[GH-ISSUE #2016] Cant connect from mobile-network (iOS & windows) #4043

New Issue

saavagebueno · 2026-08-05T00:55:37-04:00

saavagebueno commented

2026-08-05 00:55:37 -04:00

Originally created by @Berndinox on GitHub (May 20, 2024).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/2016

Describe the problem
I tried connecting my mobile (iOS) and found that i cant connect any peer.
I double checked an connected my windows laptop via mobile-phone hotspot and faced the same issue.

A clear and concise description of what the problem is.

To Reproduce

Steps to reproduce the behavior:
Connect via Mobile Network Provider.

Expected behavior

Connect the peers.

Are you using NetBird Cloud?

Self-Hosted

NetBird version

netbird version

NetBird status -d output:

latest, installed on 19.05.25 (Quickstart)

Additional context

iOS Logs:

2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z DEBG client/internal/login.go:34: connected to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z INFO client/ios/NetBirdSDK/client.go:89: Starting NetBird client
2024-05-20T07:17:32Z DEBG client/ios/NetBirdSDK/client.go:90: Tunnel uses interface: utun7
2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z DEBG client/internal/login.go:34: connected to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z DEBG client/internal/login.go:63: connected to the Management service https://my.domain.com:443
2024-05-20T07:17:32Z INFO client/ios/NetBirdSDK/client.go:118: Auth successful
2024-05-20T07:17:32Z INFO client/internal/connect.go:115: starting NetBird client version v0.27.5 on ios/arm64
2024-05-20T07:17:32Z DEBG client/internal/connect.go:176: connecting to the Management service my.domain.com:443
2024-05-20T07:17:33Z DEBG client/internal/connect.go:184: connected to the Management service my.domain.com:443
2024-05-20T07:17:33Z DEBG signal/client/grpc.go:92: connected to Signal Service: my.domain.com:443
2024-05-20T07:17:33Z INFO client/internal/routemanager/manager.go:93: Routing setup complete
2024-05-20T07:17:33Z INFO iface/tun_ios.go:44: create tun interface
2024-05-20T07:17:33Z DEBG iface/tun_ios.go:66: Attaching to interface
2024-05-20T07:17:33Z ERRO iface/uapi.go:15: failed to open uapi socket: mkdir /var/run/wireguard: operation not permitted
2024-05-20T07:17:33Z ERRO iface/wg_configurer_usp.go:189: failed to open uapi listener: mkdir /var/run/wireguard: operation not permitted
2024-05-20T07:17:33Z DEBG iface/wg_configurer_usp.go:37: adding Wireguard private key
2024-05-20T07:17:33Z DEBG iface/tun_ios.go:93: device is ready to use: utun7
2024-05-20T07:17:33Z DEBG signal/client/grpc.go:137: signal connection state READY
2024-05-20T07:17:33Z INFO signal/client/grpc.go:158: connected to the Signal Service stream
2024-05-20T07:17:33Z DEBG client/internal/engine.go:640: connecting to Management Service updates stream
2024-05-20T07:17:33Z INFO client/internal/engine.go:359: Network monitor is disabled, not starting
2024-05-20T07:17:33Z INFO client/internal/connect.go:261: Netbird engine started, the IP is: 100.119.12.202/16
2024-05-20T07:17:33Z DEBG management/client/grpc.go:120: management connection state READY
2024-05-20T07:17:33Z INFO management/client/grpc.go:147: connected to the Management Service stream
2024-05-20T07:17:33Z DEBG management/client/grpc.go:253: got an update message from Management Service
2024-05-20T07:17:33Z DEBG client/internal/engine.go:666: got TURNs update from Management Service, updating
2024-05-20T07:17:33Z DEBG client/internal/engine.go:648: got STUNs update from Management Service, updating
2024-05-20T07:17:33Z WARN client/internal/engine.go:551: running SSH server is not permitted
2024-05-20T07:17:33Z DEBG client/internal/engine.go:697: got peers update from Management Service, total peers to connect to = 1
2024-05-20T07:17:33Z DEBG client/internal/engine.go:933: creating peer connection e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:17:33Z DEBG client/internal/routemanager/client.go:338: Received a new client network route update for 0.0.0.0/0
2024-05-20T07:17:33Z WARN client/internal/routemanager/client.go:154: the network 0.0.0.0/0 has not been assigned a routing peer as no peers from the list [e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] are currently connected
2024-05-20T07:17:33Z DEBG client/internal/dns/host_ios.go:28: Applying DNS settings: {"domains":null,"routeAll":false,"serverIP":"100.119.255.254","serverPort":53}
2024-05-20T07:17:33Z INFO client/internal/acl/manager.go:52: ACL rules processed in: 149.958µs, total rules count: 2
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation
2024-05-20T07:17:35Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820
2024-05-20T07:17:35Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820
