SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-07-24 23:13:59 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Destination Host Unreachable, ping: sendmsg: Required key not available #121

New Issue
Closed
opened 2025-11-20 05:06:33 -05:00 by saavagebueno · 23 comments
saavagebueno commented 2025-11-20 05:06:33 -05:00
Owner
Copy Link

Originally created by @FarisZR on GitHub (Mar 9, 2022).

Hello, I have been using wiretrustee to expose a local server to a remote VPS.

However, every once in a while it stops working, and this happens:

Logs

# ping 100.64.0.2
PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data.
From 100.64.0.1 icmp_seq=1 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=2 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=3 Destination Host Unreachable

Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other.

setup details

one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with appropriate options

Originally created by @FarisZR on GitHub (Mar 9, 2022). Hello, I have been using wiretrustee to expose a local server to a remote VPS. However, every once in a while it stops working, and this happens: ## Logs ``` # ping 100.64.0.2 PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data. From 100.64.0.1 icmp_seq=1 Destination Host Unreachable ping: sendmsg: Required key not available From 100.64.0.1 icmp_seq=2 Destination Host Unreachable ping: sendmsg: Required key not available From 100.64.0.1 icmp_seq=3 Destination Host Unreachable ``` Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other. ## setup details one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with [appropriate options](https://pve.proxmox.com/wiki/OpenVPN_in_LXC)
saavagebueno added the waiting-feedback label 2025-11-20 05:06:33 -05:00
saavagebueno commented 2025-11-20 05:06:34 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Mar 9, 2022):

Hello @fariszr, can you share some details of your setup?

  • Are you using the Managed version of Wiretrustee?
  • Which version of Wiretrustee are the peers using? you can find that with wiretrustee version command
  • Are the peers running on different nodes?
  • Did you give privileged permissions to the Docker and LXC peers? for docker, we need to run with the flag --cap-add=NET_ADMIN
@mlsmaycon commented on GitHub (Mar 9, 2022): Hello @fariszr, can you share some details of your setup? * Are you using the Managed version of Wiretrustee? * Which version of Wiretrustee are the peers using? you can find that with `wiretrustee version` command * Are the peers running on different nodes? * Did you give privileged permissions to the Docker and LXC peers? for docker, we need to run with the flag `--cap-add=NET_ADMIN`
saavagebueno commented 2025-11-20 05:06:34 -05:00
Author
Owner
Copy Link

@FarisZR commented on GitHub (Mar 9, 2022):

Hello @fariszr, can you share some details of your setup?

  • Are you using the Managed version of Wiretrustee?
  • Which version of Wiretrustee are the peers using? you can find that with wiretrustee version command
  • Are the peers running on different nodes?
  • Did you give privileged permissions to the Docker and LXC peers? for docker, we need to run with the flag --cap-add=NET_ADMIN

1- yes
2 – Debian, 0.4.0. Docker, the latest image available from Docker hub using the latest tag.
3 – Yes, Totally different servers and hosting providers.
4 – LXC is Unprivileged, which worked, and I don't think it's the problem.
I added the net_admin cap, It stopped showing Required key not available but ping still doesn't work.

Wiretrustee logs

wiretrustee-wiretrustee-1  | time="2022-03-09T19:xx:xxZ" level=info msg="connected to peer p+xxxxxxxxxxxx= [laddr <-> raddr] [172.21.0.1:40908 <-> xx.xxx.xxx.192:55404]"

Compose file

version: '3.3'
services:
    wiretrustee:
        network_mode: host
        privileged: true
        restart: always
        userns_mode: host
        environment:
            - WT_SETUP_KEY=XXXXXXXXX
        volumes:
            - ./wiretrustee-client:/etc/wiretrustee
        image: wiretrustee/wiretrustee:latest
        cap_add:
            - NET_ADMIN
@FarisZR commented on GitHub (Mar 9, 2022): > Hello @fariszr, can you share some details of your setup? > > * Are you using the Managed version of Wiretrustee? > * Which version of Wiretrustee are the peers using? you can find that with `wiretrustee version` command > * Are the peers running on different nodes? > * Did you give privileged permissions to the Docker and LXC peers? for docker, we need to run with the flag `--cap-add=NET_ADMIN` 1- yes 2 – Debian, 0.4.0. Docker, the latest image available from Docker hub using the latest tag. 3 – Yes, Totally different servers and hosting providers. 4 – LXC is Unprivileged, which worked, and I don't think it's the problem. I added the `net_admin` cap, It stopped showing `Required key not available` but ping still doesn't work. ## Wiretrustee logs ``` wiretrustee-wiretrustee-1 | time="2022-03-09T19:xx:xxZ" level=info msg="connected to peer p+xxxxxxxxxxxx= [laddr <-> raddr] [172.21.0.1:40908 <-> xx.xxx.xxx.192:55404]" ``` ## Compose file ``` version: '3.3' services: wiretrustee: network_mode: host privileged: true restart: always userns_mode: host environment: - WT_SETUP_KEY=XXXXXXXXX volumes: - ./wiretrustee-client:/etc/wiretrustee image: wiretrustee/wiretrustee:latest cap_add: - NET_ADMIN ```
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Mar 11, 2022):

