ErrLookup › netbirdio/netbird
netbirdio/netbird
Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls. · Go · 1,551 source files
Analyzed at 93e97f4bf1 on 2026-08-16. 829 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| %s %s | console | error | oidc, oauth2, pkce, management, http |
| Run `netbird profile list --show-id` to see IDs, then selec | console | error | oidc, jwt, claims, management, http |
| host argument required | validation | warning | proxy, authorization, tunnel, overlay, http |
| invalid user@host format | validation | warning | proxy, ip-restrictions, geo, crowdsec, authorization |
| client already started | error_code | warning | proxy, session-token, ed25519, authentication |
| client not started | error_code | error | proxy, grpc, session-validation, availability, oidc |
| engine not started | error_code | warning | proxy, session-token, authorization, authentication |
| tun module not available | exception | warning | proxy, header-auth, authentication, http |
| engine is not initialized | exception | error | proxy, header-auth, infrastructure, availability |
| sync response is not available | exception | error | proxy, authentication, infrastructure, oidc, availability |
| no daemon pipe to connect to | exception | warning | proxy, session-token, ed25519, authentication |
| an earlier read of the policy table has not returned | console | error | proxy, grpc, session-validation, availability, oidc |
| read of the policy table timed out | console | info | proxy, debug, http, observability |
| sync response persistence is disabled | exception | error | proxy, debug, grpc, observability |
| wireguard interface not initialized | exception | info | proxy, debug, http, observability |
| jwt token is required | validation | error | proxy, debug, protobuf, protojson, serialization |
| management client is not initialised | exception | error | go, netbird, daemon, management, sso, session |
| profile not found | exception | error | go, netbird, profile, storage, state |
| watcher closed unexpectedly | exception | error | go, netbird, updater, installer, fsnotify, file-watcher |
| failed to verify signature of artifact keys | exception | critical | go, netbird, security, supply-chain, signature, update |
| no keys found in bundle | exception | error | go, netbird, security, parsing, update, keys |
| failed to decode PEM data | exception | error | go, netbird, security, pem, parsing, keys |
| revocation list verification failed | exception | critical | go, netbird, security, supply-chain, signature, revocation, update |
| service is not up | exception | warning | go, netbird, daemon, lifecycle, idempotency |
| client not initialized | exception | error | go, netbird, daemon, ssh, rpc, lifecycle |
| engine not started | exception | error | go, netbird, daemon, ssh, rpc, lifecycle, retry |
| job not implemented | exception | warning | go, netbird, agent, management, jobs, version-skew |
| peer has no stored SSH host key | console | warning | go, netbird, ssh, host-key, trust-on-first-use |
| connector type change not allowed | validation | error | go, netbird, idp, dex, connector, validation |
| service name is required | validation | error | go, netbird, management, reverse-proxy, validation |
| service name exceeds maximum length of 255 characters | validation | error | go, netbird, management, reverse-proxy, validation, limits |
| at least one target is required | validation | error | go, netbird, management, reverse-proxy, validation |
| private services require at least one access group | validation | error | go, netbird, management, reverse-proxy, access-control, validation |
| private services cannot enable bearer auth (SSO): NetBird-on | validation | error | go, netbird, management, reverse-proxy, sso, access-control, validation |
| service domain is required | validation | error | go, netbird, management, reverse-proxy, validation, http |
| listen_port is not supported for HTTP services | validation | error | netbird, reverse-proxy, validation, configuration, http, go |
| domain is required for TCP/UDP services (used for cluster de | validation | error | netbird, reverse-proxy, validation, configuration, l4, domain, go |
| auth is not supported for TCP/UDP services | validation | error | netbird, reverse-proxy, validation, auth, l4, configuration, go |
| TCP/UDP services must have exactly one target | validation | error | netbird, reverse-proxy, validation, l4, targets, configuration, go |
| proxy_protocol is not supported for UDP services | validation | error | netbird, reverse-proxy, validation, udp, proxy-protocol, l4, go |
| domain is required for TLS services (used for SNI matching) | validation | error | netbird, reverse-proxy, validation, tls, sni, domain, go |
| auth is not supported for TLS services | validation | error | netbird, reverse-proxy, validation, tls, auth, l4, go |
| listen_port is required for TLS services | validation | error | netbird, reverse-proxy, validation, tls, port, configuration, go |
