SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-06-10 17:31:53 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Possible interfearance with WebSocket connectivity over Networks #2345

New Issue
Open
opened 2025-11-20 07:08:18 -05:00 by saavagebueno · 7 comments
saavagebueno commented 2025-11-20 07:08:18 -05:00
Owner
Copy Link

Originally created by @rihards-simanovics on GitHub (Oct 4, 2025).

Problem Description

When connected to Netbird and the traffic to a resource is routed via a network peer, in a Firefox-based browser, the initial WebSocket connection to the resource succeeds, but the subsequent connection fails. Chromium-based browsers appear to be mostly immune to the issue. See the repro screencast below.

Reproduction steps

  1. Set up Netbird with at least one routing Linux server peer,
  2. Create a network and set one of the routed resources to route connection for resource echo.websocket.org
  3. Navigate to https://websocket.tech/ in a Firefox or Zen browser (based on Firefox)
  4. and attempt to make multiple rapid-fire WS connections, i.e. create a connection, disconnect, then immediately reconnect.

Expected behaviour

There is a minimal delay when creating a WebSocket connection, and it MUST always succeed, like it does when the traffic for the peer is not routed via Netbird.

Are you using NetBird Cloud?

No self-hosted.

NetBird version

client 0.59.2
management: 0.59.1

Is any other VPN software installed?

no

Debug output

To help us resolve the problem, please attach the following anonymized status output

  • netbird status -dA

    Peers detail:
gws-rs-thinkpad.node.anon-z3qnX.domain:
  NetBird IP: 100.90.188.102/32
  Public key: ugjEvgHXryAIzwuFlbp6bCdoGWcHtP6ktF0ZpcWxZgs=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: 5 minutes, 38 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-rs-main-laptop.node.anon-z3qnX.domain:
  NetBird IP: 100.90.64.149/32
  Public key: 8Z+hIsjsCCGCuTVf63B1qFqF4O4z/ktbApu7DO4B5wc=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: 5 minutes, 38 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-uk-10.node.anon-z3qnX.domain:
  NetBird IP: 100.90.8.155
  Public key: +LDaxvvF0Jr6ZGtu+go7IimuFB8Du7xQQJlOdkvRrDg=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:dd4a:52ff:ce68:5659:51820/2a00:da00:f441:9400::1:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 12.0 KiB/41.1 KiB
  Quantum resistance: false
  Networks: -
  Latency: 8.884046ms

gws-uk-7.node.anon-z3qnX.domain:
  NetBird IP: 100.90.10.42
  Public key: RG5YVxv/Ms9Vc3ka6pJLGuv5hpF0nwAMLtVY0W/wTT0=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/srflx
  ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:dd4a:52ff:ce68:5659:51820/2a00:da00:f208:fb00::1:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 12.0 KiB/41.1 KiB
  Quantum resistance: false
  Networks: -
  Latency: 5.411669ms

gws-uk-3.node.anon-z3qnX.domain:
  NetBird IP: 100.90.23.245
  Public key: 4iwyk6YcQTT7wyXa+eopZeUMuZ2Vy5PjwyQCPzYxTFw=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-rs-thinkpad-old.node.anon-z3qnX.domain:
  NetBird IP: 100.90.29.243
  Public key: 9n0CTcfhcGUPXGgzjse6wBkaVVFQIX6VG28wGEnt0wY=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: 4 hours, 27 minutes ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-uk-1.node.anon-z3qnX.domain:
  NetBird IP: 100.90.79.155
  Public key: nWGpb71OFJxeax+nIu3t1FVJ+/1Cjoew4HUtX8YXx0Q=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 5 minutes, 10 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 16.3 KiB/28.2 KiB
  Quantum resistance: false
  Networks: -
  Latency: 5.481943ms

