:44.373 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:41:44.423 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation 04-11 10:41:53.485 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C> 04-11 10:41:53.486 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0 04-11 10:41:53.486 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed 04-11 10:41:53.486 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C> 04-11 10:41:53.486 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s 04-11 10:41:54.086 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C> 04-11 10:41:54.108 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:54.109 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:54.110 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:41:54.110 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:41:54.204 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation 04-11 10:42:11.602 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A> 04-11 10:42:11.602 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0 04-11 10:42:11.602 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed 04-11 10:42:11.604 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A> 04-11 10:42:11.605 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s 04-11 10:42:13.106 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_A> 04-11 10:42:13.125 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:13.125 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:13.125 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:13.125 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:42:13.166 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_A>, waiting for the confirmation 04-11 10:42:17.900 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B> 04-11 10:42:17.901 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0 04-11 10:42:17.902 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed 04-11 10:42:17.903 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B> 04-11 10:42:17.904 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s 04-11 10:42:19.880 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B> 04-11 10:42:19.883 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:19.884 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:19.884 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:42:19.919 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation 04-11 10:42:36.927 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_C> 04-11 10:42:36.927 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_C> from interface tun0 04-11 10:42:36.927 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_C> 04-11 10:42:36.927 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_C> failed: connection to peer <PEER_C> timed out after 42.717s 04-11 10:42:36.928 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_C> ICE ConnectionState has changed to Closed 04-11 10:42:37.738 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_C> 04-11 10:42:37.756 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:37.756 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:37.756 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:37.756 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:42:37.799 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_C>, waiting for the confirmation 04-11 10:42:53.398 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_B> 04-11 10:42:53.398 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_B> from interface tun0 04-11 10:42:53.398 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_B> ICE ConnectionState has changed to Closed 04-11 10:42:53.400 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_B> 04-11 10:42:53.400 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_B> failed: connection to peer <PEER_B> timed out after 33.474s 04-11 10:42:54.422 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:463 trying to cleanup <PEER_A> 04-11 10:42:54.422 E/GoLog ( 2792): [DEBG] iface/iface.go:88 Removing peer <PEER_A> from interface tun0 04-11 10:42:54.422 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:571 peer <PEER_A> ICE ConnectionState has changed to Closed 04-11 10:42:54.423 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:509 cleaned up connection to peer <PEER_A> 04-11 10:42:54.424 E/GoLog ( 2792): [DEBG] client/internal/engine.go:831 connection to peer <PEER_A> failed: connection to peer <PEER_A> timed out after 41.25s 04-11 10:42:54.840 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:254 trying to connect to peer <PEER_B> 04-11 10:42:54.870 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:54.871 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:54.872 E/GoLog ( 2792): [DEBG] client/internal/stdnet/filter.go:30 trying to create a wgctrl client failed with: socket: permission denied 04-11 10:42:54.872 E/GoLog ( 2792): [TRAC] client/internal/stdnet/filter.go:23 ignoring interface tun0 - it is not allowed 04-11 10:42:54.924 E/GoLog ( 2792): [DEBG] client/internal/peer/conn.go:285 connection offer sent to peer <PEER_B>, waiting for the confirmation 04- ```

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@jumski commented on GitHub (Apr 20, 2024):

@pappz any findings? can i contribute somehow? I can dedicate some of my time into this issue if given some instructions where to look or what to check - its a dealbreaker for me but would really like not to switch off of netbird

<!-- gh-comment-id:2067613432 --> @jumski commented on GitHub (Apr 20, 2024): @pappz any findings? can i contribute somehow? I can dedicate some of my time into this issue if given some instructions where to look or what to check - its a dealbreaker for me but would really like not to switch off of netbird

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@jumski commented on GitHub (Apr 30, 2024):

after last update netbird is still disconnecting but is no longer causing loss of internet access on my phone
cc @pappz

<!-- gh-comment-id:2086058994 --> @jumski commented on GitHub (Apr 30, 2024): after last update netbird is still disconnecting but is no longer causing loss of internet access on my phone cc @pappz

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@adlion commented on GitHub (Jun 10, 2024):

I have same issue

<!-- gh-comment-id:2159135163 --> @adlion commented on GitHub (Jun 10, 2024): I have same issue

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@mlsmaycon commented on GitHub (Jun 10, 2024):

Hello @jumski @adlion can you please enable trace logs, reconnect and then share the logs with us for analysis?

To enable trace logs, you can go to the Advanced menu and ticky the enable trace log box:

<!-- gh-comment-id:2159157631 --> @mlsmaycon commented on GitHub (Jun 10, 2024): Hello @jumski @adlion can you please enable trace logs, reconnect and then share the logs with us for analysis? To enable trace logs, you can go to the Advanced menu and ticky the enable trace log box: <img src="https://github.com/netbirdio/netbird/assets/7747744/32f0106a-fdf7-46f4-883e-3d7de43a58c5" alt="Advanced menu" width="200"/>

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@j007bond007 commented on GitHub (Jun 30, 2024):

I'm also getting this - I think it's related to being on the same network (aka the wifi) where the server is - if I disconnect from wifi and use mobile data, my peers connect. I see the same entries in the log with the socket permission denied.

<!-- gh-comment-id:2198656859 --> @j007bond007 commented on GitHub (Jun 30, 2024): I'm also getting this - I think it's related to being on the same network (aka the wifi) where the server is - if I disconnect from wifi and use mobile data, my peers connect. I see the same entries in the log with the socket permission denied.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@benfuu commented on GitHub (Jul 25, 2024):

Same here, no peers can be connected to when the device is inside the same network as the peer. Connecting via a separate network/mobile data works.