| TLS services must have exactly one target | validation | error | netbird, reverse-proxy, validation, tls, targets, l4, go |
| target_id is required for L4 services | validation | error | netbird, reverse-proxy, validation, l4, targets, configuration, go |
| target port is required for L4 services | validation | error | netbird, reverse-proxy, validation, l4, port, targets, go |
| target host is required for subnet targets | validation | error | netbird, reverse-proxy, validation, l4, subnet, targets, go |
| path is not supported for L4 services | validation | error | netbird, reverse-proxy, validation, l4, path, targets, go |
| session_idle_timeout must be positive for L4 services | validation | error | netbird, reverse-proxy, validation, l4, timeout, configuration, go |
| request_timeout must be positive for L4 services | validation | error | netbird, reverse-proxy, validation, l4, timeout, configuration, go |
| skip_tls_verify is not supported for L4 services | validation | error | netbird, reverse-proxy, validation, l4, tls, options, go |
| path_rewrite is not supported for L4 services | validation | error | netbird, reverse-proxy, validation, l4, path-rewrite, options, go |
| custom_headers is not supported for L4 services | validation | error | netbird, reverse-proxy, validation, l4, headers, options, go |
| invalid pin: must be exactly 6 digits | validation | error | netbird, reverse-proxy, validation, auth, pin, expose, go |
| user group name cannot be empty | validation | error | netbird, reverse-proxy, validation, groups, expose, sso, go |
| record name is required | validation | error | dns, zones, validation, management-api |
| invalid record name format | validation | error | dns, zones, validation, punycode |
| record type is required | validation | error | dns, zones, validation, management-api |
| invalid CNAME target format | validation | error | dns, zones, cname, validation |
| invalid record type, must be A, AAAA, or CNAME | validation | error | dns, zones, validation, record-type |
| TTL cannot be negative | validation | error | dns, zones, validation, ttl |
| A record is required | validation | error | dns, zones, validation, ipv4 |
| A record must be a valid IPv4 address | validation | error | dns, zones, ipv4, validation |
| AAAA record is required | validation | error | dns, zones, validation, ipv6 |
| AAAA record must be a valid IPv6 address | validation | error | dns, zones, ipv6, validation |
| zone name is required | validation | error | dns, zones, validation, management-api |
| zone name exceeds maximum length of 255 characters | validation | error | dns, zones, validation, limits |
| invalid zone domain format | validation | error | dns, zones, validation, punycode |
| at least one distribution group is required | validation | error | dns, zones, groups, validation |
| JWT already used | http | error | auth, jwt, grpc, session, replay-protection |
| invalid domain name | validation | error | dns, nameservers, validation, management-api |
| wildcards not allowed | validation | error | dns, nameservers, validation, wildcard |
| resource not part of network | validation | error | networks, resources, management-api, validation |
| not a valid host, subnet, or domain | validation | error | networks, resources, validation, address-parsing |
| router not part of network | validation | error | management, api, networks, routers, validation |
| peer and peer_groups cannot be set at the same time | validation | error | management, api, networks, routers, validation |
| either peer or peer_groups must be provided | validation | error | management, api, networks, routers, validation |
| posture checks name shouldn't be empty | validation | error | management, api, posture, validation |
| posture checks shouldn't be empty | validation | error | management, api, posture, validation |
| identity provider name is required | validation | error | management, identity-provider, oidc, validation |
| identity provider type is required | validation | error | management, identity-provider, oidc, validation |
| unsupported identity provider type | validation | error | management, identity-provider, oidc, validation, version-compat |
| identity provider issuer is required | validation | error | management, identity-provider, oidc, validation |
| identity provider issuer must be a valid URL | validation | error | management, identity-provider, oidc, url, validation |
| identity provider issuer is unreachable | validation | error | management, identity-provider, oidc, network, connectivity |
| identity provider issuer does not match the issuer returned | validation | error | management, identity-provider, oidc, discovery, validation |
| self deletion is not allowed | validation | error | management, users, api, permissions, validation |
| only integration service user can delete this user | validation | error | management, users, api, permissions, integration |
