SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-14 20:21:59 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Network routes only allow connection to distribution peer #1601

New Issue
Closed
opened 2025-11-20 05:33:36 -05:00 by saavagebueno · 1 comment
saavagebueno commented 2025-11-20 05:33:36 -05:00
Owner
Copy Link

Originally created by @ozoromo on GitHub (Feb 6, 2025).

Describe the problem

Networks and Network routes don't work and only allow pinging the Routing / Distribution peer

To Reproduce

Steps to reproduce the behavior:

  1. Create new network route (192.168.65.0/24)
  2. Add distribution peer that resides in said network and enable Masquerade (ip: 192.168.65.3)
  3. (optional) setup access policies and the like

Expected behavior

Connection to all devices in CIDR 192.168.65.0/24 should work, but instead only the distribution peer 192.168.65.3 is pingable

The same problem happens both for Networks (new) and Network Routes

Are you using NetBird Cloud?

Self-hosted

NetBird version

0.36.3

NetBird status -dA output:

Peers detail:
 someserver.internal.anon-mRp4L.domain:
  NetBird IP: 100.99.46.59
  Public key: GF5UoCpaOE7/IS9LRv9csPOWY8t2A/rTRUDDCWwccVc=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): srflx/relay
  ICE candidate endpoints (Local/Remote): 198.51.100.0:4777/198.51.100.1:53740
  Relay server address:
  Last connection update: 10 minutes, 30 seconds ago
  Last WireGuard handshake: Now
  Transfer status (received/sent) 552 B/1.8 KiB
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 86.423189ms

 jumphost.internal.anon-mRp4L.domain:
  NetBird IP: 100.99.130.174
  Public key: jKJfaa22eFnhzJQ2tEalSjDEHkGAyaMOHg1lUmY3pwE=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): host/relay
  ICE candidate endpoints (Local/Remote): 192.168.25.60:51820/198.51.100.1:57795
  Relay server address:
  Last connection update: 10 minutes, 29 seconds ago
  Last WireGuard handshake: 1 minute, 55 seconds ago
  Transfer status (received/sent) 1.3 KiB/1.9 KiB
  Quantum resistance: false
  Routes: 192.168.65.0/24
  Networks: 192.168.65.0/24
  Latency: 289.891316ms

 polaris.internal.anon-mRp4L.domain:
  NetBird IP: 100.99.222.39
  Public key: TUn9BXXg6cMSv7Zzcq8gujRCyk4wOpRUjoKCJfjjxmM=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/host
  ICE candidate endpoints (Local/Remote): 198.51.100.0:4777/198.51.100.1:51820
  Relay server address:
  Last connection update: 10 minutes, 45 seconds ago
  Last WireGuard handshake: 16 seconds ago
  Transfer status (received/sent) 584 B/1.8 KiB
  Quantum resistance: false
  Routes: -
  Networks: -
  Latency: 319.714506ms

OS: linux/amd64
Daemon version: 0.36.3
CLI version: 0.36.3
Management: Connected to https://net.anon-mRp4L.domain:443
Signal: Connected to https://net.anon-mRp4L.domain:443
Relays:
  [stun:net.anon-mRp4L.domain:3478] is Available
  [turn:net.anon-mRp4L.domain:3478?transport=udp] is Available
Nameservers:
  [1.1.1.1:53, 1.0.0.1:53] for [.] is Available
  [9.9.9.9:53, 149.112.112.112:53] for [.] is Available
FQDN: laptop.internal.anon-mRp4L.domain
NetBird IP: 100.99.209.240/16
Interface type: Kernel
Quantum resistance: false
Routes: -
Networks: -
Peers count: 3/3 Connected

Screenshots

Image

Image

Image

If applicable, add screenshots to help explain your problem.

Additional context

When SSHed into the distribution peer, I can ping the other local IPs just fine.

