[GH-ISSUE #4696] 5G Connection, peer with same public key is already logged in #9246

Open
opened 2026-08-05 01:21:26 -04:00 by saavagebueno · 8 comments
Owner

Originally created by @dsandall on GitHub (Oct 24, 2025).
Original GitHub issue: https://github.com/netbirdio/netbird/issues/4696

The Issue

I have been using netbird for a while now, but recently have been experiencing issues after switching to a TMobile Home internet 5G router. When losing connection due to (presumably) a 5g tower switch, I can not login to the peer network from my local machine, getting the error:
Error: daemon up failed: sso login failed: waiting sso login failed with: rpc error: code = Unknown desc = peer with the same public key is already logged in

To Reproduce

Steps to reproduce the behavior:
I am currently on an updated Arch machine, if you need clarification let me know.

  1. Connect to Netbird using 5G mobile wifi network (or phone hotspot)
  2. netbird up
  3. Wait a while or change locations
  4. get disconnected, netbird up now returns error message
  5. Error will resolve itself within 5-10 minutes (technically a solution, but incredibly aggravating)

Expected behavior
While I was expecting to be disconnected occasionally due to 5G tower changes, I was not expecting netbird to refuse a relog. Interestingly, netbird up continues to refuse auth, even if the peer group on the web gui shows the device on the mobile network has disconnected.

I'm guessing its some sort of session timeout issue, but I'm not sure where to start here.

Are you using NetBird Cloud?
I am using Netbird cloud, with a small number of peers on the network, with no notable configuration changes.

NetBird version

0.59.8

Is any other VPN software installed?

Surfshark, not currently active. Have not used in a while.

netbird status -dA
status.log

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @dsandall on GitHub (Oct 24, 2025). Original GitHub issue: https://github.com/netbirdio/netbird/issues/4696 **The Issue** I have been using netbird for a while now, but recently have been experiencing issues after switching to a TMobile Home internet 5G router. When losing connection due to (presumably) a 5g tower switch, I can not login to the peer network from my local machine, getting the error: `Error: daemon up failed: sso login failed: waiting sso login failed with: rpc error: code = Unknown desc = peer with the same public key is already logged in` **To Reproduce** Steps to reproduce the behavior: I am currently on an updated Arch machine, if you need clarification let me know. 1. Connect to Netbird using 5G mobile wifi network (or phone hotspot) 2. `netbird up` 3. Wait a while or change locations 4. get disconnected, `netbird up` now returns error message 5. Error will resolve itself within 5-10 minutes (technically a solution, but incredibly aggravating) **Expected behavior** While I was expecting to be disconnected occasionally due to 5G tower changes, I was not expecting netbird to refuse a relog. Interestingly, `netbird up` continues to refuse auth, even if the peer group on the web gui shows the device on the mobile network has disconnected. I'm guessing its some sort of session timeout issue, but I'm not sure where to start here. **Are you using NetBird Cloud?** I am using Netbird cloud, with a small number of peers on the network, with no notable configuration changes. **NetBird version** `0.59.8` **Is any other VPN software installed?** Surfshark, not currently active. Have not used in a while. **netbird status -dA** [status.log](https://github.com/user-attachments/files/23135827/status.log) **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2026-08-05 01:21:26 -04:00
Author
Owner

@stauersbol commented on GitHub (Oct 25, 2025):

I'm also getting the same issue right now. I did have tailscale installed and removed it and stopped service then it worked for 10min and then stopped working again.

Currently getting this, which feels like the same issue as OP: Error: unable to get daemon status: rpc error: code = Unknown desc = peer with the same public key is already logged in

It basically appeared as soon as a I logged into my PC.

EDIT:
Stopping and starting the service makes it work, but it inevitably ends up not working again.

<!-- gh-comment-id:3446707419 --> @stauersbol commented on GitHub (Oct 25, 2025): I'm also getting the same issue right now. I did have tailscale installed and removed it and stopped service then it worked for 10min and then stopped working again. Currently getting this, which feels like the same issue as OP: `Error: unable to get daemon status: rpc error: code = Unknown desc = peer with the same public key is already logged in` It basically appeared as soon as a I logged into my PC. EDIT: Stopping and starting the service makes it work, but it inevitably ends up not working again.
Author
Owner

@aluizioh2o commented on GitHub (Nov 29, 2025):

I'm facing the same problem. Did you guys solved it ?

<!-- gh-comment-id:3592039191 --> @aluizioh2o commented on GitHub (Nov 29, 2025): I'm facing the same problem. Did you guys solved it ?
Author
Owner

@dsandall commented on GitHub (Nov 29, 2025):

I never ended up fixing it, as I needed to get things working. I ended up switching to tailscale, and in the process I learned about systemd-resolved following this section in the tailscale docs. I have a strong suspicion my netbird issue was related, and could be solved with the same thing. (although the "already logged in" made the issue more annoying) I might get around to switching back to netbird + systemd-resolvd, but not today.