| password must be at least 8 characters long | validation | error | management, users, password, validation, security |
| password must contain at least {missing} | validation | error | management, users, password, validation, security |
| invalid hash format | exception | error | go, argon2, hashing, password, data-corruption |
| incompatible argon2 version | exception | error | go, argon2, hashing, version-compat, password |
| no connection to management | exception | error | go, grpc, netbird, client, connectivity |
| group not found | exception | warning | rest, groups, api, not-found |
| clusterAddress is required | validation | warning | rest, validation, reverse-proxy, byop |
| tokenID is required | validation | warning | rest, validation, reverse-proxy, tokens |
| unrecognized SyncMessageVersion | validation | error | grpc, versioning, sync, management |
| invalid rule format: expected protocol/port or protocol/port | validation | error | policy, validation, parsing, firewall-rules |
| icmp does not accept ports; use 'icmp' without '/…' | validation | error | policy, icmp, validation, parsing |
| empty port | validation | error | policy, validation, ports, parsing |
| invalid token data | validation | error | relay, auth, hmac, token |
| invalid token data: insufficient length | validation | error | relay, auth, hmac, token, corruption |
| invalid payload: insufficient length | validation | error | relay, auth, hmac, token, payload |
| invalid signature | validation | error | relay, auth, hmac, secrets, configuration |
| invalid server IP | validation | error | relay, dns, netip, client |
| no relay transport available | exception | error | relay, transport, dialer, configuration |
| already waiting for peer to come online | exception | warning | relay, peer, concurrency, subscription |
| no relay server available | exception | error | relay, configuration, picker, network-map |
| invalid message length | validation | error | relay, protocol, parsing, framing |
| invalid magic header | validation | error | relay, protocol, magic-header, framing |
| signal receive stream stalled | console | error | signal, grpc, watchdog, network, reconnection |
| both cert-file and cert-key must be provided when not using | console | error | tls, configuration, signal, startup, certificates |
| peer already registered | exception | warning | signal, grpc, reconnect, peer-registry, sentinel-error |
| peer registered again | exception | info | signal, grpc, stream-lifecycle, sentinel-error |
| WebSocket connection timeout | exception | error | websocket, wasm, grpc, network, browser, timeout |
| WebSocket connection failed | exception | error | websocket, wasm, grpc, network, browser, tls |
| invalid duration | validation | error | json, serialization, duration, api, validation |
| load config: %w | exception | error | android, debug, configuration, file-io |
| generate debug bundle: %w | exception | error | android, debug, file-io, disk |
| upload debug bundle: %w | exception | error | android, debug, network, upload, timeout |
| not connected | exception | warning | android, routes, lifecycle, state, precondition |
| engine is not running | exception | warning | android, routes, lifecycle, engine, precondition |
| invalid DNS address: %s | validation | error | android, dns, validation, ip-address |
| failed to create auth client: %v | exception | error | android, auth, grpc, management, connection |
| failed to check SSO support: %v | exception | error | android, auth, sso, grpc, network |
| login failed: %v | exception | error | android, auth, setup-key, login, management |
| failed to check login requirement: %v | exception | error | android, auth, grpc, network, login |
| interactive sso login failed: %v | exception | error | android, auth, sso, oauth, browser, login |
| failed to get OAuth flow: %v | exception | error | android, go, oauth, network, management |
| getting a request OAuth flow info failed: %v | exception | error | android, go, oauth, idp, network |
| waiting for browser login failed: %v | exception | error | android, go, oauth, browser-flow, timeout |
| failed to list profiles: %w | exception | error | android, go, filesystem, profile, json |
| failed to get active profile: %w | exception | warning | android, go, profile, filesystem, first-run |
| failed to resolve active profile %q: %w | exception | error | android, go, profile, filesystem, state |
| failed to switch profile: %w | exception | error | android, go, profile, filesystem, io |
| failed to add profile: %w | exception | error | android, go, profile, validation |
| id '%s' is not valid | validation | error | android, go, profile, validation, path-traversal |
| profile '%s' does not exist | validation | error | android, go, profile, filesystem |
| failed to read profile config: %w | exception | error | android, go, profile, json, filesystem |
| failed to save config: %w | exception | error | android, go, profile, io, logout |
