Some VPN clients do not initiate WireGuard handshake #1473

Open
opened 2025-11-20 05:31:17 -05:00 by saavagebueno · 7 comments
Owner

Originally created by @rihards-simanovics on GitHub (Dec 4, 2024).

Describe the problem

Since updating the Management to 0.34.0 and some clients in office, some linux server status' reported as "Connected" despite no actual WireGuard handshake being present and no actual connection present - not even ICMP ping. See the netbird status -dA printout below. Connection doesnt get re-established even after restarting both clients...

To Reproduce

Steps to reproduce the behavior:

  1. Install the management server with at least 0.29.0 with a new netbird relay service.
  2. add a couple of clients with ranging client versions - see the list of client version in the additional context.

Expected behaviour

connection to be established between all connection which prior to upgrade had the ability to do so.

Are you using NetBird Cloud?

No, selfhosted management server 0.34.0 with the new netbird relay service enabled.

NetBird version

primary client: abc-rs-main-pc - 0.34.0
server: 0.34.0

NetBird status -dA output:

netbird status -dA
Peers detail:
 abc-rs-tablet.node.anon-vzM53.domain:
  NetBird IP: 100.90.160.199/32
  Public key: [redacted]
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 14 minutes, 39 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false (remote didn't enable quantum resistance)
  Routes: -
  Latency: 0s

 abc-de-1.node.anon-vzM53.domain:
  NetBird IP: 100.90.4.66
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/srflx
  ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.0:51820
  Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443
  Last connection update: 7 minutes, 4 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 1.7 KiB/19.0 KiB
  Quantum resistance: true
  Routes: -
  Latency: 22.2497ms

 abc-uk-7.node.anon-vzM53.domain:
  NetBird IP: 100.90.10.42
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443
  Last connection update: 10 minutes, 4 seconds ago
  Last WireGuard handshake: 1 minute, 49 seconds ago
  Transfer status (received/sent) 61.4 KiB/93.0 KiB
  Quantum resistance: true
  Routes: -
  Latency: 13.1319ms

 abc-rs-mobile-otg.node.anon-vzM53.domain:
  NetBird IP: 100.90.10.82
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.1:53840
  Relay server address:
  Last connection update: 14 minutes, 31 seconds ago
  Last WireGuard handshake: 45 seconds ago
  Transfer status (received/sent) 1.1 KiB/2.4 KiB
  Quantum resistance: false (remote didn't enable quantum resistance)
  Routes: -
  Latency: 212.2199ms

 abc-rs-thinkpad.node.anon-vzM53.domain:
  NetBird IP: 100.90.25.245
  Public key: [redacted]
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false (remote didn't enable quantum resistance)
  Routes: -
  Latency: 0s

 abc-rs-thinkpad-old.node.anon-vzM53.domain:
  NetBird IP: 100.90.29.243
  Public key: [redacted]
  Status: Disconnected
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false (remote didn't enable quantum resistance)
  Routes: -
  Latency: 0s

 abc-uk-1.node.anon-vzM53.domain:
  NetBird IP: 100.90.79.155
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443
  Last connection update: 35 seconds ago
  Last WireGuard handshake: 35 seconds ago
  Transfer status (received/sent) 188 B/23.8 KiB
  Quantum resistance: true
  Routes: -
  Latency: 0s

 abc-uk-2.node.anon-vzM53.domain:
  NetBird IP: 100.90.116.141
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.2:51820
  Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443
  Last connection update: 14 minutes, 38 seconds ago
  Last WireGuard handshake: 38 seconds ago
  Transfer status (received/sent) 395.6 MiB/8.0 MiB
  Quantum resistance: true
  Routes: -
  Latency: 21.9535ms

 abc-de-3.node.anon-vzM53.domain:
  NetBird IP: 100.90.172.76
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 172.26.16.1:51820/198.51.100.1:54697
  Relay server address:
  Last connection update: 14 minutes, 35 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 22.8 KiB/15.5 KiB
  Quantum resistance: true
  Routes: -
  Latency: 27.4954ms

 abc-de-2.node.anon-vzM53.domain:
  NetBird IP: 100.90.191.31
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.1:59688
  Relay server address:
  Last connection update: 14 minutes, 20 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 20.1 KiB/15.4 KiB
  Quantum resistance: true
  Routes: -
  Latency: 29.2037ms

