NetBird: Community

NC

NetBird: Community

Join the community to ask questions about NetBird: Community and get answers from other members.

Join

support-requests

bug-issues-etc

Using the selfhosting quick start I cant access zitadel (no account)

Hey there, I wanted to try NetBird out, and tried to use the quick start selfhosting script, but it seems the account provided by the script does not work on Zitadel. I also noticed that the management container does not start due to missing clientId from zitadel. I am not sure if I am doing something wrong, or something's borked with the installation script. Images attached of the errors im seeing (img 1: domain/ui/console login, img 2: domain) Docker Images...
No description

Changing IDP in self hosted NB

Has anyone tried / had luck in changing the IDP in their self hosted instance? I’m planning on moving from Google workspace to M365 and that will bring in the change from Google SSO to Entra ID. What’s the best strategy here to preserve my current config?
Solution:
Probably obvious, but just changing the IDP does not work lol. But had to see for myself. I created an instance with Zitadel, setup a few things. Then reconfigured the compose file and config files to accept authentik as the IDP with the same NetBird DB. No dice lol. But had to see for myself. I’ve now settled on starting over a new instance with Zitadel and will continually add IDPs as required...

Disconnections from management server

Hello everyone, We regularly experience disconnections between the client and the management server during the "Sync" operation. Have you also noticed this problem? ...

Set up "new" account, but it's limited to user access instead of admin.

I tried NetBird years ago, but it didn't work out. Recently I was reminded of its existence when I got an email saying my account was being deleted for lack of activity ("okay with me" I thought). But subsequently my self-hosted WireGuard VPN had some issues and I decided I'd give NetBird another try. I created a new account using (apparently) my same email address. When I logged in, the dashboard only showed the Peers tab with the "Install Netbird" option. When I logged in from my phone, the Peers tab now shows my phone, my phone from my last attempt at using NetBird, and my router from my last attempt (the latter two are not connected of course). Is there any way to regain my admin access to my account/network? Or more throughly have my account deleted so I can start fresh?...
Solution:
Alright, well NetBird support was able to see that I had initially logged in "using Google" the first time, and so even though the email address was the same because the login method was different it created two different accounts. As you surmised, @jeevis , the first account was Owner and the second was just a User. I was able to log back into the first account, transfer ownership to the second account, and then delete the first account....

Netbird MFA + Azure MFA bug?

Signed up to Netbird lets say using admin@myworkcompany.com, this is the owner. I enabled MFA on this, great. Now I enable the IdP sync from Azure, sync only users/groups starting with Netbird-, this works fine, a handful of users come through. Lets say bob@myworkcompany.com is one of those, I make them an admin from the Team/Users page ,and now I try to login, choose Continue with Microsoft Account, enter bobs Azure username, password, OTP from authenticator(Azure MFA)... But because this MFA option is enabled within Netbird, it redirects me to a second one time code page(see attached image), even though it says in Netbird: Enable NetBird MFA if not configured in your IdP. This setting is global and applies to all users Is this a bug? I want MFA on this initial owner user, and want to make a couple of extra users admins that use MFA from Azure, so we don't ever get locked out. ...
No description

Android/IOS dns not resolving

Hello i have selfhosted netbird setup in hetzner. I created client and used as exit node. I added recources mostly links "example.com" and created policy and everything is working flawesly. But this setup is not working for android and ios i can open only ip. Can you help me?

iac or config management netbird

how you manage netbird configuration, is there any iac or ansible or custom script api to handle it?

Having an hard time restoring a backup

Hello everyone. I am experimenting with the ability of making and restoring backups. I did copied the configuration files over the destination, and copied the management database too - after having stopped it, as per instructions. I did also dumped the zitadel's postgres databases and reimported them (after having replaced all the domain strings with the one that will be used in the destination). Unfortunately despite zitadel does start and I'm able to login, the "/peers" page is stuck forever loading nothing. I was not able to understand what could be wrong by reading the logs. I did find some errors here and there but those are present in a fresh install as well. Please guide me about how to cherry-pick potential significant error messages to untangle which the culprit of this failing restore might be. Many thanks everyone....
No description

Test post

I am just testing @Answer Overflow
Solution:
Wow, much solving!

