Multicast dns .local workaround

Describe the problem

Dns resolution for my internal domain (toto.local)

To Reproduce

After setup netbird self hosted with docker container, i test all my needs

ping differents networks from peer through netbird client peer docker (because i want to access to networks behind router) → test ok for all

after that, i test dns resolution wit my domain toto.local and it’s not ok because netbird block multicast resolution (.local), all is ok with toto**.lan**

Expected behavior

ping mymachine.toto.local ok

Are you using NetBird Cloud?

No sel hosted on ubuntu machine with docker container and traefik v3

NetBird version

netbird version 0.77

Is any other VPN software installed?

no

Debug output

netbird status -dA

Peers detail:
vmpnet01pa03.anon-2T4U2.domain:
NetBird IP: 100.97.142.160
Public key: VPPZf8Wc6jbGnzGpe3/WVa8qoKN3OurQw+2LNFOP7gE=
Status: Connected
– detail –
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://zerotrust.anon-PixjB.domain:443
Last connection update: 12 minutes ago
Last WireGuard handshake: 12 seconds ago
Transfer status (received/sent) 106.1 MiB/4.4 MiB
Quantum resistance: false
Networks: 10.0.14.0/24, 10.0.20.0/24
Latency: 0s

Events:
[INFO] SYSTEM (ea5dae54-45d0-46e4-b53e-ad3ac6b092d6)
Message: daemon config changed (source=startup)
Time: 12 minutes, 23 seconds ago
Metadata: source: startup, type: config_changed
[INFO] SYSTEM (8363a6c8-6a09-437f-b07d-39c8c752fadc)
Message: Network map updated
Time: 12 minutes ago
[INFO] SYSTEM (41932b49-16eb-4af1-a6d7-f71fcbfb5bbe)
Message: New version available
Time: 10 minutes, 46 seconds ago
Metadata: new_version_available: 0.77.0
[INFO] SYSTEM (d09ae5f7-c483-4b6c-ae7c-47b003c0a673)
Message: New version available
Time: 9 minutes ago
Metadata: new_version_available: 0.77.0
[INFO] SYSTEM (0ccfd240-f1ca-4206-9076-08f852edf7ae)
Message: Network map updated
Time: 9 minutes ago
OS: windows/amd64
Daemon version: 0.76.3
CLI version: 0.76.3
Profile: default
Management: Connected to “zerotrust.anon-PixjB.domain:443”
Signal: Connected to “zerotrust.anon-PixjB.domain:443”
Relays:
[stun:zerotrust.anon-PixjB.domain:3478] is Checking…
[rels://zerotrust.anon-PixjB.domain:443] is Available via ws
Nameservers:
[10.0.20.50:53, 10.0.20.51:53] for [prd05.anon-PixjB.domain, anon-2T4U2.domain, local, anon-zWecH.domain, uat.anon-PixjB.domain, anon-6KKHg.domain] is Available
FQDN: test-lp178.anon-2T4U2.domain
NetBird IP: 100.97.214.207/16
Interface type: Userspace
Wireguard port: 51820
Quantum resistance: false
Lazy connection: true
SSH Server: Disabled

Create and upload a debug bundle, and share the returned file key:

Additional context

Netbird server docker + Netbird docker client : routing peer through netbird docker client peer because routing with router to access to networks (ip forwrd ok on ubuntu machine)

net.ipv4.ip_forward=1
net.ipv4.conf.all.src_valid_mark=1
net.ipv6.conf.all.forwarding=1
net.ipv4.conf.all.src_valid_mark=1
net.ipv6.conf.all.forwarding=1

Have you tried these troubleshooting steps?

I try to setup in docker client

dns:

  • 10.0.20.50
  • 10.0.20.51
    extra_hosts:
  • “toto.local:10.0.20.50”

i add “local”,“toto.local” in dns managemnet settings in ui but not ok

toto**.lan** ok

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings

ok sorry, after so many search and debug, solution is simple

go to settings, remove in networks dns domains all suffixe

Specify a custom peer DNS domain for your network. This should not point to a valid domain to avoid overriding DNS results. → NONE (empty)

and you can add your toto**.local** suffixe