gws-uk-9.node.anon-z3qnX.domain:
  NetBird IP: 100.90.96.37
  Public key: e6Bb+u7NhDUx5UYjvmMmbFBK+0MimoQhLOtQCq554kE=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.0:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 36 seconds ago
  Transfer status (received/sent) 13.9 MiB/4.5 MiB
  Quantum resistance: false
  Networks: 198.51.100.1/32, 198.51.100.2/32, 198.51.100.3/32, 198.51.100.4/32, 198.51.100.5/32, 198.51.100.6/32, accounts.anon-joBXc.domain, anon-joBXc.domain, books.anon-joBXc.domain, clouddrive.anon-GmeI0.domain, clouddrive.simanovics.anon-uZmNu.domain, gws-uk-1.gwssecureserver.anon-uZmNu.domain, legacy-wiki.anon-GmeI0.domain, panel.gws-uk-2.gwssecureserver.anon-uZmNu.domain, passbolt.anon-z3qnX.domain
  Latency: 10.013136ms

gws-uk-2.node.anon-z3qnX.domain:
  NetBird IP: 100.90.116.141
  Public key: PJVvxEUfqcMBuEGvpHK2aVJTwkIpP7I7PfiAPNrMLhg=
  Status: Idle
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: -
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-de-idc-ber-1-2.node.anon-z3qnX.domain:
  NetBird IP: 100.90.171.117
  Public key: ZuCv9hTrZijrVSdOBxauLgaMey6EFeH9dj6U9lcj4C0=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 4 hours, 27 minutes ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 16.4 KiB/28.0 KiB
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-de-3.node.anon-z3qnX.domain:
  NetBird IP: 100.90.172.76
  Public key: X7URTnylPnGAhBDXrJeciw2XCCK85plSQU6l+vaJckA=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): srflx/host
  ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:270a:f241:88e7:dd68:51820/2a02:2479:52:de00::1:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 2 minutes ago
  Transfer status (received/sent) 16.2 KiB/28.2 KiB
  Quantum resistance: false
  Networks: -
  Latency: 22.072952ms

gws-de-2.node.anon-z3qnX.domain:
  NetBird IP: 100.90.191.31
  Public key: UYJCPczGZSj+woqU2MueExrFGQDtWn+c8aELBa96mmk=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.7:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 24 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 12.4 KiB/40.5 KiB
  Quantum resistance: false
  Networks: -
  Latency: 23.160393ms

gws-uk-3-old.node.anon-z3qnX.domain:
  NetBird IP: 100.90.214.145
  Public key: 7/LsUji8g3blcofWbe1PDTmx99G3Xp7tJ1qvKoNDKnk=
  Status: Connecting
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: 
  Last connection update: 4 hours, 27 minutes ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-uk-idc-lon-1-2.node.anon-z3qnX.domain:
  NetBird IP: 100.90.229.197
  Public key: 5h1N2x3r2lMecIQU5ts5kTwlVC3UbHWq+KKs37T7FWc=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 4 hours, 27 minutes ago
  Last WireGuard handshake: 20 seconds ago
  Transfer status (received/sent) 23.7 KiB/25.1 KiB
  Quantum resistance: false
  Networks: -
  Latency: 0s

gws-uk-4.node.anon-z3qnX.domain:
  NetBird IP: 100.90.230.4
  Public key: SfDwyhW+yKPSAmd6p3qa4pX9MPTFCmzDdysuHj8q0Uc=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 172.16.108.1:51820/192.168.1.11:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 1 second ago
  Transfer status (received/sent) 61.4 KiB/76.8 KiB
  Quantum resistance: false
  Networks: -
  Latency: 7.290837ms

gws-uk-8.node.anon-z3qnX.domain:
  NetBird IP: 100.90.245.18
  Public key: 2O4UhKfNLzCQVR9LEcrnNFbkLbK6ZFJRl4N10tTwaT0=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 192.168.122.1:51820/192.168.1.60:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 24 seconds ago
  Last WireGuard handshake: 2 minutes ago
  Transfer status (received/sent) 12.0 KiB/41.1 KiB
  Quantum resistance: false
  Networks: -
  Latency: 6.414041ms

gws-uk-5.node.anon-z3qnX.domain:
  NetBird IP: 100.90.249.209
  Public key: nai1ozv5rUegJz4ZHkVVuAiuehU0zZPyPfWbgFr+i3o=
  Status: Connected
  -- detail --
  Connection type: P2P
  ICE candidate (Local/Remote): host/prflx
  ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:270a:f241:88e7:dd68:51820/2a01:239:2be:bc00::1:51820
  Relay server address: rels://vpn-sub.domain:443
  Last connection update: 25 minutes, 25 seconds ago
  Last WireGuard handshake: 2 minutes, 1 seconds ago
  Transfer status (received/sent) 12.8 KiB/40.1 KiB
  Quantum resistance: false
  Networks: -
  Latency: 21.511861ms