<!-- gh-comment-id:2251461203 --> @benfuu commented on GitHub (Jul 25, 2024): Same here, no peers can be connected to when the device is inside the same network as the peer. Connecting via a separate network/mobile data works.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@j007bond007 commented on GitHub (Oct 28, 2024):

@mlsmaycon I started getting this again on Android (Pixel 8 Pro - latest updates) and I turned on Trace logs, here's the relevant parts:
10-28 10:46:52.489 1957 2054 E GoLog : [DEBG] iface/tun_android.go:66 attaching to interface tun0 10-28 10:46:52.491 1957 2054 E GoLog : [DEBG] iface/wg_configurer_usp.go:39 adding Wireguard private key 10-28 10:46:52.491 1957 2363 E GoLog : [DEBG] iface/tun_android.go:92 device is ready to use: tun0 10-28 10:46:52.491 1957 2363 E GoLog : [DEBG] client/internal/dns/service_memory.go:51 dns service listening on: x.x.255.254 10-28 10:46:52.492 1957 2362 E GoLog : [DEBG] signal/client/grpc.go:137 signal connection state READY 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.579 1957 2362 E GoLog : [TRAC] [question: {mtalk.google.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:52.580 1957 2362 E GoLog : [TRAC] [question: {mtalk.google.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:52.591 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.612 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 32.723674ms to query the upstream x.x.255.254:53 10-28 10:46:52.620 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 37.057414ms to query the upstream x.x.255.254:53 10-28 10:46:52.939 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:53.540 1957 2051 E GoLog : [TRAC] [question: {chat-e2ee-mini.facebook.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:53.540 1957 2051 E GoLog : [TRAC] [question: {chat-e2ee-mini.facebook.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:53.645 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 104.215414ms to query the upstream x.x.255.254:53 10-28 10:46:53.646 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 104.213541ms to query the upstream x.x.255.254:53 10-28 10:46:56.298 1957 2051 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:58.529 1957 2067 E GoLog : [TRAC] [question: {alt4-mtalk.google.com.cl.nb.domain.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:58.531 1957 2067 E GoLog : [TRAC] [question: {alt4-mtalk.google.com.cl.nb.domain.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:58.646 1957 2067 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 114.360352ms to query the upstream x.x.255.254:53 10-28 10:46:58.647 1957 2067 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 112.296794ms to query the upstream x.x.255.254:53 10-28 10:47:03.210 1957 2067 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:47:16.523 1957 2067 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:47:18.331 1957 2067 E GoLog : [INFO] signal/client/grpc.go:158 connected to the Signal Service stream 10-28 10:47:18.331 1957 2067 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: ----5C1skjsyi1JFX+e4g8a90g2hT+HGtkh5i3iE7gk=] 10-28 10:47:18.343 1957 2051 E GoLog : [DEBG] client/internal/engine.go:682 connecting to Management Service updates stream 10-28 10:47:18.343 1957 2051 E GoLog : [INFO] client/internal/engine.go:1469 Network monitor is disabled, not starting

and also where it tries to connect to peers:
10-28 10:47:18.504 1957 2054 E GoLog : [INFO] client/internal/acl/manager.go:52 ACL rules processed in: 103.108µs, total rules count: 2 10-28 10:47:19.273 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer APPFQurhVTr7+dqzYJOfc48rkIAycXQ+rfu5CMedmS4= 10-28 10:47:19.278 1957 1957 W Thread-10: type=1400 audit(0.0:203238): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.286 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.286 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.286 1957 2054 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.282 1957 1957 W Thread-10: type=1400 audit(0.0:203239): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.368 1957 2067 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= 10-28 10:47:19.366 1957 1957 W Thread-7: type=1400 audit(0.0:203240): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.370 1957 1957 W Thread-7: type=1400 audit(0.0:203241): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.374 1957 2067 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.374 1957 2067 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.374 1957 2067 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.407 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:288 connection offer sent to peer APPFQurhVTr7+dqzYJOfc48rkIAycXQ+rfu5CMedmS4=, waiting for the confirmation 10-28 10:47:19.413 1957 2363 E GoLog : [DEBG] client/internal/peer/conn.go:288 connection offer sent to peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=, waiting for the confirmation 10-28 10:47:19.422 1957 2067 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=] 10-28 10:47:19.423 1957 2067 E GoLog : [DEBG] client/internal/peer/conn.go:741 OnRemoteAnswer from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= on status Disconnected 10-28 10:47:19.424 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:309 received connection confirmation from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= running version 0.30.3 and with remote WireGuard listen port 51820 10-28 10:47:19.418 1957 1957 W Thread-8: type=1400 audit(0.0:203242): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:639 peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= ICE ConnectionState has changed to Checking 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:603 discovered local candidate udp4 host 10.221.109.136:51820 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.427 1957 2363 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=] 10-28 10:47:19.427 1957 2363 E GoLog : [DEBG] client/internal/peer/conn.go:755 OnRemoteCandidate from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= -> udp4 host 10.20.0.10:51820 10-28 10:47:19.428 1957 2363 E GoLog : [DEBG] iface/bind/udp_mux.go:346 ICE: registered 10.20.0.10:51820 for TNSKsNFzrOxslcCp 10-28 10:47:19.428 1957 2363 E GoLog : [TRAC] [question: {nb.domain.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:47:19.429 1957 2363 E GoLog : [TRAC] [question: {nb.domain.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:47:19.492 1957 2105 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 61.334798ms to query the upstream 64.71.255.254:53 10-28 10:47:19.497 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 66.900675ms to query the upstream 64.71.255.254:53 10-28 10:47:19.501 1957 2362 E GoLog : [DEBG] util/net/listener_nonios.go:120 Listener resolved IP for x.x.221.118:3478: x.x.221.118 10-28 10:47:19.501 1957 2362 E GoLog : [TRAC] client/internal/dns/local.go:25 received question: dns.Question{Name:"nb.domain.com.cl.nb.domain.com.", Qtype:0x1c, Qclass:0x1} 10-28 10:47:19.711 1957 2362 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer lvXne9UznY2gBm6c0CMEbyaXUtQurHMqfP+gf4bCcGM= 10-28 10:47:19.718 1957 2105 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer RIPD3675Tb2DgGJOfnkFjtZ/tAViBe9Z+FpSOQJJRCA= 10-28 10:47:19.738 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.739 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.739 1957 2105 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.748 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.748 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.749 1957 2105 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed

Does this help narrow it down? Any other logs you need?