Hello @fariszr sorry for the late response, we've found a bug on our managed service that was affecting some network updates to be propagated. Can you check if the connections are more stable now?

In case you still facing this issue, would you mind joining our slack?
I believe we could have a more dynamic conversation there :)
https://join.slack.com/t/wiretrustee/shared_invite/zt-vrahf41g-ik1v7fV8du6t0RwxSrJ96A

@mlsmaycon commented on GitHub (Mar 11, 2022): Hello @fariszr sorry for the late response, we've found a bug on our managed service that was affecting some network updates to be propagated. Can you check if the connections are more stable now? In case you still facing this issue, would you mind joining our slack? I believe we could have a more dynamic conversation there :) https://join.slack.com/t/wiretrustee/shared_invite/zt-vrahf41g-ik1v7fV8du6t0RwxSrJ96A
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@ngtrthanh commented on GitHub (Mar 12, 2022):

Hello, I have been using wiretrustee to expose a local server to a remote VPS.

However, every once in a while it stops working, and this happens:

Logs

# ping 100.64.0.2
PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data.
From 100.64.0.1 icmp_seq=1 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=2 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=3 Destination Host Unreachable

Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other.

setup details

one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with appropriate options

Hi,
I got same issue. And I realized that I install pivpn with wireguard before. Remove pivpn (and WG) by pivnp -u will solve problem. FYI

@ngtrthanh commented on GitHub (Mar 12, 2022): > Hello, I have been using wiretrustee to expose a local server to a remote VPS. > > However, every once in a while it stops working, and this happens: > > ## Logs > ``` > # ping 100.64.0.2 > PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data. > From 100.64.0.1 icmp_seq=1 Destination Host Unreachable > ping: sendmsg: Required key not available > From 100.64.0.1 icmp_seq=2 Destination Host Unreachable > ping: sendmsg: Required key not available > From 100.64.0.1 icmp_seq=3 Destination Host Unreachable > ``` > > Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other. > > ## setup details > one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with [appropriate options](https://pve.proxmox.com/wiki/OpenVPN_in_LXC) Hi, I got same issue. And I realized that I install pivpn with wireguard before. Remove pivpn (and WG) by pivnp -u will solve problem. FYI
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@FarisZR commented on GitHub (Mar 18, 2022):

Hi, i have just updated Wiretrustee on both machines, and it now works for some reason.
And Yes, my docker node is also running wireguard on docker, however i don't this is really the cause, as it now works normally with the vpn.

I will keep you updated if any issue pops up.

On Sat, Mar 12 2022 at 06:02:51 AM -0000, wiretrustee/wiretrustee - reply+aipxadsdtufjdqx4tnie2owahfvarevbnhheky5rui at reply.github.com @.***> wrote:

Hello, I have been using wiretrustee to expose a local server to a remote VPS.

However, every once in a while it stops working, and this happens:

Logs

ping 100.64.0.2

PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data.
From 100.64.0.1 icmp_seq=1 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=2 Destination Host Unreachable
ping: sendmsg: Required key not available
From 100.64.0.1 icmp_seq=3 Destination Host Unreachable

Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other.

setup details

one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with appropriate options

Hi,
I got same issue. And I realized that I install pivpn with wireguard before. Remove pivpn (and WG) by pivnp -u will solve problem. FYI

—
Reply to this email directly, view it on GitHub, or unsubscribe.
Triage notifications on the go with GitHub Mobile for iOS or Android.
You are receiving this because you were mentioned.Message ID: @.***>

