pkgs.netbird.io not reachable in IPv6 #2276

Open
opened 2025-11-20 07:06:53 -05:00 by saavagebueno · 3 comments
Owner

Originally created by @goldeye-xor on GitHub (Sep 12, 2025).

Describe the problem

Im unable to Install, Update Netbird client on IPv6 or Dualstack host

To Reproduce

Steps to reproduce the behavior:
try to do curl https://pkgs.netbird.io/install.sh on a Dualstack host
-> Have a timeout
try to do curl -4 https://pkgs.netbird.io/install.sh to force IPv4
-> Have HTTP 302

Expected behavior

Website reachable in IPv6

Are you using NetBird Cloud?

Im using NetBird Cloud

NetBird version

N/A (Can't install the client) but 0.57.0 to IPv4 only host

Is any other VPN software installed?

No

Debug output

N/A (Can't install the client)

Screenshots
N/A

Additional context

Add any other context about the problem here.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @goldeye-xor on GitHub (Sep 12, 2025). **Describe the problem** Im unable to Install, Update Netbird client on IPv6 or Dualstack host **To Reproduce** Steps to reproduce the behavior: try to do `curl https://pkgs.netbird.io/install.sh` on a Dualstack host -> Have a timeout try to do `curl -4 https://pkgs.netbird.io/install.sh` to force IPv4 -> Have HTTP 302 **Expected behavior** Website reachable in IPv6 **Are you using NetBird Cloud?** Im using NetBird Cloud **NetBird version** N/A (Can't install the client) but 0.57.0 to IPv4 only host **Is any other VPN software installed?** No **Debug output** N/A (Can't install the client) **Screenshots** N/A **Additional context** Add any other context about the problem here. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [ ] Restarted the NetBird client - [ ] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:06:53 -05:00
Author
Owner

@nazarewk commented on GitHub (Sep 12, 2025):

Seems to work fine for me right now:

kdn@brys ~> curl -v -6 https://pkgs.netbird.io/install.sh
* Host pkgs.netbird.io:443 was resolved.
* IPv6: 2a04:3542:1000:910:2465:1fff:fe8a:1d97
* IPv4: (none)
*   Trying [2a04:3542:1000:910:2465:1fff:fe8a:1d97]:443...
* ALPN: curl offers h2,http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* TLSv1.3 (IN), TLS handshake, Server hello (2):
* TLSv1.3 (IN), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
* TLSv1.3 (IN), TLS handshake, Certificate (11):
* TLSv1.3 (IN), TLS handshake, CERT verify (15):
* TLSv1.3 (IN), TLS handshake, Finished (20):
* TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
* TLSv1.3 (OUT), TLS handshake, Finished (20):
* SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / RSASSA-PSS
* ALPN: server accepted http/1.1
* Server certificate:
*  subject: CN=pkgs.netbird.io
*  start date: Sep  5 07:45:44 2025 GMT
*  expire date: Dec  4 07:45:43 2025 GMT
*  subjectAltName: host "pkgs.netbird.io" matched cert's "pkgs.netbird.io"
*  issuer: C=US; O=Let's Encrypt; CN=R13
*  SSL certificate verify ok.
*   Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
*   Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption
* Connected to pkgs.netbird.io (2a04:3542:1000:910:2465:1fff:fe8a:1d97) port 443
* using HTTP/1.x
> GET /install.sh HTTP/1.1
> Host: pkgs.netbird.io
> User-Agent: curl/8.14.1
> Accept: */*
> 
* Request completely sent off
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
* TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
< HTTP/1.1 302 Moved Temporarily
< Server: nginx
< Date: Fri, 12 Sep 2025 15:51:16 GMT
< Content-Type: text/html
< Content-Length: 138
< Connection: keep-alive
< Location: https://github.com/netbirdio/netbird/releases/download/v0.57.0/install.sh
< 
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host pkgs.netbird.io left intact
@nazarewk commented on GitHub (Sep 12, 2025): Seems to work fine for me right now: ``` kdn@brys ~> curl -v -6 https://pkgs.netbird.io/install.sh * Host pkgs.netbird.io:443 was resolved. * IPv6: 2a04:3542:1000:910:2465:1fff:fe8a:1d97 * IPv4: (none) * Trying [2a04:3542:1000:910:2465:1fff:fe8a:1d97]:443... * ALPN: curl offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.3 (IN), TLS change cipher, Change cipher spec (1): * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): * TLSv1.3 (IN), TLS handshake, Certificate (11): * TLSv1.3 (IN), TLS handshake, CERT verify (15): * TLSv1.3 (IN), TLS handshake, Finished (20): * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): * TLSv1.3 (OUT), TLS handshake, Finished (20): * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519MLKEM768 / RSASSA-PSS * ALPN: server accepted http/1.1 * Server certificate: * subject: CN=pkgs.netbird.io * start date: Sep 5 07:45:44 2025 GMT * expire date: Dec 4 07:45:43 2025 GMT * subjectAltName: host "pkgs.netbird.io" matched cert's "pkgs.netbird.io" * issuer: C=US; O=Let's Encrypt; CN=R13 * SSL certificate verify ok. * Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption * Certificate level 1: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption * Certificate level 2: Public key type RSA (4096/152 Bits/secBits), signed using sha256WithRSAEncryption * Connected to pkgs.netbird.io (2a04:3542:1000:910:2465:1fff:fe8a:1d97) port 443 * using HTTP/1.x > GET /install.sh HTTP/1.1 > Host: pkgs.netbird.io > User-Agent: curl/8.14.1 > Accept: */* > * Request completely sent off * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): < HTTP/1.1 302 Moved Temporarily < Server: nginx < Date: Fri, 12 Sep 2025 15:51:16 GMT < Content-Type: text/html < Content-Length: 138 < Connection: keep-alive < Location: https://github.com/netbirdio/netbird/releases/download/v0.57.0/install.sh < <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html> * Connection #0 to host pkgs.netbird.io left intact ```
Author
Owner