 abc-uk-3.node.anon-vzM53.domain:
  NetBird IP: 100.90.214.145
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.1:53394
  Relay server address:
  Last connection update: 14 minutes, 35 seconds ago
  Last WireGuard handshake: 35 seconds ago
  Transfer status (received/sent) 372.8 MiB/7.7 MiB
  Quantum resistance: true
  Routes: -
  Latency: 10.9377ms

 abc-uk-6.node.anon-vzM53.domain:
  NetBird IP: 100.90.219.10
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.1:51820
  Relay server address:
  Last connection update: 14 minutes, 38 seconds ago
  Last WireGuard handshake: 37 seconds ago
  Transfer status (received/sent) 347.8 MiB/9.2 MiB
  Quantum resistance: true
  Routes: 0.0.0.0/0
  Latency: 6.7578ms

 abc-uk-4.node.anon-vzM53.domain:
  NetBird IP: 100.90.230.4
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/192.168.1.11:51820
  Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443
  Last connection update: 14 minutes, 37 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 1.6 KiB/24.0 KiB
  Quantum resistance: true
  Routes: -
  Latency: 3.0684ms

 abc-uk-8.node.anon-vzM53.domain:
  NetBird IP: 100.90.245.18
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/192.168.1.60:51820
  Relay server address:
  Last connection update: 14 minutes, 38 seconds ago
  Last WireGuard handshake: 3 seconds ago
  Transfer status (received/sent) 736 B/2.5 KiB
  Quantum resistance: true
  Routes: -
  Latency: 1.4555ms

 abc-uk-5.node.anon-vzM53.domain:
  NetBird IP: 100.90.249.209
  Public key: [redacted]
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.1:53467
  Relay server address:
  Last connection update: 14 minutes, 35 seconds ago
  Last WireGuard handshake: 12 seconds ago
  Transfer status (received/sent) 368.9 MiB/7.7 MiB
  Quantum resistance: true
  Routes: -
  Latency: 27.4833ms

OS: windows/amd64
Daemon version: 0.34.0
CLI version: 0.34.0
Management: Connected to https://vpn-redacted-subdomain.anon-zsFzU.domain:443
Signal: Connected to https://vpn-redacted-subdomain.anon-zsFzU.domain:443
Relays:
  [stun:vpn-redacted-subdomain.anon-zsFzU.domain:3478] is Available
  [turn:vpn-redacted-subdomain.anon-zsFzU.domain:3478?transport=udp] is Available
  [rels://vpn-redacted-subdomain.anon-zsFzU.domain:443] is Available
Nameservers:
FQDN: abc-rs-main-pc.node.anon-vzM53.domain
NetBird IP: 100.90.213.179/16
Interface type: Userspace
Quantum resistance: true (permissive)
Routes: -
Peers count: 12/15 Connected

Do you face any (non-mobile) client issues?

netbird debug for 1m -AS output will be provided later in the comment below.

