netbirdio/netbird (peer) constantly polls the network #2197

Open
opened 2025-11-20 07:05:39 -05:00 by saavagebueno · 1 comment
Owner

Originally created by @Dofamin on GitHub (Aug 17, 2025).

Describe the problem

netbirdio/netbird constantly polls ports of servers available to it

To Reproduce

Steps to reproduce the behavior:

  1. Deploy Netbird
  2. Add Netbird peer
  3. On server where dedicated peer run sudo tcpdump src <local-ip>
  4. see this log
10:52:48.378108 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 1147533716 ecr 3226646647], length 0
10:52:48.379506 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 3911795487 ecr 2529712129], length 0
10:52:48.380064 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [P.], seq 54:87, ack 548, win 8221, options [nop,nop,TS val 1147533716 ecr 3226646647], length 33
10:52:48.380275 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [P.], seq 54:87, ack 548, win 8221, options [nop,nop,TS val 3911795487 ecr 2529712129], length 33
10:52:48.380380 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 560692034 ecr 4003041812], length 0
10:52:48.380491 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 53:85, ack 548, win 8221, options [nop,nop,TS val 560692034 ecr 4003041812], length 32
10:52:48.380942 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [.], ack 3102206781, win 8289, options [nop,nop,TS val 2969154425 ecr 4003041812], length 0
10:52:48.381157 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 0:53, ack 1, win 8289, options [nop,nop,TS val 2969154425 ecr 4003041812], length 53
10:52:48.393518 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 1147533729 ecr 3226646659], length 0
10:52:48.393823 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 3911795500 ecr 2529712140], length 0
10:52:48.394327 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 560692047 ecr 4003041823], length 0
10:52:48.397105 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 2969154437 ecr 4003041823], length 0
10:52:48.397444 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [F.], seq 87, ack 549, win 8221, options [nop,nop,TS val 3911795500 ecr 2529712140], length 0
10:52:48.397455 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [F.], seq 85, ack 549, win 8221, options [nop,nop,TS val 560692047 ecr 4003041823], length 0
10:52:48.397946 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [F.], seq 87, ack 549, win 8221, options [nop,nop,TS val 1147533729 ecr 3226646659], length 0
10:52:48.397958 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 53:85, ack 548, win 8221, options [nop,nop,TS val 2969154437 ecr 4003041823], length 32

and this log in service that scanned, kafka in this example

Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,610] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50709-1-18134); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,649] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50710-2-18134); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,795] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50714-0-18135); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,014] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50718-1-18135); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,076] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50719-2-18135); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,229] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50723-0-18136); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,419] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50727-1-18136); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,480] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50728-2-18136); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,655] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50732-0-18137); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,993] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50737-1-18137); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,993] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50739-2-18137); closing connection (org.apache.kafka.common.network.Selector)
Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake.
Aug 17 07:38:42 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:42,131] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50741-0-18138); closing connection (org.apache.kafka.common.network.Selector)
  1. stop netbirdo/netbird (peer), and traffic go away instantly

Expected behavior

None of that traffic

Are you using NetBird Cloud?

No

NetBird version

netbird_dashboard_version: v2.16.0
netbird_signal_version: 0.54.2
netbird_relay_version: 0.54.2
netbird_management_version: 0.54.2
netbird_coturn_version: 4.7.0
netbird_peer_version: 0.54.2

Is any other VPN software installed?

No

Debug output

To help us resolve the problem, please attach the following anonymized status output