2024-05-20T07:17:35Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FdYfEKxGPcGxNewA
2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820
2024-05-20T07:17:35Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FdYfEKxGPcGxNewAstun:my.domain.com:3478
2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed
2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:17:47Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 
2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed
2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:17:47Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller
2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation
2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820
2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820
2024-05-20T07:17:49Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for qsiaqUByKTiKZpLW
2024-05-20T07:17:49Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for qsiaqUByKTiKZpLWstun:my.domain.com:3478
2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed
2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:01Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 
2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed
2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:01Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller
2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation
2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820
2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820
2024-05-20T07:18:03Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FsnhFfNmMIHDJewp
2024-05-20T07:18:03Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FsnhFfNmMIHDJewpstun:my.domain.com:3478
2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed
2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:15Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 
2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed
2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:15Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller
2024-05-20T07:18:16Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:16Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:18:16Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation
2024-05-20T07:18:17Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820
2024-05-20T07:18:17Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=]
2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820
2024-05-20T07:18:17Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for wcfOsAXiJBXKWKQx
2024-05-20T07:18:17Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for wcfOsAXiJBXKWKQxturn:my.domain.com:3478?transport=udp
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:30Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:30Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation
2024-05-20T07:18:31Z DEBG client/internal/routemanager/client.go:321: stopping watcher for network 0.0.0.0/0
2024-05-20T07:18:31Z DEBG client/internal/engine.go:428: removing all peer connections
2024-05-20T07:18:31Z DEBG client/internal/engine.go:440: removing peer from engine e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:31Z DEBG signal/client/grpc.go:389: stream canceled (usually indicates shutdown)
2024-05-20T07:18:31Z DEBG signal/client/grpc.go:164: signal connection context has been canceled, this usually indicates shutdown
2024-05-20T07:18:31Z DEBG management/client/grpc.go:249: disconnected from Management Service sync stream: rpc error: code = Canceled desc = context canceled
2024-05-20T07:18:31Z DEBG management/client/grpc.go:157: management connection context has been canceled, this usually indicates shutdown
2024-05-20T07:18:31Z DEBG client/internal/engine.go:638: stopped receiving updates from Management Service
2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:31Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 
2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed
2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:571: error while updating peer's e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= state, err: peer doesn't exist
2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:574: failed to reset wireguard stats for peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=: peer doesn't exist
2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=
2024-05-20T07:18:31Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= has been closed
2024-05-20T07:18:31Z INFO client/internal/routemanager/manager.go:117: Routing cleanup complete
2024-05-20T07:18:31Z DEBG client/internal/engine.go:1178: removing Netbird interface utun7
2024-05-20T07:18:31Z INFO client/internal/engine.go:246: stopped Netbird Engine
2024-05-20T07:18:31Z INFO client/internal/connect.go:275: stopped NetBird client