@FarisZR commented on GitHub (Mar 18, 2022): Hi, i have just updated Wiretrustee on both machines, and it now works for some reason. And Yes, my docker node is also running wireguard on docker, however i don't this is really the cause, as it now works normally with the vpn. I will keep you updated if any issue pops up. On Sat, Mar 12 2022 at 06:02:51 AM -0000, wiretrustee/wiretrustee - reply+aipxadsdtufjdqx4tnie2owahfvarevbnhheky5rui at reply.github.com ***@***.***> wrote: >> Hello, I have been using wiretrustee to expose a local server to a remote VPS. >> >> However, every once in a while it stops working, and this happens: >> >> Logs >> >> # ping 100.64.0.2 >> PING 100.64.0.2 (100.64.0.2) 56(84) bytes of data. >> From 100.64.0.1 icmp_seq=1 Destination Host Unreachable >> ping: sendmsg: Required key not available >> From 100.64.0.1 icmp_seq=2 Destination Host Unreachable >> ping: sendmsg: Required key not available >> From 100.64.0.1 icmp_seq=3 Destination Host Unreachable >> >> Removing both peers and re-adding them sometimes fixes it, or peers still can't ping each other. >> >> setup details >> >> one peer is running wiretrustee inside docker, and the other is running a standard Debian installation inside an LXC, with [appropriate options](https://pve.proxmox.com/wiki/OpenVPN_in_LXC) > > Hi, > I got same issue. And I realized that I install pivpn with wireguard before. Remove pivpn (and WG) by pivnp -u will solve problem. FYI > > — > Reply to this email directly, [view it on GitHub](https://github.com/wiretrustee/wiretrustee/issues/254#issuecomment-1065822844), or [unsubscribe](https://github.com/notifications/unsubscribe-auth/AIPXADV46LWAZF3OYFWLLZDU7QXQRANCNFSM5QKBJ7FQ). > Triage notifications on the go with GitHub Mobile for [iOS](https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675) or [Android](https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub). > You are receiving this because you were mentioned.Message ID: ***@***.***>
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@FarisZR commented on GitHub (Mar 21, 2022):

The issue is back

@FarisZR commented on GitHub (Mar 21, 2022): The issue is back
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@FarisZR commented on GitHub (Mar 22, 2022):

aaaand.. Its gone again.
It's very annoying when I'm remoting into my server, and it doesn't work while I'm outside the network.

@FarisZR commented on GitHub (Mar 22, 2022): aaaand.. Its gone again. It's very annoying when I'm remoting into my server, and it doesn't work while I'm outside the network.
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@FarisZR commented on GitHub (Mar 27, 2022):

An update on this issue.
Its back again, and it's a dealbreaker, I'm searching for an alternative, as it stands with my usage wiretrustee/net bird is not reliable at all.
It works once and breaks 10 times, when I update the debian package on the LXC it works then it breaks randomly, does this issue could have anything with being late for updates?

I think this is an issue resides from the LXC side, as I have been using wiretrustee on full servers and it's mostly great.
Another issue is there is no mobile client and no exit node support.
I want to be able to get the fastest speed when in LAN, and access the server remotely, without having to deal with multi-zone DNS. #289 #213

As for slack, unfortunately I don't use Slack, we can continue here, or you can open a matrx.org room which can be bridged to slack.

@FarisZR commented on GitHub (Mar 27, 2022): An update on this issue. Its back again, and it's a dealbreaker, I'm searching for an alternative, as it stands with my usage wiretrustee/net bird is not reliable at all. It works once and breaks 10 times, when I update the debian package on the LXC it works then it breaks randomly, does this issue could have anything with being late for updates? I think this is an issue resides from the LXC side, as I have been using wiretrustee on full servers and it's mostly great. Another issue is there is no mobile client and no exit node support. I want to be able to get the fastest speed when in LAN, and access the server remotely, without having to deal with multi-zone DNS. #289 #213 As for slack, unfortunately I don't use Slack, we can continue here, or you can open a matrx.org room which can be bridged to slack.
saavagebueno commented 2025-11-20 05:06:35 -05:00
Author
Owner
Copy Link

@ykhedar commented on GitHub (Apr 26, 2022):

Hi,
I am having similar issue with a self hosted system. The server is deployed on a AWS EC2 instance with all necessary ports open and the dashboard working fine without any problem. The client is a home computer with Ubuntu 20 and a mac. I am using version 0.5.1 for all of the devices and the dashboard shows them to be online. I am just not able to even ping the server. Is this somehow related to https://github.com/netbirdio/netbird/issues/302 ?

@ykhedar commented on GitHub (Apr 26, 2022): Hi, I am having similar issue with a self hosted system. The server is deployed on a AWS EC2 instance with all necessary ports open and the dashboard working fine without any problem. The client is a home computer with Ubuntu 20 and a mac. I am using version 0.5.1 for all of the devices and the dashboard shows them to be online. I am just not able to even ping the server. Is this somehow related to https://github.com/netbirdio/netbird/issues/302 ?
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@ghost commented on GitHub (Jun 4, 2022):

Same here. I self-hosted on Linux. (Managed Service same error). And Connected 3 Linux Clients. Works perfectly fine.
My Mac M1 shows online. But I can't ping or reach the other Clients.
Removing and Reading works sometimes, but same again if I change networks.