netbird status -dA

Peers detail:
 macbook-pro-nuzzl.anon-hFtmh.domain:
  NetBird IP: 100.121.113.236/32
  Public key: FpiAEMzjS4uZbI7RKb91WsoJP63/EgRwlGu0Gitz20o=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 42 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 iphone.anon-hFtmh.domain:
  NetBird IP: 100.121.137.197/32
  Public key: G5m3RPacg0jycN2SQWmQ98a/bqXR8I43077axPHBEkk=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 42 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-6m4p7n4.anon-hFtmh.domain:
  NetBird IP: 100.121.12.155
  Public key: orQ4TMZQ2HHQEuQoKzxEZmJFKaetbHQFIIFnIMXaRDo=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-6u37h48.anon-hFtmh.domain:
  NetBird IP: 100.121.13.174
  Public key: RBfFjzWHLUJ8TQ5/ojCFokb/+haANm5I7P/GdW+WqFI=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-322blij.anon-hFtmh.domain:
  NetBird IP: 100.121.20.16
  Public key: LOoOLvUzGGy9G2b9lP/wwvwreDfb6Ox9hcCixvE+nWQ=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-stsiqv7.anon-hFtmh.domain:
  NetBird IP: 100.121.26.110
  Public key: xX+5pC3egdi/FYztFXYObthvK0rKhT3PfojNuZlH1l0=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-322blij-1.anon-hFtmh.domain:
  NetBird IP: 100.121.38.41
  Public key: P2GrjC1XJbJulIsTGhFCWD5Juz5DKnnsT33zK6kVR2I=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 ws-rs-011284.anon-hFtmh.domain:
  NetBird IP: 100.121.48.75
  Public key: h+v+BJVStxHsN5mC7S3oCEtfRqEKip3hDrsLf/SScBw=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-pro-gusejn.anon-hFtmh.domain:
  NetBird IP: 100.121.52.233
  Public key: ObA64naR3mIo+OMjt+9Cyh9cck9A0sSa7OVEVzax+iw=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-vrck3eo.anon-hFtmh.domain:
  NetBird IP: 100.121.55.185
  Public key: pzeN985UQU8KsubYNZBcX3TuSnYkskBAlnGfkkqLjXY=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-pro-anton.anon-hFtmh.domain:
  NetBird IP: 100.121.85.45
  Public key: QKC4cey7wbPWEM61rIYK1tWebZTVsR9894XXkhU0owc=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 blackie.anon-hFtmh.domain:
  NetBird IP: 100.121.96.149
  Public key: 5rAho3jyn9604F4pTUyXqnhYmGCuEnor+I3tVQxL/WY=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 elena.anon-hFtmh.domain:
  NetBird IP: 100.121.96.254
  Public key: NPZBPfmG+nv4pU4qQX2gWAHM9e2Q8FpWjAUnz6ZgC2E=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 alex-virtual-machine.anon-hFtmh.domain:
  NetBird IP: 100.121.110.88
  Public key: hRENRYTeFq5yTDTYrDTbCoDj3pl3sf7+PtFluVaEgT8=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-6u37h48-1.anon-hFtmh.domain:
  NetBird IP: 100.121.114.201
  Public key: Ra1kKeoKD+1R7z0wPcY+fJvM2qw5IdNs7SXyYQToXDI=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-00osrpn.anon-hFtmh.domain:
  NetBird IP: 100.121.129.47
  Public key: m/krhCCjp12Tufyef/jdbekfb0eSHkmzr++tRoZkShE=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 asus.anon-hFtmh.domain:
  NetBird IP: 100.121.155.19
  Public key: /xiApxMv/aNH5xTz/5QEdENMi9Sb9BbB/XpWSf9gO1I=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 iphone-1.anon-hFtmh.domain:
  NetBird IP: 100.121.165.253
  Public key: qg4/rR1zjC7UQoafSaYAGSpPopocYKKcj48ZbtEgfyA=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 desktop-n0v1gtn.anon-hFtmh.domain:
  NetBird IP: 100.121.180.45
  Public key: fZ/vXewGiNGW8v8NZh2szBYc9mWQJr5iWQvoN/VRm3w=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-pro-roman.anon-hFtmh.domain:
  NetBird IP: 100.121.215.140
  Public key: B0U5Jf72PBeLINairHCz/UePDeNhscLlAbNGlwhzIWI=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): relay/srflx
  ICE candidate endpoints (Local/Remote): 198.51.100.0:56634/198.51.100.1:51480
  Relay server address:
  Last connection update: 8 minutes, 50 seconds ago
  Last WireGuard handshake: 45 seconds ago
  Transfer status (received/sent) 11.3 MiB/15.3 MiB
  Quantum resistance: false
  Networks: -
  Latency: 9.121399ms

