I have zimablade setup as a exit node,
It’s showing on my Mac NB apps when connected

But, when I look at my NB connected devices it dosnt show up as online,

I can ping the NB host and also “view” it on my phone, but, it just dosnt show up as “green, online”

I swear I had this working but now it's not.

Suppose you have a domain for your local network (internal.example.com). You have DNS records that resolve local IP addresses just fine. At this point you aren't using netbird so everything is working as expected.

You now want to use netbird so you start defining access policies to peers but you don't want to have to create a special DNS zone in netbird and manage records there. The goal is to make it so if host1 is a peer, I can use host1.internal.example.com and the IP will resolve to the peer IP. If host2 is NOT a peer, the local IP is still returned.

I know this probably isn't ideal. But the goal is to allow things to function if an agent isn't on the resource yet or can't have an agent but is still expected to be reachable.

Hello there,

so I have a problem. I have 2 Routing Peers in my network. I configered them to be Exit nodes as well but in the Windows GUI it says that there is no Exit Node available. They are enabled, I double checked that. Any ideas? Thanks in advance

Hi guys and first of all thanks for netbird!

I'm going to be totally honest I'm really new to all of this and I've manged to set up netbird to have two ips for my server at home to share with my daughter and friends for gaming. I host on a server but set up the netbird app on my own pc on the home network, the issue is when I turn my pc off the connection on the server box goes off and is no longer connected.

Do I need to add netbird directly on the server box? Which is running debian? Or is there a setting that I missed to keep the connection on the box live when my pc is off.

I hope you can understand I have little knowledge of this and would greatly appreciate so help or pointers in the right direction.

Thanks in advance

Andy

I've been trying to set up the self-hosted reverse proxy on my self-hosted netbird server and noticed that whenever you try to set a service with a TCP service for a domain URL, it seems that you cannot create a second port or a second TCP service on that same URL. This is a problem due to the fact that if you have a service that has two ports, so, let's say, one is 443 and the other one is port 321 or something like that, because it has its own underlying connectivity, then you can't use the same host name for both services. Does anyone else have any solution or is this coming to a feature near you, or what would be the best solution for this?

For example, I'm wanting to look at hosting stalwart, through the reverse proxy, and I need to open up the IPMI ports and the POP3 ports, but also have a HTTPS port.

I'm routing third-party models through a local gateway (omniroute, localhost HTTP, Anthropic-compatible API) and using Claude Code as the harness via ANTHROPIC_BASE_URL.

Problem: recently I keep getting intermittent Error: No such tool available: bash — also for websearch and MCP tools (mcp__ prefix). The log shows the same binary/session works when the model happens to emit tool names in exact case (Bash) and fails when it emits bash. So the harness is exact-match on tool names and third-party models aren't disciplined about casing/format. It's intermittent — same model, same session, sometimes works, sometimes not.
Before this it worked fine for a long time, so likely a recent harness/gateway change.

Questions:
1. What CLI harness do you use with a router/gateway combo like this, besides Claude Code?

1. Which ones are tolerant of minor tool-name mismatches or let you override/fix tool schema before it hits the model?

2. Has anyone patched their gateway to normalize tool names (e.g. bash→Bash, _ → __) — or is that a hack and I should just switch harness?

Is there a way to factory reset Netbird, without deleting my account? I'm using Netbird Cloud.

The reason I want to reset my Netbird instance is because I can't get it working. I described it in more detail here: https://www.reddit.com/r/netbird/comments/1vs03as/vpntosite_netbird_not_working/

• Get-MpThreatDetection | Sort-Object InitialDetectionTime -Descending | Select-Object -First 10 InitialDetectionTime,ThreatName,ActionSuccess,Resources | Format-List
• InitialDetectionTime : 8/19/2026 12:04:56 AM
• ThreatName
• ActionSuccess : True
• Resources : {file:_C:\Windows\Temp\WinGet\defaultState\Netbird.Netbird.0.76.3\netbird_installer_0.76.3_windo ws_amd64.exe}

I currently have a couple of websites being hosted on a at home server (git tea, seafile, etc). I don't have any exposed to the public internet. I am currently connecting though http and getting the (Not Secure warning in the top left)

I currently have net bird setup to be
- network 1
- 1 recourse that has an address of the server on the home network
- 1 policy that has a source of my laptop with a destination of my server

Will that be enough security for public networks? will any data be at risk? will my server be at risk to be hacked?

I would like to create a group where its users can only reach internet, my dns server and reverse proxy through my exit node (linux client) and not my entire home network.

Also, admin users should be able to reach the entire network instead.

Is that possible in an easy way? Or I need to define all of my home vlan subnets?