@ghost commented on GitHub (Jun 4, 2022): Same here. I self-hosted on Linux. (Managed Service same error). And Connected 3 Linux Clients. Works perfectly fine. My Mac M1 shows online. But I can't ping or reach the other Clients. Removing and Reading works sometimes, but same again if I change networks.
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Jun 5, 2022):

Hi @lyca-knight,
The problem is only on Mac, right? Linux clients are fine when switching networks?

What version are you running? Could you please run
sudo wireguard show on Mac and show the output?

You might need to install wireguard-tools package.

Feel free to DM me on Slack

@braginini commented on GitHub (Jun 5, 2022): Hi @lyca-knight, The problem is only on Mac, right? Linux clients are fine when switching networks? What version are you running? Could you please run `sudo wireguard show` on Mac and show the output? You might need to install `wireguard-tools` package. Feel free to DM me on [Slack](https://join.slack.com/t/wiretrustee/shared_invite/zt-vrahf41g-ik1v7fV8du6t0RwxSrJ96A)
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@ghost commented on GitHub (Jun 5, 2022):

Hey @braginini,
thanks for your reply :)
Yeah, only on Mac. The Linux Clients are Cloud Boxes from Hetzner, so no networking switching here.

I reinstalled the Mac to see if it's an error with my setting or something.
But same error on a clean installation. And without networking, switching.
I am not able to ping or connect to the other machines.
On the Dashboard all Clients are online.
I installed wireguard-tools package but the sudo wireguard show command gives only command, not found.

Yeah, I will leave you a DM on Slack

@ghost commented on GitHub (Jun 5, 2022): Hey @braginini, thanks for your reply :) Yeah, only on Mac. The Linux Clients are Cloud Boxes from Hetzner, so no networking switching here. I reinstalled the Mac to see if it's an error with my setting or something. But same error on a clean installation. And without networking, switching. I am not able to ping or connect to the other machines. On the Dashboard all Clients are online. I installed `wireguard-tools` package but the `sudo wireguard show` command gives only command, not found. Yeah, I will leave you a DM on Slack
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Jun 5, 2022):

Hi @lyca-knight,

Could you please run sudo wg show ?

Also, could you share the NetBird IP of your Mac with the output of the above command?

@mlsmaycon commented on GitHub (Jun 5, 2022): Hi @lyca-knight, Could you please run `sudo wg show` ? Also, could you share the NetBird IP of your Mac with the output of the above command?
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@hicwic commented on GitHub (Apr 13, 2023):

hi,
i know it's a old issue, but i having this problem with a self hosted netbird. Tested with you managed and all is working.
I don't know how to start to check/configure to resolve this issue

  • no apparent errors, even on self hosted side
  • nodes on same lan connect to each other succefully
  • remote nodes con't connect to other

got this error while pinging:
ping: sendmsg: Required key not available

i'll take any advices

thx

@hicwic commented on GitHub (Apr 13, 2023): hi, i know it's a old issue, but i having this problem with a self hosted netbird. Tested with you managed and all is working. I don't know how to start to check/configure to resolve this issue - no apparent errors, even on self hosted side - nodes on same lan connect to each other succefully - remote nodes con't connect to other got this error while pinging: ping: sendmsg: Required key not available i'll take any advices thx
saavagebueno commented 2025-11-20 05:06:36 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Jun 16, 2023):

Hello, @hicwic sorry for not replying sooner. This error usually indicates a problem with the P2P connection, it means that the peers didn't negotiate the best connection option.

Recently we've improved our core connectivity layer and this kind of issue might be mitigated.

@mlsmaycon commented on GitHub (Jun 16, 2023): Hello, @hicwic sorry for not replying sooner. This error usually indicates a problem with the P2P connection, it means that the peers didn't negotiate the best connection option. Recently we've improved our core connectivity layer and this kind of issue might be mitigated.
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@masx200 commented on GitHub (Mar 6, 2024):

I found that when "Interface type: Kernel", I can't access 100.124.255.254? write to '100.124.255.254': Required key not available; But how do I switch to "Interface type: Userspace"?