Help with setting up exit node

Hi! I am looking into how to set up exit node with netbird, and it all works great. The client connects correctly to the exit node . But how do i grant the client internet access via the exit node? The exit node is a ubuntu vm....

Netbird + Zitadel: All roles in scopes for Device Authorization

Hi all ! I'm currently using Netbird 3.9.1 and an external Zitadel. I'm having a real security issue with Netbird. When a user logs in with Netbird, all roles in the Netbird project are displayed in the device authorization request. The user should only be able to see the roles assigned to them....
No description

Relay STUN/TURN unavailable

Describe the problem I've been busy trying to fix our netbird self-hosted instance for the last 2 weeks. A lot of troubleshooting and trial&error has been done, and i've reached the point where I can connect to peers again. The (hopefully last) issue left is with STUN/TURN (coturn) and Relay. #Used Technologies Netbird, Authentik, Nginx Proxy Manager, Cloudflare...
Solution:
I got it to work 🙂
No description

Mobile IOS not working with self hosted NetBird

Hi there I have a problem to trying to Connect my iphone to a server with NetBird. Actually I use the self hosted version installed on docker with their script. The connection work perfectly with a Windows computer but not on iphone and not on iPad using the iOS app That’s really strange because the app say that it is connected to the server but it’s actually impossible to reach the host or the web services...
No description

is it possible to setup DoH in netbird?

i host my own adguard instance which i only want to accessable though https. so is it possible to force clients to use a https dns server? cant set it in the interface.
Solution:
Circling back, you should set up a forwarder server that you can use for your DNS queries (like technitium or similar), then do DoT/DoH from there to your adguard instance.
No description

netbird and traefik

i have a traefik instance running currently with ports 80 and 443 forwarded. now i want to close those ports and only be able to access it while on my netbird network (while still keeping the domain with ssl) so in short i want it only to be accessable when i use netbird but not using its netbird domain (traefik.netbird.cloud) but traefik.example.com. is this possible? i am using the could version right now. for more info about my infrastructure. Its a proxmox server with lxc-containers. all containers have access to the traefik container (every container has the ip 10.10.10.(lxc-id)) and traefik has a netbird client running. my idea is to have traefik listen on the netbird id. and somehow tell traefik to route *.example.com to the traefik netbird ip...

Stuck on "Add new device to your network" page after account registration

Cannot get past this (see first image) page. I've tried adding clients, both my own machine running Debian with Gnome as well as 6 others with and without a desktop environment. Everything works, the devices get added and can ping each other, but I cannot get past that page and onto the dashboard. I've truly tried everything (famous last words) and I'm definitely no novice when it comes to IT/networking. Even when explicitely nagivating to other dashboard pages via the links found in the docs, I...
Solution:
Must've been a temporary bug on netbirds side that resolved itself yesterday. Didn't manage to get it working on the account I created yesterday but got it working on a new acc created today.
No description

NetBird Clients Stuck on Relay – Unable to Establish Direct P2P Connections

I have a NetBird server running inside Docker on an Ubuntu VM. Clients are unable to establish direct peer-to-peer (P2P) connections and are instead routing all traffic through relays. This is causing significant performance issues, especially when using an exit node, where clients experience only 20% of expected speed. What I Have Checked So Far: ✅ UDP is open and working – Confirmed via tcpdump, showing UDP traffic on port 3478. ✅ Coturn is running inside Docker – It is configured via /home/netbird/turnserver.conf....
Solution:
For the MTU for some reason, specifically for the wt0 interface, the MTU was set to 1500 so I had to reduce it until I saw it work well. For the P2P to finally work properly, I just turned off the external firewall for my exit node VM that's on my cloud provider, rookie mistake. I am using UFW and it has the usual ports open for netbird. I just had to reconnect it and it worked....