| failed to rename profile: %w | exception | error | android, go, profile, validation, rename |
| failed to remove profile: %w | exception | error | android, go, profile, filesystem, delete |
| id %q is not valid | validation | error | android, go, profile, validation, path-traversal |
| session extend already in progress | exception | warning | android, go, session, concurrency, oauth |
| engine is not running | exception | error | android, go, session, engine, lifecycle |
| engine is not initialized | exception | error | android, session, engine, initialization, mobile |
| failed to create auth client: %v | exception | error | android, auth, management, network, tls, mobile |
| interactive sso login failed: %v | exception | error | android, sso, oauth, login, mobile, user-cancel |
| invalid filter: %w | validation | warning | capture, cli, bpf, filter, validation, tcpdump |
| duration must not be negative | validation | warning | cli, capture, validation, flags, duration |
| write output: %w | console | error | capture, io, epipe, disk, cli, stdout |
| create output file: %w | console | error | capture, filesystem, cli, permissions, output |
| close output file: %w | console | error | capture, filesystem, nfs, cleanup, cli |
| remove empty output file: %w | console | warning | capture, filesystem, cleanup, permissions, cli |
| rename output file: %w | console | error | capture, filesystem, rename, atomic-write, cli |
| %s | console | error | capture, grpc, daemon, cli, status |
| %s: %w | console | error | grpc, daemon, cli, error-handling, service |
| get active profile: %v | console | error | cli, profile, config, debug, login |
| get current user: %v | console | error | cli, environment, containers, passwd, debug |
| failed to get config: %v | console | error | grpc, daemon, config, cli, debug |
| marshal config: %w | console | warning | proto, serialization, cli, version-skew, unreachable |
| upload failed: %s | console | error | debug, upload, network, tls, cli, support |
| unknown log level: %s. Available levels are: panic, fatal, e | validation | warning | cli, logging, validation, log-level |
| failed to set log level: %v | console | error | grpc, daemon, logging, cli, service |
| invalid duration format: %v | validation | warning | cli, validation, duration, parsing, time |
| failed to get status: %v | exception | error | grpc, daemon, ipc, netbird-cli, debug |
| failed to get log level: %v | exception | error | grpc, version-mismatch, daemon, netbird-cli, log-level |
| failed to set log level to TRACE: %v | exception | error | grpc, log-level, daemon, netbird-cli, version-mismatch |
| invalid persistence value: %s. Use 'on' or 'off' | validation | warning | cli, argument-validation, netbird-cli, debug |
| failed to set sync response persistence: %v | exception | error | grpc, daemon, persistence, netbird-cli, debug |
| invalid port number: %s | validation | warning | cli, validation, port, netbird-cli |
| invalid port number: must be between 1 and 65535 | validation | warning | cli, validation, port, range-check, netbird-cli |
| unsupported protocol %q: must be http, https, tcp, udp, or t | validation | warning | cli, validation, protocol, netbird-cli |
| auth flags (--with-pin, --with-password, --with-user-groups) | validation | warning | cli, validation, flag-combination, protocol, netbird-cli |
| --with-external-port is not supported for %s protocol | validation | warning | cli, validation, flag-combination, port, netbird-cli |
| invalid pin: must be exactly 6 digits | validation | warning | cli, validation, pin, regex, netbird-cli |
| password cannot be empty | validation | warning | cli, validation, password, empty-value, netbird-cli |
| user groups cannot be empty | validation | warning | cli, validation, user-groups, empty-value, netbird-cli |
| connect to daemon: %w | exception | error | grpc, daemon, connection, ipc, netbird-cli |
| expose service: %v | exception | error | grpc, daemon, expose, management, netbird-cli |
| invalid protocol: %w | validation | warning | cli, validation, protocol, defensive, netbird-cli |
| unhandled protocol type: %d | exception | warning | defensive, exhaustive-switch, protocol, dead-code-guard, netbird-cli |
| receive expose event: %v | exception | error | grpc, server-stream, expose, context-canceled, netbird-cli |
| unexpected expose event: %T | exception | error | grpc, type-assertion, oneof, version-mismatch, netbird-cli |
| connection to daemon closed unexpectedly | exception | error | |
| stream error: %w | exception | error | |
| failed to list network: %v | exception | error | |
| kubernetes cluster named %s not found | validation | error | |
| too many Kubernetes clusters returned | exception | error | |
| expected %d response but got %s | exception | error | |
| could not determine home directory: %w | exception | error | |
| set env and flags: %v | exception | error | |
| get current user: %v | exception | error | |