I also read about TURN may be an issue. My "external-ip" is set!
I tried: https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/ - with success:

Time | Type | Foundation | Protocol | Address | Port | Priority | URL (if present) | relayProtocol (if present)
-- | -- | -- | -- | -- | -- | -- | -- | --
0.007 | host | 0 | udp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 49951 | 126 \| 32512 \| 255 |   |  
0.012 | host | 3 | tcp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 9 | 125 \| 32704 \| 255 |   |  
0.013 | host | 0 | udp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 49952 | 126 \| 32512 \| 254 |   |  
0.014 | host | 3 | tcp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 9 | 125 \| 32704 \| 254 |   |  
0.141 | srflx | 1 | udp | PUB-IP(Peer) | 21504 | 100 \| 32543 \| 255 |   |  
0.141 | relay | 2 | udp | PUB-IP | 57606 | 5 \| 32543 \| 255 |   |  
0.157 | Done

From same network i can connect the peer successfull.

When coming from external there is a pfsense in between, may thats the issue?
From my understanding TURN shold go "through" without any changes.

Originally created by @Berndinox on GitHub (May 20, 2024). Original GitHub issue: https://github.com/netbirdio/netbird/issues/2016 **Describe the problem** I tried connecting my mobile (iOS) and found that i cant connect any peer. I double checked an connected my windows laptop via mobile-phone hotspot and faced the same issue. A clear and concise description of what the problem is. **To Reproduce** Steps to reproduce the behavior: Connect via Mobile Network Provider. **Expected behavior** Connect the peers. **Are you using NetBird Cloud?** Self-Hosted **NetBird version** `netbird version` **NetBird status -d output:** latest, installed on 19.05.25 (Quickstart) **Additional context** iOS Logs: ``` 2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z DEBG client/internal/login.go:34: connected to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z INFO client/ios/NetBirdSDK/client.go:89: Starting NetBird client 2024-05-20T07:17:32Z DEBG client/ios/NetBirdSDK/client.go:90: Tunnel uses interface: utun7 2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z DEBG client/internal/login.go:34: connected to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z DEBG client/internal/login.go:93: connecting to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z DEBG client/internal/login.go:63: connected to the Management service https://my.domain.com:443 2024-05-20T07:17:32Z INFO client/ios/NetBirdSDK/client.go:118: Auth successful 2024-05-20T07:17:32Z INFO client/internal/connect.go:115: starting NetBird client version v0.27.5 on ios/arm64 2024-05-20T07:17:32Z DEBG client/internal/connect.go:176: connecting to the Management service my.domain.com:443 2024-05-20T07:17:33Z DEBG client/internal/connect.go:184: connected to the Management service my.domain.com:443 2024-05-20T07:17:33Z DEBG signal/client/grpc.go:92: connected to Signal Service: my.domain.com:443 2024-05-20T07:17:33Z INFO client/internal/routemanager/manager.go:93: Routing setup complete 2024-05-20T07:17:33Z INFO iface/tun_ios.go:44: create tun interface 2024-05-20T07:17:33Z DEBG iface/tun_ios.go:66: Attaching to interface 2024-05-20T07:17:33Z ERRO iface/uapi.go:15: failed to open uapi socket: mkdir /var/run/wireguard: operation not permitted 2024-05-20T07:17:33Z ERRO iface/wg_configurer_usp.go:189: failed to open uapi listener: mkdir /var/run/wireguard: operation not permitted 2024-05-20T07:17:33Z DEBG iface/wg_configurer_usp.go:37: adding Wireguard private key 2024-05-20T07:17:33Z DEBG iface/tun_ios.go:93: device is ready to use: utun7 2024-05-20T07:17:33Z DEBG signal/client/grpc.go:137: signal connection state READY 2024-05-20T07:17:33Z INFO signal/client/grpc.go:158: connected to the Signal Service stream 2024-05-20T07:17:33Z DEBG client/internal/engine.go:640: connecting to Management Service updates stream 2024-05-20T07:17:33Z INFO client/internal/engine.go:359: Network monitor is disabled, not starting 2024-05-20T07:17:33Z INFO client/internal/connect.go:261: Netbird engine started, the IP is: 100.119.12.202/16 2024-05-20T07:17:33Z DEBG management/client/grpc.go:120: management connection state READY 2024-05-20T07:17:33Z INFO management/client/grpc.go:147: connected to the Management Service stream 2024-05-20T07:17:33Z DEBG management/client/grpc.go:253: got an update message from Management Service 2024-05-20T07:17:33Z DEBG client/internal/engine.go:666: got TURNs update from Management Service, updating 2024-05-20T07:17:33Z DEBG client/internal/engine.go:648: got STUNs update from Management Service, updating 2024-05-20T07:17:33Z WARN client/internal/engine.go:551: running SSH server is not permitted 2024-05-20T07:17:33Z DEBG client/internal/engine.go:697: got peers update from Management Service, total peers to connect to = 1 2024-05-20T07:17:33Z DEBG client/internal/engine.go:933: creating peer connection e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:17:33Z DEBG client/internal/routemanager/client.go:338: Received a new client network route update for 0.0.0.0/0 2024-05-20T07:17:33Z WARN client/internal/routemanager/client.go:154: the network 0.0.0.0/0 has not been assigned a routing peer as no peers from the list [e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] are currently connected 2024-05-20T07:17:33Z DEBG client/internal/dns/host_ios.go:28: Applying DNS settings: {"domains":null,"routeAll":false,"serverIP":"100.119.255.254","serverPort":53} 2024-05-20T07:17:33Z INFO client/internal/acl/manager.go:52: ACL rules processed in: 149.958µs, total rules count: 2 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation 2024-05-20T07:17:35Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820 2024-05-20T07:17:35Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820 2024-05-20T07:17:35Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FdYfEKxGPcGxNewA 2024-05-20T07:17:35Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820 2024-05-20T07:17:35Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FdYfEKxGPcGxNewAstun:my.domain.com:3478 2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed 2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:17:47Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed 2024-05-20T07:17:47Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:17:47Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller 2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation 2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820 2024-05-20T07:17:49Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:17:49Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820 2024-05-20T07:17:49Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for qsiaqUByKTiKZpLW 2024-05-20T07:17:49Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for