<!-- gh-comment-id:2441846226 --> @j007bond007 commented on GitHub (Oct 28, 2024): @mlsmaycon I started getting this again on Android (Pixel 8 Pro - latest updates) and I turned on Trace logs, here's the relevant parts: `10-28 10:46:52.489 1957 2054 E GoLog : [DEBG] iface/tun_android.go:66 attaching to interface tun0 10-28 10:46:52.491 1957 2054 E GoLog : [DEBG] iface/wg_configurer_usp.go:39 adding Wireguard private key 10-28 10:46:52.491 1957 2363 E GoLog : [DEBG] iface/tun_android.go:92 device is ready to use: tun0 10-28 10:46:52.491 1957 2363 E GoLog : [DEBG] client/internal/dns/service_memory.go:51 dns service listening on: x.x.255.254 10-28 10:46:52.492 1957 2362 E GoLog : [DEBG] signal/client/grpc.go:137 signal connection state READY 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.514 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.579 1957 2362 E GoLog : [TRAC] [question: {mtalk.google.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:52.580 1957 2362 E GoLog : [TRAC] [question: {mtalk.google.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:52.591 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:52.612 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 32.723674ms to query the upstream x.x.255.254:53 10-28 10:46:52.620 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 37.057414ms to query the upstream x.x.255.254:53 10-28 10:46:52.939 1957 2362 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:53.540 1957 2051 E GoLog : [TRAC] [question: {chat-e2ee-mini.facebook.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:53.540 1957 2051 E GoLog : [TRAC] [question: {chat-e2ee-mini.facebook.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:53.645 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 104.215414ms to query the upstream x.x.255.254:53 10-28 10:46:53.646 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 104.213541ms to query the upstream x.x.255.254:53 10-28 10:46:56.298 1957 2051 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:46:58.529 1957 2067 E GoLog : [TRAC] [question: {alt4-mtalk.google.com.cl.nb.domain.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:58.531 1957 2067 E GoLog : [TRAC] [question: {alt4-mtalk.google.com.cl.nb.domain.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:46:58.646 1957 2067 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 114.360352ms to query the upstream x.x.255.254:53 10-28 10:46:58.647 1957 2067 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 112.296794ms to query the upstream x.x.255.254:53 10-28 10:47:03.210 1957 2067 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:47:16.523 1957 2067 E GoLog : [TRAC] client/firewall/uspfilter/uspfilter.go:240 couldn't decode layer, err: Invalid (too small) IP header length (0 < 5) 10-28 10:47:18.331 1957 2067 E GoLog : [INFO] signal/client/grpc.go:158 connected to the Signal Service stream 10-28 10:47:18.331 1957 2067 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: ----5C1skjsyi1JFX+e4g8a90g2hT+HGtkh5i3iE7gk=] 10-28 10:47:18.343 1957 2051 E GoLog : [DEBG] client/internal/engine.go:682 connecting to Management Service updates stream 10-28 10:47:18.343 1957 2051 E GoLog : [INFO] client/internal/engine.go:1469 Network monitor is disabled, not starting` and also where it tries to connect to peers: `10-28 10:47:18.504 1957 2054 E GoLog : [INFO] client/internal/acl/manager.go:52 ACL rules processed in: 103.108µs, total rules count: 2 10-28 10:47:19.273 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer APPFQurhVTr7+dqzYJOfc48rkIAycXQ+rfu5CMedmS4= 10-28 10:47:19.278 1957 1957 W Thread-10: type=1400 audit(0.0:203238): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.286 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.286 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.286 1957 2054 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.282 1957 1957 W Thread-10: type=1400 audit(0.0:203239): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.368 1957 2067 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= 10-28 10:47:19.366 1957 1957 W Thread-7: type=1400 audit(0.0:203240): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.370 1957 1957 W Thread-7: type=1400 audit(0.0:203241): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.374 1957 2067 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.374 1957 2067 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.374 1957 2067 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.407 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:288 connection offer sent to peer APPFQurhVTr7+dqzYJOfc48rkIAycXQ+rfu5CMedmS4=, waiting for the confirmation 10-28 10:47:19.413 1957 2363 E GoLog : [DEBG] client/internal/peer/conn.go:288 connection offer sent to peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=, waiting for the confirmation 10-28 10:47:19.422 1957 2067 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=] 10-28 10:47:19.423 1957 2067 E GoLog : [DEBG] client/internal/peer/conn.go:741 OnRemoteAnswer from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= on status Disconnected 10-28 10:47:19.424 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:309 received connection confirmation from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= running version 0.30.3 and with remote WireGuard listen port 51820 10-28 10:47:19.418 1957 1957 W Thread-8: type=1400 audit(0.0:203242): avc: denied { create } for scontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tcontext=u:r:untrusted_app_32:s0:c66,c257,c512,c768 tclass=netlink_generic_socket permissive=0 app=io.netbird.client 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:639 peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= ICE ConnectionState has changed to Checking 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/peer/conn.go:603 discovered local candidate udp4 host 10.221.109.136:51820 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.425 1957 2054 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.427 1957 2363 E GoLog : [TRAC] signal/client/grpc.go:400 received a new message from Peer [fingerprint: Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4=] 10-28 10:47:19.427 1957 2363 E GoLog : [DEBG] client/internal/peer/conn.go:755 OnRemoteCandidate from peer Q9TQWlNnUooY84FWuGREDlX//hg+al6gURRjlHn+rD4= -> udp4 host 10.20.0.10:51820 10-28 10:47:19.428 1957 2363 E GoLog : [DEBG] iface/bind/udp_mux.go:346 ICE: registered 10.20.0.10:51820 for TNSKsNFzrOxslcCp 10-28 10:47:19.428 1957 2363 E GoLog : [TRAC] [question: {nb.domain.com. 28 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:47:19.429 1957 2363 E GoLog : [TRAC] [question: {nb.domain.com. 1 1}] client/internal/dns/upstream.go:80 received an upstream question 10-28 10:47:19.492 1957 2105 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 61.334798ms to query the upstream 64.71.255.254:53 10-28 10:47:19.497 1957 2362 E GoLog : [TRAC] client/internal/dns/upstream.go:122 took 66.900675ms to query the upstream 64.71.255.254:53 10-28 10:47:19.501 1957 2362 E GoLog : [DEBG] util/net/listener_nonios.go:120 Listener resolved IP for x.x.221.118:3478: x.x.221.118 10-28 10:47:19.501 1957 2362 E GoLog : [TRAC] client/internal/dns/local.go:25 received question: dns.Question{Name:"nb.domain.com.cl.nb.domain.com.", Qtype:0x1c, Qclass:0x1} 10-28 10:47:19.711 1957 2362 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer lvXne9UznY2gBm6c0CMEbyaXUtQurHMqfP+gf4bCcGM= 10-28 10:47:19.718 1957 2105 E GoLog : [DEBG] client/internal/peer/conn.go:256 trying to connect to peer RIPD3675Tb2DgGJOfnkFjtZ/tAViBe9Z+FpSOQJJRCA= 10-28 10:47:19.738 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.739 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.739 1957 2105 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed 10-28 10:47:19.748 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.748 1957 2105 E GoLog : [DEBG] client/internal/stdnet/filter.go:31 trying to create a wgctrl client failed with: socket: permission denied 10-28 10:47:19.749 1957 2105 E GoLog : [TRAC] client/internal/stdnet/filter.go:24 ignoring interface tun0 - it is not allowed` Does this help narrow it down? Any other logs you need?

