DNS NXDOMAIN but still returning an IP #2017

Open
opened 2025-11-20 06:11:18 -05:00 by saavagebueno · 0 comments
Owner

Originally created by @da-wilky on GitHub (Jun 27, 2025).

Describe the problem

Doing an nslookup for a dns of a peer (peer.netbird.selfhosted) results in the following:
Server: 127.0.0.153
Address: 127.0.0.153#53

Non-authoritative answer:
Name: host.netbird.selfhosted
Address: 100.100.100.100 (e.g.)
** server can't find samuel-server.netbird.selfhosted: NXDOMAIN

To Reproduce

Steps to reproduce the behavior:
Install the netbird client (I have NixOS with netbird version 0.43.3 and Ubuntu with netbird version 0.38.2)
Run nslookup another peer with its name peer.netbird.selfhosted.

Expected behavior
The DNS should be resolved without errors.

Are you using NetBird Cloud?
Using self-host NetBird's control plane.

NetBird version
0.43.3
0.38.2

Is any other VPN software installed?
No

Debug output

To help us resolve the problem, please attach the following anonymized status output

Peers detail:
peer1.netbird.selfhosted:
NetBird IP: 100.85.210.62/32
Public key: BJjacf7HSPwCzkxFkUlFlWMBbXiFQyLzhc2z6YrBd3E=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 1 minute, 18 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

peer2.netbird.selfhosted:
NetBird IP: 100.85.4.113
Public key: De9Eqq4hqP7xAZoYOo/x4mOQQp0MSTYT474XkP2/EUs=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 2.4 KiB/1.5 KiB
Quantum resistance: false
Networks: -
Latency: 6.636722ms

peer3.netbird.selfhosted:
NetBird IP: 100.85.26.155
Public key: qXy69ZUHM8IQJIapY/5z54AGTa2UyXPSefDISbzyByA=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): srflx/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:27872
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 12.9 KiB/20.7 KiB
Quantum resistance: false
Networks: -
Latency: 20.940232ms

peer4.netbird.selfhosted:
NetBird IP: 100.85.175.76
Public key: MvDBVV63GFtK+MdEy3lV9/73Fuw5eUaRmNfQTMEi3DQ=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:28522
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 92 B/244 B
Quantum resistance: false
Networks: -
Latency: 19.950197ms

peer5.netbird.selfhosted:
NetBird IP: 100.85.192.163
Public key: 31zTks+NyPpA0UmmYU30KeSwu0HkrOqeAMBk7lZzpyg=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.3:51820
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 156 B/180 B
Quantum resistance: false
Networks: -
Latency: 5.033475ms

peer6.netbird.selfhosted:
NetBird IP: 100.85.215.72
Public key: IIOJuuohc0qTp8WjFjHdr3eENJo0LxPHYzec2OY+WVQ=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

peer7.netbird.selfhosted:
NetBird IP: 100.85.224.38
Public key: Qfd7JSDbc0emYQdKigHWO9jzQYunzsPEI8ONq9caNEo=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

Events:
[INFO] SYSTEM (d9e53c52-0076-47a6-8845-d1b6cc766ca2)
Message: Network map updated
Time: 54 minutes, 30 seconds ago
[INFO] SYSTEM (833adb5b-c378-4be6-a814-0bac328a0535)
Message: Network map updated
Time: 46 minutes, 42 seconds ago
[INFO] SYSTEM (583de4c0-7113-448e-af76-7774278cb104)
Message: Network map updated
Time: 46 minutes, 25 seconds ago
[INFO] SYSTEM (1ae2465b-9c7a-43e8-90de-56cc90e39649)
Message: Network map updated
Time: 2 minutes, 37 seconds ago
[INFO] SYSTEM (77528e15-5771-4365-9505-a5c97c380754)
Message: Network map updated
Time: 1 minute, 18 seconds ago
OS: linux/amd64
Daemon version: 0.43.3
CLI version: 0.43.3
Management: Connected to https://netbird.anon-b9Pmf.domain:443
Signal: Connected to https://netbird.anon-b9Pmf.domain:443
Relays:
[stun:netbird.anon-b9Pmf.domain:3478] is Available
[turn:netbird.anon-b9Pmf.domain:3478?transport=udp] is Available
Nameservers:
[1.1.1.1:53, 1.0.0.1:53] for [.] is Available
FQDN: peer8.netbird.selfhosted
NetBird IP: 100.85.15.129/16
Interface type: Kernel
Quantum resistance: false
Networks: -
Forwarding rules: 0
Peers count: 4/7 Connected

Running netbird debug for 1m -AS -U doesnt log anything related to DNS resolving it seems.
EDIT: Key: d2b6d9400b330f2f3f7cb1f86bb3c9977c4191ac7fbf26ec6335f09e742dbb96/90e442c3-2046-41a7-aa69-68536ead78ee