qsiaqUByKTiKZpLWstun:my.domain.com:3478 2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed 2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:01Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed 2024-05-20T07:18:01Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:01Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller 2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation 2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820 2024-05-20T07:18:03Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:03Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820 2024-05-20T07:18:03Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FsnhFfNmMIHDJewp 2024-05-20T07:18:03Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for FsnhFfNmMIHDJewpstun:my.domain.com:3478 2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed 2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:15Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed 2024-05-20T07:18:15Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:15Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller 2024-05-20T07:18:16Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:16Z DEBG client/internal/peer/conn.go:750: OnRemoteOffer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:18:16Z DEBG client/internal/peer/conn.go:756: OnRemoteOffer skipping message from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected because is not ready 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation 2024-05-20T07:18:17Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:765: OnRemoteAnswer from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= on status Disconnected 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:333: received connection confirmation from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= running version 0.27.7 and with remote WireGuard listen port 51820 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Checking 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 10.110.127.61:51820 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 host 192.168.4.22:51820 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:622: discovered local candidate udp4 srflx 176.66.87.43:43632 related 0.0.0.0:51820 2024-05-20T07:18:17Z TRAC signal/client/grpc.go:400: received a new message from Peer [fingerprint: e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=] 2024-05-20T07:18:17Z DEBG client/internal/peer/conn.go:779: OnRemoteCandidate from peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= -> udp4 host 172.17.0.2:51820 2024-05-20T07:18:17Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for wcfOsAXiJBXKWKQx 2024-05-20T07:18:17Z DEBG iface/bind/udp_mux.go:346: ICE: registered 172.17.0.2:51820 for wcfOsAXiJBXKWKQxturn:my.domain.com:3478?transport=udp 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Failed 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:30Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:30Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connecting canceled by caller 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:280: trying to connect to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:30Z DEBG client/internal/peer/conn.go:312: connection offer sent to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=, waiting for the confirmation 2024-05-20T07:18:31Z DEBG client/internal/routemanager/client.go:321: stopping watcher for network 0.0.0.0/0 2024-05-20T07:18:31Z DEBG client/internal/engine.go:428: removing all peer connections 2024-05-20T07:18:31Z DEBG client/internal/engine.go:440: removing peer from engine e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:31Z DEBG signal/client/grpc.go:389: stream canceled (usually indicates shutdown) 2024-05-20T07:18:31Z DEBG signal/client/grpc.go:164: signal connection context has been canceled, this usually indicates shutdown 2024-05-20T07:18:31Z DEBG management/client/grpc.go:249: disconnected from Management Service sync stream: rpc error: code = Canceled desc = context canceled 2024-05-20T07:18:31Z DEBG management/client/grpc.go:157: management connection context has been canceled, this usually indicates shutdown 2024-05-20T07:18:31Z DEBG client/internal/engine.go:638: stopped receiving updates from Management Service 2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:519: trying to cleanup e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:31Z DEBG iface/iface.go:88: Removing peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= from interface utun7 2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:663: peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= ICE ConnectionState has changed to Closed 2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:571: error while updating peer's e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= state, err: peer doesn't exist 2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:574: failed to reset wireguard stats for peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk=: peer doesn't exist 2024-05-20T07:18:31Z DEBG client/internal/peer/conn.go:577: cleaned up connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= 2024-05-20T07:18:31Z DEBG client/internal/engine.go:913: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= failed: connection to peer e6Rarf9LFHH0FhvQH+PlGDYZZCITcdU31Sk5S4itslk= has been closed 2024-05-20T07:18:31Z INFO client/internal/routemanager/manager.go:117: Routing cleanup complete 2024-05-20T07:18:31Z DEBG client/internal/engine.go:1178: removing Netbird interface utun7 2024-05-20T07:18:31Z INFO client/internal/engine.go:246: stopped Netbird Engine 2024-05-20T07:18:31Z INFO client/internal/connect.go:275: stopped NetBird client ``` I also read about TURN may be an issue. My "external-ip" is set! I tried: https://webrtc.github.io/samples/src/content/peerconnection/trickle-ice/ - with success: ``` Time | Type | Foundation | Protocol | Address | Port | Priority | URL (if present) | relayProtocol (if present) -- | -- | -- | -- | -- | -- | -- | -- | -- 0.007 | host | 0 | udp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 49951 | 126 \| 32512 \| 255 | | 0.012 | host | 3 | tcp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 9 | 125 \| 32704 \| 255 | | 0.013 | host | 0 | udp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 49952 | 126 \| 32512 \| 254 | | 0.014 | host | 3 | tcp | 0e87545e-1fb7-497b-93fe-185c151f9948.local | 9 | 125 \| 32704 \| 254 | | 0.141 | srflx | 1 | udp | PUB-IP(Peer) | 21504 | 100 \| 32543 \| 255 | | 0.141 | relay | 2 | udp | PUB-IP | 57606 | 5 \| 32543 \| 255 | | 0.157 | Done ``` From same network i can connect the peer successfull. When coming from external there is a pfsense in between, may thats the issue? From my understanding TURN shold go "through" without any changes.

