Specific IP blocked on Routing Peer Network #2388

Closed
opened 2025-11-20 07:09:02 -05:00 by saavagebueno · 1 comment
Owner

Originally created by @kether888 on GitHub (Oct 17, 2025).

Describe the problem

On a network connected via Routing Peer a single IP is blocked. All other 200+ IPs on the same network work fine. Changing the IP on the problem machine allows it to be connected. Adding problem IP as a Resource has no effect.

To Reproduce

Steps to reproduce the behavior:

  1. Ping -t (problem IP). Works.
  2. Connect Netbird c;lient.
  3. Ping no longer works.

Expected behavior

All IPs on the network behind Routing Peers should be reachable.

Are you using NetBird Cloud?

No. Self-Hosted.

NetBird version

0.59.7

Is any other VPN software installed?

No.

Debug output

To help us resolve the problem, please attach the following anonymized status output

Peers detail:
c443.netbird.selfhosted:
NetBird IP: 100.105.113.181/32
Public key: rBGkx97rRvE6pDUCPotFnh+YAWaAGK8VU51apefnXTE=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

kristis-imac.netbird.selfhosted:
NetBird IP: 100.105.207.223/32
Public key: UuI16qoq8/+aGov+hfCr1iyOVxK9gxSwbyG/XKIbfXQ=
Status: Idle
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

c422.netbird.selfhosted:
NetBird IP: 100.105.15.202
Public key: Fb1Oy9aOqfbbu8ECpqHc3FXR9OtvVQl+Fs8ihh/TfSw=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

3-racine.netbird.selfhosted:
NetBird IP: 100.105.36.52
Public key: EBD0SlLp+ZwUWlFF6BB23foNE0KtatLiJ3g6l1OkNGI=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/prflx
ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/198.51.100.0:55774
Relay server address: rels://netbird.anon-B3Vgf.domain:443
Last connection update: 12 seconds ago
Last WireGuard handshake: 14 seconds ago
Transfer status (received/sent) 124 B/180 B
Quantum resistance: false
Networks: 192.168.2.0/24
Latency: 108.3655ms

shannons-macbook-pro.netbird.selfhosted:
NetBird IP: 100.105.41.43
Public key: /y02zINMfyzI6x30l3vWBP1tx/EjAv3AKXSgmnVj0Gc=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

4-district.netbird.selfhosted:
NetBird IP: 100.105.53.34
Public key: pNQG7xr+J66FwrhXpSniOn+lx3yBgnmG2m2HAMvwXA0=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/prflx
ICE candidate endpoints (Local/Remote): 192.168.222.100:51820/198.51.100.1:40784
Relay server address: rels://netbird.anon-B3Vgf.domain:443
Last connection update: 13 seconds ago
Last WireGuard handshake: 9 seconds ago
Transfer status (received/sent) 180 B/124 B
Quantum resistance: false
Networks: 192.168.2.0/24, 192.168.2.41/32
Latency: 125.4231ms

c397.netbird.selfhosted:
NetBird IP: 100.105.75.178
Public key: Bfs7iWu0mFOeUWKjyN0+fy+wsm7A3NTSCbdF7h1cQlc=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

2-madison.netbird.selfhosted:
NetBird IP: 100.105.88.245
Public key: LZxFfbfDpwnAeBRT1P05K1e/5lznwAMAq/YUL/4SwHw=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): srflx/prflx
ICE candidate endpoints (Local/Remote): 198.51.100.2:25083/198.51.100.3:26426
Relay server address: rels://netbird.anon-B3Vgf.domain:443
Last connection update: 12 seconds ago
Last WireGuard handshake: 14 seconds ago
Transfer status (received/sent) 124 B/180 B
Quantum resistance: false
Networks: 192.168.88.0/24, 192.168.88.10/32
Latency: 36.1663ms

c477.netbird.selfhosted:
NetBird IP: 100.105.96.114
Public key: ZR5NaMZIU9VF650/TQlcPfqn1H4lnmSbVoof3npwMGc=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

c461.netbird.selfhosted:
NetBird IP: 100.105.148.148
Public key: UDj8gpUvg7xjCGh5lXmtMwtb9IOc+YuUXk6hE2pk2Es=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://netbird.anon-B3Vgf.domain:443
Last connection update: 13 seconds ago
Last WireGuard handshake: 14 seconds ago
Transfer status (received/sent) 92 B/180 B
Quantum resistance: false
Networks: -
Latency: 0s

c441.netbird.selfhosted:
NetBird IP: 100.105.176.180
Public key: nX9s0rNpr7+bjIwPHUnwLb8+gW5LCp+yHaDBg1NZYh4=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

c387.netbird.selfhosted:
NetBird IP: 100.105.180.57
Public key: Oy23mwC23Hd22HmEyCW3BlBM0JfjJJrNrionBE7pBH4=
Status: Connecting
-- detail --
Connection type: -
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address:
Last connection update: 14 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