 desktop-rroos55.anon-hFtmh.domain:
  NetBird IP: 100.121.225.108
  Public key: QkILOGMxHnywFe8Ud7njdDkUcLm+Mjr7BqCjcT8bGk4=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-air-olesa.anon-hFtmh.domain:
  NetBird IP: 100.121.226.186
  Public key: Lbx8kw5S8PVDOPJVrfgx22q1dG2hXzewCf7XhJKTwnE=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 kaiserpc.anon-hFtmh.domain:
  NetBird IP: 100.121.231.207
  Public key: G3MTT6qzVIuygCC4nih67T5/C1rOvAKgv4MXqow89Ts=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 mac.anon-hFtmh.domain:
  NetBird IP: 100.121.239.80
  Public key: sBhldLs+U+SgHZQgmCxVO2GALRUUnQsj10NzZbcvZSk=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-air-vanyabesmata.anon-hFtmh.domain:
  NetBird IP: 100.121.240.165
  Public key: LuVZH7aXeGpjKat7OK2MdyGABWZRgsLUE5pSLjGH3g4=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 macbook-pro-2.anon-hFtmh.domain:
  NetBird IP: 100.121.249.134
  Public key: JLDQszF7N/2tyU6aNq0stxfYcYfeVnqdj2dHXANQgxc=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 10 minutes, 43 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

Events:
  [INFO] SYSTEM (6c6344b2-bdbd-4c17-a20d-6c64d7ce5ab8)
    Message: Network map updated
    Time: 10 minutes, 43 seconds ago
  [INFO] SYSTEM (9bbed4f8-186c-4011-b241-9a51b384b36d)
    Message: Network map updated
    Time: 9 minutes, 43 seconds ago
  [INFO] SYSTEM (89352de9-7782-418d-804c-fed56af92964)
    Message: Network map updated
    Time: 8 minutes, 42 seconds ago
  [INFO] SYSTEM (4fcc7230-709b-413c-b91c-4761817fc5fb)
    Message: Network map updated
    Time: 7 minutes, 41 seconds ago
  [INFO] SYSTEM (663d502e-1b1d-47e2-9365-1685d0de291c)
    Message: Network map updated
    Time: 6 minutes, 38 seconds ago
  [INFO] SYSTEM (58a72201-9838-450c-9591-4513f8fe9e98)
    Message: Network map updated
    Time: 5 minutes, 28 seconds ago
  [INFO] SYSTEM (1997a20d-3957-4b8d-9e1a-cce8efb1030f)
    Message: Network map updated
    Time: 4 minutes, 22 seconds ago
  [INFO] SYSTEM (5580ef49-a655-4657-91db-c052f8816388)
    Message: Network map updated
    Time: 3 minutes, 2 seconds ago
  [INFO] SYSTEM (8f612d54-2de9-4511-9153-fb7cbd1b5103)
    Message: Network map updated
    Time: 1 minute, 54 seconds ago
  [INFO] SYSTEM (351ab9be-2dfa-4e97-a8f8-53a1244d626b)
    Message: Network map updated
    Time: 42 seconds ago
OS: linux/amd64
Daemon version: 0.54.2
CLI version: 0.54.2
Profile: default
Management: Connected to https://vpn.anon-mXgat.domain:443
Signal: Connected to https://vpn.anon-mXgat.domain:443
Relays:
  [stun:vpn.anon-mXgat.domain:3478] is Available
  [turn:vpn.anon-mXgat.domain:3478?transport=udp] is Available
  [rels://vpn.anon-mXgat.domain:443] is Unavailable, reason: relay client not connected
Nameservers:
FQDN: vpn-dev1.anon-hFtmh.domain
NetBird IP: 100.121.81.228/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: false
Networks: 192.168.5.0/24
Forwarding rules: 0
Peers count: 1/26 Connected

Create and upload a debug bundle, and share the returned file key:

netbird debug for 1m -AS -U

Uploaded files are automatically deleted after 30 days.