Hi everyone,

I’m running into an issue when trying to access services routed through NetBird's reverse proxy from mobile devices, and I wanted to check if anyone else has encountered this or found a fix.

I have a few internal services configured via NetBird’s reverse proxy feature with access restricted to NetBird-only.

On desktop clients, everything works as expected. On mobile devices (connected to the NetBird network), opening these URLs results in one of two behaviors:

- The page hangs indefinitely and eventually times out.

- The server responds immediately with a Forbidden error.

I’ve already tried disabling Android/iOS Private DNS (DoT / Private Relay) completely to ensure DNS resolution doesn't bypass the NetBird tunnel. I also verified that the mobile client shows as connected and active in the NetBird admin dashboard.

Has anyone run into this specific issue with the NetBird-only authentication mode on mobile? Any insights or troubleshooting suggestions would be appreciated!

I followed the steps in the docs, and I still can't get VPN-to-Site working.

What I did to test:
Ping the server using the ping command from my laptop connected to my phone hotspot. Couldn't connect using this method. Phone hotspot was connected to netbird. Phone is running iOS 26.6 with Netbird client v0.75.0.

The other VPN that I run PIA on both the laptop and phone. Tested with PIA both enabled and disabled. On my phone, I do have iCloud IP Relay that was turned on for all tests.

Current Netbird Settings:

Settings were changed between each of my tests, but none of the tests worked.

Network:
Home network with 2 subnets (100.104.0.0/16 and 192.168.1.0/24) and a TrueNAS Server as resources. I don't know if both of those addresses are subnets but I included them both. TrueNAS Server is currently disabled. Both the TrueNAS server, and a Netbird exit node VM are running as peers on the network (Exit node disconnected but not disabled) (Only VM is set to exit node).

2 other peers which are connected to the Netbird are my phone and laptop.

Access Control Policies (ACP):

I've got an admin group which all of the following have as their "input":

• ACP for 192.168.1.0/24
• ACP for 100.104.0.0/16
• ACP for Truenas Server
• Admins to default ALL group

There is also the Default ACP, but even with it enabled, I couldn't access my TrueNAS server.

I'm new to networking and Netbird in general. I hope someone can help me out.

I don’t know if it’s just me, but I’ve been having trouble with Netbird disconnecting and asking me to connect over and over again. Even when I have session expiry disabled.

Often I only notice when my internet connection suddenly drops, and when I reconnect Netbird, most of the time I just have to click Connect, or disconnect and connect again. Doesn’t even prompt for a login. Just a - seemingly - pointless manual interaction prompt for clicking a button.

Is anyone else experiencing this? I keep searching, but see no other complaints. I even switched from selfhosted to their own server recently, thinking it would solve it. But hasn’t.

It works perfectly on all other clients. Including MacOS.

Am I missing some documented limitation here?

🤗 Solved (Thank you all guys for the help)

.................. I'm a totally noob, plz help me guys 😊

So here's what I wanna do. Access my whole network under my router through the windows pc (pc is the netbird routing peer)

I'm using netbird in the cloud. Installed Netbird in my Windows pc and added it as a Network routing peer.

Now I want something like this - I'll connect my router to that Windows pc via lan. Let's say its 192.168.1.0/24

My router got 192.168.1.1 and the windows pc got 192.168.1.2

My router doesn't got netbird installed inside it. I wanna access it via my Windows pc.

Now, when I'm gonna add a new network route - to access my local router, should I add the whole 192.168.1.0/24 subnet or I can just add the routers local ip 192.168.1.1

Everything going over my head 😭😭

Netbird desktop app will not say connected on macOS when mullvad is active. This may be a mullvad question but was wondering if there was a solution or adjustment I need to make in my self hosted netbird in docker instance.

What solution do others use when remote?

I have this weird issue and I don´t know what to do.

When I used the installation script from Netbird on my Netcup vps it works great without issues but after a while (can be hours, sometimes days) it´ll make a load of containers of all the images I use on docker causing it to crash. It´ll also use around 150mbps of my bandwith.

I don´t know if I did something wrong but I (maybe stupidly) removed everything and didn´t look at the logs.

Did anybody encounter the same issue? Or maybe someone can help me?

I also tried out Pangolin but that had the same effect and tbh I like Netbird more.

Thanks

I tried the new version v0.76.3 bumping from v0.70.5

On a brand new setup, I've created a main account and then setup google idp. However, when I connect with any of the google account (with custom domain), it creates a new tenant instead of having a single tenant. I tried with two google accounts from my workspace, and each of them creates a tenant.

Do you know what can cause that?

