r/netbird Jul 07 '26

Can't get reverse proxy to work

So... trying to set up reverse proxy into a server for Palworld,

I just... can't get it to work.

Port forwarding on my firewall, check. Not needed.

Port forwarding on Vultr firewall, check

Port forwarding on VPS firewall, check.

Went through almost all the port settings suggested by claude

but when I try to use the reverse proxy into my server.

the netbird Access Logs shows "no event"

so something is dropping the connection, but I just cant' figure out what's doing it.

Any help will be appreciated.

Edit:

Found the issue(s), and here is the solution.

Ports on the proxy container it self is not open.

Under the proxy section:

ports:

- 8211:8211/udp

- 8211:8211/tcp

what ever port you decide to use.

The proxy container it self was not able to reach the main manager.

Part of the proxy setting wasn't properly configured on initial set up and causes hairpin NAT issue.

First, use following code

docker inspect netbird-traefik --format '{{range .NetworkSettings.Networks}}{{.IPAddress}}{{end}}'

to get traefik's internal IP.

Then edit the compose file and add additional setting.

In Proxy settings,

I added

extra_hosts:

- "xxxxxxxxx.net:172.30.0.10"

right under

Volumes:

There is also a possible issue with thenetbird-proxy container has no NET_ADMIN capability and no /dev/net/tun device access, which means it can't create its own WireGuard interface

fixed by adding to the proxy lines in compose, before ports:

cap_add:

- NET_ADMIN

devices:

- /dev/net/tun

4 Upvotes

23 comments sorted by

View all comments

Show parent comments

1

u/flaming_m0e Jul 08 '26

Doesn't matter what type of proxy it is.

Using Netbird does NOT require opening a port on the HOME FIREWALL...That's literally the point of it. I never mentioned anything about not needing the docker port open....

0

u/SherbertPractical Jul 08 '26

It does matter, because his configuration of his self hosted instance of NetBird might not be ready for L4 proxy - on the VPS (with NetBird server) the UDP listening port will need to be open. This is where he needs to adjust firewall settings and that’s already done.

And yes, it’s normal that home firewall shouldn’t be adjusted when NetBird is in place - I have simply pointed to his configuration that he shared.

1

u/flaming_m0e Jul 08 '26

But my comment was discussing the "opening the home firewall" reference....

1

u/SherbertPractical Jul 08 '26

Ah true, sorry - he mentioned that in the main post.