saavagebueno referenced this issue

2026-08-05 05:05:56 -04:00

[PR #4043] [CLOSED] [Management] replace update channel with buffer #19375

saavagebueno referenced this issue

2026-08-05 05:05:56 -04:00

[PR #4043] [Management] replace update channel with buffer #19380

saavagebueno referenced this issue

2026-08-05 06:05:49 -04:00

[PR #4043] [CLOSED] [Management] replace update channel with buffer #22308

saavagebueno referenced this issue

2026-08-05 06:05:49 -04:00

[PR #4043] [Management] replace update channel with buffer #22317

saavagebueno referenced this issue

2026-08-05 06:08:45 -04:00

[PR #4043] [CLOSED] [Management] replace update channel with buffer #24490

saavagebueno referenced this issue

2026-08-05 06:08:46 -04:00

[PR #4043] [Management] replace update channel with buffer #24499

Sign in to join this conversation.

Branches Tags

main

claude/agent-network-test-cases-p743vw

android/gui-integration

revert/component-types

feat-post_quantum_ml_kem

ice-stun-wg-demux

dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c

agent-network-setup-poc

dependabot/go_modules/aws-sdk-8f849ebaed

dependabot/github_actions/actions-a940c7c866

dependabot/go_modules/otel-e34c790afd

dependabot/go_modules/testcontainers-de325c0dd6

dependabot/go_modules/wireguard-dbd6b95108

dependabot/go_modules/pion-5f703e1eca

dependabot/go_modules/gorm-2271c8195b

fix-login-needed-check

dependabot/go_modules/google.golang.org/grpc-1.82.1

fix/ui-gtk3-support

enterprise-traefik-and-migration-fixes

disambiguate_p2p_metrics

revert/component-types-hookup

embedded-vnc

feature/ios-ssh

docs/agent-network-docs-update

dependabot/go_modules/github.com/aws/aws-sdk-go-v2/service/s3-1.106.3

dependabot/go_modules/github.com/pion/stun/v3-3.1.5

fix-ssh-authorized-users-multi-rule

peer-acl-multi-source

reverse-proxy-crowdsec-appsec

reverse-proxy-allow-match-or

client-local-metrics

lazy-conn-per-peer

lazy-conn-rosenpass

dependabot/go_modules/github.com/gopacket/gopacket-1.7.0

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.6

dependabot/go_modules/github.com/pires/go-proxyproto-0.15.0

dependabot/go_modules/github.com/jackc/pgx/v5-5.10.0

dependabot/go_modules/github.com/oapi-codegen/runtime-1.6.0

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.4

dependabot/go_modules/github.com/pkg/sftp-1.13.11

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.20.0

ssh-windows-privilege-check

fix/explicit-cors-handling

fix/remove-math-rand

test/gui-memory-leak-fix

fix/ui-status-dispatch

install-script-ui-dependencies

fix/grpc-get-network-map

fix/subscribe-status-coalesce

fix/tray-menu-item-leak

fix/windows-tray-race

feature/changeset

worktree-dns-route-qtype-fallthrough

mdm_integration

mlsmaycon-patch-2

feat/agent-network-ollama

proxy-tunnel-cache-ttl-env

coderabbitai/utg/1e5b0a5

grpc-acl

test/battery-drain

components-impl-drop-indexes-use-xids-no-resource-policy-map

fix/nmap-relevant-groups

e2e-guardrail-blocks-unselected-model

fix/lazyconn-cold-start-allowed-ips

vertex-guardrails-model-access-e2e

add-atomic-cache-ops

refactor/relay-foreign-cache

ci/trigger-release-tests

feature/kimi-3-agent-networks-dns-warmup

feature/dns-lazy-conn-warmup

daemon-ipc-acl

feature/ui-translation-key-parity-check

refactor/relay-foreign-cache-tests

fix/lazyconn-idle-keep-wg-peer

dmitri-propagate-auth-grant-types-on-combined

0.74.7-branch

diagnose-empty-vs-corrupt-state

windows-sleep-detector

fix/cli-up-wait-for-daemon

rp_key_persistency

feature/native-grpc

0.74.6-branch

0.74.6-branch-sync

0.74.5-branch-sync

0.74.4-branch

fix/remove-stale-peers-removal