| get active profile: %v | exception | error | |
| --extend cannot be combined with a setup key; setup keys can | validation | error | |
| extend session failed: %v | exception | error | |
| foreground login failed: %v | exception | error | |
| daemon login failed: %v | exception | error | |
| failed to connect to daemon error: %v If the daemon is not r | exception | error | |
| login backoff cycle failed: %v | exception | error | |
| login failed: %v | exception | error | |
| sso login failed: %v | exception | error | |
| start extend session: %v | console | error | |
| wait for extend session: %v | console | error | grpc, daemon, session-extension, cli, netbird |
| switch profile: %v | console | error | profile, daemon, cli, grpc, netbird |
| active profile not found, please run 'netbird profile create | console | error | profile, precondition, cli, netbird, first-run |
| switch profile on daemon: %v | console | error | profile, daemon, grpc, cli, netbird |
| unable to get daemon status: %v | console | error | grpc, daemon, profile-switch, transient, netbird |
| switch profile failed: %w | console | error | profile, grpc, not-found, cli, netbird |
| get active profile file path: %v | console | error | profile, filesystem, environment, cli, netbird |
| read config file %s: %v | console | error | config, filesystem, permissions, corruption, netbird |
| waiting sso login failed with: %v | console | error | grpc, sso, login, daemon, netbird |
| failed to create auth client: %v | console | error | auth, config, url-parsing, tls, netbird |
| check login required: %v | console | error | auth, network, tls, dns, management, netbird |
| interactive sso login failed: %v | console | error | sso, oauth, device-flow, login, netbird |
| getting a request OAuth flow info failed: %v | console | error | sso, oauth, http, management, netbird |
| waiting for browser login failed: %v | console | error | sso, oauth, device-flow, timeout, netbird |
| failed initializing log %v | console | error | logging, configuration, cli, startup, netbird |
| connect to daemon: %v | console | error | grpc, daemon, connection, cli, unix-socket |
| get current user: %v | console | error | os-user, environment, container, cli |
| failed to list network: %v | console | error | grpc, networks, daemon, version-skew |
| failed to select networks: %v | console | error | grpc, networks, validation, cli |
| failed to deselect networks: %v | console | error | grpc, networks, validation, cli |
| connect to service CLI interface: %w | console | error | grpc, daemon, connection, profiles, cli |
| get current user: %w | console | error | os-user, environment, container, profiles |
| get service status: %w | console | error | grpc, daemon, timeout, profiles |
| call service down method: %w | console | error | grpc, daemon, timeout, profiles, teardown |
| profile %q not found | console | error | profiles, not-found, grpc-status, cli |
| add profile failed: %w | console | error | profiles, grpc, validation, daemon |
| invalid anonymize level %q: use %q or %q | validation | error | cli, flags, validation, anonymize |
| failed to read setup key file: %v | console | error | |
| fouldn't get fileInfo; %v | console | error | |
| failed to copy from %s to %s; %v | console | error | |
| failed to connect to daemon error: %v If the daemon is not r | console | error | |
| parse service environment variables: %w | validation | error | |
| invalid environment variable format: %s (expected KEY=VALUE) | validation | error | |
| empty environment variable key in: %s | validation | error | |
| --json-socket requires --enable-json-socket to configure the | validation | error | |
| parse daemon address: %w | console | error | |
| listen daemon interface: %w | console | error | |
| listen daemon JSON interface: %w | console | error | |
| init log: %w | console | error | |
| create service config: %w | console | error | |
| start service: %w | console | error | |
| stop service: %w | console | error | |
| restart service: %w | console | error | |
| get service status: %w | console | error | |
| create service config: %w | console | error | service, installer, environment-variables, cli, go |
| install service: %w | console | error | service, installer, privileges, systemd, go |
| uninstall service: %w | console | error | service, uninstaller, privileges, systemd, go |
| check service status: %w | console | error | service, reconfigure, environment-variables, init-system, go |
| create service: %w | console | error | service, reconfigure, init-system, containers, go |
| uninstall existing service: %w | console | error | service, reconfigure, privileges, systemd, go |
| install service with new config: %w | console | error | service, reconfigure, systemd, privileges, go |
| start service after reconfigure: %w | console | error | service, reconfigure, startup, systemd, go |
| read service params %s: %w | console | error | service, state, file-permissions, go |