@goldeye-xor commented on GitHub (Sep 12, 2025):

Sadly not for me..

IPv6

curl -v -6 https://pkgs.netbird.io/install.sh
* Host pkgs.netbird.io:443 was resolved.
* IPv6: 2a04:3542:1000:910:2465:1fff:fe8a:1d97
* IPv4: (none)
*   Trying [2a04:3542:1000:910:2465:1fff:fe8a:1d97]:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* Recv failure: Connection was reset
* schannel: failed to receive handshake, SSL/TLS connection failed
* closing connection #0
curl: (35) Recv failure: Connection was reset

IPv4

curl -v -4 https://pkgs.netbird.io/install.sh
* Host pkgs.netbird.io:443 was resolved.
* IPv6: (none)
* IPv4: 5.22.212.152
*   Trying 5.22.212.152:443...
* schannel: disabled automatic use of client certificate
* ALPN: curl offers http/1.1
* ALPN: server accepted http/1.1
* Connected to pkgs.netbird.io (5.22.212.152) port 443
* using HTTP/1.x
> GET /install.sh HTTP/1.1
> Host: pkgs.netbird.io
> User-Agent: curl/8.14.1
> Accept: */*
>
* Request completely sent off
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
* schannel: remote party requests renegotiation
* schannel: renegotiating SSL/TLS connection
* schannel: SSL/TLS connection renegotiated
< HTTP/1.1 302 Moved Temporarily
< Server: nginx
< Date: Fri, 12 Sep 2025 16:02:46 GMT
< Content-Type: text/html
< Content-Length: 138
< Connection: keep-alive
< Location: https://github.com/netbirdio/netbird/releases/download/v0.57.0/install.sh
<
<html>
<head><title>302 Found</title></head>
<body>
<center><h1>302 Found</h1></center>
<hr><center>nginx</center>
</body>
</html>
* Connection #0 to host pkgs.netbird.io left intact
@goldeye-xor commented on GitHub (Sep 12, 2025): Sadly not for me.. IPv6 ``` curl -v -6 https://pkgs.netbird.io/install.sh * Host pkgs.netbird.io:443 was resolved. * IPv6: 2a04:3542:1000:910:2465:1fff:fe8a:1d97 * IPv4: (none) * Trying [2a04:3542:1000:910:2465:1fff:fe8a:1d97]:443... * schannel: disabled automatic use of client certificate * ALPN: curl offers http/1.1 * Recv failure: Connection was reset * schannel: failed to receive handshake, SSL/TLS connection failed * closing connection #0 curl: (35) Recv failure: Connection was reset ``` IPv4 ``` curl -v -4 https://pkgs.netbird.io/install.sh * Host pkgs.netbird.io:443 was resolved. * IPv6: (none) * IPv4: 5.22.212.152 * Trying 5.22.212.152:443... * schannel: disabled automatic use of client certificate * ALPN: curl offers http/1.1 * ALPN: server accepted http/1.1 * Connected to pkgs.netbird.io (5.22.212.152) port 443 * using HTTP/1.x > GET /install.sh HTTP/1.1 > Host: pkgs.netbird.io > User-Agent: curl/8.14.1 > Accept: */* > * Request completely sent off * schannel: remote party requests renegotiation * schannel: renegotiating SSL/TLS connection * schannel: SSL/TLS connection renegotiated * schannel: remote party requests renegotiation * schannel: renegotiating SSL/TLS connection * schannel: SSL/TLS connection renegotiated < HTTP/1.1 302 Moved Temporarily < Server: nginx < Date: Fri, 12 Sep 2025 16:02:46 GMT < Content-Type: text/html < Content-Length: 138 < Connection: keep-alive < Location: https://github.com/netbirdio/netbird/releases/download/v0.57.0/install.sh < <html> <head><title>302 Found</title></head> <body> <center><h1>302 Found</h1></center> <hr><center>nginx</center> </body> </html> * Connection #0 to host pkgs.netbird.io left intact ```
Author
Owner

@goldeye-xor commented on GitHub (Sep 23, 2025):

Still have the issue, I have check firewall, traceroute ect, i reach the server in IPv6, but still can't install Netbird from pkgs.netbird.io.

Any news ?

@goldeye-xor commented on GitHub (Sep 23, 2025): Still have the issue, I have check firewall, traceroute ect, i reach the server in IPv6, but still can't install Netbird from pkgs.netbird.io. Any news ?
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2276