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@j007bond007 commented on GitHub (Oct 28, 2024):

Also... I wonder if it's to do with not having the "have full network access" permission in Android - it mentions that permission is needed to create sockets. It looks like all Netbird has access to now is notifications.... I think it lost its permissions (Android auto removes them over time) and never tried to "Request" them again.

<!-- gh-comment-id:2441860976 --> @j007bond007 commented on GitHub (Oct 28, 2024): Also... I wonder if it's to do with not having the "have full network access" permission in Android - it mentions that permission is needed to create sockets. It looks like all Netbird has access to now is notifications.... I think it lost its permissions (Android auto removes them over time) and never tried to "Request" them again.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@Sympatron commented on GitHub (Oct 31, 2024):

I had the same problem and it was resolved by opening the STUN/TURN port 3478 in the firewall on the netbird server.

<!-- gh-comment-id:2450209027 --> @Sympatron commented on GitHub (Oct 31, 2024): I had the same problem and it was resolved by opening the STUN/TURN port 3478 in the firewall on the netbird server.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@YapWC commented on GitHub (Apr 5, 2025):

I can confirm that on iOS the problem does not exist. It only happens on Android, I was able to connect to peers but when it is connected to peers, then the internet access is gone can't surf the website or anything except connecting to the peers.

This is so weird and it seems like with the latest version still this problem still exists.

<!-- gh-comment-id:2780581969 --> @YapWC commented on GitHub (Apr 5, 2025): I can confirm that on iOS the problem does not exist. It only happens on Android, I was able to connect to peers but when it is connected to peers, then the internet access is gone can't surf the website or anything except connecting to the peers. This is so weird and it seems like with the latest version still this problem still exists.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@SoFMeRight commented on GitHub (Apr 15, 2025):

I can confirm that on iOS the problem does not exist. It only happens on Android, I was able to connect to peers but when it is connected to peers, then the internet access is gone can't surf the website or anything except connecting to the peers.

This is so weird and it seems like with the latest version still this problem still exists.

I can confirm I have the same persisting issue. Oddly enough it sometimes works. But is intermittent.

<!-- gh-comment-id:2803781863 --> @SoFMeRight commented on GitHub (Apr 15, 2025): > I can confirm that on iOS the problem does not exist. It only happens on Android, I was able to connect to peers but when it is connected to peers, then the internet access is gone can't surf the website or anything except connecting to the peers. > > This is so weird and it seems like with the latest version still this problem still exists. I can confirm I have the same persisting issue. Oddly enough it sometimes works. But is intermittent.

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@animefreak93 commented on GitHub (Jun 11, 2025):

I had the same problem and it was resolved by opening the STUN/TURN port 3478 in the firewall on the netbird server.

Thanks.. I already open UDP port 3478 on my netbird server as per documentation.. After open TCP 3478 and restart netbird I now connected to peers as Intended.. there some fault on the documentation or idk

<!-- gh-comment-id:2962051899 --> @animefreak93 commented on GitHub (Jun 11, 2025): > I had the same problem and it was resolved by opening the STUN/TURN port 3478 in the firewall on the netbird server. Thanks.. I already open UDP port 3478 on my netbird server as per documentation.. After open TCP 3478 and restart netbird I now connected to peers as Intended.. there some fault on the documentation or idk

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@davidsmith91 commented on GitHub (Oct 19, 2025):

I think it could be related to https://github.com/netbirdio/netbird/issues/4341
The issue seems to happen on Xiaomi and GrapheneOS ROMs.. or at least Pixel phones

<!-- gh-comment-id:3419552637 --> @davidsmith91 commented on GitHub (Oct 19, 2025): I think it could be related to https://github.com/netbirdio/netbird/issues/4341 The issue seems to happen on Xiaomi and GrapheneOS ROMs.. or at least Pixel phones

saavagebueno commented 2026-08-05 00:47:40 -04:00

Author

Owner

Copy Link

@PizzaLovingNerd commented on GitHub (May 30, 2026):

Hello, I am closing this issue as this is a stale issue and the Android client has been rewritten since this issue was opened. If you are having this on the latest version of the NetBird app for Android, please reopen this issue. Cheers!

<!-- gh-comment-id:4585421843 --> @PizzaLovingNerd commented on GitHub (May 30, 2026): Hello, I am closing this issue as this is a stale issue and the Android client has been rewritten since this issue was opened. If you are having this on the latest version of the NetBird app for Android, please reopen this issue. Cheers!