| parse service params %s: %w | console | error | service, state, json, corruption, go |
| save service params: %w | console | warning | service, state, file-permissions, go |
| remove service params: %w | exception | error | service, state, file-permissions, cli, go |
| named pipes are only supported on Windows | exception | error | daemon, named-pipe, platform, configuration, go |
| %s: %w | exception | error | daemon, named-pipe, windows, concurrency, go |
| address must be in [unix|tcp|npipe]://[path|host:port|name] | validation | error | daemon, socket, configuration, cli, go |
| unsupported daemon address protocol: %v | validation | error | daemon, socket, configuration, cli, go |
| failed setting %s permissions for %s: %w | console | error | daemon, unix-socket, file-permissions, go |
| --expiration must be a positive duration (e.g., 720h, 365d, | validation | error | signing, cli, validation, go |
| failed to create artifact key: %w | exception | error | signing, cli, file-io, crypto, go |
| at least one --artifact-pub-key-file must be provided | validation | warning | cli, signing, validation, go, cobra |
| failed to bundle public keys: %w | exception | error | cli, signing, error-wrapping, go |
| read root private key file: %w | exception | error | cli, file-io, signing, go |
| failed to parse private root key: %w | exception | error | cli, cryptography, pem, parsing, go |
| generate artifact key: %w | exception | error | cli, cryptography, key-expiry, signing, go |
| write private key file (%s): %w | exception | error | cli, file-io, permissions, go |
| write public key file (%s): %w | exception | error | cli, file-io, permissions, go |
| write signature file (%s): %w | exception | error | cli, file-io, signing, go |
| read public key file: %w | exception | error | cli, file-io, signing, go |
| failed to parse artifact key: %w | exception | error | cli, cryptography, pem, parsing, go |
| bundle artifact keys: %w | exception | error | cli, cryptography, signing, go |
| write public keys file (%s): %w | exception | error | cli, file-io, permissions, go |
| failed to sign artifact: %w | exception | error | cli, signing, error-wrapping, go |
| failed to verify artifact: %w | exception | error | cli, signing, verification, go |
| failed to verify artifact key: %w | exception | error | cli, signing, verification, chain-of-trust, go |
| read private key file: %w | exception | error | cli, file-io, signing, ci, go |
| artifact private key must be provided via %s environment var | exception | warning | cli, configuration, signing, ci, go |
| failed to parse artifact private key: %w | exception | error | go, cli, crypto, ed25519, pem, release-signing |
| read artifact file: %w | exception | error | go, cli, filesystem, release-signing |
| sign artifact: %w | exception | error | go, crypto, ed25519, release-signing, validation |
| write signature file (%s): %w | exception | error | go, cli, filesystem, release-signing |
| read public key file: %w | exception | error | go, cli, filesystem, release-signing |
| failed to parse artifact public key: %w | exception | error | go, crypto, ed25519, pem, release-signing |
| read signature file: %w | exception | error | go, cli, filesystem, release-signing |
| failed to parse signature: %w | exception | error | go, json, crypto, release-signing |
| artifact verification failed: %w | exception | critical | go, crypto, ed25519, verification, release-signing, security |
| read artifact key file: %w | exception | error | go, cli, filesystem, release-signing |
| read root key file: %w | exception | error | go, cli, filesystem, release-signing |
| failed to parse root public key(s): %w | exception | error | go, crypto, ed25519, pem, release-signing |
| read revocation file: %w | exception | error | go, cli, filesystem, release-signing |
| failed to parse revocation list: %w | exception | error | go, json, release-signing, validation |
| artifact key verification failed: %w | exception | critical | go, crypto, ed25519, verification, release-signing, security |
| failed to read private root key file: %w | exception | error | go, cli, filesystem, release-signing, secrets |
| failed to parse private root key: %w | exception | error | go, crypto, ed25519, pem, release-signing, secrets |
| failed to create revocation list: %w | exception | error | go, cli, reposign, json, internal-invariant |
| failed to write output files: %w | exception | error | go, cli, file-io, permissions, reposign |
| failed to read revocation list file: %w | exception | error | go, cli, file-io, revocation, reposign |
| failed to parse revocation list: %w | exception | error | go, cli, json, revocation, reposign |
| invalid key ID: %w | exception | error | go, cli, validation, hex, revocation |
| failed to extend revocation list: %w | exception | error | go, cli, reposign, json, internal-invariant |
| failed to read signature file: %w | exception | error | go, cli, file-io, signature, revocation |