Originally created by @ozoromo on GitHub (Feb 6, 2025). **Describe the problem** Networks and Network routes don't work and only allow pinging the Routing / Distribution peer **To Reproduce** Steps to reproduce the behavior: 1. Create new network route (192.168.65.0/24) 2. Add distribution peer that resides in said network and enable Masquerade (ip: 192.168.65.3) 3. (optional) setup access policies and the like **Expected behavior** Connection to all devices in CIDR 192.168.65.0/24 should work, but instead only the distribution peer 192.168.65.3 is pingable The same problem happens both for Networks (new) and Network Routes **Are you using NetBird Cloud?** Self-hosted **NetBird version** `0.36.3` **NetBird status -dA output:** ``` Peers detail: someserver.internal.anon-mRp4L.domain: NetBird IP: 100.99.46.59 Public key: GF5UoCpaOE7/IS9LRv9csPOWY8t2A/rTRUDDCWwccVc= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): srflx/relay ICE candidate endpoints (Local/Remote): 198.51.100.0:4777/198.51.100.1:53740 Relay server address: Last connection update: 10 minutes, 30 seconds ago Last WireGuard handshake: Now Transfer status (received/sent) 552 B/1.8 KiB Quantum resistance: false Routes: - Networks: - Latency: 86.423189ms jumphost.internal.anon-mRp4L.domain: NetBird IP: 100.99.130.174 Public key: jKJfaa22eFnhzJQ2tEalSjDEHkGAyaMOHg1lUmY3pwE= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): host/relay ICE candidate endpoints (Local/Remote): 192.168.25.60:51820/198.51.100.1:57795 Relay server address: Last connection update: 10 minutes, 29 seconds ago Last WireGuard handshake: 1 minute, 55 seconds ago Transfer status (received/sent) 1.3 KiB/1.9 KiB Quantum resistance: false Routes: 192.168.65.0/24 Networks: 192.168.65.0/24 Latency: 289.891316ms polaris.internal.anon-mRp4L.domain: NetBird IP: 100.99.222.39 Public key: TUn9BXXg6cMSv7Zzcq8gujRCyk4wOpRUjoKCJfjjxmM= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/host ICE candidate endpoints (Local/Remote): 198.51.100.0:4777/198.51.100.1:51820 Relay server address: Last connection update: 10 minutes, 45 seconds ago Last WireGuard handshake: 16 seconds ago Transfer status (received/sent) 584 B/1.8 KiB Quantum resistance: false Routes: - Networks: - Latency: 319.714506ms OS: linux/amd64 Daemon version: 0.36.3 CLI version: 0.36.3 Management: Connected to https://net.anon-mRp4L.domain:443 Signal: Connected to https://net.anon-mRp4L.domain:443 Relays: [stun:net.anon-mRp4L.domain:3478] is Available [turn:net.anon-mRp4L.domain:3478?transport=udp] is Available Nameservers: [1.1.1.1:53, 1.0.0.1:53] for [.] is Available [9.9.9.9:53, 149.112.112.112:53] for [.] is Available FQDN: laptop.internal.anon-mRp4L.domain NetBird IP: 100.99.209.240/16 Interface type: Kernel Quantum resistance: false Routes: - Networks: - Peers count: 3/3 Connected ``` **Screenshots** ![Image](https://github.com/user-attachments/assets/a35871ef-9bc2-4bc9-bf94-bfc0b45c0c61) ![Image](https://github.com/user-attachments/assets/c514405d-d9b0-4d95-b319-0e2a658dcd7b) ![Image](https://github.com/user-attachments/assets/4a729507-c147-44f2-bae7-d502c3e1900a) If applicable, add screenshots to help explain your problem. **Additional context** When SSHed into the distribution peer, I can ping the other local IPs just fine.
saavagebueno added the triage-needed label 2025-11-20 05:33:36 -05:00
saavagebueno commented 2025-11-20 05:33:37 -05:00
Author
Owner
Copy Link

@ozoromo commented on GitHub (Feb 9, 2025):

As @delko-it pointed out, this was the same issue as #3299 and was fixed by the command found in said issue.

I'm closing this now.

@ozoromo commented on GitHub (Feb 9, 2025): As @delko-it pointed out, this was the same issue as #3299 and was fixed by the command found in said issue. I'm closing this now.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#1601
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?