Events:
  [INFO] SYSTEM (a0140ca4-20aa-4caa-a458-c7267e77ab67)
    Message: Network map updated
    Time: 4 hours, 27 minutes ago
  [INFO] SYSTEM (bdec81f9-18ec-4682-a881-c22494051b41)
    Message: Network map updated
    Time: 25 minutes, 26 seconds ago
  [INFO] SYSTEM (c88da58a-efd5-485d-98dd-1bdb667c6864)
    Message: Network map updated
    Time: 17 minutes, 21 seconds ago
  [INFO] SYSTEM (07483161-db63-42ec-b5b1-d91346abbfbb)
    Message: Network map updated
    Time: 16 minutes, 41 seconds ago
  [INFO] SYSTEM (6ac4f6e7-4c61-44a7-b423-92e8cad2229a)
    Message: Network map updated
    Time: 14 minutes, 56 seconds ago
  [INFO] SYSTEM (1336f980-212b-494a-bc5d-068a0caa849b)
    Message: Network map updated
    Time: 14 minutes, 44 seconds ago
  [INFO] SYSTEM (fd827e1c-4b6a-4853-8c4d-c9ecbb600992)
    Message: Network deselection changed
    Time: 14 minutes, 6 seconds ago
    Metadata: all: false, append: false, networks: test
  [INFO] SYSTEM (a75a29ec-fb08-4193-8bba-c3dfde4e32fe)
    Message: Network selection changed
    Time: 13 minutes, 47 seconds ago
    Metadata: all: false, append: true, networks: test
  [INFO] SYSTEM (7687030f-113e-4678-9a13-2efa62a56677)
    Message: Network map updated
    Time: 5 minutes, 44 seconds ago
  [INFO] SYSTEM (7b0374b4-ba49-447b-8adf-8bd48895bd65)
    Message: Network map updated
    Time: 5 minutes, 38 seconds ago
OS: linux/amd64
Daemon version: 0.59.2
CLI version: 0.59.2
Profile: default
Management: Connected to https://vpn-sub.domain:443
Signal: Connected to https://vpn-sub.domain:443
Relays: 
  [stun:vpn-sub.domain:3478] is Available
  [turn:vpn-sub.domain:3478?transport=udp] is Available
  [rels://vpn-sub.domain:443] is Available
Nameservers: 
  [1.1.1.1:53, 1.0.0.1:53] for [.] is Available
FQDN: gws-rs-main-pc-ubuntu.node.anon-z3qnX.domain
NetBird IP: 100.90.221.151/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: true
Networks: -
Forwarding rules: 0
Peers count: 11/17 Connected

  • netbird debug for 5m -AS -U

    netbird debug for 5m -AS -U
netbird down
netbird up
Remaining time: 00:00:01
Duration completed
Creating debug bundle...
Local file:
/tmp/netbird.debug.1026394004.zip
Upload file key:
1e5dd572063456742c2bbbb639168c648c9ec962611ab4813ce6a17888006869/35abc73f-c330-4c52-a81d-db27fe08d4eb

