SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-12 02:11:43 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

DNS NXDOMAIN but still returning an IP #2021

New Issue
Closed
opened 2025-11-20 06:11:21 -05:00 by saavagebueno · 5 comments
saavagebueno commented 2025-11-20 06:11:21 -05:00
Owner
Copy Link

Originally created by @da-wilky on GitHub (Jun 27, 2025).

Describe the problem

Doing an nslookup for a dns of a peer (peer.netbird.selfhosted) results in the following:
Server: 127.0.0.153
Address: 127.0.0.153#53

Non-authoritative answer:
Name: host.netbird.selfhosted
Address: 100.100.100.100 (e.g.)
** server can't find samuel-server.netbird.selfhosted: NXDOMAIN

To Reproduce

Steps to reproduce the behavior:
Install the netbird client (I have NixOS with netbird version 0.43.3 and Ubuntu with netbird version 0.38.2)
Run nslookup another peer with its name peer.netbird.selfhosted.

Expected behavior
The DNS should be resolved without errors.

Are you using NetBird Cloud?
Using self-host NetBird's control plane.

NetBird version
0.43.3
0.38.2

Is any other VPN software installed?
No

Debug output

To help us resolve the problem, please attach the following anonymized status output

Peers detail:
peer1.netbird.selfhosted:
NetBird IP: 100.85.210.62/32
Public key: BJjacf7HSPwCzkxFkUlFlWMBbXiFQyLzhc2z6YrBd3E=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 1 minute, 18 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

peer2.netbird.selfhosted:
NetBird IP: 100.85.4.113
Public key: De9Eqq4hqP7xAZoYOo/x4mOQQp0MSTYT474XkP2/EUs=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 2.4 KiB/1.5 KiB
Quantum resistance: false
Networks: -
Latency: 6.636722ms

peer3.netbird.selfhosted:
NetBird IP: 100.85.26.155
Public key: qXy69ZUHM8IQJIapY/5z54AGTa2UyXPSefDISbzyByA=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): srflx/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:27872
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 12.9 KiB/20.7 KiB
Quantum resistance: false
Networks: -
Latency: 20.940232ms

peer4.netbird.selfhosted:
NetBird IP: 100.85.175.76
Public key: MvDBVV63GFtK+MdEy3lV9/73Fuw5eUaRmNfQTMEi3DQ=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/srflx
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:28522
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 92 B/244 B
Quantum resistance: false
Networks: -
Latency: 19.950197ms

peer5.netbird.selfhosted:
NetBird IP: 100.85.192.163
Public key: 31zTks+NyPpA0UmmYU30KeSwu0HkrOqeAMBk7lZzpyg=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/host
ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.3:51820
Relay server address:
Last connection update: 1 minute, 14 seconds ago
Last WireGuard handshake: 1 minute, 14 seconds ago
Transfer status (received/sent) 156 B/180 B
Quantum resistance: false
Networks: -
Latency: 5.033475ms

peer6.netbird.selfhosted:
NetBird IP: 100.85.215.72
Public key: IIOJuuohc0qTp8WjFjHdr3eENJo0LxPHYzec2OY+WVQ=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

peer7.netbird.selfhosted:
NetBird IP: 100.85.224.38
Public key: Qfd7JSDbc0emYQdKigHWO9jzQYunzsPEI8ONq9caNEo=
Status: Disconnected
-- detail --
Connection type:
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: -
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

Events:
[INFO] SYSTEM (d9e53c52-0076-47a6-8845-d1b6cc766ca2)
Message: Network map updated
Time: 54 minutes, 30 seconds ago
[INFO] SYSTEM (833adb5b-c378-4be6-a814-0bac328a0535)
Message: Network map updated
Time: 46 minutes, 42 seconds ago
[INFO] SYSTEM (583de4c0-7113-448e-af76-7774278cb104)
Message: Network map updated
Time: 46 minutes, 25 seconds ago
[INFO] SYSTEM (1ae2465b-9c7a-43e8-90de-56cc90e39649)
Message: Network map updated
Time: 2 minutes, 37 seconds ago
[INFO] SYSTEM (77528e15-5771-4365-9505-a5c97c380754)
Message: Network map updated
Time: 1 minute, 18 seconds ago
OS: linux/amd64
Daemon version: 0.43.3
CLI version: 0.43.3
Management: Connected to https://netbird.anon-b9Pmf.domain:443
Signal: Connected to https://netbird.anon-b9Pmf.domain:443
Relays:
[stun:netbird.anon-b9Pmf.domain:3478] is Available
[turn:netbird.anon-b9Pmf.domain:3478?transport=udp] is Available
Nameservers:
[1.1.1.1:53, 1.0.0.1:53] for [.] is Available
FQDN: peer8.netbird.selfhosted
NetBird IP: 100.85.15.129/16
Interface type: Kernel
Quantum resistance: false
Networks: -
Forwarding rules: 0
Peers count: 4/7 Connected