1-milwaukee.netbird.selfhosted:
NetBird IP: 100.105.186.187
Public key: u5wuEL3DWYgSmkjftN6hniWSxWFX8HyGZHXAW7w1bVM=
Status: Connected
-- detail --
Connection type: P2P
ICE candidate (Local/Remote): host/prflx
ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/198.51.100.4:54873
Relay server address: rels://netbird.anon-B3Vgf.domain:443
Last connection update: 13 seconds ago
Last WireGuard handshake: 9 seconds ago
Transfer status (received/sent) 1.1 KiB/604 B
Quantum resistance: false
Networks: 192.168.111.0/24, 192.168.111.1/32, 192.168.111.10/32, 192.168.111.2/32, 192.168.111.3/32, 192.168.111.6/32
Latency: 92.2857ms

Events:
[WARNING] DNS (5ee90ac9-e397-4463-83ac-484b91787253)
Message: All upstream servers failed (probe failed)
Time: 1 hour, 48 minutes ago
Metadata: upstreams: 192.168.111.10:53
[INFO] SYSTEM (3a0dca8d-0b7d-47c9-881f-699a679a730b)
Message: Network map updated
Time: 1 hour, 48 minutes ago
[WARNING] DNS (5298916f-444d-4563-904b-0e046606d10e)
Message: All upstream servers failed (probe failed)
Time: 1 hour, 43 minutes ago
Metadata: upstreams: 192.168.111.10:53
[INFO] SYSTEM (64a665c0-f62f-4ebe-993e-fad8b73b09a2)
Message: Network map updated
Time: 1 hour, 43 minutes ago
[WARNING] DNS (fabc8a8f-541f-4429-b8ac-afd091db02f2)
Message: All upstream servers failed (probe failed)
Time: 1 hour, 32 minutes ago
Metadata: upstreams: 192.168.111.10:53
[INFO] SYSTEM (2cd567c2-a36d-4dab-a7fa-0526790ab42e)
Message: Network map updated
Time: 1 hour, 32 minutes ago
[WARNING] DNS (3b654b0d-eae8-47ef-ac9f-7699583350ab)
Message: All upstream servers failed (probe failed)
Time: 13 minutes, 42 seconds ago
Metadata: upstreams: 192.168.111.10:53
[INFO] SYSTEM (dfc15298-9f07-4491-947b-9f3367afc8db)
Message: Network map updated
Time: 13 minutes, 42 seconds ago
[WARNING] DNS (e1d5bc6a-cfa6-41ee-af8c-5c154e91aacb)
Message: All upstream servers failed (probe failed)
Time: 13 seconds ago
Metadata: upstreams: 192.168.111.10:53
[INFO] SYSTEM (437b5d55-a88c-49d6-9cec-11d0bac465b6)
Message: Network map updated
Time: 13 seconds ago
OS: windows/amd64
Daemon version: 0.59.7
CLI version: 0.59.7
Profile: default
Management: Connected to https://netbird.anon-B3Vgf.domain:443
Signal: Connected to https://netbird.anon-B3Vgf.domain:443
Relays:
[stun:netbird.anon-B3Vgf.domain:3478] is Available
[turn:netbird.anon-B3Vgf.domain:3478?transport=udp] is Available
[rels://netbird.anon-B3Vgf.domain:443] is Available
Nameservers:
[1.1.1.1:53, 1.0.0.1:53] for [.] is Available
[192.168.111.10:53] for [anon-pbk8m.domain] is Available
FQDN: om.netbird.selfhosted
NetBird IP: 100.105.189.251/16
Interface type: Userspace
Quantum resistance: false
Lazy connection: false
Networks: -
Forwarding rules: 0
Peers count: 5/13 Connected

Create and upload a debug bundle, and share the returned file key:

netbird debug for 1m -AS -U

Uploaded files are automatically deleted after 30 days.

Alternatively, create the file only and attach it here manually:

netbird debug for 1m -AS

0ed79ea31d2d772ce6f05ec128798a1bd79d01c9f6ab46a7748f01616beb0495/9e181168-6555-4ce9-b2b8-5580b5782fa2

Screenshots

If applicable, add screenshots to help explain your problem.

Additional context

Problem started around 0.58.0 I think.