  • netbird debug for 1m -AS

    n/a

Screenshots

https://github.com/user-attachments/assets/187bd4f4-a1ed-483f-8072-745a0af7fa30

Image

Additional context

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @rihards-simanovics on GitHub (Oct 4, 2025). # Problem Description When connected to Netbird and the traffic to a resource is routed via a network peer, in a Firefox-based browser, the initial WebSocket connection to the resource succeeds, but the subsequent connection fails. Chromium-based browsers appear to be mostly immune to the issue. See the repro screencast below. # Reproduction steps 1. Set up Netbird with at least one routing Linux server peer, 2. Create a network and set one of the routed resources to route connection for resource `echo.websocket.org` 3. Navigate to `https://websocket.tech/` in a Firefox or Zen browser (based on Firefox) 4. and attempt to make multiple rapid-fire WS connections, i.e. create a connection, disconnect, then immediately reconnect. # Expected behaviour There is a minimal delay when creating a WebSocket connection, and it MUST always succeed, like it does when the traffic for the peer is not routed via Netbird. # Are you using NetBird Cloud? No self-hosted. # NetBird version client 0.59.2 management: 0.59.1 # Is any other VPN software installed? no # Debug output To help us resolve the problem, please attach the following anonymized status output - netbird status -dA ```log Peers detail: gws-rs-thinkpad.node.anon-z3qnX.domain: NetBird IP: 100.90.188.102/32 Public key: ugjEvgHXryAIzwuFlbp6bCdoGWcHtP6ktF0ZpcWxZgs= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 5 minutes, 38 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-rs-main-laptop.node.anon-z3qnX.domain: NetBird IP: 100.90.64.149/32 Public key: 8Z+hIsjsCCGCuTVf63B1qFqF4O4z/ktbApu7DO4B5wc= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 5 minutes, 38 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-uk-10.node.anon-z3qnX.domain: NetBird IP: 100.90.8.155 Public key: +LDaxvvF0Jr6ZGtu+go7IimuFB8Du7xQQJlOdkvRrDg= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:dd4a:52ff:ce68:5659:51820/2a00:da00:f441:9400::1:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 12.0 KiB/41.1 KiB Quantum resistance: false Networks: - Latency: 8.884046ms gws-uk-7.node.anon-z3qnX.domain: NetBird IP: 100.90.10.42 Public key: RG5YVxv/Ms9Vc3ka6pJLGuv5hpF0nwAMLtVY0W/wTT0= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/srflx ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:dd4a:52ff:ce68:5659:51820/2a00:da00:f208:fb00::1:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 12.0 KiB/41.1 KiB Quantum resistance: false Networks: - Latency: 5.411669ms gws-uk-3.node.anon-z3qnX.domain: NetBird IP: 100.90.23.245 Public key: 4iwyk6YcQTT7wyXa+eopZeUMuZ2Vy5PjwyQCPzYxTFw= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-rs-thinkpad-old.node.anon-z3qnX.domain: NetBird IP: 100.90.29.243 Public key: 9n0CTcfhcGUPXGgzjse6wBkaVVFQIX6VG28wGEnt0wY= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 4 hours, 27 minutes ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-uk-1.node.anon-z3qnX.domain: NetBird IP: 100.90.79.155 Public key: nWGpb71OFJxeax+nIu3t1FVJ+/1Cjoew4HUtX8YXx0Q= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://vpn-sub.domain:443 Last connection update: 5 minutes, 10 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 16.3 KiB/28.2 KiB Quantum resistance: false Networks: - Latency: 5.481943ms gws-uk-9.node.anon-z3qnX.domain: NetBird IP: 100.90.96.37 Public key: e6Bb+u7NhDUx5UYjvmMmbFBK+0MimoQhLOtQCq554kE= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.0:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 36 seconds ago Transfer status (received/sent) 13.9 MiB/4.5 MiB Quantum resistance: false Networks: 198.51.100.1/32, 198.51.100.2/32, 198.51.100.3/32, 198.51.100.4/32, 198.51.100.5/32, 198.51.100.6/32, accounts.anon-joBXc.domain, anon-joBXc.domain, books.anon-joBXc.domain, clouddrive.anon-GmeI0.domain, clouddrive.simanovics.anon-uZmNu.domain, gws-uk-1.gwssecureserver.anon-uZmNu.domain, legacy-wiki.anon-GmeI0.domain, panel.gws-uk-2.gwssecureserver.anon-uZmNu.domain, passbolt.anon-z3qnX.domain Latency: 10.013136ms gws-uk-2.node.anon-z3qnX.domain: NetBird IP: 100.90.116.141 Public key: PJVvxEUfqcMBuEGvpHK2aVJTwkIpP7I7PfiAPNrMLhg= Status: Idle -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: - Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-de-idc-ber-1-2.node.anon-z3qnX.domain: NetBird IP: 100.90.171.117 Public key: ZuCv9hTrZijrVSdOBxauLgaMey6EFeH9dj6U9lcj4C0= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://vpn-sub.domain:443 Last connection update: 4 hours, 27 minutes ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 16.4 KiB/28.0 KiB Quantum resistance: false Networks: - Latency: 0s gws-de-3.node.anon-z3qnX.domain: NetBird IP: 100.90.172.76 Public key: X7URTnylPnGAhBDXrJeciw2XCCK85plSQU6l+vaJckA= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/host ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:270a:f241:88e7:dd68:51820/2a02:2479:52:de00::1:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 2 minutes ago Transfer status (received/sent) 16.2 KiB/28.2 KiB Quantum resistance: false Networks: - Latency: 22.072952ms gws-de-2.node.anon-z3qnX.domain: NetBird IP: 100.90.191.31 Public key: UYJCPczGZSj+woqU2MueExrFGQDtWn+c8aELBa96mmk= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 192.168.1.10:51820/198.51.100.7:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 24 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 12.4 KiB/40.5 KiB Quantum resistance: false Networks: - Latency: 23.160393ms gws-uk-3-old.node.anon-z3qnX.domain: NetBird IP: 100.90.214.145 Public key: 7/LsUji8g3blcofWbe1PDTmx99G3Xp7tJ1qvKoNDKnk= Status: Connecting -- detail -- Connection type: P2P ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 4 hours, 27 minutes ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s gws-uk-idc-lon-1-2.node.anon-z3qnX.domain: NetBird IP: 100.90.229.197 Public key: 5h1N2x3r2lMecIQU5ts5kTwlVC3UbHWq+KKs37T7FWc= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://vpn-sub.domain:443 Last connection update: 4 hours, 27 minutes ago Last WireGuard handshake: 20 seconds ago Transfer status (received/sent) 23.7 KiB/25.1 KiB Quantum resistance: false Networks: - Latency: 0s gws-uk-4.node.anon-z3qnX.domain: NetBird IP: 100.90.230.4 Public key: SfDwyhW+yKPSAmd6p3qa4pX9MPTFCmzDdysuHj8q0Uc= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 172.16.108.1:51820/192.168.1.11:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 1 second ago Transfer status (received/sent) 61.4 KiB/76.8 KiB Quantum resistance: false Networks: - Latency: 7.290837ms gws-uk-8.node.anon-z3qnX.domain: NetBird IP: 100.90.245.18 Public key: 2O4UhKfNLzCQVR9LEcrnNFbkLbK6ZFJRl4N10tTwaT0= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 