No internet access after enabling an exit node

Describe the problem

I use Netbird for accessing some services like Open-Webui from anywhere and that works very well so far.
Recently, I wanted to enable an exit node so that my traffic would be routed through my home network. Sadly, as soon as I enable to only exit node of my network, I don’t have access to internet anymore, only to my local network.

I’m using Linux NixOS and I haven’t tried with another distro.

To Reproduce

Steps to reproduce the behavior:

  1. Select “Exit Node (apollo)” in the network panel

Expected behavior

Internet should be working.

Are you using NetBird Cloud?

I use Netbird Cloud.

NetBird version

0.49.0

Is any other VPN software installed?

No

Debug output

To help us resolve the problem, please attach the following anonymized status output

❯ netbird status -dA
Peers detail:
nixos.netbird.cloud:
NetBird IP: 100.89.32.30
Public key: bbeKUgtUQZRZfmAOEwHcF5pYEgOGommeVL/XzgpLRnQ=
Status: Connecting
-- detail --
Connection type: 
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: 
Last connection update: 8 minutes, 16 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

pixel9.netbird.cloud:
NetBird IP: 100.89.119.164
Public key: gLDy85kngJfhFEOnYueC0y0br0Ybk8TXNFAoNUGLGxI=
Status: Connecting
-- detail --
Connection type: 
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: 
Last connection update: 8 minutes, 16 seconds ago
Last WireGuard handshake: -
Transfer status (received/sent) 0 B/0 B
Quantum resistance: false
Networks: -
Latency: 0s

apollo.netbird.cloud:
NetBird IP: 100.89.174.11
Public key: 6uJW0aOUYeOOC7yhuIFI4bomU5zjDt8/vYAx2nBn5yM=
Status: Connected
-- detail --
Connection type: Relayed
ICE candidate (Local/Remote): -/-
ICE candidate endpoints (Local/Remote): -/-
Relay server address: rels://streamline-es-mad1-0.relay.netbird.io:443
Last connection update: 5 minutes, 43 seconds ago
Last WireGuard handshake: 1 minute, 44 seconds ago
Transfer status (received/sent) 1.5 KiB/19.2 KiB
Quantum resistance: false
Networks: -
Latency: 0s

Events:
[INFO] SYSTEM (3477dc4f-b70a-4a3a-bca1-ed8c69b3786f)
  Message: Network selection changed
  Time: 8 minutes, 12 seconds ago
  Metadata: all: false, append: true, networks: Exit Node (apollo)
[INFO] SYSTEM (d14f6345-9756-47a1-8f79-13275c17225b)
  Message: Network deselection changed
  Time: 5 minutes, 46 seconds ago
  Metadata: all: false, append: false, networks: Exit Node (apollo)
[INFO] SYSTEM (a560a267-01d1-4c4a-b685-952cd8518a51)
  Message: Network map updated
  Time: 5 minutes, 42 seconds ago
[WARNING] DNS (cf169fac-7f4a-42c7-83dd-13dd68effb54)
  Message: All upstream servers failed (fail count exceeded)
  Time: 2 minutes, 12 seconds ago
  Metadata: upstreams: 8.8.8.8:53, 8.8.4.4:53
[INFO] SYSTEM (d515e2d0-3a4d-4b5f-b90c-bf9c4e61a2b2)
  Message: Network selection changed
  Time: 2 minutes, 5 seconds ago
  Metadata: all: false, append: true, networks: Exit Node (apollo)
[INFO] NETWORK (c5e4919e-89de-4838-8d6b-6cc9aef3a55b)
  Message: Default route added
  Time: 2 minutes, 5 seconds ago
  Metadata: id: Exit Node (apollo), network: 0.0.0.0/0, peer: 6uJW0aOUYeOOC7yhuIFI4bomU5zjDt8/vYAx2nBn5yM=
[INFO] NETWORK (7f13922c-ede0-45d3-bf8d-55809fb7a1cb)
  Message: Default route added
  Time: 2 minutes, 5 seconds ago
  Metadata: id: Exit Node (apollo), network: 0.0.0.0/0, peer: 6uJW0aOUYeOOC7yhuIFI4bomU5zjDt8/vYAx2nBn5yM=
[WARNING] DNS (c7197101-7e1b-47be-8a8c-fa8a0e49263b)
  Message: All upstream servers failed (fail count exceeded)
  Time: 1 minute, 51 seconds ago
  Metadata: upstreams: 8.8.8.8:53, 8.8.4.4:53
[INFO] NETWORK (972d51e7-e427-44c0-8229-fbe8512890d2)
  Message: Default route removed
  Time: 1 minute, 48 seconds ago
  Metadata: id: Exit Node (apollo), network: 0.0.0.0/0, peer: 6uJW0aOUYeOOC7yhuIFI4bomU5zjDt8/vYAx2nBn5yM=
[INFO] SYSTEM (ba307d4d-10b1-4838-b9f8-457768cadeeb)
  Message: Network deselection changed
  Time: 1 minute, 48 seconds ago
  Metadata: all: false, append: false, networks: Exit Node (apollo)
OS: linux/amd64
Daemon version: 0.49.0
CLI version: 0.49.0
Management: Connected to https://api.netbird.io:443
Signal: Connected to https://signal.netbird.io:443
Relays: 
[stun:stun.netbird.io:443] is Available
[stun:stun.netbird.io:5555] is Available
[turns:turn.netbird.io:443?transport=tcp] is Available
[rels://streamline-es-mad1-0.relay.netbird.io:443] is Available
Nameservers: 
[8.8.8.8:53, 8.8.4.4:53] for [.] is Available
FQDN: x13.netbird.cloud
NetBird IP: 100.89.196.22/16
Interface type: Kernel
Quantum resistance: false
Lazy connection: false
Networks: -
Forwarding rules: 0
Peers count: 1/3 Connected

Additional context

Here’s the link to the zip file: https://drive.google.com/file/d/11d4KssIOha6Nlnfs-5edcNbjrO-kVoi-/view?usp=sharing

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings

The issue has been solved by disabling checkReversePath in the firewall. Perhaps this should be added to your documentation?

Commit fixing my config: vpn: update, add comment · drupol/infra@acdf095 · GitHub

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.