saavagebueno referenced this issue 2026-08-05 03:07:19 -04:00

[PR #2537] [relay] Feature/relay integration close agent #15272

saavagebueno referenced this issue 2026-08-05 04:07:28 -04:00

[PR #2537] [CLOSED] [relay] Feature/relay integration close agent #17564

saavagebueno referenced this issue 2026-08-05 04:07:29 -04:00

[PR #2537] [relay] Feature/relay integration close agent #17572

saavagebueno referenced this issue 2026-08-05 05:06:28 -04:00

[PR #2537] [CLOSED] [relay] Feature/relay integration close agent #19793

saavagebueno referenced this issue 2026-08-05 05:06:28 -04:00

[PR #2537] [relay] Feature/relay integration close agent #19800

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

main

claude/agent-network-test-cases-p743vw

android/gui-integration

revert/component-types

feat-post_quantum_ml_kem

ice-stun-wg-demux

dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c

agent-network-setup-poc

dependabot/go_modules/aws-sdk-8f849ebaed

dependabot/github_actions/actions-a940c7c866

dependabot/go_modules/otel-e34c790afd

dependabot/go_modules/testcontainers-de325c0dd6

dependabot/go_modules/wireguard-dbd6b95108

dependabot/go_modules/pion-5f703e1eca

dependabot/go_modules/gorm-2271c8195b

fix-login-needed-check

dependabot/go_modules/google.golang.org/grpc-1.82.1

fix/ui-gtk3-support

enterprise-traefik-and-migration-fixes

disambiguate_p2p_metrics

revert/component-types-hookup

embedded-vnc

feature/ios-ssh

docs/agent-network-docs-update

dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.3

dependabot/go_modules/github.com/pion/stun/v3-3.1.5

fix-ssh-authorized-users-multi-rule

peer-acl-multi-source

reverse-proxy-crowdsec-appsec

reverse-proxy-allow-match-or

client-local-metrics

lazy-conn-per-peer

lazy-conn-rosenpass

dependabot/go_modules/github.com/gopacket/gopacket-1.7.0

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.6

dependabot/go_modules/github.com/pires/go-proxyproto-0.15.0

dependabot/go_modules/github.com/jackc/pgx/v5-5.10.0

dependabot/go_modules/github.com/oapi-codegen/runtime-1.6.0

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.4

dependabot/go_modules/github.com/pkg/sftp-1.13.11

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0

ssh-windows-privilege-check

fix/explicit-cors-handling

fix/remove-math-rand

test/gui-memory-leak-fix

fix/ui-status-dispatch

install-script-ui-dependencies

fix/grpc-get-network-map

fix/subscribe-status-coalesce

fix/tray-menu-item-leak

fix/windows-tray-race

feature/changeset

worktree-dns-route-qtype-fallthrough

mdm_integration

mlsmaycon-patch-2

feat/agent-network-ollama

proxy-tunnel-cache-ttl-env

coderabbitai/utg/1e5b0a5

grpc-acl

test/battery-drain

components-impl-drop-indexes-use-xids-no-resource-policy-map

fix/nmap-relevant-groups

e2e-guardrail-blocks-unselected-model

fix/lazyconn-cold-start-allowed-ips

vertex-guardrails-model-access-e2e

add-atomic-cache-ops

refactor/relay-foreign-cache

ci/trigger-release-tests

feature/kimi-3-agent-networks-dns-warmup

feature/dns-lazy-conn-warmup

daemon-ipc-acl

feature/ui-translation-key-parity-check

refactor/relay-foreign-cache-tests

fix/lazyconn-idle-keep-wg-peer

dmitri-propagate-auth-grant-types-on-combined

0.74.7-branch

diagnose-empty-vs-corrupt-state

windows-sleep-detector

fix/cli-up-wait-for-daemon

rp_key_persistency

feature/native-grpc

0.74.6-branch

0.74.6-branch-sync

0.74.5-branch-sync

0.74.4-branch

fix/remove-stale-peers-removal

fix/remove-stale-proxy-logic

fix/nsis-preserve-autostart-on-upgrade

refactor/peer-event-bus

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.3

dependabot/go_modules/github.com/pkg/sftp-1.13.10

components-impl-drop-indexes

fix-reset-aggregation-window-flake

dependabot/go_modules/github.com/pion/dtls/v3-3.1.5

0.74.x

fix/relay-states-lock

update-process-pkg

update-gopsutil-v4

fix/relay_states_lock

increase-sysinfo-timeout

dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1

dependabot/go_modules/github.com/eko/gocache/store/redis/v4-4.2.6

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.3

fix/fail-to-create-upnp-port-mapping-on-opnsense-firewall

0.74.3-branch

fix/routeselector-atomic-exit-node

netmap_progressive_alignment

nmap/components-impl

dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2

dependabot/go_modules/github.com/oapi-codegen/runtime-1.4.2

dependabot/go_modules/github.com/gopacket/gopacket-1.6.1

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0

dependabot/go_modules/github.com/pires/go-proxyproto-0.12.0

fix/signal-watchdog-sync-stop

docs/agent-network

test/affected-logic

fix/revert-ice-filter

refactor/simplify-affected-peers

pascal-filter-policies-by-direction

claude/lock-contention-peer-connect-g8t6au

dmitri-filter-policies-by-direction

refactor/migrate-profiles-to-go

profile-bindings-ios

fix/skip-restart-unchanged-route

fix/mgmt-cache-async-resolve

refactor/wails-update-105

client_lifetime_serialization_refactor

fix/browser-ssh-2

fix/ipv6-and-netstack-accept-loop

fix/browser-ssh

profile-id-name-test

refactor/mgmt-bootstrap

feat/getting-started-unified-wizard

socket-grpc-permissions

fix/mysql-index-migration

windows-dns-firewall

tests/enable-race-on-tests

ui-refactor-gtk3

feature/affected-peers-grpc

profile-id

lazyconn-first-packet-fix-v2

claude/focused-gates-VMTgb

ui-tray-linux-leftclick