Running netbird debug for 1m -AS -U doesnt log anything related to DNS resolving it seems.
EDIT: Key: d2b6d9400b330f2f3f7cb1f86bb3c9977c4191ac7fbf26ec6335f09e742dbb96/90e442c3-2046-41a7-aa69-68536ead78ee

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings (even disabled it completly)
Originally created by @da-wilky on GitHub (Jun 27, 2025). **Describe the problem** Doing an nslookup for a dns of a peer (peer.netbird.selfhosted) results in the following: Server: 127.0.0.153 Address: 127.0.0.153#53 Non-authoritative answer: Name: host.netbird.selfhosted Address: 100.100.100.100 (e.g.) ** server can't find samuel-server.netbird.selfhosted: NXDOMAIN **To Reproduce** Steps to reproduce the behavior: Install the netbird client (I have NixOS with netbird version 0.43.3 and Ubuntu with netbird version 0.38.2) Run nslookup another peer with its name peer.netbird.selfhosted. **Expected behavior** The DNS should be resolved without errors. **Are you using NetBird Cloud?** Using self-host NetBird's control plane. **NetBird version** 0.43.3 0.38.2 **Is any other VPN software installed?** No **Debug output** To help us resolve the problem, please attach the following anonymized status output Peers detail: peer1.netbird.selfhosted: NetBird IP: 100.85.210.62/32 Public key: BJjacf7HSPwCzkxFkUlFlWMBbXiFQyLzhc2z6YrBd3E= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 1 minute, 18 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s peer2.netbird.selfhosted: NetBird IP: 100.85.4.113 Public key: De9Eqq4hqP7xAZoYOo/x4mOQQp0MSTYT474XkP2/EUs= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.1:51820 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 2.4 KiB/1.5 KiB Quantum resistance: false Networks: - Latency: 6.636722ms peer3.netbird.selfhosted: NetBird IP: 100.85.26.155 Public key: qXy69ZUHM8IQJIapY/5z54AGTa2UyXPSefDISbzyByA= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:27872 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 12.9 KiB/20.7 KiB Quantum resistance: false Networks: - Latency: 20.940232ms peer4.netbird.selfhosted: NetBird IP: 100.85.175.76 Public key: MvDBVV63GFtK+MdEy3lV9/73Fuw5eUaRmNfQTMEi3DQ= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.2:28522 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 92 B/244 B Quantum resistance: false Networks: - Latency: 19.950197ms peer5.netbird.selfhosted: NetBird IP: 100.85.192.163 Public key: 31zTks+NyPpA0UmmYU30KeSwu0HkrOqeAMBk7lZzpyg= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 198.51.100.0:51820/198.51.100.3:51820 Relay server address: Last connection update: 1 minute, 14 seconds ago Last WireGuard handshake: 1 minute, 14 seconds ago Transfer status (received/sent) 156 B/180 B Quantum resistance: false Networks: - Latency: 5.033475ms peer6.netbird.selfhosted: NetBird IP: 100.85.215.72 Public key: IIOJuuohc0qTp8WjFjHdr3eENJo0LxPHYzec2OY+WVQ= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s peer7.netbird.selfhosted: NetBird IP: 100.85.224.38 Public key: Qfd7JSDbc0emYQdKigHWO9jzQYunzsPEI8ONq9caNEo= Status: Disconnected -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s Events: [INFO] SYSTEM (d9e53c52-0076-47a6-8845-d1b6cc766ca2) Message: Network map updated Time: 54 minutes, 30 seconds ago [INFO] SYSTEM (833adb5b-c378-4be6-a814-0bac328a0535) Message: Network map updated Time: 46 minutes, 42 seconds ago [INFO] SYSTEM (583de4c0-7113-448e-af76-7774278cb104) Message: Network map updated Time: 46 minutes, 25 seconds ago [INFO] SYSTEM (1ae2465b-9c7a-43e8-90de-56cc90e39649) Message: Network map updated Time: 2 minutes, 37 seconds ago [INFO] SYSTEM (77528e15-5771-4365-9505-a5c97c380754) Message: Network map updated Time: 1 minute, 18 seconds ago OS: linux/amd64 Daemon version: 0.43.3 CLI version: 0.43.3 Management: Connected to https://netbird.anon-b9Pmf.domain:443 Signal: Connected to https://netbird.anon-b9Pmf.domain:443 Relays: [stun:netbird.anon-b9Pmf.domain:3478] is Available [turn:netbird.anon-b9Pmf.domain:3478?transport=udp] is Available Nameservers: [1.1.1.1:53, 1.0.0.1:53] for [.] is Available FQDN: peer8.netbird.selfhosted NetBird IP: 100.85.15.129/16 Interface type: Kernel Quantum resistance: false Networks: - Forwarding rules: 0 Peers count: 4/7 Connected Running `netbird debug for 1m -AS -U` doesnt log anything related to DNS resolving it seems. EDIT: Key: d2b6d9400b330f2f3f7cb1f86bb3c9977c4191ac7fbf26ec6335f09e742dbb96/90e442c3-2046-41a7-aa69-68536ead78ee **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [ ] Disabled other VPN software - [x] Checked firewall settings (even disabled it completly)
saavagebueno added the clientsystem-compatibility-issuedns labels 2025-11-20 06:11:21 -05:00
saavagebueno commented 2025-11-20 06:11:22 -05:00
Author
Owner
Copy Link

