I don’t know if it’s just me, but I’ve been having trouble with Netbird disconnecting and asking me to connect over and over again. Even when I have session expiry disabled.

Often I only notice when my internet connection suddenly drops, and when I reconnect Netbird, most of the time I just have to click Connect, or disconnect and connect again. Doesn’t even prompt for a login. Just a - seemingly - pointless manual interaction prompt for clicking a button.

Is anyone else experiencing this? I keep searching, but see no other complaints. I even switched from selfhosted to their own server recently, thinking it would solve it. But hasn’t.

It works perfectly on all other clients. Including MacOS.

Am I missing some documented limitation here?

Netbird desktop app will not say connected on macOS when mullvad is active. This may be a mullvad question but was wondering if there was a solution or adjustment I need to make in my self hosted netbird in docker instance.

What solution do others use when remote?

Hello does anyone uses Netbird Reverse Proxy for streaming using Jellyfin? I wonder how it performs and if there are any buffering issue when playing a movie or shows with decent bitrate. I am pretty new with Netbird so i have no idea how it works as I've only used Tailscale before. Thanks for the response looking forward on reading them all.

Hi,

I'm trying to set up a NetBird quadlet, especially the server-variant where you host the things yourself and are not dependent on an external auth-service.

However, since I'm pretty new to containerization in general and quadlets, I have tried to ask Google AI for a quadlet-file (it worked pretty well to have a starting point for things like caddy, pihole, nextcloud and immich, so I gave it a try), but it's pretty useless for NetBird... it gave me many different answers and at some point just went in circles.

So I hoped that any of you already have a quadlet/container with NetBird server (and maybe even caddy instead of traefik) set up or can help me get this to work.

I don't have the quadlet-configs google gave me anymore tho since I wanted to start fresh.

Positives:

• Login by email+password
• EU
• Open source

Negatives:

• No local only direct (no proxy) equivalent to tailscale serve
• Dependence on proxying everything over netbird servers
• Selfhosting a proxy would still incure double traffic
• Device domain but no service domain (server2.netbird.cloud but no git.netbird.cloud)

Does Netbird have the ability to not activate the tunnel when at home or other trusted locations? For example, with Wireguard, I have it configured today to automatically turn the tunnel on for all traffic when I leave my trusted WiFi networks. Soon as my home disconnects from any wifi or connects to any WiFi that's not my home SSIDs, it turns on. Turns off when I'm at home.

I run netbird for my team. This morning I have been getting reports that no one can SSH to hosts that they could yesterday. I am testing also and I can SSH to like 7 of the 85 hosts that are online (and showing as online) all of them I could hit just yesterday.

Now I can sometimes hit 443 on the hosts then it dies, port 22 times out almost constantly. I don't have lazy connections on, they all show as available on the in the dashboard. I have rebooter hosts and the server, I just updated the server and I am seeing no issues in logs. Anyone have experience with this?

Every time I look at Netbird there is something I like but getting it self-hosted is a complete different beast. I am not sure how many videos and documentation pages, github issues I have read - seems never to work.

I currently run Pangolin, on a VM in Proxmox on one of my vlans, expose services via its reverse proxy, open as well as authenticated via an idp.

I am thinking netbird should be able to do the same but all attempts fail.

Last 2 nights I have tried to getting it installed, ubuntu 24.04 as a base, the getting_started script does not complete - it claims "Waiting for NetBird server to become ready" but you can clearly see it just seems to hang, despite from not even downloading the proxy container or altering the proxy.env file as intended (using docker compose at a later stage to tear down and restart, pulls the container however) - so manual work is required but it seems the documentation may not be where development is, so it becomes a constant struggle and you need to find different bits across github issues, forum posts etc. Anyhow, it failed again 3 times, hence this post.

My idea:

management netbird.my-domain.com

proxy: my-domain.com (allowing wildcard use of proxy exposed services)

either dedicated routing peers (exit nodes) per vlans, I cannot seem to find a solution to allow the netbird server itself to host a routing peer, though again I dont see any issues with the idea, doing that for other similar solutions as well.

my proxmox sits behind a firewall that forwards 80/443/3478 to the VM just fine, I can access the managementUI after a few tweaks, even can register a peer but I am not sure if I am missing anything here from a conceptual perspective.

Pangolin hosts everything on a single VM, reverse proxy can literally act as a standalone, additional vpns are optional.

Could someone clarify if any of my ideas are flawed or confirm that conceptually this shouldn't cause any issues? and if it shouldn't maybe provide some pointers why it does?

thanks

I just want to refer to my computers on the network by a common name instead of ip addresses and not have to open anything up externally. Is that possible with Netbird? Is Netbird overkill for this?

This is mainly what I use tailscake for and I’m trying to move away from it

Всем привет. Тут будет достаточно важный вопрос для меня. Работает ли self-hosted Netbird в России между клиентом и сервером, который находится в России?

Буду благодарен за фидбэк.

I am currently using netbird to manage access to my homelab network. I have a few services that I have deployed using coolify, which my family uses. However, I don't want to give them access to the coolify dashboard itself. Currently, I am doing this by using he reverse proxy and netbird only authentication and made it users can access the services but not the dashboard. However, it has been very annoying that when we create resources on the network, we cannot put in the port have to put the port in separately in the "Add Target" section of the reverse proxy. Why do I have to put in resource and port separately? With this, I need to take a look at 2 places to get the whole ip address + port combo.

No option to put in port

Is there any reason why port is not part of the resource? Am I missing something here? Would really appreciate if we can introduce this to netbird or if someone can educate my why this is the way it is.

P.S. I already had a setup previously where instead of using independent resources, I'd point all off my reverse proxy services into my network's nginx proxy manager just so that I don't have to put in ports manually and I can take a look at my services at a glance.

Edit : I should probably also explain that I am hosting everything on proxmox which by default hosts different services on different IP. I would understand if the above setup if I was using something like docker where different services have the same address but different port

why cant we assign a subnet or static ip address for a setup key?

Hi all,

I work in the energy sector in Germany and we're currently evaluating NetBird as a remote access layer for distributed sites. Typical setup: a handful of control and gateway devices per location, some industrial protocols, plus the usual on site IT. Today it's the classic jump host and site VPN approach, and we're looking for something less painful to operate.

Some things I'd like to hear real world experience on:

1. Has anyone run this in actual production OT, not just a homelab or a dev team? Especially where downtime has real consequences.
2. Stability on poor links. A lot of our sites are on mobile connections or behind CGNAT. Does relay fallback behave sensibly, and do peers recover cleanly after a link drops for a while?
3. Headless peers on Linux that have to come back automatically after a power cycle, with nobody on site. Any surprises there?
4. Are ACLs and posture checks granular enough for tight per site and per vendor segmentation? We need "this external party reaches exactly these devices at this one location" and nothing more.
5. Self hosted vs. cloud in a regulated context. How much operational effort is self hosting realistically?

Compliance is a big factor for us. NIS2 applies, and depending on how things develop, KRITIS requirements may come on top. That means audit trails, crypto choices that line up with BSI TR-02102, documented access control, and being able to put something coherent in front of an auditor. Has anyone gone through an audit or a customer security review with NetBird in the stack?

And the honest question: mature enough for this, or still rough edges that would bite us in a 24/7 asset? I'd rather hear the annoying parts now than during commissioning.

Any war stories welcome, good or bad.