192.168.122.1:51820/192.168.1.60:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 24 seconds ago Last WireGuard handshake: 2 minutes ago Transfer status (received/sent) 12.0 KiB/41.1 KiB Quantum resistance: false Networks: - Latency: 6.414041ms gws-uk-5.node.anon-z3qnX.domain: NetBird IP: 100.90.249.209 Public key: nai1ozv5rUegJz4ZHkVVuAiuehU0zZPyPfWbgFr+i3o= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/prflx ICE candidate endpoints (Local/Remote): 2a02:6b6f:e8fd:cd00:270a:f241:88e7:dd68:51820/2a01:239:2be:bc00::1:51820 Relay server address: rels://vpn-sub.domain:443 Last connection update: 25 minutes, 25 seconds ago Last WireGuard handshake: 2 minutes, 1 seconds ago Transfer status (received/sent) 12.8 KiB/40.1 KiB Quantum resistance: false Networks: - Latency: 21.511861ms Events: [INFO] SYSTEM (a0140ca4-20aa-4caa-a458-c7267e77ab67) Message: Network map updated Time: 4 hours, 27 minutes ago [INFO] SYSTEM (bdec81f9-18ec-4682-a881-c22494051b41) Message: Network map updated Time: 25 minutes, 26 seconds ago [INFO] SYSTEM (c88da58a-efd5-485d-98dd-1bdb667c6864) Message: Network map updated Time: 17 minutes, 21 seconds ago [INFO] SYSTEM (07483161-db63-42ec-b5b1-d91346abbfbb) Message: Network map updated Time: 16 minutes, 41 seconds ago [INFO] SYSTEM (6ac4f6e7-4c61-44a7-b423-92e8cad2229a) Message: Network map updated Time: 14 minutes, 56 seconds ago [INFO] SYSTEM (1336f980-212b-494a-bc5d-068a0caa849b) Message: Network map updated Time: 14 minutes, 44 seconds ago [INFO] SYSTEM (fd827e1c-4b6a-4853-8c4d-c9ecbb600992) Message: Network deselection changed Time: 14 minutes, 6 seconds ago Metadata: all: false, append: false, networks: test [INFO] SYSTEM (a75a29ec-fb08-4193-8bba-c3dfde4e32fe) Message: Network selection changed Time: 13 minutes, 47 seconds ago Metadata: all: false, append: true, networks: test [INFO] SYSTEM (7687030f-113e-4678-9a13-2efa62a56677) Message: Network map updated Time: 5 minutes, 44 seconds ago [INFO] SYSTEM (7b0374b4-ba49-447b-8adf-8bd48895bd65) Message: Network map updated Time: 5 minutes, 38 seconds ago OS: linux/amd64 Daemon version: 0.59.2 CLI version: 0.59.2 Profile: default Management: Connected to https://vpn-sub.domain:443 Signal: Connected to https://vpn-sub.domain:443 Relays: [stun:vpn-sub.domain:3478] is Available [turn:vpn-sub.domain:3478?transport=udp] is Available [rels://vpn-sub.domain:443] is Available Nameservers: [1.1.1.1:53, 1.0.0.1:53] for [.] is Available FQDN: gws-rs-main-pc-ubuntu.node.anon-z3qnX.domain NetBird IP: 100.90.221.151/16 Interface type: Kernel Quantum resistance: false Lazy connection: true Networks: - Forwarding rules: 0 Peers count: 11/17 Connected ``` - netbird debug for 5m -AS -U ```log netbird debug for 5m -AS -U netbird down netbird up Remaining time: 00:00:01 Duration completed Creating debug bundle... Local file: /tmp/netbird.debug.1026394004.zip Upload file key: 1e5dd572063456742c2bbbb639168c648c9ec962611ab4813ce6a17888006869/35abc73f-c330-4c52-a81d-db27fe08d4eb ``` - netbird debug for 1m -AS ``` n/a ``` # Screenshots https://github.com/user-attachments/assets/187bd4f4-a1ed-483f-8072-745a0af7fa30 <img width="2151" height="1965" alt="Image" src="https://github.com/user-attachments/assets/4a9b2d2a-e366-449b-94ee-7afbbd2cd88f" /> # Additional context **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:08:18 -05:00
saavagebueno commented 2025-11-20 07:08:19 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 4, 2025):