fix/remove-stale-proxy-logic

fix/nsis-preserve-autostart-on-upgrade

refactor/peer-event-bus

dependabot/go_modules/goauthentik.io/api/v3-3.2026050.3

dependabot/go_modules/github.com/pkg/sftp-1.13.10

components-impl-drop-indexes

fix-reset-aggregation-window-flake

dependabot/go_modules/github.com/pion/dtls/v3-3.1.5

0.74.x

fix/relay-states-lock

update-process-pkg

update-gopsutil-v4

fix/relay_states_lock

increase-sysinfo-timeout

dependabot/go_modules/github.com/Azure/go-ntlmssp-0.1.1

dependabot/go_modules/github.com/eko/gocache/store/redis/v4-4.2.6

dependabot/go_modules/github.com/eko/gocache/lib/v4-4.2.3

fix/fail-to-create-upnp-port-mapping-on-opnsense-firewall

0.74.3-branch

fix/routeselector-atomic-exit-node

netmap_progressive_alignment

nmap/components-impl

dependabot/go_modules/github.com/jackc/pgx/v5-5.9.2

dependabot/go_modules/github.com/oapi-codegen/runtime-1.4.2

dependabot/go_modules/github.com/gopacket/gopacket-1.6.1

dependabot/go_modules/github.com/coreos/go-oidc/v3-3.19.0

dependabot/go_modules/github.com/pires/go-proxyproto-0.12.0

fix/signal-watchdog-sync-stop

docs/agent-network

test/affected-logic

fix/revert-ice-filter

refactor/simplify-affected-peers

pascal-filter-policies-by-direction

claude/lock-contention-peer-connect-g8t6au

dmitri-filter-policies-by-direction

refactor/migrate-profiles-to-go

profile-bindings-ios

fix/skip-restart-unchanged-route

fix/mgmt-cache-async-resolve

refactor/wails-update-105

client_lifetime_serialization_refactor

fix/browser-ssh-2

fix/ipv6-and-netstack-accept-loop

fix/browser-ssh

profile-id-name-test

refactor/mgmt-bootstrap

feat/getting-started-unified-wizard

socket-grpc-permissions

fix/mysql-index-migration

windows-dns-firewall

tests/enable-race-on-tests

ui-refactor-gtk3

feature/affected-peers-grpc

profile-id

lazyconn-first-packet-fix-v2

claude/focused-gates-VMTgb

ui-tray-linux-leftclick

fix/ctx-enrichment

daemon-owner

feature/android-client-ssh

worktree-accept-ra-forwarding

nmap/combined-deploy

task/align_protobuff_toolset

feature/session-extend

add-json-yaml-flags

refactor/ephemeral-cleanup

claude/webtransport-relay-wasm-mUjY9

claude/vnc-udp-feasibility-6KB1U

fix/wgport-config

e2e-windows-dns-combined

fix/login-cmd-root-flags

feat/reseller-openapi-spec

github-issue-resolver

add-steamos-support

fix-darwin-uninstaller

flutter-test

ci/freebsd-pkg-bootstrap

cached-serial-check-on-sync

fix-mgmt-cache-bypass-overlay

revert-easyjson-5938

revert-ice-5820

revert-firewalld-5928

refactor/permissions-manager

revert-dns-5935-systemd-resolved

revert-dns-5935-5945

revert-dns-5945-mgmt-cache

feature/log-most-busy-peers

prototype/ui-wails

coderabbitai/utg/8ae8f20

feature/use-peer-fqdn-on-https

release/0.68.3

add-slack-channel

claude/rdp-token-passthrough-eNcqW

transparent-proxy

fix/macos-stale-route-eexist

crowdsec-selfhosted

fix/remove-otel-units

entire/checkpoints/v1

fix/getting-started

feat/static-connectors-combined-server

feature/use-local-keys-embedded

feature/fleetdm

set-env-only-if-not-fork

feature/expose-has-channel

fix/connection-status-race

fix/filter-cgnat-cni-ice-candidates

feature/check-cert-locker-before-acme

test/proxy-fixes

test/proxy-mtu

prototype/ui-tauri

test/proxy-speed

fix-reused-ports

feat/migrate-to-embedded-idp

feature/add-serial-to-proxy-merged

deploy/proxy-serial

test/connection

feature/disable-legacy-port

feature/flag-to-disable-legacy-port

test/perftest

fix/http-redirect

poc-token-command

dn-reverse-proxy

prototype/reverse-proxy-rename

prototype/reverse-proxy-logs-pagination

feature/client-metrics

prototype/reverse-proxy-clusters