@da-wilky commented on GitHub (Jun 27, 2025):

Forgot to mention that running nslookup inside a docker container on that host results in the same, whereas the error part comes before the successfull resolution. Also inside the containers for normal actions (like ping and requests from applications) it returns that it cannot be resolved. Running ping -4 resolves it correctly. Im curious wether it might be related to the error happening before the succcessfull resolution. On the host system the resolution is successfull, even with ping. Inside the nslookup logs the error is logged after the resolution.

@da-wilky commented on GitHub (Jun 27, 2025): Forgot to mention that running nslookup inside a docker container on that host results in the same, whereas the error part comes before the successfull resolution. Also inside the containers for normal actions (like `ping` and requests from applications) it returns that it cannot be resolved. Running `ping -4` resolves it correctly. Im curious wether it might be related to the error happening before the succcessfull resolution. On the host system the resolution is successfull, even with ping. Inside the nslookup logs the error is logged after the resolution.
saavagebueno commented 2025-11-20 06:11:22 -05:00
Author
Owner
Copy Link

@nazarewk commented on GitHub (Jun 27, 2025):

very likely host DNS resolver is not detected correctly (you'll see something about dns manager in the debug log), could you go appy the same instructions as https://github.com/netbirdio/netbird/issues/4060#issuecomment-3012079687 to figure out what is wrong in your case?

@nazarewk commented on GitHub (Jun 27, 2025): very likely host DNS resolver is not detected correctly (you'll see something about dns manager in the debug log), could you go appy the same instructions as https://github.com/netbirdio/netbird/issues/4060#issuecomment-3012079687 to figure out what is wrong in your case?
saavagebueno commented 2025-11-20 06:11:22 -05:00
Author
Owner
Copy Link

@da-wilky commented on GitHub (Jun 27, 2025):

I created the upload file key and edit it into the original question.
My /etc/resolv.conf:

# Generated by resolvconf
search netbird.selfhosted
nameserver 127.0.0.153
options attempts:1 timeout:4 edns0
options edns0

Which instructions should I follow? Seems like I didn`t understand the assignment, sorry.

@da-wilky commented on GitHub (Jun 27, 2025): I created the upload file key and edit it into the original question. My `/etc/resolv.conf`: ``` # Generated by resolvconf search netbird.selfhosted nameserver 127.0.0.153 options attempts:1 timeout:4 edns0 options edns0 ``` Which instructions should I follow? Seems like I didn`t understand the assignment, sorry.
saavagebueno commented 2025-11-20 06:11:22 -05:00
Author
Owner
Copy Link

@lixmal commented on GitHub (Jun 27, 2025):

@da-wilky This has been fixed in the recent versions. please upgrade and test again

@lixmal commented on GitHub (Jun 27, 2025): @da-wilky This has been fixed in the recent versions. please upgrade and test again
saavagebueno commented 2025-11-20 06:11:23 -05:00
Author
Owner
Copy Link

@da-wilky commented on GitHub (Jun 27, 2025):

Thanks! Upgrading to 0.49.0, now the error disappears and indeed docker container are able to send those requests, thanks!
Unfortunatly need to wait for NixOS to provide this version of netbird, but its working now on the ubuntu server.

@da-wilky commented on GitHub (Jun 27, 2025): Thanks! Upgrading to 0.49.0, now the error disappears and indeed docker container are able to send those requests, thanks! Unfortunatly need to wait for NixOS to provide this version of netbird, but its working now on the ubuntu server.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label client dns system-compatibility-issue
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2021
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?