fix/ctx-enrichment

daemon-owner

feature/android-client-ssh

worktree-accept-ra-forwarding

nmap/combined-deploy

task/align_protobuff_toolset

feature/session-extend

add-json-yaml-flags

refactor/ephemeral-cleanup

claude/webtransport-relay-wasm-mUjY9

claude/vnc-udp-feasibility-6KB1U

fix/wgport-config

e2e-windows-dns-combined

fix/login-cmd-root-flags

feat/reseller-openapi-spec

github-issue-resolver

add-steamos-support

fix-darwin-uninstaller

flutter-test

ci/freebsd-pkg-bootstrap

cached-serial-check-on-sync

fix-mgmt-cache-bypass-overlay

revert-easyjson-5938

revert-ice-5820

revert-firewalld-5928

refactor/permissions-manager

revert-dns-5935-systemd-resolved

revert-dns-5935-5945

revert-dns-5945-mgmt-cache

feature/log-most-busy-peers

prototype/ui-wails

coderabbitai/utg/8ae8f20

feature/use-peer-fqdn-on-https

release/0.68.3

add-slack-channel

claude/rdp-token-passthrough-eNcqW

transparent-proxy

fix/macos-stale-route-eexist

crowdsec-selfhosted

fix/remove-otel-units

entire/checkpoints/v1

fix/getting-started

feat/static-connectors-combined-server

feature/use-local-keys-embedded

feature/fleetdm

set-env-only-if-not-fork

feature/expose-has-channel

fix/connection-status-race

fix/filter-cgnat-cni-ice-candidates

feature/check-cert-locker-before-acme

test/proxy-fixes

test/proxy-mtu

prototype/ui-tauri

test/proxy-speed

fix-reused-ports

feat/migrate-to-embedded-idp

feature/add-serial-to-proxy-merged

deploy/proxy-serial

test/connection

feature/disable-legacy-port

feature/flag-to-disable-legacy-port

test/perftest

fix/http-redirect

poc-token-command

dn-reverse-proxy

prototype/reverse-proxy-rename

prototype/reverse-proxy-logs-pagination

feature/client-metrics

prototype/reverse-proxy-clusters

debug-dns-route

fix/win-dns-batch

add-extra-route-logs

job-stream-notify-disconnection-eof

deploy/secrets-manager

trigger-proxy-update

bug/update-ios-client-code-build-tags

sync-client-netmap-serial

log/conn-disconn

nmap/compaction-deploy

ci-win-test

feature/disk-encryption-check

wasm-debug

swap-dns-prio

fix/dex-config

feature/migrate-auto-groups-to-table

nmap/compaction

dex-nocgo-stub

feature/exclude-terraform-from-rate-limiting

test-freebsd

retries-refactor

coderabbitai/docstrings/b7e98ac

feat/integrate-zitadel

bug/ios-hanging-reconection

zitadel-idp

feat/network-map-serial

refactor/get-account-no-users

feat/auto-upgrade

feature/report-high-pat-id

feature/temporary-access-for-resource

fix/nmap-fwrules

dont-restart-dns

prototype/ui

update-gomobile

go-dns-for-ice

wasm-ldflags

test-ldflags

wasmbuild-test

feature/networks-s2s

vk/compare-nmaps

dbg/bothmaps

reorder-dns-shutdown

fix/relay-reconnection-race

fix/nmap-exitnodes

vk/debug/nmap-both

move-licensed-code

feat/better-daemon-connection-lost-message

feat/auto-update-2

test/timings

refactor/getaccount-raw

tests/nmap-getaccount

refactor/nmap

refactor/nmap-limit-buffer

feature/detect-mac-wakeup

feature/extract-modules

quick-setings

feat/sync-limiter

feature/store-cache-impl

fix-install-version

feature/store-metrics

feature/metrics-on-store

feature/use-gorm-cache

loadtest-signal

unsymmetrical-squash

refactor/reducate-signaling

test/update-reduce

feature/store-cache

feature/remote-debug

cli-ws-proxy-backend-addr

feat/mgmt-map-serial

snyk-fix-d9d0081a4c7f9137bdb59d0d50a141a2

snyk-fix-7415cea5a11acd66753540ca2c598c63

job-yml-update

feature/android-allow-selecting-routes

fix/up-sequence

fix/dns-hash-update

snyk-fix-967adae9863f17f108ce8948d9117b8d

log/getaccount-by-peer

signal-suppressor

dns-exit-node

feature/auto-updates

feature/cache-srv-key

merged-fixes

fix/missed-offers-and-debug

debug-and-fixes

poc-wasm-clean-backend-s2s

test/remote-debug

debug-api

fix/remove-gpo-if-empty

fix/test-freebsd

fix/mysql-setup

fix/remove-logout-btn

handle-existing-domain-user

chore/unify-domain-validation

snyk-fix-c5fafc8a50ce1f29046e25a1fc346185

feat/profile-edit-btn

snyk-fix-a54966211e18d4cf67e5a2757cc006d1

log-short-id

feat/logout-ephemeral

log-checks

batch-wg-ops

nb-interface-default

feat/aws-integration

add/race-test

feature/relay-feature-versioning

fix/systemd-service-logs

poc/preprocessed-map

add-account-onboarding

bind-ipv6

fix/merge-main

logs/peerlogs-addpeer

feature/net-297-network-migration

feature/support-skip-auto-apply-exit-node-routes

set-cmd

set-command-with-cursor

feature/limit-update-channel

stop-using-locking-share

feature/poc-lazy-detection

feature/net-248-removal-of-sync-mutex-locks

test/multiple-peer-logging

preresolve

add-ns-punnycode-support

apply-routes-early

windows-search-domains

fix/connecting-route-filter

feature/management/rest-client/impersonate

debug-local-records

resource-fields-snake-case

test/grpc-rate-limit

traffic-correlation-policy

feature/rest-client-options

feat/events-metrics

feature/buf-cli

test/add-ratelimiter

test/remove-write-lock-on-add-peer

fix/add-peer-semaphore

feature/users-roles-endpoint

mlsmaycon-patch-1

debug-user-role

chore/primary-key-on-networks

feature/update-account-peers-buffer-startup

remove-ubuntu2004-runners

refactor/permissions-no-pat-allowed

ref/logrus-factory

use-conntrack-zone

deploy/permissions-account

feature/lazy-connection-idle

ref/improve-test-cov

restore-pr-3440

test/increase-grpc-timeouts

feat/buffer-account-peers-update