debug-dns-route

fix/win-dns-batch

add-extra-route-logs

job-stream-notify-disconnection-eof

deploy/secrets-manager

trigger-proxy-update

bug/update-ios-client-code-build-tags

sync-client-netmap-serial

log/conn-disconn

nmap/compaction-deploy

ci-win-test

feature/disk-encryption-check

wasm-debug

swap-dns-prio

fix/dex-config

feature/migrate-auto-groups-to-table

nmap/compaction

dex-nocgo-stub

feature/exclude-terraform-from-rate-limiting

test-freebsd

retries-refactor

coderabbitai/docstrings/b7e98ac

feat/integrate-zitadel

bug/ios-hanging-reconection

zitadel-idp

feat/network-map-serial

refactor/get-account-no-users

feat/auto-upgrade

feature/report-high-pat-id

feature/temporary-access-for-resource

fix/nmap-fwrules

dont-restart-dns

prototype/ui

update-gomobile

go-dns-for-ice

wasm-ldflags

test-ldflags

wasmbuild-test

feature/networks-s2s

vk/compare-nmaps

dbg/bothmaps

reorder-dns-shutdown

fix/relay-reconnection-race

fix/nmap-exitnodes

vk/debug/nmap-both

move-licensed-code

feat/better-daemon-connection-lost-message

feat/auto-update-2

test/timings

refactor/getaccount-raw

tests/nmap-getaccount

refactor/nmap

refactor/nmap-limit-buffer

feature/detect-mac-wakeup

feature/extract-modules

quick-setings

feat/sync-limiter

feature/store-cache-impl

fix-install-version

feature/store-metrics

feature/metrics-on-store

feature/use-gorm-cache

loadtest-signal

unsymmetrical-squash

refactor/reducate-signaling

test/update-reduce

feature/store-cache

feature/remote-debug

cli-ws-proxy-backend-addr

feat/mgmt-map-serial

snyk-fix-d9d0081a4c7f9137bdb59d0d50a141a2

snyk-fix-7415cea5a11acd66753540ca2c598c63

job-yml-update

feature/android-allow-selecting-routes

fix/up-sequence

fix/dns-hash-update

snyk-fix-967adae9863f17f108ce8948d9117b8d

log/getaccount-by-peer

signal-suppressor

dns-exit-node

feature/auto-updates

feature/cache-srv-key

merged-fixes

fix/missed-offers-and-debug

debug-and-fixes

poc-wasm-clean-backend-s2s

test/remote-debug

debug-api

fix/remove-gpo-if-empty

fix/test-freebsd

fix/mysql-setup

fix/remove-logout-btn

handle-existing-domain-user

chore/unify-domain-validation

snyk-fix-c5fafc8a50ce1f29046e25a1fc346185

feat/profile-edit-btn

snyk-fix-a54966211e18d4cf67e5a2757cc006d1

log-short-id

feat/logout-ephemeral

log-checks

batch-wg-ops

nb-interface-default

feat/aws-integration

add/race-test

feature/relay-feature-versioning

fix/systemd-service-logs

poc/preprocessed-map

add-account-onboarding

bind-ipv6

fix/merge-main

logs/peerlogs-addpeer

feature/net-297-network-migration

feature/support-skip-auto-apply-exit-node-routes

set-cmd

set-command-with-cursor

feature/limit-update-channel

stop-using-locking-share

feature/poc-lazy-detection

feature/net-248-removal-of-sync-mutex-locks

test/multiple-peer-logging

preresolve

add-ns-punnycode-support

apply-routes-early

windows-search-domains

fix/connecting-route-filter

feature/management/rest-client/impersonate

debug-local-records

resource-fields-snake-case

test/grpc-rate-limit

traffic-correlation-policy

feature/rest-client-options

feat/events-metrics

feature/buf-cli

test/add-ratelimiter

test/remove-write-lock-on-add-peer

fix/add-peer-semaphore

feature/users-roles-endpoint

mlsmaycon-patch-1

debug-user-role

chore/primary-key-on-networks

feature/update-account-peers-buffer-startup

remove-ubuntu2004-runners

refactor/permissions-no-pat-allowed

ref/logrus-factory

use-conntrack-zone

deploy/permissions-account

feature/lazy-connection-idle

ref/improve-test-cov

restore-pr-3440

test/increase-grpc-timeouts

feat/buffer-account-peers-update

test/networkmapgeneration-changes