Alternatively, create the file only and attach it here manually:

netbird debug for 1m -AS

netbird.debug.330684342.zip

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @Dofamin on GitHub (Aug 17, 2025). **Describe the problem** netbirdio/netbird constantly polls ports of servers available to it **To Reproduce** Steps to reproduce the behavior: 1. Deploy Netbird 2. Add Netbird peer 3. On server where dedicated peer run `sudo tcpdump src <local-ip>` 4. see this log ``` 10:52:48.378108 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 1147533716 ecr 3226646647], length 0 10:52:48.379506 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 3911795487 ecr 2529712129], length 0 10:52:48.380064 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [P.], seq 54:87, ack 548, win 8221, options [nop,nop,TS val 1147533716 ecr 3226646647], length 33 10:52:48.380275 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [P.], seq 54:87, ack 548, win 8221, options [nop,nop,TS val 3911795487 ecr 2529712129], length 33 10:52:48.380380 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 560692034 ecr 4003041812], length 0 10:52:48.380491 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 53:85, ack 548, win 8221, options [nop,nop,TS val 560692034 ecr 4003041812], length 32 10:52:48.380942 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [.], ack 3102206781, win 8289, options [nop,nop,TS val 2969154425 ecr 4003041812], length 0 10:52:48.381157 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 0:53, ack 1, win 8289, options [nop,nop,TS val 2969154425 ecr 4003041812], length 53 10:52:48.393518 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 1147533729 ecr 3226646659], length 0 10:52:48.393823 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 3911795500 ecr 2529712140], length 0 10:52:48.394327 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [.], ack 549, win 8221, options [nop,nop,TS val 560692047 ecr 4003041823], length 0 10:52:48.397105 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [.], ack 548, win 8221, options [nop,nop,TS val 2969154437 ecr 4003041823], length 0 10:52:48.397444 IP vpn-dev1.dev.local.59342 > infra-dev-test-1.dev.local.9094: Flags [F.], seq 87, ack 549, win 8221, options [nop,nop,TS val 3911795500 ecr 2529712140], length 0 10:52:48.397455 IP vpn-dev1.dev.local.59343 > infra-dev-test-2.dev.local.9094: Flags [F.], seq 85, ack 549, win 8221, options [nop,nop,TS val 560692047 ecr 4003041823], length 0 10:52:48.397946 IP vpn-dev1.dev.local.59341 > infra-dev-test-3.dev.local.9094: Flags [F.], seq 87, ack 549, win 8221, options [nop,nop,TS val 1147533729 ecr 3226646659], length 0 10:52:48.397958 IP vpn-dev1.dev.local.59344 > infra-dev-test-2.dev.local.9094: Flags [P.], seq 53:85, ack 548, win 8221, options [nop,nop,TS val 2969154437 ecr 4003041823], length 32 ``` and this log in service that scanned, kafka in this example ``` Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,610] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50709-1-18134); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,649] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50710-2-18134); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:40,795] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50714-0-18135); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:40 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,014] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50718-1-18135); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,076] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50719-2-18135); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,229] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50723-0-18136); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,419] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50727-1-18136); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,480] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50728-2-18136); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,655] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50732-0-18137); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,993] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50737-1-18137); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:41,993] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50739-2-18137); closing