test/networkmapgeneration-changes

feature/base-manager

feature/flow-receiver

chore/benchmark-with-large-runner

refactor/handshake-initiator

client/ui-update-systray-icons

userspace-router

wgwatcher-test

output-if-key-already-exists

fix/relay-reconnection

feature/port-forwarding-client-codecleaning

detached2

test/callbacks-nil-iceconninfo

refactor/optimize-peer-expiration

enable-udp-port-for-docker-template

fix/relay-update

feature/apply-posture-netmap

fix/group-update-existing-resource

conntrack-stats

upgrade-okta-sdk

multi-price

test/conn-stat

set-min-parallel-tests-for-management

dns-interceptor

debug-dns

router-dns

add-static-system-info

debug-0.29.4

debug-0.33.0

account-refactoring

relay/2800_quic

route-get-account-refactoring

test/seed-random-routes

feature/get-account-refactoring

test/reconnect-race-condition

refactor/get-account-usage

feature/add-session-id-to-update-channel

improve-ipv4conn

fix/async-pion-event-handling

debug

add-offload

feature/validate-group-association-debug

fix/limit-conn-for-sqlite

test/engine-iface

test/transaction-for-jwt-sync

fix/engine-stop-in-foreground

feature/add-mysql-support

test-migration

refactor/header-size-values

relay/eliminate-gob

test/signal-dispatcher-with-relay

relay/debug

validate-icon

feature/ipv6-support

use-pre-expanded-peers-map

feature/use-signal-dispatcher

validate/peer-status

add-read-write-times

fix/sync-peer-race

feature/relay-status

netmap

evaluate/network-map-hash

fix/lower-dns-resolve-interval-on-fail

feature/relay

fix/go-mod-version

upgrade-nftables

synology-userspace-mode

fix/use-ip-for-default-routes-on-darwin

fix/proxy_close

enable-release-workflow-on-pr

deploy/peer-performance

feature/permanent-turn

feature/permanent-turn-proxy

deploy/posture-check-sqlite

feature/optimize_sqlite_save

debug-ios-behavior

fix/delete-route-only-after-adding

tshoot/windows-logger

remove-new-routing

refactor/eliminate-repo-dependency

add-arm-to-ci

refactor-demo-account-object

test/abc2

test/abc

send-ssh-rosenpass-config-meta

refactor-demo

ensure-schedule-never-runs-non-positive

feature/peer-validator-groupmgm

feature/peer-validator-fix

fix/include-active-dashboard-users

fix/handle-canceling-schedule

fix/geo-download

debug-google-workspace

yury/resolve-ip-to-location

feature/extend-sysinfo

sqlite-async-peer-status

yury/add-postgresql-store

fix/route

test-build

posture-checks-poc

debug-keycloak-idp

poc/netstack

for-pascal-tmp

peer-logout-management

manual-peer-logout

detached

chore/refactor-management

test/dns-bind

fix/enforce-acl-for-containers

yury/use-sync-map-in-updatechannel

fix/events-key-handling

filter-cache-on-load-account

fix/user-expiration

handle-user-context-cancellation

nb-client-k8s-statefulset

fake-addr

fix/iptables_in_docker

ebpf-debug

update-getting-started-flow-use-postgres

fix/peer_list_notification

feature/device-authentication-with-client-secret

feature/keep_alive

feat-groups-from-jwt

separate_proxy_from_wgconfig

fix/wg_conn

wg_conn_fix

wg_bind_parallel_processing

fix-rollback-get-acls

proxy_cfg_cleanup

performance-improvement-rego

update-lock-log-level

feat-client-side-acl

refactor/move_grpcserver_logic_to_account_manager

feature/event-storage

feature/update-idp-redeeming-invite

feature/api-peer-info

return-groupminimum-setupkey

feature/interface-bind

documentation_enhancement

fix-peer-registration

ssh

users_cache

pass-client-caller

client_caller_type

revert-283-feat-fix-windows-installer

periodic-peer-updates

ebpf

braginini/wasm

v0.76.1

v0.76.0

v0.75.1

v0.75.0

v0.74.7

v0.74.6

v0.74.5

v0.75.0-rc.6

v0.74.4

v0.74.3

v0.75.0-rc.5

v0.74.2

v0.74.1

v0.75.0-rc.4

v0.74.0

v0.74.0-rc.2

v0.74.0-rc.1

v0.73.2

v0.75.0-rc.3

v0.75.0-rc.2

v0.73.1

v0.75.0-rc.1

v0.73.0

v0.72.4

v0.72.3

v0.72.2

v0.72.1

v0.72.0

v0.71.4

v0.71.3

v0.71.2

v0.71.1

v0.71.0

v0.70.5

v0.70.4

v0.70.3

v0.70.2

v0.70.1

v0.70.0

v0.69.0

v0.68.3

v0.68.2

v0.68.1

v0.68.0

v0.67.4

v0.67.3

v0.67.2

v0.67.1

v0.67.0

v0.66.4

v0.66.3

v0.66.2

v0.66.1

v0.66.0

v0.65.3

v0.65.2

v0.65.1

v0.65.0

v0.64.6

v0.64.5

v0.64.4

v0.64.3

v0.64.2

v0.64.1

v0.64.0

v0.63.0

v0.62.3

v0.62.2

v0.62.1

v0.62.0

v0.61.2

v0.61.1

v0.61.0

v0.60.9

v0.60.8

v0.60.7

v0.60.6

v0.60.5

v0.60.4

v0.60.3

v0.60.2

v0.60.1

v0.60.0

v0.59.13

v0.59.12

v0.59.11

v0.59.10

v0.59.9

v0.59.8

v0.59.7

v0.59.6

v0.59.5

v0.59.4

v0.59.3

v0.59.2

v0.59.1

v0.59.0

v0.58.2

v0.58.1

v0.58.0

v0.57.1

v0.57.0

v0.56.1

v0.56.0

v0.55.1

v0.55.0

v0.54.2

v0.54.1

v0.54.0

v0.53.0

v0.52.2

v0.52.1

v0.52.0

v0.51.2

v0.51.1

v0.51.0

v0.50.3

v0.50.2

v0.50.1

v0.50.0

v0.49.0

v0.48.0-dev2

v0.48.0

v0.47.2

v0.47.1

v0.47.0

v0.46.0

v0.45.3

v0.45.2

v0.45.1

v0.45.0

v0.44.0

v0.43.3

v0.43.2

v0.43.1

v0.43.0

v0.42.0

v0.41.3

v0.41.2

v0.41.1

v0.41.0

v0.40.1

v0.40.0

v0.39.2

v0.39.1

v0.39.0

v0.38.2

v0.38.1

v0.38.0

v0.37.2

v0.37.1

v0.37.0

v0.36.7

v0.36.6

v0.36.5

v0.36.4

v0.36.3

v0.36.2

v0.36.1

v0.36.0

v0.35.2

v0.35.1

v0.35.0

v0.34.1

v0.34.0

v0.33.0

v0.32.0

v0.31.1

v0.31.0

v0.30.3

v0.30.2

v0.30.1

v0.30.0

v0.29.4

v0.29.3

0.29.3

v0.29.2

v0.29.1

v0.29.0

v0.28.9

v0.28.8

v0.28.7

v0.28.6

v0.28.5

v0.28.4

v0.28.3

v0.28.2

v0.28.1

v0.28.0

v0.27.10

