Can't resolv netbird #801

Closed
opened 2025-11-20 05:17:46 -05:00 by saavagebueno · 2 comments
Owner

Originally created by @vincent-lg18 on GitHub (Apr 16, 2024).

Describe the problem

I can access the dashboard when my peer is not connected to the server, but as soon as I connect a peer, I can no longer access the web interface / resolve the hostname of my netbird server.

To Reproduce

My peer isn't connected:

> netbird status -d
Peers detail:
Daemon version: 0.27.3
CLI version: 0.27.3
Management: Disconnected
Signal: Disconnected
Relays:
  [stun:vpn.mycompany.net:3478] is Unavailable, reason: dial: failed to listen: dial: dial udp: lookup vpn.mycompany.netsh: no such host
  [turn:vpn.mycompany.net:3478?transport=udp] is Unavailable, reason: create client: lookup vpn.mycompany.net no such host
Nameservers:
FQDN:
NetBird IP: N/A
Interface type: N/A
Quantum resistance: false
Routes: -
Peers count: 0/0 Connected

And I can access and resolv the DNS name of my netbird instance:

> Resolve-DnsName -Name vpn.mycompany.net

Name                                           Type   TTL   Section    IPAddress
----                                           ----   ---   -------    ---------
vpn.mycompany.net                                 A      342   Answer     X.X.X.X

But as soon as I connect my peer:

> netbird status -d
PS C:\WINDOWS\system32> netbird status -d
Peers detail:

 wiki.vpn.mycompany.net:
  NetBird IP: 100.73.198.88
  Public key: IBP0umyGvrcmp48XUe4a18wkLnkVBzGo5IUtrDv5XBg=
  Status: Connected
  -- detail --
  Connection type: P2P
  Direct: true
  ICE candidate (Local/Remote): host/host
  ICE candidate endpoints (Local/Remote): 192.168.10.123:51820/10.220.220.203:51820
  Last connection update: 2024-04-16 15:18:36
  Last WireGuard handshake: 2024-04-16 15:18:36
  Transfer status (received/sent) 124 B/180 B
  Quantum resistance: false
  Routes: -
  Latency: 2.063ms

Daemon version: 0.27.3
CLI version: 0.27.3
Management: Connected to https://vpn.mycompany.net:33073
Signal: Connected to http://vpn.mycompany.net:10000
Relays:
  [stun:vpn.mycompany.net:3478] is Unavailable, reason: dial: failed to listen: dial: dial udp: lookup vpn.mycompany.net: no such host
  [turn:vpn.mycompany.net:3478?transport=udp] is Unavailable, reason: create client: lookup vpn.mycompany.net: no such host
Nameservers:
FQDN: xps.vpn.mycompany.net
NetBird IP: 100.73.171.160/16
Interface type: Userspace
Quantum resistance: false
Routes: -
Peers count: 2/2 Connected

I can't access my dashboard:

> Resolve-DnsName -Name vpn.mycompany.net
> # see there's no output

Expected behavior

I would like to be able to access the netbird web interface even if I have my peer activated.

Are you using NetBird Cloud?

I'm using a self-hosted netbird instance. I have a domain name pointing to the public IP address of my server hosting Netbird services.

NetBird version

> netbird version
0.27.3

Additional context

As a workaround, I declared a nameserver pointing to google's DNS resolving vpn.mycompany.net

Though, the internal DNS isn't working anymore:

> Resolve-DnsName -Name vpn.mycompany.net 

Name                                           Type   TTL   Section    IPAddress
----                                           ----   ---   -------    ---------
vpn.mycompany.net          A      2713  Answer     X.X.X.X