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings (even disabled it completly)
Originally created by @da-wilky on GitHub (Jun 27, 2025). **Describe the problem** Doing an nslookup for a dns of a peer (peer.netbird.selfhosted) results in the following: Server: 127.0.0.153 Address: 127.0.0.153#53 Non-authoritative answer: Name: host.netbird.selfhosted Address: 100.100.100.100 (e.g.) ** server can't find samuel-server.netbird.selfhosted: NXDOMAIN **To Reproduce** Steps to reproduce the behavior: Install the netbird client (I have NixOS with netbird version 0.43.3 and Ubuntu with netbird version 0.38.2) Run nslookup another peer with its name peer.netbird.selfhosted. **Expected behavior** The DNS should be resolved without errors. **Are you using NetBird Cloud?** Using self-host NetBird's control plane. **NetBird version** 0.43.3 0.38.2 **Is any other VPN software installed?** No **Debug output** To help us resolve the problem, please attach the following anonymized status output Peers detail: peer1.netbird.selfhosted: NetBird IP: 100.85.210.62/32 Public key: BJjacf7HSPwCzkxFkUlFlWMBbXiFQyLzhc2z6YrBd3E= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 1 minute, 18 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s peer2.netbird.selfhosted: NetBird IP: 100.85.4.113 Public key: De9Eqq4hqP7xAZoYOo/x4mOQQp0MSTYT474XkP2/EUs= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 2.4 KiB/1.5 KiB Quantum resistance: false Networks: - Latency: 6.636722ms peer3.netbird.selfhosted: NetBird IP: 100.85.26.155 Public key: qXy69ZUHM8IQJIapY/5z54AGTa2UyXPSefDISbzyByA= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:27872 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 12.9 KiB/20.7 KiB Quantum resistance: false Networks: - Latency: 20.940232ms peer4.netbird.selfhosted: NetBird IP: 100.85.175.76 Public key: MvDBVV63GFtK+MdEy3lV9/73Fuw5eUaRmNfQTMEi3DQ= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:28522 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 92 B/244 B Quantum resistance: false Networks: - Latency: 19.950197ms peer5.netbird.selfhosted: NetBird IP: 100.85.192.163 Public key: 31zTks+NyPpA0UmmYU30KeSwu0HkrOqeAMBk7lZzpyg= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.3:51820 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 156 B/180 B Quantum resistance: false Networks: - Latency: 5.033475ms peer6.netbird.selfhosted: NetBird IP: 100.85.215.72 Public key: IIOJuuohc0qTp8WjFjHdr3eENJo0LxPHYzec2OY+WVQ= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s peer7.netbird.selfhosted: NetBird IP: 100.85.224.38 Public key: Qfd7JSDbc0emYQdKigHWO9jzQYunzsPEI8ONq9caNEo= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s Events: [INFO] SYSTEM (d9e53c52-0076-47a6-8845-d1b6cc766ca2) Message: Network map updated Time: 54 minutes, 30 seconds ago [INFO] SYSTEM (833adb5b-c378-4be6-a814-0bac328a0535) Message: Network map updated Time: 46 minutes, 42 seconds ago [INFO] SYSTEM (583de4c0-7113-448e-af76-7774278cb104) Message: Network map updated Time: 46 minutes, 25 seconds ago [INFO] SYSTEM (1ae2465b-9c7a-43e8-90de-56cc90e39649) Message: Network map updated Time: 2 minutes, 37 seconds ago [INFO] SYSTEM (77528e15-5771-4365-9505-a5c97c380754) Message: Network map updated Time: 1 minute, 18 seconds ago OS: linux/amd64 Daemon version: 0.43.3 CLI version: 0.43.3 Management: Connected to https://netbird.anon-b9Pmf.domain:443 Signal: Connected to https://netbird.anon-b9Pmf.domain:443 Relays: [stun:netbird.anon-b9Pmf.domain:3478] is Available [turn:netbird.anon-b9Pmf.domain:3478?transport=udp] is Available Nameservers: [1.1.1.1:53, 1.0.0.1:53] for [.] is Available FQDN: peer8.netbird.selfhosted NetBird IP: 100.85.15.129/16 Interface type: Kernel Quantum resistance: false Networks: - Forwarding rules: 0 Peers count: 4/7 Connected Running `netbird debug for 1m -AS -U` doesnt log anything related to DNS resolving it seems. EDIT: Key: d2b6d9400b330f2f3f7cb1f86bb3c9977c4191ac7fbf26ec6335f09e742dbb96/90e442c3-2046-41a7-aa69-68536ead78ee **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [ ] Disabled other VPN software - [x] Checked firewall settings (even disabled it completly)
saavagebueno added the clientsystem-compatibility-issuedns labels 2025-11-20 06:11:18 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2017