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @kether888 on GitHub (Oct 17, 2025). **Describe the problem** On a network connected via Routing Peer a single IP is blocked. All other 200+ IPs on the same network work fine. Changing the IP on the problem machine allows it to be connected. Adding problem IP as a Resource has no effect. **To Reproduce** Steps to reproduce the behavior: 1. Ping -t (problem IP). Works. 2. Connect Netbird c;lient. 3. Ping no longer works. **Expected behavior** All IPs on the network behind Routing Peers should be reachable. **Are you using NetBird Cloud?** No. Self-Hosted. **NetBird version** 0.59.7 **Is any other VPN software installed?** No. **Debug output** To help us resolve the problem, please attach the following anonymized status output Peers detail: c443.netbird.selfhosted: NetBird IP: 100.105.113.181/32 Public key: rBGkx97rRvE6pDUCPotFnh+YAWaAGK8VU51apefnXTE= Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s kristis-imac.netbird.selfhosted: NetBird IP: 100.105.207.223/32 Public key: UuI16qoq8/+aGov+hfCr1iyOVxK9gxSwbyG/XKIbfXQ= Status: Idle -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s c422.netbird.selfhosted: NetBird IP: 100.105.15.202 Public key: Fb1Oy9aOqfbbu8ECpqHc3FXR9OtvVQl+Fs8ihh/TfSw= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s 3-racine.netbird.selfhosted: NetBird IP: 100.105.36.52 Public key: EBD0SlLp+ZwUWlFF6BB23foNE0KtatLiJ3g6l1OkNGI= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/prflx ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/198.51.100.0:55774 Relay server address: rels://netbird.anon-B3Vgf.domain:443 Last connection update: 12 seconds ago Last WireGuard handshake: 14 seconds ago Transfer status (received/sent) 124 B/180 B Quantum resistance: false Networks: 192.168.2.0/24 Latency: 108.3655ms shannons-macbook-pro.netbird.selfhosted: NetBird IP: 100.105.41.43 Public key: /y02zINMfyzI6x30l3vWBP1tx/EjAv3AKXSgmnVj0Gc= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s 4-district.netbird.selfhosted: NetBird IP: 100.105.53.34 Public key: pNQG7xr+J66FwrhXpSniOn+lx3yBgnmG2m2HAMvwXA0= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/prflx ICE candidate endpoints (Local/Remote): 192.168.222.100:51820/198.51.100.1:40784 Relay server address: rels://netbird.anon-B3Vgf.domain:443 Last connection update: 13 seconds ago Last WireGuard handshake: 9 seconds ago Transfer status (received/sent) 180 B/124 B Quantum resistance: false Networks: 192.168.2.0/24, 192.168.2.41/32 Latency: 125.4231ms c397.netbird.selfhosted: NetBird IP: 100.105.75.178 Public key: Bfs7iWu0mFOeUWKjyN0+fy+wsm7A3NTSCbdF7h1cQlc= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s 2-madison.netbird.selfhosted: NetBird IP: 100.105.88.245 Public key: LZxFfbfDpwnAeBRT1P05K1e/5lznwAMAq/YUL/4SwHw= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): srflx/prflx ICE candidate endpoints (Local/Remote): 198.51.100.2:25083/198.51.100.3:26426 Relay server address: rels://netbird.anon-B3Vgf.domain:443 Last connection update: 12 seconds ago Last WireGuard handshake: 14 seconds ago Transfer status (received/sent) 124 B/180 B Quantum resistance: false Networks: 192.168.88.0/24, 192.168.88.10/32 Latency: 36.1663ms c477.netbird.selfhosted: NetBird IP: 100.105.96.114 Public key: ZR5NaMZIU9VF650/TQlcPfqn1H4lnmSbVoof3npwMGc= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s c461.netbird.selfhosted: NetBird IP: 100.105.148.148 Public key: UDj8gpUvg7xjCGh5lXmtMwtb9IOc+YuUXk6hE2pk2Es= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rels://netbird.anon-B3Vgf.domain:443 Last connection update: 13 seconds ago Last WireGuard handshake: 14 seconds ago Transfer status (received/sent) 92 B/180 B Quantum resistance: false Networks: - Latency: 0s c441.netbird.selfhosted: NetBird IP: 100.105.176.180 Public key: nX9s0rNpr7+bjIwPHUnwLb8+gW5LCp+yHaDBg1NZYh4= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s c387.netbird.selfhosted: NetBird IP: 100.105.180.57 Public key: Oy23mwC23Hd22HmEyCW3BlBM0JfjJJrNrionBE7pBH4= Status: Connecting -- detail -- Connection type: - ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 14 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s 1-milwaukee.netbird.selfhosted: NetBird IP: 100.105.186.187 Public key: u5wuEL3DWYgSmkjftN6hniWSxWFX8HyGZHXAW7w1bVM= Status: Connected -- detail -- Connection type: P2P ICE candidate (Local/Remote): host/prflx ICE candidate endpoints (Local/Remote): 127.0.0.1:51820/198.51.100.4:54873 Relay server address: rels://netbird.anon-B3Vgf.domain:443 Last connection update: 13 seconds ago Last WireGuard handshake: 9 seconds ago Transfer status (received/sent) 1.1 KiB/604 B Quantum resistance: false Networks: 192.168.111.0/24, 192.168.111.1/32, 192.168.111.10/32, 192.168.111.2/32, 192.168.111.3/32, 192.168.111.6/32 Latency: 92.2857ms Events: [WARNING] DNS (5ee90ac9-e397-4463-83ac-484b91787253) Message: All upstream servers failed (probe failed) Time: 1 hour, 48 minutes ago Metadata: upstreams: 192.168.111.10:53 [INFO] SYSTEM (3a0dca8d-0b7d-47c9-881f-699a679a730b) Message: Network map updated Time: 1 hour, 48 minutes ago [WARNING] DNS (5298916f-444d-4563-904b-0e046606d10e) Message: All upstream servers failed (probe failed) Time: 1 hour, 43 minutes ago Metadata: upstreams: 192.168.111.10:53 [INFO] SYSTEM (64a665c0-f62f-4ebe-993e-fad8b73b09a2) Message: Network map updated Time: 1 hour, 43 minutes ago [WARNING] DNS (fabc8a8f-541f-4429-b8ac-afd091db02f2) Message: All upstream servers failed (probe failed) Time: 1 hour, 32 minutes ago Metadata: upstreams: 192.168.111.10:53 [INFO] SYSTEM (2cd567c2-a36d-4dab-a7fa-0526790ab42e) Message: Network map updated Time: 1 hour, 32 minutes ago [WARNING] DNS (3b654b0d-eae8-47ef-ac9f-7699583350ab) Message: All upstream servers failed (probe failed) Time: 13 minutes, 42 seconds ago Metadata: upstreams: 192.168.111.10:53 [INFO] SYSTEM (dfc15298-9f07-4491-947b-9f3367afc8db) Message: Network map updated Time: 13 minutes, 42 seconds ago [WARNING] DNS (e1d5bc6a-cfa6-41ee-af8c-5c154e91aacb) Message: All upstream servers failed (probe failed) Time: 13 seconds ago Metadata: upstreams: 192.168.111.10:53 [INFO] SYSTEM (437b5d55-a88c-49d6-9cec-11d0bac465b6) Message: Network map updated Time: 13 seconds ago OS: windows/amd64 Daemon version: 0.59.7 CLI version: 0.59.7 Profile: default Management: Connected to https://netbird.anon-B3Vgf.domain:443 Signal: Connected to https://netbird.anon-B3Vgf.domain:443 Relays: [stun:netbird.anon-B3Vgf.domain:3478] is Available [turn:netbird.anon-B3Vgf.domain:3478?transport=udp] is Available [rels://netbird.anon-B3Vgf.domain:443] is Available Nameservers: [1.1.1.1:53, 1.0.0.1:53] for [.] is Available [192.168.111.10:53] for [anon-pbk8m.domain] is Available FQDN: om.netbird.selfhosted NetBird IP: 100.105.189.251/16 Interface type: Userspace Quantum resistance: false Lazy connection: false Networks: - Forwarding rules: 0 Peers count: 5/13 Connected Create and upload a debug bundle, and share the returned file key: netbird debug for 1m -AS -U *Uploaded files are automatically deleted after 30 days.* Alternatively, create the file only and attach it here manually: netbird debug for 1m -AS 0ed79ea31d2d772ce6f05ec128798a1bd79d01c9f6ab46a7748f01616beb0495/9e181168-6555-4ce9-b2b8-5580b5782fa2 **Screenshots** If applicable, add screenshots to help explain your problem. **Additional context** Problem started around 0.58.0 I think. **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the triage-needed label 2025-11-20 07:09:02 -05:00
Author
Owner

@kether888 commented on GitHub (Oct 29, 2025):

routing peer was a hyper-v vm. moved to a physical machine and is now working as expected.

@kether888 commented on GitHub (Oct 29, 2025): routing peer was a hyper-v vm. moved to a physical machine and is now working as expected.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2388