> Resolve-DnsName -Name wiki.vpn.mycompany.net
Resolve-DnsName : wiki.vpn.mycompany.net : Le nom DNS nexiste pas
Au caractère Ligne:1 : 1
+ Resolve-DnsName -Name wiki.vpn.mycompany.net 
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ResourceUnavailable: (wiki.vpn.mycompany.net :String) [Resolve-DnsName], Win32Exception
    + FullyQualifiedErrorId : DNS_ERROR_RCODE_NAME_ERROR,Microsoft.DnsClient.Commands.ResolveDnsName
Originally created by @vincent-lg18 on GitHub (Apr 16, 2024). **Describe the problem** I can access the dashboard when my peer is not connected to the server, but as soon as I connect a peer, I can no longer access the web interface / resolve the hostname of my netbird server. **To Reproduce** My peer isn't connected: ```powershell > netbird status -d Peers detail: Daemon version: 0.27.3 CLI version: 0.27.3 Management: Disconnected Signal: Disconnected Relays: [stun:vpn.mycompany.net:3478] is Unavailable, reason: dial: failed to listen: dial: dial udp: lookup vpn.mycompany.netsh: no such host [turn:vpn.mycompany.net:3478?transport=udp] is Unavailable, reason: create client: lookup vpn.mycompany.net no such host Nameservers: FQDN: NetBird IP: N/A Interface type: N/A Quantum resistance: false Routes: - Peers count: 0/0 Connected ``` And I can access and resolv the DNS name of my netbird instance: ```powershell > Resolve-DnsName -Name vpn.mycompany.net Name Type TTL Section IPAddress ---- ---- --- ------- --------- vpn.mycompany.net A 342 Answer X.X.X.X ``` But as soon as I connect my peer: ```powershell > netbird status -d PS C:\WINDOWS\system32> netbird status -d Peers detail: wiki.vpn.mycompany.net: NetBird IP: 100.73.198.88 Public key: IBP0umyGvrcmp48XUe4a18wkLnkVBzGo5IUtrDv5XBg= Status: Connected -- detail -- Connection type: P2P Direct: true ICE candidate (Local/Remote): host/host ICE candidate endpoints (Local/Remote): 192.168.10.123:51820/10.220.220.203:51820 Last connection update: 2024-04-16 15:18:36 Last WireGuard handshake: 2024-04-16 15:18:36 Transfer status (received/sent) 124 B/180 B Quantum resistance: false Routes: - Latency: 2.063ms Daemon version: 0.27.3 CLI version: 0.27.3 Management: Connected to https://vpn.mycompany.net:33073 Signal: Connected to http://vpn.mycompany.net:10000 Relays: [stun:vpn.mycompany.net:3478] is Unavailable, reason: dial: failed to listen: dial: dial udp: lookup vpn.mycompany.net: no such host [turn:vpn.mycompany.net:3478?transport=udp] is Unavailable, reason: create client: lookup vpn.mycompany.net: no such host Nameservers: FQDN: xps.vpn.mycompany.net NetBird IP: 100.73.171.160/16 Interface type: Userspace Quantum resistance: false Routes: - Peers count: 2/2 Connected ``` I can't access my dashboard: ```powershell > Resolve-DnsName -Name vpn.mycompany.net > # see there's no output ``` **Expected behavior** I would like to be able to access the netbird web interface even if I have my peer activated. **Are you using NetBird Cloud?** I'm using a self-hosted netbird instance. I have a domain name pointing to the public IP address of my server hosting Netbird services. **NetBird version** ```powershell > netbird version 0.27.3 ``` **Additional context** As a workaround, I declared a nameserver pointing to google's DNS resolving vpn.mycompany.net Though, the internal DNS isn't working anymore: ```powershell > Resolve-DnsName -Name vpn.mycompany.net Name Type TTL Section IPAddress ---- ---- --- ------- --------- vpn.mycompany.net A 2713 Answer X.X.X.X > Resolve-DnsName -Name wiki.vpn.mycompany.net Resolve-DnsName : wiki.vpn.mycompany.net : Le nom DNS n’existe pas Au caractère Ligne:1 : 1 + Resolve-DnsName -Name wiki.vpn.mycompany.net + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ResourceUnavailable: (wiki.vpn.mycompany.net :String) [Resolve-DnsName], Win32Exception + FullyQualifiedErrorId : DNS_ERROR_RCODE_NAME_ERROR,Microsoft.DnsClient.Commands.ResolveDnsName ```
saavagebueno added the self-hostinggetting-started labels 2025-11-20 05:17:46 -05:00
Author
Owner

@mlsmaycon commented on GitHub (Apr 16, 2024):

Hello @vincent-lg18 the issue happens because the self-hosted domain for your peers matches the management domain.

You can review the configuration and set the --dns-domain= to a different domain name, e.g., hosts.vpn.mycompany.net, and restart the management to distribute this configuration to your peers.

@mlsmaycon commented on GitHub (Apr 16, 2024): Hello @vincent-lg18 the issue happens because the self-hosted domain for your peers matches the management domain. You can review the configuration and set the `--dns-domain=` to a different domain name, e.g., hosts.vpn.mycompany.net, and restart the management to distribute this configuration to your peers.
Author
Owner

@vincent-lg18 commented on GitHub (Apr 16, 2024):

Hello @mlsmaycon
Yes it's working fine now, thank you! I didn't see it anywhere is the doc. I could have missed it, but if I didn't, you should add it somewhere.

@vincent-lg18 commented on GitHub (Apr 16, 2024): Hello @mlsmaycon Yes it's working fine now, thank you! I didn't see it anywhere is the doc. I could have missed it, but if I didn't, you should add it somewhere.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#801