Netbird conflicts with zScaler on a wired connection #1132

Closed
opened 2025-11-20 05:24:33 -05:00 by saavagebueno · 7 comments
Owner

Originally created by @wsw70 on GitHub (Aug 5, 2024).

Describe the problem

When running netbird on a Windows 11 laptop with a wired connection, zScaler keeps restarting and netbird keeps disconnecting as well. This does not happen on a wireless connection.

To Reproduce

On a wired connection

  • netbird up
  • zScaler shortly entrers into an error mode ("internal error') and netbird keeps connecting and reconnecting (as seen with netbird status -d
  • netbird down restores zScaler immediately

On a wireless connection

  • both co-exist without any isues

Are you using NetBird Cloud?

Yes

NetBird version

0.28.6

Additional context

This is reproduced both at home (wired and wireless networks are on the same range) and in the office (where they are on distinct ranges).
This is also reproduced by a friend, in the same conditions

Originally created by @wsw70 on GitHub (Aug 5, 2024). **Describe the problem** When running netbird on a Windows 11 laptop **with a wired connection**, zScaler keeps restarting and netbird keeps disconnecting as well. This does not happen on a wireless connection. **To Reproduce** On a **wired** connection - `netbird up` - zScaler shortly entrers into an error mode ("internal error') and netbird keeps connecting and reconnecting (as seen with `netbird status -d` - `netbird down` restores zScaler immediately On a **wireless** connection - both co-exist without any isues **Are you using NetBird Cloud?** Yes **NetBird version** `0.28.6` **Additional context** This is reproduced both at home (wired and wireless networks are on the same range) and in the office (where they are on distinct ranges). This is also reproduced by a friend, in the same conditions
saavagebueno added the triage-needed label 2025-11-20 05:24:33 -05:00
Author
Owner

@mlsmaycon commented on GitHub (Aug 5, 2024):

Hello @wsw70, can you upgrade the client to 0.28.7 and run the following command on your PowerShell:

netbird -A debug -S for 1m

You can replace the 1m for the amount of minutes it takes to disconnect.

If you like, you can also join our Slack so we can have a faster feedback loop.

@mlsmaycon commented on GitHub (Aug 5, 2024): Hello @wsw70, can you upgrade the client to 0.28.7 and run the following command on your PowerShell: ```shell netbird -A debug -S for 1m ``` You can replace the 1m for the amount of minutes it takes to disconnect. If you like, you can also join our [Slack](https://join.slack.com/t/netbirdio/shared_invite/zt-vrahf41g-ik1v7fV8du6t0RwxSrJ96A) so we can have a faster feedback loop.
Author
Owner

@wsw70 commented on GitHub (Aug 5, 2024):

netbird -A debug -S for 1m

This fails with

PS C:\Users\y> netbird -A debug -S for 5m
Netbird up
Netbird down
Error: failed to up: create wg interface: The object already exists.

However

PS C:\Users\y> netbird up
Connected

can you upgrade the client to 0.28.7

Miracle - I cannot reproduce anymore. So my problem is gone, thanks a lot. I did not notice there was a new version available

@wsw70 commented on GitHub (Aug 5, 2024): > `netbird -A debug -S for 1m` This fails with ``` PS C:\Users\y> netbird -A debug -S for 5m Netbird up Netbird down Error: failed to up: create wg interface: The object already exists. ``` However ``` PS C:\Users\y> netbird up Connected ``` > can you upgrade the client to 0.28.7 Miracle - I cannot reproduce anymore. So my problem is gone, **thanks a lot**. I did not notice there was a new version available
Author
Owner

@wsw70 commented on GitHub (Aug 5, 2024):

The problem is unfortunately back (after 2 or 3 hours). The debug command this time worked and the debug bundle is attached

netbird.debug.1704977056.zip

After switching to a wireless network both Netbird and zScaler are stable (for now, but it has been like that for 2-3 days when I discovered the wired vs wireless difference)

@wsw70 commented on GitHub (Aug 5, 2024): The problem is unfortunately back (after 2 or 3 hours). The debug command this time worked and the debug bundle is attached [netbird.debug.1704977056.zip](https://github.com/user-attachments/files/16495537/netbird.debug.1704977056.zip) After switching to a wireless network both Netbird and zScaler are stable (for now, but it has been like that for 2-3 days when I discovered the wired vs wireless difference)
Author
Owner

@wsw70 commented on GitHub (Aug 6, 2024):

Thanks to @lixmal there is a workaround: to disable network monitoring (see the slack thread)

netbird down
netbird up -N=false
@wsw70 commented on GitHub (Aug 6, 2024): Thanks to @lixmal there is a workaround: to disable network monitoring (see the [slack thread](https://netbirdio.slack.com/archives/C02KHAE8VLZ/p1722862747962229?thread_ts=1722862397.328989&cid=C02KHAE8VLZ)) ``` netbird down netbird up -N=false ```
Author
Owner

@wsw70 commented on GitHub (Aug 14, 2024):

And the problem is back again 😟 - follow-up in the slack thread

@wsw70 commented on GitHub (Aug 14, 2024): And the problem is back again 😟 - follow-up in the [slack thread](https://netbirdio.slack.com/archives/C02KHAE8VLZ/p1722862747962229?thread_ts=1722862397.328989&cid=C02KHAE8VLZ)
Author
Owner

@carsten-re commented on GitHub (Jan 2, 2025):

Hi, two ZTNA apps on the same client will not work. At least, because both of them are working with CGNAT (100.64.x.x) address space.

@carsten-re commented on GitHub (Jan 2, 2025): Hi, two ZTNA apps on the same client will not work. At least, because both of them are working with CGNAT (100.64.x.x) address space.
Author
Owner

@wsw70 commented on GitHub (Jan 2, 2025):

Hi, two ZTNA apps on the same client will not work. At least, because both of them are working with CGNAT (100.64.x.x) address space.

I've moved to Tailscale by now, but it also uses CGNAT and it works fine with zScaler. You can use both on the CGNAT address space, they just must not overlap.

@wsw70 commented on GitHub (Jan 2, 2025): > Hi, two ZTNA apps on the same client will not work. At least, because both of them are working with CGNAT (100.64.x.x) address space. I've moved to Tailscale by now, but it also uses CGNAT and it works fine with zScaler. You can use both on the CGNAT address space, they just must not overlap.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1132