Different behavior for users

[Enailis]

Describe the problem

Netbird doesn't work for some users but does for others. On Windows there is two different behavior:

• Works perfectly fine
• Doesn't work at all For the second behavior, the netbird status -d (see status result in Additional context) show the nameservers as "Unavailable" because it times out. We have nothing related to this in the client.log file. We tested this on Windows 10 22H2 and Windows 11 23H2.

On Linux, everything looks good when doing a netbird status -d, the nameservers appear as "Available" though they are not working at all. (see status result and details on this in Additional context)

On MacOS (tested on Apple Silicon and Intel, both on Sonoma 14.4.1), when doing a netbird status -d, all the nameservers appear to time out. (see status result in Additional context)

Expected behavior

We expect Netbird to have the same behavior for everyone.

Are you using NetBird Cloud?

We are using a self-hosted version of Netbird.

NetBird version

We are all using client in 0.27.6.

Additional context

We have an internal DNS resolver (pfSense's DNS resolver) declared as a Nameserver so we can access our internal services. It is ditributed to all peers. To access the pfSense DNS resolver, we created a route that is distributed to all peers.

Linux users can ping pfSense's IP, they can dig our internal services only when they specify the pfSense's IP as the DNS server to use (for example dig @10.220.220.1 gitlab.anon-I9GrK.domain will work but not dig gitlab.anon-I9GrK.domain).

Windows:

OS: windows/amd64
Daemon version: 0.27.6
CLI version: 0.27.6
Management: Connected to https://vpn.anon-H6c1C.domain:33073
Signal: Disconnected, reason: rpc error: code = DeadlineExceeded desc = context deadline exceeded
Relays:
  [stun:vpn.anon-H6c1C.domain:3478] is Available
  [turn:vpn.anon-H6c1C.domain:3478?transport=udp] is Available
Nameservers:
  [10.220.220.1:53] for [wikijs.anon-H6c1C.domain, grafana.monitoring.anon-H6c1C.domain, gitlab.anon-H6c1C.domain, hv.anon-H6c1C.domain, vault.anon-H6c1C.domain, grafana.anon-H6c1C.domain] is Unavailable, reason: 1 error occurred:
        * read udp 172.20.10.7:56854->10.220.220.1:53: i/o timeout
FQDN: xps-user.anon-odJcg.domain
NetBird IP: 100.73.233.202/16
Interface type: Userspace
Quantum resistance: false
Routes: -
Peers count: 8/13 Connected

Linux:

OS: linux/amd64
Daemon version: 0.27.6
CLI version: 0.27.6
Management: Connected to https://vpn.anon-I9GrK.domain:33073
Signal: Connected to http://vpn.anon-I9GrK.domain:10000
Relays:
  [stun:vpn.anon-I9GrK.domain:3478] is Available
  [turn:vpn.anon-I9GrK.domain:3478?transport=udp] is Available
Nameservers:
  [10.220.220.1:53] for [wikijs.anon-I9GrK.domain, grafana.monitoring.anon-I9GrK.domain, gitlab.anon-I9GrK.domain, hv.anon-I9GrK.domain, vault.anon-I9GrK.domain, grafana.anon-I9GrK.domain] is Available
FQDN: ena.anon-34xPr.domain
NetBird IP: 100.73.213.219/16
Interface type: Kernel
Quantum resistance: false
Routes: -
Peers count: 8/13 Connected

MacOS:

OS: darwin/arm64
Daemon version: 0.27.6
CLI version: 0.27.6
Management: Connected to https://vpn.anon-BJLJJ.domain:33073
Signal: Connected to http://vpn.anon-BJLJJ.domain:10000
Relays:
  [stun:vpn.anon-BJLJJ.domain:3478] is Available
  [turn:vpn.anon-BJLJJ.domain:3478?transport=udp] is Available
Nameservers:
  [10.220.220.1:53] for [wikijs.anon-BJLJJ.domain, grafana.monitoring.anon-BJLJJ.domain, gitlab.anon-BJLJJ.domain, hv.anon-BJLJJ.domain, vault.anon-BJLJJ.domain, grafana.anon-BJLJJ.domain] is Unavailable, reason: read udp 100.73.251.82:55505->10.220.220.1:53: i/o timeout
FQDN: users-macbook-pro.anon-wocG3.domain
NetBird IP: 100.73.251.82/16
Interface type: Userspace
Quantum resistance: false
Routes: -
Peers count: 8/13 Connected