Funny enough, the second connection in the screenshot, from top down, did succeed eventually™, never mind that it took a good four minutes or so, by which point the web application considered the connection to have timed out.

I mostly see this in Plesk, where they create multiple WebSocket connections, which causes issues in real-time data fetching.

@rihards-simanovics commented on GitHub (Oct 4, 2025): Funny enough, the second connection in the screenshot, from top down, did succeed eventually™, never mind that it took a good four minutes or so, by which point the web application considered the connection to have timed out. I mostly see this in Plesk, where they create multiple WebSocket connections, which causes issues in real-time data fetching.
saavagebueno commented 2025-11-20 07:08:19 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 6, 2025):

I've upgraded the NetBird network routing peer to 0.59.2 over 0.58.2

Preparing to unpack .../netbird_0.59.2_amd64.deb ...
Unpacking netbird (0.59.2) over (0.58.2) ...
Setting up netbird (0.59.2) ...
Image

and also upgraded the management peer to 0.59.2

Image

Client is the same 0.59.2

Issue persists.

https://github.com/user-attachments/assets/baab5e62-eda9-4acd-b588-bc43c39d96c6

Examining the dev tools timings, the requests are being blocked for 2 minutes by something.

I could replicate the issue both on Ubuntu 25.04 Linux and an Android 15 phone.

@rihards-simanovics commented on GitHub (Oct 6, 2025): I've upgraded the NetBird network routing peer to `0.59.2` over `0.58.2` ```log Preparing to unpack .../netbird_0.59.2_amd64.deb ... Unpacking netbird (0.59.2) over (0.58.2) ... Setting up netbird (0.59.2) ... ``` <img width="585" height="71" alt="Image" src="https://github.com/user-attachments/assets/30b20057-4d89-46df-8518-e3f9072b0f81" /> and also upgraded the management peer to `0.59.2` <img width="793" height="71" alt="Image" src="https://github.com/user-attachments/assets/9c335b39-d4d5-42a9-9d5a-f45ccbae740c" /> Client is the same 0.59.2 Issue persists. https://github.com/user-attachments/assets/baab5e62-eda9-4acd-b588-bc43c39d96c6 Examining the dev tools timings, the requests are being blocked for 2 minutes by something. I could replicate the issue both on Ubuntu 25.04 Linux and an Android 15 phone.
saavagebueno commented 2025-11-20 07:08:19 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 12, 2025):

@mlsmaycon sorry to ping you but it's been a week and I wanted to know if you have any idea why the above could be caused?

@rihards-simanovics commented on GitHub (Oct 12, 2025): @mlsmaycon sorry to ping you but it's been a week and I wanted to know if you have any idea why the above could be caused?
saavagebueno commented 2025-11-20 07:08:19 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 18, 2025):

Hey @mlsmaycon, once again, sorry for the ping.

Could you please let me know when this will be looked at? I appreciate that you have a ton of other tickets, but it has been 2 weeks since the report, and I haven't heard a word.

Could you at least let me know if the error is in my setup or if the issue is with Firefox, so I could file a bug with them?

@rihards-simanovics commented on GitHub (Oct 18, 2025): Hey @mlsmaycon, once again, sorry for the ping. Could you please let me know when this will be looked at? I appreciate that you have a ton of other tickets, but it has been 2 weeks since the report, and I haven't heard a word. Could you at least let me know if the error is in my setup or if the issue is with Firefox, so I could file a bug with them?
saavagebueno commented 2025-11-20 07:08:20 -05:00
Author
Owner
Copy Link

@pappz commented on GitHub (Oct 18, 2025):

Hello @rihards-simanovics,
Sorry to hear about your issue. I tried to reproduce it on my development system but wasn’t successful. I installed both Firefox and Zen Browser, and set up a similar resource for the echo.websocket.org address. My operating system is Linux, and NetBird is running version v0.59.2 in kernel mode with eBPF support, just like on your system.

Is it possible that I missed an important condition?
Could you also contact the NetBird team on Slack for further assistance? You can join their workspace here: https://docs.netbird.io/slack-url

@pappz commented on GitHub (Oct 18, 2025): Hello @rihards-simanovics, Sorry to hear about your issue. I tried to reproduce it on my development system but wasn’t successful. I installed both Firefox and Zen Browser, and set up a similar resource for the echo.websocket.org address. My operating system is Linux, and NetBird is running version v0.59.2 in kernel mode with eBPF support, just like on your system. Is it possible that I missed an important condition? Could you also contact the NetBird team on Slack for further assistance? You can join their workspace here: https://docs.netbird.io/slack-url
saavagebueno commented 2025-11-20 07:08:20 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 18, 2025):

Hello @rihards-simanovics, Sorry to hear about your issue. I tried to reproduce it on my development system but wasn’t successful. I installed both Firefox and Zen Browser, and set up a similar resource for the echo.websocket.org address. My operating system is Linux, and NetBird is running version v0.59.2 in kernel mode with eBPF support, just like on your system.