OpenWrt 23.05.2 r23630-842932a63d / LuCI openwrt-23.05 branch git-23.306.39416-c86c256

@masx200 commented on GitHub (Mar 6, 2024): I found that when "Interface type: Kernel", I can't access 100.124.255.254? write to '100.124.255.254': Required key not available; But how do I switch to "Interface type: Userspace"? OpenWrt 23.05.2 r23630-842932a63d / LuCI openwrt-23.05 branch git-23.306.39416-c86c256
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@dshoreman commented on GitHub (Mar 21, 2024):

I had the same ping errors* today on a new self-hosted install.

The client for 2 of 3 peers (one being the server machine itself) for some reason was stopped. I ran netbird up a second time, then they show connected and could ping each other.

The third peer was already running Wireguard. Maybe the quick install option could detect if wg0/51820 are in use and increment if necessary, but a manual tweak was easy enough:

  • Open /etc/netbird/config.json
  • Change WgIface and WgPort to something else (I used wg1 with port 51821)
  • Apply changes with netbird service restart

*This issue was top of search so maybe this helps someone else... but more likely me when I forget in a month.

@dshoreman commented on GitHub (Mar 21, 2024): I had the same ping errors<sup>*</sup> today on a new self-hosted install. The client for 2 of 3 peers (one being the server machine itself) for some reason was stopped. I ran `netbird up` a second time, then they show connected and could ping each other. The third peer was already running Wireguard. Maybe the quick install option could detect if wg0/51820 are in use and increment if necessary, but a manual tweak was easy enough: * Open /etc/netbird/config.json * Change **WgIface** and **WgPort** to something else (I used `wg1` with port `51821`) * Apply changes with `netbird service restart` <sup>*This issue was top of search so maybe this helps someone else... but more likely me when I forget in a month.</sup>
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@grebois commented on GitHub (Apr 4, 2024):

Same problem here with new self-hosted install

@grebois commented on GitHub (Apr 4, 2024): Same problem here with new self-hosted install
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Apr 5, 2024):

What version of the netbird client are you running? @grebois

@braginini commented on GitHub (Apr 5, 2024): What version of the netbird client are you running? @grebois
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@grebois commented on GitHub (Apr 5, 2024):

@braginini 0.26.2, 0.27.0 and 0.27.1

@grebois commented on GitHub (Apr 5, 2024): @braginini 0.26.2, 0.27.0 and 0.27.1
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@madindehead commented on GitHub (Apr 8, 2024):

I'm expericing this issue right now - self-hosted install using the quick install script with Zitadel. Everything started correctly and the clients connected to the networks properly. However doing a ping gives me this error.

Unsure if it's port related or not.

@madindehead commented on GitHub (Apr 8, 2024): I'm expericing this issue right now - self-hosted install using the quick install script with Zitadel. Everything started correctly and the clients connected to the networks properly. However doing a ping gives me this error. Unsure if it's port related or not.
saavagebueno commented 2025-11-20 05:06:37 -05:00
Author
Owner
Copy Link

@GustavooLucio commented on GitHub (Apr 20, 2024):

had this on 0.27.2 ubuntu when pinging a specific peer, rebooting the machine fixed it

@GustavooLucio commented on GitHub (Apr 20, 2024): had this on 0.27.2 ubuntu when pinging a specific peer, rebooting the machine fixed it
saavagebueno commented 2025-11-20 05:06:38 -05:00
Author
Owner
Copy Link

@snorflenet commented on GitHub (Jul 15, 2024):

Brand new self hosted install of 0.28.4 had the issue. I found this thread and then I went digging more. I tried restarting nodes and networking, no dice.

My issue was solved when I opened wireguard port UDP 51820 to allow for tunneled traffic, specifically on the cloud side. If wireguard is trying to penetrate a hard NAT traversal and doesn't have free access to this port on at least one side, particularly with the public IP, then it can be challenging to bring up a proper p2p connection.

This isn't netbird's fault, though they could bring attention to the issue in the docs. Maybe it is there, but I didn't run across it in my last install.

I hope this helps.

@snorflenet commented on GitHub (Jul 15, 2024): Brand new self hosted install of 0.28.4 had the issue. I found this thread and then I went digging more. I tried restarting nodes and networking, no dice. My issue was solved when I opened wireguard port UDP 51820 to allow for tunneled traffic, specifically on the cloud side. If wireguard is trying to penetrate a hard NAT traversal and doesn't have free access to this port on at least one side, particularly with the public IP, then it can be challenging to bring up a proper p2p connection. This isn't netbird's fault, though they could bring attention to the issue in the docs. Maybe it is there, but I didn't run across it in my last install. I hope this helps.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label waiting-feedback
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#121
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?