connection (org.apache.kafka.common.network.Selector) Aug 17 07:38:41 infra-dev-test--1 docker[3204087]: org.apache.kafka.common.errors.InvalidRequestException: Unexpected Kafka request of type METADATA during SASL handshake. Aug 17 07:38:42 infra-dev-test--1 docker[3204087]: [2025-08-17 10:38:42,131] WARN [SocketServer listenerType=BROKER, nodeId=1] Unexpected error from /192.168.5.80 (channelId=172.17.0.2:9094-192.168.5.80:50741-0-18138); closing connection (org.apache.kafka.common.network.Selector) ``` 5. stop netbirdo/netbird (peer), and traffic go away instantly **Expected behavior** None of that traffic **Are you using NetBird Cloud?** No **NetBird version** ``` netbird_dashboard_version: v2.16.0 netbird_signal_version: 0.54.2 netbird_relay_version: 0.54.2 netbird_management_version: 0.54.2 netbird_coturn_version: 4.7.0 netbird_peer_version: 0.54.2 ``` **Is any other VPN software installed?** No **Debug output** To help us resolve the problem, please attach the following anonymized status output netbird status -dA ``` Peers detail: macbook-pro-nuzzl.anon-hFtmh.domain: NetBird IP: 100.121.113.236/32 Public key: FpiAEMzjS4uZbI7RKb91WsoJP63/EgRwlGu0Gitz20o= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 42 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s iphone.anon-hFtmh.domain: NetBird IP: 100.121.137.197/32 Public key: G5m3RPacg0jycN2SQWmQ98a/bqXR8I43077axPHBEkk= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 42 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-6m4p7n4.anon-hFtmh.domain: NetBird IP: 100.121.12.155 Public key: orQ4TMZQ2HHQEuQoKzxEZmJFKaetbHQFIIFnIMXaRDo= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-6u37h48.anon-hFtmh.domain: NetBird IP: 100.121.13.174 Public key: RBfFjzWHLUJ8TQ5/ojCFokb/+haANm5I7P/GdW+WqFI= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-322blij.anon-hFtmh.domain: NetBird IP: 100.121.20.16 Public key: LOoOLvUzGGy9G2b9lP/wwvwreDfb6Ox9hcCixvE+nWQ= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-stsiqv7.anon-hFtmh.domain: NetBird IP: 100.121.26.110 Public key: xX+5pC3egdi/FYztFXYObthvK0rKhT3PfojNuZlH1l0= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-322blij-1.anon-hFtmh.domain: NetBird IP: 100.121.38.41 Public key: P2GrjC1XJbJulIsTGhFCWD5Juz5DKnnsT33zK6kVR2I= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s ws-rs-011284.anon-hFtmh.domain: NetBird IP: 100.121.48.75 Public key: h+v+BJVStxHsN5mC7S3oCEtfRqEKip3hDrsLf/SScBw= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-pro-gusejn.anon-hFtmh.domain: NetBird IP: 100.121.52.233 Public key: ObA64naR3mIo+OMjt+9Cyh9cck9A0sSa7OVEVzax+iw= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-vrck3eo.anon-hFtmh.domain: NetBird IP: 100.121.55.185 Public key: pzeN985UQU8KsubYNZBcX3TuSnYkskBAlnGfkkqLjXY= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-pro-anton.anon-hFtmh.domain: NetBird IP: 100.121.85.45 Public key: QKC4cey7wbPWEM61rIYK1tWebZTVsR9894XXkhU0owc= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s blackie.anon-hFtmh.domain: NetBird IP: 100.121.96.149 Public key: 5rAho3jyn9604F4pTUyXqnhYmGCuEnor+I3tVQxL/WY= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s elena.anon-hFtmh.domain: NetBird IP: 100.121.96.254 Public key: NPZBPfmG+nv4pU4qQX2gWAHM9e2Q8FpWjAUnz6ZgC2E= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s alex-virtual-machine.anon-hFtmh.domain: NetBird IP: 100.121.110.88 Public key: hRENRYTeFq5yTDTYrDTbCoDj3pl3sf7+PtFluVaEgT8= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-6u37h48-1.anon-hFtmh.domain: NetBird IP: 100.121.114.201 Public key: Ra1kKeoKD+1R7z0wPcY+fJvM2qw5IdNs7SXyYQToXDI= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-00osrpn.anon-hFtmh.domain: NetBird IP: 100.121.129.47 Public key: m/krhCCjp12Tufyef/jdbekfb0eSHkmzr++tRoZkShE= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s asus.anon-hFtmh.domain: NetBird IP: 100.121.155.19 Public key: /xiApxMv/aNH5xTz/5QEdENMi9Sb9BbB/XpWSf9gO1I= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s iphone-1.anon-hFtmh.domain: NetBird IP: 100.121.165.253 Public key: qg4/rR1zjC7UQoafSaYAGSpPopocYKKcj48ZbtEgfyA= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s desktop-n0v1gtn.anon-hFtmh.domain: NetBird IP: 100.121.180.45 Public key: fZ/vXewGiNGW8v8NZh2szBYc9mWQJr5iWQvoN/VRm3w= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-pro-roman.anon-hFtmh.domain: NetBird IP: 100.121.215.140 Public key: B0U5Jf72PBeLINairHCz/UePDeNhscLlAbNGlwhzIWI= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): relay/srflx ICE candidate endpoints (Local/Remote): 198.51.100.0:56634/198.51.100.1:51480 Relay server address: Last connection update: 8 minutes, 50 seconds ago Last WireGuard handshake: 45 seconds ago Transfer status (received/sent) 11.3 MiB/15.3 MiB Quantum resistance: false Networks: - Latency: 9.121399ms desktop-rroos55.anon-hFtmh.domain: NetBird IP: 100.121.225.108 Public key: QkILOGMxHnywFe8Ud7njdDkUcLm+Mjr7BqCjcT8bGk4= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-air-olesa.anon-hFtmh.domain: NetBird IP: 100.121.226.186 Public key: Lbx8kw5S8PVDOPJVrfgx22q1dG2hXzewCf7XhJKTwnE= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s kaiserpc.anon-hFtmh.domain: NetBird IP: 100.121.231.207 Public key: G3MTT6qzVIuygCC4nih67T5/C1rOvAKgv4MXqow89Ts= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s mac.anon-hFtmh.domain: NetBird IP: 100.121.239.80 Public key: sBhldLs+U+SgHZQgmCxVO2GALRUUnQsj10NzZbcvZSk= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-air-vanyabesmata.anon-hFtmh.domain: NetBird IP: 100.121.240.165 Public key: LuVZH7aXeGpjKat7OK2MdyGABWZRgsLUE5pSLjGH3g4= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s macbook-pro-2.anon-hFtmh.domain: NetBird IP: 100.121.249.134 Public key: JLDQszF7N/2tyU6aNq0stxfYcYfeVnqdj2dHXANQgxc= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 10 minutes, 43 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s Events: [INFO] SYSTEM (6c6344b2-bdbd-4c17-a20d-6c64d7ce5ab8) Message: Network map updated Time: 10 minutes, 43 seconds ago [INFO] SYSTEM (9bbed4f8-186c-4011-b241-9a51b384b36d) Message: Network map updated Time: 9 minutes, 43 seconds ago [INFO] SYSTEM (89352de9-7782-418d-804c-fed56af92964) Message: Network map updated Time: 8 minutes, 42 seconds ago [INFO] SYSTEM (4fcc7230-709b-413c-b91c-4761817fc5fb) Message: Network map updated Time: 7 minutes, 41 seconds ago [INFO] SYSTEM (663d502e-1b1d-47e2-9365-1685d0de291c) Message: Network map updated Time: 6 minutes, 38 seconds ago [INFO] SYSTEM (58a72201-9838-450c-9591-4513f8fe9e98) Message: Network map updated Time: 5 minutes, 28 seconds ago [INFO] SYSTEM (1997a20d-3957-4b8d-9e1a-cce8efb1030f) Message: Network map updated Time: 4 minutes, 22 seconds ago [INFO] SYSTEM (5580ef49-a655-4657-91db-c052f8816388) Message: Network map updated Time: 3 minutes, 2 seconds ago [INFO] SYSTEM (8f612d54-2de9-4511-9153-fb7cbd1b5103) Message: Network map updated Time: 1 minute, 54 seconds ago [INFO] SYSTEM (351ab9be-2dfa-4e97-a8f8-53a1244d626b) Message: Network map updated Time: 42 seconds ago OS: linux/amd64 Daemon version: 0.54.2 CLI version: 0.54.2 Profile: default Management: Connected to https://vpn.anon-mXgat.domain:443 Signal: Connected to https://vpn.anon-mXgat.domain:443 Relays: [stun:vpn.anon-mXgat.domain:3478] is Available [turn:vpn.anon-mXgat.domain:3478?transport=udp] is Available [rels://vpn.anon-mXgat.domain:443] is Unavailable, reason: relay client not connected Nameservers: FQDN: vpn-dev1.anon-hFtmh.domain NetBird IP: 100.121.81.228/16 Interface type: Kernel Quantum resistance: false Lazy connection: false Networks: 192.168.5.0/24 Forwarding rules: 0 Peers count: 1/26 Connected ``` Create and upload a debug bundle, and share the returned file key: netbird debug for 1m -AS -U *Uploaded files are automatically deleted after 30 days.* Alternatively, create the file only and attach it here manually: netbird debug for 1m -AS [netbird.debug.330684342.zip](https://github.com/user-attachments/files/21821116/netbird.debug.330684342.zip) **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:05:39 -05:00
Author
Owner

@Dofamin commented on GitHub (Aug 17, 2025):

Forgot to mention, all installations are in docker format

@Dofamin commented on GitHub (Aug 17, 2025): Forgot to mention, all installations are in docker format
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2197