SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-11 18:51:53 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Connection Issues when attempting to netbird up using a fresh install via the convenience install script #474

New Issue
Closed
opened 2025-11-20 05:12:01 -05:00 by saavagebueno · 11 comments
saavagebueno commented 2025-11-20 05:12:01 -05:00
Owner
Copy Link

Originally created by @Vaneixus on GitHub (Oct 12, 2023).

Describe the problem
Fresh install of netbird on a public VPS. Web Interface is accessible via the client. Able to connect to the SaaS Netbird but not the selfhosted option. I have tested this on two different clients. none of them can connect to the self-hosted instance.

To Reproduce
Steps to reproduce the behavior:
On VPS:

  1. Run 'export NETBIRD_DOMAIN=netbird.example.com; curl -fsSL https://github.com/netbirdio/netbird/releases/latest/download/getting-started-with-zitadel.sh | bash' with the appropriate A record address.
    On Client:
  2. Run 'curl -fsSL https://pkgs.netbird.io/install.sh | sh'
  3. Then run 'netbird up --management-url https://netbird.example.com:443' with the appropriate address.
  4. get Error: unable to get daemon status: rpc error: code = FailedPrecondition desc = failed while getting Management Service public key: rpc error: code = PermissionDenied desc = unexpected HTTP status code received from server: 403 (Forbidden); malformed header: missing HTTP content-type

Expected behavior
A client able to connect to connect

NetBird status -d output:
Error: status failed: failed while getting Management Service public key: rpc error: code = PermissionDenied desc = unexpected HTTP status code received from server: 403 (Forbidden); malformed header: missing HTTP content-type

Additional context
I have attempted apt remove, removing the conf file in /etc then reinstalling the packages, I have attempted to revert versions to v0.23.0, I have also attempted to restart the service, uninstall and reinstall it, etc.

Originally created by @Vaneixus on GitHub (Oct 12, 2023). **Describe the problem** Fresh install of netbird on a public VPS. Web Interface is accessible via the client. Able to connect to the SaaS Netbird but not the selfhosted option. I have tested this on two different clients. none of them can connect to the self-hosted instance. **To Reproduce** Steps to reproduce the behavior: On VPS: 1. Run 'export NETBIRD_DOMAIN=netbird.example.com; curl -fsSL https://github.com/netbirdio/netbird/releases/latest/download/getting-started-with-zitadel.sh | bash' with the appropriate A record address. On Client: 1. Run 'curl -fsSL https://pkgs.netbird.io/install.sh | sh' 2. Then run 'netbird up --management-url https://netbird.example.com:443' with the appropriate address. 3. get `Error: unable to get daemon status: rpc error: code = FailedPrecondition desc = failed while getting Management Service public key: rpc error: code = PermissionDenied desc = unexpected HTTP status code received from server: 403 (Forbidden); malformed header: missing HTTP content-type` **Expected behavior** A client able to connect to connect **NetBird status -d output:** `Error: status failed: failed while getting Management Service public key: rpc error: code = PermissionDenied desc = unexpected HTTP status code received from server: 403 (Forbidden); malformed header: missing HTTP content-type` **Additional context** I have attempted apt remove, removing the conf file in /etc then reinstalling the packages, I have attempted to revert versions to v0.23.0, I have also attempted to restart the service, uninstall and reinstall it, etc.
saavagebueno commented 2025-11-20 05:12:02 -05:00
Author
Owner
Copy Link

@mlsmaycon commented on GitHub (Oct 13, 2023):

Hello @Vaneixus , can you share the logs from all docker containers in the VPS?

docker compose logs > /tmp/netbird.logs 2>&1 should be enough to generate it.

@mlsmaycon commented on GitHub (Oct 13, 2023): Hello @Vaneixus , can you share the logs from all docker containers in the VPS? `docker compose logs > /tmp/netbird.logs 2>&1` should be enough to generate it.
saavagebueno commented 2025-11-20 05:12:02 -05:00
Author
Owner
Copy Link

@Vaneixus commented on GitHub (Oct 13, 2023):

netbird.log
Hello @mlsmaycon, I couldn't get the logs from the start due to it being erased by Docker's log management. so I had shutdown everything, restarted then attempted to netbird up one of the clients I have. All of that should hopefully be recorded in the logs file.

@Vaneixus commented on GitHub (Oct 13, 2023): [netbird.log](https://github.com/netbirdio/netbird/files/12892857/netbird.log) Hello @mlsmaycon, I couldn't get the logs from the start due to it being erased by Docker's log management. so I had shutdown everything, restarted then attempted to netbird up one of the clients I have. All of that should hopefully be recorded in the logs file.
saavagebueno commented 2025-11-20 05:12:02 -05:00
Author
Owner
Copy Link

@Vaneixus commented on GitHub (Oct 14, 2023):

I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443

I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change.

@Vaneixus commented on GitHub (Oct 14, 2023): I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443 I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change.
saavagebueno commented 2025-11-20 05:12:02 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Oct 14, 2023):

I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443

I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change.