feature/base-manager

feature/flow-receiver

chore/benchmark-with-large-runner

refactor/handshake-initiator

client/ui-update-systray-icons

userspace-router

wgwatcher-test

output-if-key-already-exists

fix/relay-reconnection

feature/port-forwarding-client-codecleaning

detached2

test/callbacks-nil-iceconninfo

refactor/optimize-peer-expiration

enable-udp-port-for-docker-template

fix/relay-update

feature/apply-posture-netmap

fix/group-update-existing-resource

conntrack-stats

upgrade-okta-sdk

multi-price

test/conn-stat

set-min-parallel-tests-for-management

dns-interceptor

debug-dns

router-dns

add-static-system-info

debug-0.29.4

debug-0.33.0

account-refactoring

relay/2800_quic

route-get-account-refactoring

test/seed-random-routes

feature/get-account-refactoring

test/reconnect-race-condition

refactor/get-account-usage

feature/add-session-id-to-update-channel

improve-ipv4conn

fix/async-pion-event-handling

debug

add-offload

feature/validate-group-association-debug

fix/limit-conn-for-sqlite

test/engine-iface

test/transaction-for-jwt-sync

fix/engine-stop-in-foreground

feature/add-mysql-support

test-migration

refactor/header-size-values

relay/eliminate-gob

test/signal-dispatcher-with-relay

relay/debug

validate-icon

feature/ipv6-support

use-pre-expanded-peers-map

feature/use-signal-dispatcher

validate/peer-status

add-read-write-times

fix/sync-peer-race

feature/relay-status

netmap

evaluate/network-map-hash

fix/lower-dns-resolve-interval-on-fail

feature/relay

fix/go-mod-version

upgrade-nftables

synology-userspace-mode

fix/use-ip-for-default-routes-on-darwin

fix/proxy_close

enable-release-workflow-on-pr

deploy/peer-performance

feature/permanent-turn

feature/permanent-turn-proxy

deploy/posture-check-sqlite

feature/optimize_sqlite_save

debug-ios-behavior

fix/delete-route-only-after-adding

tshoot/windows-logger

remove-new-routing

refactor/eliminate-repo-dependency

add-arm-to-ci

refactor-demo-account-object

test/abc2

test/abc

send-ssh-rosenpass-config-meta

refactor-demo

ensure-schedule-never-runs-non-positive

feature/peer-validator-groupmgm

feature/peer-validator-fix

fix/include-active-dashboard-users

fix/handle-canceling-schedule

fix/geo-download

debug-google-workspace

yury/resolve-ip-to-location

feature/extend-sysinfo

sqlite-async-peer-status

yury/add-postgresql-store

fix/route

test-build

posture-checks-poc

debug-keycloak-idp

poc/netstack

for-pascal-tmp

peer-logout-management

manual-peer-logout

detached

chore/refactor-management

test/dns-bind

fix/enforce-acl-for-containers

yury/use-sync-map-in-updatechannel

fix/events-key-handling

filter-cache-on-load-account

fix/user-expiration

handle-user-context-cancellation

nb-client-k8s-statefulset

fake-addr

fix/iptables_in_docker

ebpf-debug

update-getting-started-flow-use-postgres

fix/peer_list_notification

feature/device-authentication-with-client-secret

feature/keep_alive

feat-groups-from-jwt

separate_proxy_from_wgconfig

fix/wg_conn

wg_conn_fix

wg_bind_parallel_processing

fix-rollback-get-acls

proxy_cfg_cleanup

performance-improvement-rego

update-lock-log-level

feat-client-side-acl

refactor/move_grpcserver_logic_to_account_manager

feature/event-storage

feature/update-idp-redeeming-invite

feature/api-peer-info

return-groupminimum-setupkey

feature/interface-bind

documentation_enhancement

fix-peer-registration

ssh

users_cache

pass-client-caller

client_caller_type

revert-283-feat-fix-windows-installer

periodic-peer-updates

ebpf

braginini/wasm

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: DYNR/netbird#4043