Screenshots

n/a

Additional context


ABC DE 1
DE
abc-de-1.node.griffin-web.services
0.32.0


ABC UK 7
abc-uk-7.node.griffin-web.services
0.32.0


ABC RS Main PC
abc-rs-main-pc.node.griffin-web.services
0.34.0


ABC UK 1
DE
abc-uk-1.node.griffin-web.services
0.34.0


ABC UK 2
DE
abc-uk-2.node.griffin-web.services
0.32.0


ABC UK 8
abc-uk-8.node.griffin-web.services
0.32.0


ABC RS Mobile OTG
abc-rs-mobile-otg.node.griffin-web.services
0.28.0


ABC RS iMac
abc-rs-imac.node.griffin-web.services
0.33.0


ABC UK 4
abc-uk-4.node.griffin-web.services
0.32.0


ABC DE 2
abc-de-2.node.griffin-web.services
0.32.0


ABC UK 6
abc-uk-6.node.griffin-web.services
0.32.0


ABC UK 5
abc-uk-5.node.griffin-web.services
0.32.0


ABC UK 3
abc-uk-3.node.griffin-web.services now
0.32.0


ABC DE 3
abc-de-3.node.griffin-web.services
0.32.0


ABC RS ThinkPad
abc-rs-thinkpad.node.griffin-web.services
0.34.0


ABC RS Tablet
abc-rs-tablet.node.griffin-web.services
0.28.0


ABC RS ThinkPad old
abc-rs-thinkpad-old.node.griffin-web.services
0.33.0
Originally created by @rihards-simanovics on GitHub (Dec 4, 2024). **Describe the problem** Since updating the Management to 0.34.0 and some clients in office, some linux server status' reported as "Connected" despite no actual WireGuard handshake being present and no actual connection present - not even ICMP ping. See the `netbird status -dA` printout below. Connection doesnt get re-established even after restarting both clients... **To Reproduce** Steps to reproduce the behavior: 1. Install the management server with at least 0.29.0 with a new netbird relay service. 2. add a couple of clients with ranging client versions - see the list of client version in the additional context. **Expected behaviour** connection to be established between all connection which prior to upgrade had the ability to do so. **Are you using NetBird Cloud?** No, selfhosted management server 0.34.0 with the new netbird relay service enabled. **NetBird version** primary client: abc-rs-main-pc - 0.34.0 server: 0.34.0 **NetBird status -dA output:** ``` netbird status -dA Peers detail: abc-rs-tablet.node.anon-vzM53.domain: NetBird IP: 100.90.160.199/32 Public key: [redacted] Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 minutes, 39 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false (remote didn't enable quantum resistance) Routes: - Latency: 0s abc-de-1.node.anon-vzM53.domain: NetBird IP: 100.90.4.66 Public key: [redacted] Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/srflx ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.0:51820 Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443 Last connection update: 7 minutes, 4 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 1.7 KiB/19.0 KiB Quantum resistance: true Routes: - Latency: 22.2497ms abc-uk-7.node.anon-vzM53.domain: NetBird IP: 100.90.10.42 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443 Last connection update: 10 minutes, 4 seconds ago Last WireGuard handshake: 1 minute, 49 seconds ago Transfer status (received/sent) 61.4 KiB/93.0 KiB Quantum resistance: true Routes: - Latency: 13.1319ms abc-rs-mobile-otg.node.anon-vzM53.domain: NetBird IP: 100.90.10.82 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.1:53840 Relay server address: Last connection update: 14 minutes, 31 seconds ago Last WireGuard handshake: 45 seconds ago Transfer status (received/sent) 1.1 KiB/2.4 KiB Quantum resistance: false (remote didn't enable quantum resistance) Routes: - Latency: 212.2199ms abc-rs-thinkpad.node.anon-vzM53.domain: NetBird IP: 100.90.25.245 Public key: [redacted] Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false (remote didn't enable quantum resistance) Routes: - Latency: 0s abc-rs-thinkpad-old.node.anon-vzM53.domain: NetBird IP: 100.90.29.243 Public key: [redacted] Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false (remote didn't enable quantum resistance) Routes: - Latency: 0s abc-uk-1.node.anon-vzM53.domain: NetBird IP: 100.90.79.155 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443 Last connection update: 35 seconds ago Last WireGuard handshake: 35 seconds ago Transfer status (received/sent) 188 B/23.8 KiB Quantum resistance: true Routes: - Latency: 0s abc-uk-2.node.anon-vzM53.domain: NetBird IP: 100.90.116.141 Public key: [redacted] Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.2:51820 Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443 Last connection update: 14 minutes, 38 seconds ago Last WireGuard handshake: 38 seconds ago Transfer status (received/sent) 395.6 MiB/8.0 MiB Quantum resistance: true Routes: - Latency: 21.9535ms abc-de-3.node.anon-vzM53.domain: NetBird IP: 100.90.172.76 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 172.26.16.1:51820/198.51.100.1:54697 Relay server address: Last connection update: 14 minutes, 35 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 22.8 KiB/15.5 KiB Quantum resistance: true Routes: - Latency: 27.4954ms abc-de-2.node.anon-vzM53.domain: NetBird IP: 100.90.191.31 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 172.23.64.1:51820/198.51.100.1:59688 Relay server address: Last connection update: 14 minutes, 20 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 20.1 KiB/15.4 KiB Quantum resistance: true Routes: - Latency: 29.2037ms abc-uk-3.node.anon-vzM53.domain: NetBird IP: 100.90.214.145 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.1:53394 Relay server address: Last connection update: 14 minutes, 35 seconds ago Last WireGuard handshake: 35 seconds ago Transfer status (received/sent) 372.8 MiB/7.7 MiB Quantum resistance: true Routes: - Latency: 10.9377ms abc-uk-6.node.anon-vzM53.domain: NetBird IP: 100.90.219.10 Public key: [redacted] Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.1:51820 Relay server address: Last connection update: 14 minutes, 38 seconds ago Last WireGuard handshake: 37 seconds ago Transfer status (received/sent) 347.8 MiB/9.2 MiB Quantum resistance: true Routes: 0.0.0.0/0 Latency: 6.7578ms abc-uk-4.node.anon-vzM53.domain: NetBird IP: 100.90.230.4 Public key: [redacted] Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/192.168.1.11:51820 Relay server address: rels://vpn-redacted-subdomain.anon-zsFzU.domain:443 Last connection update: 14 minutes, 37 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 1.6 KiB/24.0 KiB Quantum resistance: true Routes: - Latency: 3.0684ms abc-uk-8.node.anon-vzM53.domain: NetBird IP: 100.90.245.18 Public key: [redacted] Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/192.168.1.60:51820 Relay server address: Last connection update: 14 minutes, 38 seconds ago Last WireGuard handshake: 3 seconds ago Transfer status (received/sent) 736 B/2.5 KiB Quantum resistance: true Routes: - Latency: 1.4555ms abc-uk-5.node.anon-vzM53.domain: NetBird IP: 100.90.249.209 Public key: [redacted] Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 172.28.0.1:51820/198.51.100.1:53467 Relay server address: Last connection update: 14 minutes, 35 seconds ago Last WireGuard handshake: 12 seconds ago Transfer status (received/sent) 368.9 MiB/7.7 MiB Quantum resistance: true Routes: - Latency: 27.4833ms OS: windows/amd64 Daemon version: 0.34.0 CLI version: 0.34.0 Management: Connected to https://vpn-redacted-subdomain.anon-zsFzU.domain:443 Signal: Connected to https://vpn-redacted-subdomain.anon-zsFzU.domain:443 Relays: [stun:vpn-redacted-subdomain.anon-zsFzU.domain:3478] is Available [turn:vpn-redacted-subdomain.anon-zsFzU.domain:3478?transport=udp] is Available [rels://vpn-redacted-subdomain.anon-zsFzU.domain:443] is Available Nameservers: FQDN: abc-rs-main-pc.node.anon-vzM53.domain NetBird IP: 100.90.213.179/16 Interface type: Userspace Quantum resistance: true (permissive) Routes: - Peers count: 12/15 Connected ``` **Do you face any (non-mobile) client issues?** `netbird debug for 1m -AS` output will be provided later in the comment below. **Screenshots** n/a **Additional context** ``` ABC DE 1 DE abc-de-1.node.griffin-web.services 0.32.0 ABC UK 7 abc-uk-7.node.griffin-web.services 0.32.0 ABC RS Main PC abc-rs-main-pc.node.griffin-web.services 0.34.0 ABC UK 1 DE abc-uk-1.node.griffin-web.services 0.34.0 ABC UK 2 DE abc-uk-2.node.griffin-web.services 0.32.0 ABC UK 8 abc-uk-8.node.griffin-web.services 0.32.0 ABC RS Mobile OTG abc-rs-mobile-otg.node.griffin-web.services 0.28.0 ABC RS iMac abc-rs-imac.node.griffin-web.services 0.33.0 ABC UK 4 abc-uk-4.node.griffin-web.services 0.32.0 ABC DE 2 abc-de-2.node.griffin-web.services 0.32.0 ABC UK 6 abc-uk-6.node.griffin-web.services 0.32.0 ABC UK 5 abc-uk-5.node.griffin-web.services 0.32.0 ABC UK 3 abc-uk-3.node.griffin-web.services now 0.32.0 ABC DE 3 abc-de-3.node.griffin-web.services 0.32.0 ABC RS ThinkPad abc-rs-thinkpad.node.griffin-web.services 0.34.0 ABC RS Tablet abc-rs-tablet.node.griffin-web.services 0.28.0 ABC RS ThinkPad old abc-rs-thinkpad-old.node.griffin-web.services 0.33.0 ```
saavagebueno added the waiting-feedbacktriage-needed labels 2025-11-20 05:31:17 -05:00
Author
Owner

@rihards-simanovics commented on GitHub (Dec 4, 2024):

downgrading the client to 0.32.0 doesn't help on abc-rs-main-pc. I will try downgrading the management service and see if it helps.