What VPS provider are you using?
Would still be great to see the container logs that @mlsmaycon asked about.

@braginini commented on GitHub (Oct 14, 2023): > I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443 > > I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change. What VPS provider are you using? Would still be great to see the container logs that @mlsmaycon asked about.
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@Vaneixus commented on GitHub (Oct 14, 2023):

I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443
I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change.

What VPS provider are you using? Would still be great to see the container logs that @mlsmaycon asked about.

Hello, I am using a KVM VPS provided by Webdock.io. I am including the netbird.log from the new Debian 12 server.
netbird.log

@Vaneixus commented on GitHub (Oct 14, 2023): > > I have attempted to use the android client to connect to the server, but I am getting an invalid server address: netbird.example.com:443 > > I have also tried to change the server distro from Ubuntu Server 22.04 to Debian 12, no change. > > What VPS provider are you using? Would still be great to see the container logs that @mlsmaycon asked about. Hello, I am using a KVM VPS provided by Webdock.io. I am including the netbird.log from the new Debian 12 server. [netbird.log](https://github.com/netbirdio/netbird/files/12907982/netbird.log)
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Oct 15, 2023):

Hey @Vaneixus
You are running behind Cloudflare that proxies all the traffic. And by default gRPC isn't allowed. This means that the control channel between the NetBird agent and the NetBird Management service can't be cretaed (your agents are getting 403).

You could enable DNS only feature in Cloudfalre for your domain. Go to your domain -> record -> Proxy status

cloudfalre

@braginini commented on GitHub (Oct 15, 2023): Hey @Vaneixus You are running behind Cloudflare that proxies all the traffic. And by default gRPC isn't allowed. This means that the control channel between the NetBird agent and the NetBird Management service can't be cretaed (your agents are getting 403). You could enable DNS only feature in Cloudfalre for your domain. Go to `your domain -> record -> Proxy status` ![cloudfalre](https://github.com/netbirdio/netbird/assets/700848/fa2a8308-824b-4ed0-aa77-5fce9364674b)
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@Vaneixus commented on GitHub (Oct 15, 2023):

Hey @Vaneixus
You are running behind Cloudflare that proxies all the traffic. And by default gRPC isn't allowed. This means that the control channel between the NetBird agent and the NetBird Management service can't be cretaed (your agents are getting 403).

You could enable DNS only feature in Cloudfalre for your domain. Go to your domain -> record -> Proxy status

cloudfalre

oh. that explains it.

@Vaneixus commented on GitHub (Oct 15, 2023): > Hey @Vaneixus > You are running behind Cloudflare that proxies all the traffic. And by default gRPC isn't allowed. This means that the control channel between the NetBird agent and the NetBird Management service can't be cretaed (your agents are getting 403). > > You could enable DNS only feature in Cloudfalre for your domain. Go to `your domain -> record -> Proxy status` > > ![cloudfalre](https://github.com/netbirdio/netbird/assets/700848/fa2a8308-824b-4ed0-aa77-5fce9364674b) > oh. that explains it.
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@braginini commented on GitHub (Oct 15, 2023):

Let me know if this fixed the issue, @Vaneixus

@braginini commented on GitHub (Oct 15, 2023): Let me know if this fixed the issue, @Vaneixus
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@Vaneixus commented on GitHub (Oct 15, 2023):

Let me know if this fixed the issue, @Vaneixus

Hello again,
yes, I can confirm that fixed it. That was such a silly mistake. Thanks a lot!

@Vaneixus commented on GitHub (Oct 15, 2023): > Let me know if this fixed the issue, @Vaneixus Hello again, yes, I can confirm that fixed it. That was such a silly mistake. Thanks a lot!
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@visedge commented on GitHub (Nov 23, 2023):

Whenever I uncheck the 'proxy' in cloudflare, my ip is exposed. I have the netbird server installed in my homelab, so does anyone know of another way of resolving this error?

Regards

@visedge commented on GitHub (Nov 23, 2023): Whenever I uncheck the 'proxy' in cloudflare, my ip is exposed. I have the netbird server installed in my homelab, so does anyone know of another way of resolving this error? Regards
saavagebueno commented 2025-11-20 05:12:03 -05:00
Author
Owner
Copy Link

@FabulousCodingFox commented on GitHub (Dec 25, 2024):

Whenever I uncheck the 'proxy' in cloudflare, my ip is exposed. I have the netbird server installed in my homelab, so does anyone know of another way of resolving this error?

Regards

You can explicitly enable gRPC for a domain under 'Network > gRPC' in the Cloudflare dashboard

@FabulousCodingFox commented on GitHub (Dec 25, 2024): > Whenever I uncheck the 'proxy' in cloudflare, my ip is exposed. I have the netbird server installed in my homelab, so does anyone know of another way of resolving this error? > > Regards You can explicitly enable gRPC for a domain under 'Network > gRPC' in the Cloudflare dashboard
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#474
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?