SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-05-16 21:22:12 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

Peers not reachable using linux kernel 5.4.193 (with patches) #602

New Issue
Open
opened 2025-11-20 05:14:36 -05:00 by saavagebueno · 3 comments
saavagebueno commented 2025-11-20 05:14:36 -05:00
Owner
Copy Link

Originally created by @KlausPopp on GitHub (Jan 30, 2024).

We try to get netbird running using Linux yocto for an embedded device (arm64) using Linux kernel 5.4.193 with patches.

The node is connected to the netbird cloud servers, and can see all the peers in the network. The strange thing is that I can ping from my node only to some of the peers. For the peers that don't work, I see that the wireguard handshake isn't working and the transfer status shows that the transfer works only in one direction.

Further investigation shows errors in the netbird client.log:

2024-01-30T10:11:48Z ERRO client/firewall/nftables/route_linux.go:82: failed to create containers for route: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported
2024-01-30T10:11:48Z ERRO client/firewall/create_linux.go:54: failed to create nftables manager: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported
2024-01-30T10:11:48Z ERRO client/internal/engine.go:266: failed creating firewall manager: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported

We were able to workaround the issue by setting NB_SKIP_NFTABLES_CHECK=true when starting netbird. With that setting, the error entries disapear from the log and we can access all peers.

For further info, see https://netbirdio.slack.com/archives/C02KHAE8VLZ/p1706609731470089

To Reproduce

I can reproduce it easily on my machine, by just starting netbird.

Expected behavior

Peers should be accessible.

Are you using NetBird Cloud?

NetBird Cloud

NetBird version

0.25.5

Originally created by @KlausPopp on GitHub (Jan 30, 2024). We try to get netbird running using Linux yocto for an embedded device (arm64) using Linux kernel 5.4.193 with patches. The node is connected to the netbird cloud servers, and can see all the peers in the network. The strange thing is that I can ping from my node only to some of the peers. For the peers that don't work, I see that the wireguard handshake isn't working and the transfer status shows that the transfer works only in one direction. Further investigation shows errors in the netbird client.log: ``` 2024-01-30T10:11:48Z ERRO client/firewall/nftables/route_linux.go:82: failed to create containers for route: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported 2024-01-30T10:11:48Z ERRO client/firewall/create_linux.go:54: failed to create nftables manager: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported 2024-01-30T10:11:48Z ERRO client/internal/engine.go:266: failed creating firewall manager: nftables: unable to initialize table: conn.Receive: netlink receive: operation not supported ``` We were able to workaround the issue by setting `NB_SKIP_NFTABLES_CHECK=true` when starting netbird. With that setting, the error entries disapear from the log and we can access all peers. For further info, see https://netbirdio.slack.com/archives/C02KHAE8VLZ/p1706609731470089 **To Reproduce** I can reproduce it easily on my machine, by just starting netbird. **Expected behavior** Peers should be accessible. **Are you using NetBird Cloud?** NetBird Cloud **NetBird version** 0.25.5
saavagebueno added the clienttriage labels 2025-11-20 05:14:36 -05:00
saavagebueno commented 2025-11-20 05:14:37 -05:00
Author
Owner
Copy Link

@adasauce commented on GitHub (Feb 26, 2024):

@KlausPopp Thanks for posting the workaround, I'm experiencing this too on an arm64 machine using kernel 5.4.180 running in a docker container.

I'm using netbird selfhosted on version 0.26.

Do we know why disabling the nftables check makes things start to work normally?

@adasauce commented on GitHub (Feb 26, 2024): @KlausPopp Thanks for posting the workaround, I'm experiencing this too on an arm64 machine using kernel 5.4.180 running in a docker container. I'm using netbird selfhosted on version 0.26. Do we know why disabling the nftables check makes things start to work normally?
saavagebueno commented 2025-11-20 05:14:37 -05:00
Author
Owner
Copy Link

@nazarewk commented on GitHub (Apr 18, 2025):

@KlausPopp is this still an issue for you?

@nazarewk commented on GitHub (Apr 18, 2025): @KlausPopp is this still an issue for you?
saavagebueno commented 2025-11-20 05:14:37 -05:00
Author
Owner
Copy Link

@KlausPopp commented on GitHub (Apr 18, 2025):

Hi, it's not an issue for me anymore, as we are no longer working on that project.

@KlausPopp commented on GitHub (Apr 18, 2025): Hi, it's not an issue for me anymore, as we are no longer working on that project.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label client triage
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#602
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?