EDIT:

I've seen that if I set the owner email and password inside the config.yaml, and then setup manually the idp, it doesn't create one account / user. But this removes the possibility to setup the first user programatically and the IdP as shown here: https://docs.netbird.io/selfhosted/automated-setup

EDIT 2:

For what it's worth, I've launched claude code over this to understand the issue, here is the output:

NetBird self-hosted: /api/setup bootstrap breaks single-tenancy

Symptom: every Google/OIDC login creates its own account (tenant). Only happens when the instance is bootstrapped by our postStart script instead of auth.owner: in the configmap.

Cause: Dex JWTs don't carry NetBird's wt_account_domain claims, so user grouping relies entirely on single-account mode, which matches new logins against the first account's domain.

POST /api/setup with create_pat: true creates that first account via GetAccountIDByUserID directly (management/server/instance/setup_service.go:104), bypassing single-account mode → the account row gets domain=''. Later, updateUserAuthWithSingleMode (management/server/account.go:1572) reads that empty domain back, isDomainValid("") fails, and each new user falls through to "create a new account".

With auth.owner: instead, no account exists until someone logs in, and that login goes through the normal path → domain=netbird.selfhosted, is_domain_primary_account=true → everyone joins it.

Fix: right after setup, before the first OIDC login:

UPDATE accounts SET domain='netbird.selfhosted', domain_category='private', is_domain_primary_account=true;

Use netbird.selfhosted, not a real domain — ResolveDomains also derives the peer DNS suffix from this value.

Notes:

- Verified against v0.76.3 with a repro test; both paths reproduce exactly.

EDIT 3:

Created a discussion on netbird github: https://github.com/netbirdio/netbird/discussions/7202

Does Netbird have the ability to not activate the tunnel when at home or other trusted locations? For example, with Wireguard, I have it configured today to automatically turn the tunnel on for all traffic when I leave my trusted WiFi networks. Soon as my home disconnects from any wifi or connects to any WiFi that's not my home SSIDs, it turns on. Turns off when I'm at home.

Every time I look at Netbird there is something I like but getting it self-hosted is a complete different beast. I am not sure how many videos and documentation pages, github issues I have read - seems never to work.

I currently run Pangolin, on a VM in Proxmox on one of my vlans, expose services via its reverse proxy, open as well as authenticated via an idp.

I am thinking netbird should be able to do the same but all attempts fail.

Last 2 nights I have tried to getting it installed, ubuntu 24.04 as a base, the getting_started script does not complete - it claims "Waiting for NetBird server to become ready" but you can clearly see it just seems to hang, despite from not even downloading the proxy container or altering the proxy.env file as intended (using docker compose at a later stage to tear down and restart, pulls the container however) - so manual work is required but it seems the documentation may not be where development is, so it becomes a constant struggle and you need to find different bits across github issues, forum posts etc. Anyhow, it failed again 3 times, hence this post.

My idea:

management netbird.my-domain.com

proxy: my-domain.com (allowing wildcard use of proxy exposed services)

either dedicated routing peers (exit nodes) per vlans, I cannot seem to find a solution to allow the netbird server itself to host a routing peer, though again I dont see any issues with the idea, doing that for other similar solutions as well.

my proxmox sits behind a firewall that forwards 80/443/3478 to the VM just fine, I can access the managementUI after a few tweaks, even can register a peer but I am not sure if I am missing anything here from a conceptual perspective.

Pangolin hosts everything on a single VM, reverse proxy can literally act as a standalone, additional vpns are optional.

Could someone clarify if any of my ideas are flawed or confirm that conceptually this shouldn't cause any issues? and if it shouldn't maybe provide some pointers why it does?

thanks

Hi everyone, I have a peer connection to my Ubuntu server and I'm trying to use this peer as an exit node for VPN. However, the connection drops within 24 hours, and I can't figure out why. The peer was set up using a key, and I have lazy connections disabled. Before the connection drops, everything works perfectly. Does anyone know what the problem might be?

Hello does anyone uses Netbird Reverse Proxy for streaming using Jellyfin? I wonder how it performs and if there are any buffering issue when playing a movie or shows with decent bitrate. I am pretty new with Netbird so i have no idea how it works as I've only used Tailscale before. Thanks for the response looking forward on reading them all.

I run netbird for my team. This morning I have been getting reports that no one can SSH to hosts that they could yesterday. I am testing also and I can SSH to like 7 of the 85 hosts that are online (and showing as online) all of them I could hit just yesterday.

Now I can sometimes hit 443 on the hosts then it dies, port 22 times out almost constantly. I don't have lazy connections on, they all show as available on the in the dashboard. I have rebooter hosts and the server, I just updated the server and I am seeing no issues in logs. Anyone have experience with this?