I am switching from Tailscale to NetBird self-hosted. Peer-to-peer is working; I have set up exit nodes, DNS (Cloudflare), and routing peers. The issue is that when I connect to the server from a client, that client no longer has an internet connection. With Tailscale, I had internal access and still had the internet as well. Any help would be appreciated!!
Thanks
Check if the ‘Use Relay’ option is enabled by default. I’ve noticed the Android client has this enabled by default, and I have to disable it in the settings.
Thanks for the reply, but I am pretty sure it is something to do with my self-hosted server settings. I have set up two profiles: one for my self-hosted server and one for the NetBird Cloud, and the clients can still access the internet while on the NetBird Cloud but not on my self-hosted server…
I assume pinging 8.8.8.8 say is unsuccessful once connected
I just used the install script, let it setup the four containers, and forwarded the wireguard port, and 443 as I’m using the proxy feature…
They do have a discourse server, could ask there
Since it works with NetBird Cloud but not with your self-hosted server, I would bet on the exit node.
In NetBird, an exit node is basically a 0.0.0.0/0 route. With “Auto Apply” enabled (default), every peer in the distribution groups will start sending all its traffic through it as soon as it connects. With Tailscale, this only happens when you manually select an exit node on the client.
A quick test on the client: run netbird routes list (or netbird status -d) and deselect the 0.0.0.0/0 route with netbird routes deselect <id>, or directly from the tray menu. If internet comes back, then you found the problem.
After that, you can either remove the client’s group from the exit node distribution groups (or disable Auto Apply) and keep only the routes for your internal subnets.
If you actually want a full tunnel, then I would check if the routing peer itself has internet access, and also if an access policy allows the client group to use this route.
Docs:
Which NetBird version are you running on the server?
Thanks for the replies! I am using the latest version as of last week. I have two exit nodes, both are my Synology NAS, and both have internet access. I have all my routes defined for my local VLANs, but my gut is telling me that may be the issue. I will go over those chapters in the docs again and try some changes. Sorry about the slow response, but it was a busy week last week with OPC (other peoples computers).
Ok I disabled the VLAN resources and I now have Internet access going to test that I have access to the VLANs through exit nodes with my iPad and laptop with 5G and see if I even have to add those resources with Tailscale you had to have the VLANs added to access them… But then again with Tailscale client was on my PFSense and now I am using a Unifi UCG-fiber.
Thanks again.
Spoke too soon I tried on my remote computer and one that only has the selfhosted profile both have the same issue no internet then I saw I had the Cloud server profile active on the computer that worked back to trouble shooting…
Ok, I added my VLANs back in and removed the exit nodes. It now has internet access when connected. I think I need to disable the exit nodes for the Synology because it may be creating a loop that never gets out and make sure it is forwarding packets before making them exit nodes. The netbird status -d also tells me I need to add permissive mode to most nodes.