v0.27.9

v0.27.8

v0.27.7

v0.27.6

v0.27.5

v0.27.4

v0.27.3

v0.27.2

v0.27.1

v0.27.0

v0.26.7

v0.26.6

v0.26.5

v0.26.4

v0.26.3

v0.26.2

v0.26.1

v0.26.0

v0.25.9

v0.25.8

v0.25.7

v0.25.6

v0.25.5

v0.25.4

v0.25.3

v0.25.2

v0.25.1

v0.25.0

v0.24.4

v0.24.3

v0.24.2

v0.24.1

v0.24.0

v0.23.9

v0.23.8

v0.23.7

v0.23.6

v0.23.5

v0.23.4

v0.23.3

v0.23.2

v0.23.1

v0.23.0

v0.22.7

v0.22.6

v0.22.5

v0.22.4

v0.22.3

v0.22.2

v0.22.1

v0.22.0

v0.21.11

v0.21.10

v0.21.9

v0.21.8

v0.21.7

v0.21.6

v0.21.5

v0.21.4

v0.21.3

v0.21.2

v0.21.1

v0.21.0

v0.20.8

v0.20.7

v0.20.6

v0.20.5

v0.20.4

v0.20.3

v0.20.2

v0.20.1

v0.20.0

v0.19.0

v0.18.1

v0.18.0

v0.17.0

v0.16.0

v0.15.3

v0.15.2

v0.15.1

v0.15.0

v0.14.6

v0.14.5

v0.14.4

v0.14.3

v0.14.2

v0.14.1

v0.14.0

v0.13.0

v0.12.0

v0.11.6

v0.11.5

v0.11.4

v0.11.3

v0.11.2

v0.11.1

v0.11.0

v0.10.10

v0.10.9

v0.10.8

v0.10.7

v0.10.6

v0.10.5

v0.10.4

v0.10.3

v0.10.2

v0.10.1

v0.10.0

v0.9.8

v0.9.7

v0.9.6

v0.9.5

v0.9.4

v0.9.3

v0.9.2

v0.9.1

v0.9.0

v0.8.12

v0.8.11

v0.8.10

v0.8.9

v0.8.8

v0.8.7

v0.8.6

v0.8.5

v0.8.4

v0.8.3

v0.8.2

v0.8.1

v0.8.0

v0.7.1

v0.7.0

v0.6.4

v0.6.3

v0.6.2

v0.6.1

v0.6.0

v0.5.11

v0.5.10

v0.5.1

v0.5.0

v0.4.0

v0.3.5

v0.3.4

v0.3.3

v0.3.2

v0.3.1

v0.3.0

v0.2.3

v0.2.2-beta.1

v0.2.1-beta.5

v0.2.0-beta.5

v0.2.0-beta.4

v0.2.0-beta.3

v0.2.0-beta.2

v0.2.0-beta.1

v0.1.0-beta.3

v0.1.0-beta.2

v0.1.0-beta.1

v0.1.0-rc.2

v0.1.0-rc-1

v0.0.8-hotfix-1

v0.0.8

v0.0.7

v0.0.6

v0.0.5

v0.0.4

v0.0.3

v0.0.2

v0.0.1

v0.0.0

Labels

Clear labels

2021 Q4

2021 Q4

2021 Q4

2022 Q1

2022 Q1

2022 Q1

2022 Q1

2022 Q1

2022 Q1

accessibility

accessibility

accessibility

acl

acl

acl

agent

agent

agent

agent

agent

agent

Android

Android

Android

Android

Android

Android

api

api

api

authentik

authentik

authentik

automation

automation

automation

azure

azure

azure

battery-usage

battery-usage

battery-usage

bug

cache

cache

cache

client

client

client

client-ui

client-ui

client-ui

cloud

cloud

cloud

cloud-only

cloud-only

cloud-only

cloudflare

cloudflare

cloudflare

community

community

community

compatibility

compatibility

compatibility

config-idp

config-idp

config-idp

config-issue

config-issue

config-issue

connection

connection

connection

contribution

contribution

contribution

coturn

coturn

coturn

cross-vpn

cross-vpn

cross-vpn

dashboard

dashboard

dashboard

data-usage

data-usage

data-usage

distribution

distribution

distribution

dns

dns

dns

docker

docker

docker

documentation

documentation

documentation

duplicate

duplicate

duplicate

enhancement

enhancement

event-stream

event-stream

event-stream

feature-request

feature-request

feature-request

freebsd

freebsd

freebsd

getting-started

getting-started

getting-started

go

go

go

good first issue

good first issue

good first issue

gui

gui

gui

help wanted

help wanted

help wanted

home-assistant

home-assistant

home-assistant

idp

idp

idp

inconsistency

inconsistency

inconsistency

integration

integration

integration

integrations

integrations

integrations

ios

ios

ios

ipv6

ipv6

ipv6

jwt

jwt

jwt

k8s

k8s

k8s

keycloak

keycloak

keycloak

linux

linux

linux

login

login

login

macos

macos

macos

management-service

management-service

management-service

Medium

Medium

Medium

missing-docs

missing-docs

missing-docs

mobile

mobile

mobile

moved-internal

moved-internal

moved-internal

needs-review

needs-review

needs-review

netbird-ui

netbird-ui

netbird-ui

networking

networking

networking

new-platform

new-platform

new-platform

nginx

nginx

nginx

notification

notification

notification

okta

okta

okta

openwrt

openwrt

openwrt

P2

P2

P2

packaging

packaging

packaging

peer-management

peer-management

peer-management

peer-management

peer-management

peer-management

peer-management

peer-management

peer-management

performance

performance

performance

postgres

postgres

postgres

posture-checks

posture-checks

posture-checks

psk

psk

psk

pull-request

Mirrored from GitHub Pull Request

question

question

question

refactor

refactor

refactor

relay

relay

relay

release

release

release

rfc

rfc

rfc

routes

routes

routes

security

security

security

security-improvement

security-improvement

security-improvement

security-related

security-related

security-related

self-hosting

self-hosting

self-hosting

server

server

server

signal

signal

signal

sleep-issue

sleep-issue

sleep-issue

ssh

ssh

ssh

ssl

ssl

ssl

status

status

status

store

store

store

synology

synology

synology

system-compatibility-issue

system-compatibility-issue

system-compatibility-issue

test-suite

test-suite

test-suite

third-party-integration

third-party-integration

third-party-integration

triage

triage

triage

triage

triage

triage

triage-needed

triage-needed

triage-needed

troubleshooting

troubleshooting

troubleshooting

UX

UX

UX

waiting-feedback

waiting-feedback

waiting-feedback

windows

windows

windows

wontfix

wontfix

wontfix

zitadel

zitadel

zitadel

No Label Android client triage

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

dynr-servers saavagebueno

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: DYNR/netbird#2537