Is it possible that I missed an important condition? Could you also contact the NetBird team on Slack for further assistance? You can join their workspace here: https://docs.netbird.io/slack-url

Hi @pappz, thanks for looking into it! It might be worth looking at the Netbird debug bundle I've uploaded when I did the testing, as looking at your setup, it does look similar to mine. The log key is: 1e5dd572063456742c2bbbb639168c648c9ec962611ab4813ce6a17888006869/35abc73f-c330-4c52-a81d-db27fe08d4eb. Let me know if you can view it, and if not, I will re-upload. But the issue with Firefox is with blocking, as after it's done whatever it did, the actual connection happens quickly and is working fine. I will try to reproduce this issue on my PC, but using another OS, I have POP OS 24.04 installed and also MacOS for good measure, just to rule out OS OS-specific issue.

Also, the odd thing is that it's only with Firefox-based browsers. Chrome seems to be unaffected, at least at first sight.

I'll update you tomorrow as it's quite late in the UK now.

@rihards-simanovics commented on GitHub (Oct 18, 2025): > Hello [@rihards-simanovics](https://github.com/rihards-simanovics), Sorry to hear about your issue. I tried to reproduce it on my development system but wasn’t successful. I installed both Firefox and Zen Browser, and set up a similar resource for the echo.websocket.org address. My operating system is Linux, and NetBird is running version v0.59.2 in kernel mode with eBPF support, just like on your system. > > Is it possible that I missed an important condition? Could you also contact the NetBird team on Slack for further assistance? You can join their workspace here: https://docs.netbird.io/slack-url Hi @pappz, thanks for looking into it! It might be worth looking at the Netbird debug bundle I've uploaded when I did the testing, as looking at your setup, it does look similar to mine. The log key is: `1e5dd572063456742c2bbbb639168c648c9ec962611ab4813ce6a17888006869/35abc73f-c330-4c52-a81d-db27fe08d4eb`. Let me know if you can view it, and if not, I will re-upload. But the issue with Firefox is with blocking, as after it's done whatever it did, the actual connection happens quickly and is working fine. I will try to reproduce this issue on my PC, but using another OS, I have POP OS 24.04 installed and also MacOS for good measure, just to rule out OS OS-specific issue. Also, the odd thing is that it's only with Firefox-based browsers. Chrome seems to be unaffected, at least at first sight. I'll update you tomorrow as it's quite late in the UK now.
saavagebueno commented 2025-11-20 07:08:20 -05:00
Author
Owner
Copy Link

@rihards-simanovics commented on GitHub (Oct 18, 2025):

Hey @pappz, I've got some new info: I can't reproduce this issue on MacOS or a Windows 11 VM running on the same Host as Ubuntu 25.04. Interestingly, I was able to reproduce the issue on Pop OS 24.04 Beta, which is based on Ubuntu. This suggests that the problem is specific to Ubuntu and is confined to the client, rather than affecting Management or the Exit Nodes.

Can you use the live install environment of Ubuntu 25.04? I'm beginning to think that this has something to do with that Distribution.

As for Android, tbf I never had any luck running networks on it, for some reason networks simply don't work on Android 15 properly unless you relay all traffic 0.0.0.0 through an exit node.

@rihards-simanovics commented on GitHub (Oct 18, 2025): Hey @pappz, I've got some new info: I can't reproduce this issue on MacOS or a Windows 11 VM running on the same Host as Ubuntu 25.04. Interestingly, I was able to reproduce the issue on Pop OS 24.04 Beta, which is based on Ubuntu. This suggests that the problem is specific to Ubuntu and is confined to the client, rather than affecting Management or the Exit Nodes. Can you use the live install environment of Ubuntu 25.04? I'm beginning to think that this has something to do with that Distribution. As for Android, tbf I never had any luck running networks on it, for some reason networks simply don't work on Android 15 properly unless you relay all traffic 0.0.0.0 through an exit node.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label triage-needed
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2345
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?