<!-- gh-comment-id:3592043819 --> @dsandall commented on GitHub (Nov 29, 2025): I never ended up fixing it, as I needed to get things working. I ended up switching to tailscale, and in the process I learned about systemd-resolved following [this section in the tailscale docs](https://tailscale.com/kb/1188/linux-dns#networkmanager--systemd-resolved). I have a strong suspicion my netbird issue was related, and could be solved with the same thing. (although the "already logged in" made the issue more annoying) I might get around to switching back to netbird + systemd-resolvd, but not today.
Author
Owner

@stauersbol commented on GitHub (Nov 29, 2025):

I'm facing the same problem. Did you guys solved it ?

I somewhat got it working, it seems to only happen to me when I do system package updates on my end (I'm using CachyOS), the issue kind of happens on my windows PC from time to time, but I don't notice it as often. It has been running stable on my work PC, as that is turned on 24/7 so I can remote in via ssh.

<!-- gh-comment-id:3592048490 --> @stauersbol commented on GitHub (Nov 29, 2025): > I'm facing the same problem. Did you guys solved it ? I somewhat got it working, it seems to only happen to me when I do system package updates on my end (I'm using CachyOS), the issue kind of happens on my windows PC from time to time, but I don't notice it as often. It has been running stable on my work PC, as that is turned on 24/7 so I can remote in via ssh.
Author
Owner

@aluizioh2o commented on GitHub (Nov 29, 2025):

I see, I wanted to use netbird so I could use the same IP from my local net to use the application from my system and use the AdBlock. But always show up some problem. I tried to use the DNS on tailscale that for me works fine but I didn't manage to get it settled to use the AdBlock from Adguard, maybe a need to study it more to try put it to work.

I'm new with servers I just bought a pi 5 and many things are new and hard to me. Btw I'm using casaOS.

<!-- gh-comment-id:3592089183 --> @aluizioh2o commented on GitHub (Nov 29, 2025): I see, I wanted to use netbird so I could use the same IP from my local net to use the application from my system and use the AdBlock. But always show up some problem. I tried to use the DNS on tailscale that for me works fine but I didn't manage to get it settled to use the AdBlock from Adguard, maybe a need to study it more to try put it to work. I'm new with servers I just bought a pi 5 and many things are new and hard to me. Btw I'm using casaOS.
Author
Owner

@aluizioh2o commented on GitHub (Nov 30, 2025):

@stauersbol @dsandall Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads.

So far I didn't have more error and disconnecting the peers from my server.

<!-- gh-comment-id:3592786309 --> @aluizioh2o commented on GitHub (Nov 30, 2025): @stauersbol @dsandall Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads. So far I didn't have more error and disconnecting the peers from my server.
Author
Owner

@stauersbol commented on GitHub (Nov 30, 2025):

@stauersbol @dsandall Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads.

So far I didn't have more error and disconnecting the peers from my server.

I think my issue is not the same anymore, as it happens a lot more rarely now. I remember having done the resolvd thing that tailscale recommends (did that long ago) and it seems to behaving good

<!-- gh-comment-id:3592791049 --> @stauersbol commented on GitHub (Nov 30, 2025): > @stauersbol @dsandall Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads. > > So far I didn't have more error and disconnecting the peers from my server. I think my issue is not the same anymore, as it happens a lot more rarely now. I remember having done the resolvd thing that tailscale recommends (did that long ago) and it seems to behaving good
Author
Owner

@aluizioh2o commented on GitHub (Nov 30, 2025):

@stauersbol @dsandall Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads.
So far I didn't have more error and disconnecting the peers from my server.

I think my issue is not the same anymore, as it happens a lot more rarely now. I remember having done the resolvd thing that tailscale recommends (did that long ago) and it seems to behaving good

I see.

<!-- gh-comment-id:3592793698 --> @aluizioh2o commented on GitHub (Nov 30, 2025): > > [@stauersbol](https://github.com/stauersbol) [@dsandall](https://github.com/dsandall) Hey guys, I think “I solved” the problem, so I asked ChatGPT about the possible problem, and it gave me many options, at the end the problem was conflict on my casaos between my adguard and netbird in the port 53, so I asked him to create a .yaml file to be able to run netbird without any conflict with the AdGuard but letting me still use the DNS from AdGuard to filter and block ads. > > So far I didn't have more error and disconnecting the peers from my server. > > I think my issue is not the same anymore, as it happens a lot more rarely now. I remember having done the resolvd thing that tailscale recommends (did that long ago) and it seems to behaving good I see.
Sign in to join this conversation.
No Label triage-needed
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: DYNR/netbird#9246