@rihards-simanovics commented on GitHub (Dec 4, 2024): downgrading the client to 0.32.0 doesn't help on abc-rs-main-pc. I will try downgrading the management service and see if it helps.
Author
Owner

@rihards-simanovics commented on GitHub (Dec 4, 2024):

I don't know what's going on, this thing behaves wildly and I don't know if relay is at fault, but I managed to get it somehow stable by simply rebooting all of the netbird clients. I will make an update tomorrow once I'm back at my PC, and will get the debugging logs too if it's still being funky.

@rihards-simanovics commented on GitHub (Dec 4, 2024): I don't know what's going on, this thing behaves wildly and I don't know if relay is at fault, but I managed to get it somehow stable by simply rebooting all of the netbird clients. I will make an update tomorrow once I'm back at my PC, and will get the debugging logs too if it's still being funky.
Author
Owner

@rihards-simanovics commented on GitHub (Dec 19, 2024):

Okay, here's an update: I managed to get the network mostly stable, but I had to downgrade the MacOS and Windows clients and Linux Exit Node clients to 0.29.4. Now, the network is mostly stable. For one reason or another, the issue appears to only affect the MacOS and Windows Systems.

@rihards-simanovics commented on GitHub (Dec 19, 2024): Okay, here's an update: I managed to get the network mostly stable, but I had to downgrade the MacOS and Windows clients and Linux Exit Node clients to `0.29.4`. Now, the network is mostly stable. For one reason or another, the issue appears to only affect the MacOS and Windows Systems.
Author
Owner

@mlsmaycon commented on GitHub (Dec 20, 2024):

Hello @rihards-simanovics thanks for reporting. We are looking into the issue and will give you feedback soon.

@mlsmaycon commented on GitHub (Dec 20, 2024): Hello @rihards-simanovics thanks for reporting. We are looking into the issue and will give you feedback soon.
Author
Owner

@nazarewk commented on GitHub (Apr 28, 2025):

Hello @rihards-simanovics,

We're currently reviewing our open issues and would like to verify if this problem still exists in the latest NetBird version.

Could you please confirm if the issue is still there?

We may close this issue temporarily if we don't hear back from you within 2 weeks, but feel free to reopen it with updated information.

Thanks for your contribution to improving the project!

@nazarewk commented on GitHub (Apr 28, 2025): Hello @rihards-simanovics, We're currently reviewing our open issues and would like to verify if this problem still exists in the [latest NetBird version](https://github.com/netbirdio/netbird/releases). Could you please confirm if the issue is still there? We may close this issue temporarily if we don't hear back from you within **2 weeks**, but feel free to reopen it with updated information. Thanks for your contribution to improving the project!
Author
Owner

@rihards-simanovics commented on GitHub (Apr 29, 2025):

I'll need to investigate. If I recall correctly, this happened when Rosenpass was enabled, and since then, I have disabled it as it was too unstable.

@rihards-simanovics commented on GitHub (Apr 29, 2025): I'll need to investigate. If I recall correctly, this happened when Rosenpass was enabled, and since then, I have disabled it as it was too unstable.
Author
Owner

@rihards-simanovics commented on GitHub (Apr 29, 2025):

I just had a test between two nodes. Rosenpass is still an issue. It's too unstable for production and should be marked as such instead of experimental.

Two nodes were Windows 11 and Ubuntu 22.04.5 LTS Server. Both are running the latest NB client with Rosenpass & permissive modes enabled. The management node is also on the newest version.

@rihards-simanovics commented on GitHub (Apr 29, 2025): I just had a test between two nodes. Rosenpass is still an issue. It's too unstable for production and should be marked as such instead of experimental. Two nodes were Windows 11 and Ubuntu 22.04.5 LTS Server. Both are running the latest NB client with Rosenpass & permissive modes enabled. The management node is also on the newest version.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1473