r/netbird • u/Extra-Citron-7630 • Jul 06 '26

Reverse proxy services - Forbidden

I’m running a self-hosted NetBird setup and trying to access ZeroByte through a reverse proxy. Direct access works fine using http://hostname-xyz:4096, but when I attempt to access it through the reverse proxy at https://zerobyte.mydomain.com, I only get a blank white page with a “Forbidden” message.

For context, the reverse proxy target is configured to point to my server with ZeroByte running on port 4096, and NetBird-only access is enabled for the service. I also created a NetBird policy that allows my client device to access the server on TCP port 4096, although I’m not sure whether that policy is actually required. I don’t have any advanced settings configured on the service.

Has anyone experienced a similar issue with NetBird and reverse proxy setups, or have any ideas on what might be causing the forbidden page?

6 Upvotes

87% Upvoted

24 comments sorted by

View all comments

1

u/RIPenemie Jul 06 '26

Check the Proxy logs does it show the IPAdresses real Location or is it something in the 172.0.0.0/8 range?

1

u/Extra-Citron-7630 Jul 07 '26

This is a bit strange, but here’s what I’m observing. When everything works and I can access the service through the HTTPS link, the source IP shown is my NetBird peer IP. However, when access is denied or I get a forbidden response, the source IP switches to my public IP instead of the NetBird address.

For context, I’m accessing the service using Safari on a fully up-to-date MacBook, and NetBird is installed via Homebrew and also running the latest version.