| failed to read public root key file: %w | exception | error | go, cli, file-io, key-management |
| failed to parse public root key: %w | exception | error | go, cli, pem, ed25519, key-management |
| failed to parse signature: %w | exception | error | go, cli, json, signature, reposign |
| failed to validate revocation list: %w | exception | error | go, cli, ed25519, signature, revocation, clock-skew |
| failed to write revocation list file: %w | exception | error | go, cli, file-io, permissions |
| failed to write signature file: %w | console | error | go, cli, file-io, permissions, signature |
| --expiration must be a positive duration (e.g., 720h, 365d, | validation | error | go, cli, validation, cobra, duration |
| failed to generate root key: %w | console | error | go, cli, file-io, key-management, cobra |
| generate root key: %w | console | error | go, cli, ed25519, entropy, crypto |
| write private key file (%s): %w | console | error | go, cli, filesystem, permissions, signing |
| write public key file (%s): %w | console | error | go, cli, filesystem, permissions, signing |
| init log: %w | console | error | go, cli, logging, configuration |
| dial %s: %w | console | error | go, network, ssh, cli, peer-connectivity |
| start port forwarding: %w | console | error | go, ssh, port-forwarding, validation, cli |
| execute command: %w | console | error | go, ssh, cli, process-exit, remote-execution |
| open terminal: %w | console | error | go, ssh, cli, terminal, pty |
| local port forward %s: %w | console | error | go, ssh, port-forwarding, validation, cli |
| remote port forward %s: %w | console | error | go, ssh, port-forwarding, validation, cli |
| invalid remote address: %w | validation | error | go, ssh, port-forwarding, validation, cli |
| invalid local address: %w | validation | error | go, ssh, port-forwarding, validation, cli |
| parse address %s: %w | validation | error | go, ssh, validation, ipv6, network |
| invalid port %s: %w | validation | error | go, ssh, validation, port, cli |
| port 0 is not valid for destination address | validation | error | go, ssh, validation, port, cli |
| port %d out of range (1-65535) | validation | error | go, ssh, validation, port, cli |
| invalid port forward specification: %s (expected format: [lo | validation | error | go, ssh, port-forwarding, validation, cli |
| invalid port forward specification: %s | validation | error | go, ssh, port-forwarding, validation, ipv6 |
| invalid port forward specification: %s (expected format: [lo | validation | error | go, ssh, port-forwarding, validation, cli |
| invalid IPv6 port forward specification: %s | validation | error | go, ssh, port-forwarding, ipv6, validation |
| invalid IPv6 port forward specification: %s (expected [ipv6] | validation | error | go, ssh, port-forwarding, ipv6, validation |
| invalid port: %s | validation | warning | go, cli, ssh, validation, proxycommand |
| create SSH proxy: %w | console | error | go, grpc, cli, ssh, daemon, configuration |
| cannot specify both --all flag and state name | validation | warning | go, cli, validation, flags |
| readiness check: unexpected daemon status %q | console | error | cli, daemon, readiness, version-skew, netbird |
| startup check: no full status available | console | error | cli, daemon, startup, readiness, version-skew, netbird |
| startup check: management not connected | console | error | cli, management, startup, network, netbird |
| startup check: signal not connected | console | error | cli, signal, startup, network, netbird |
| startup check: no relay servers available (0/%d connected) | console | error | cli, relay, startup, network, netbird |
| invalid direction: use 'in' or 'out' | validation | warning | cli, validation, trace, user-input, netbird |
| invalid protocol: use tcp/udp/icmp | validation | warning | cli, validation, trace, user-input, netbird |
| invalid source port: %v | validation | warning | cli, validation, trace, port, user-input, netbird |
| invalid destination port: %v | validation | warning | cli, validation, trace, port, user-input, netbird |
| trace failed: %v | console | error | cli, daemon, grpc, trace, firewall, netbird |
| failed initializing log %v | console | warning | cli, logging, validation, user-input, netbird |
| get current user: %v | console | error | cli, os, container, user-lookup, netbird |
| switch profile: %v | console | error | cli, daemon, profiles, netbird |
| get active profile: %v | console | error | cli, profiles, filesystem, netbird |
| create profile: %w | console | error | cli, daemon, profiles, concurrency, netbird |
| failed to connect to daemon error: %v If the daemon is not r | console | error | cli, daemon, ipc, service, netbird |
| get active profile file path: %v | console | error | cli, foreground, profiles, filesystem, netbird |
| setup config: %v | console | error | cli, foreground, validation, flags, netbird |
| get config file: %v | console | error | cli, foreground, config, filesystem, netbird |
| foreground login failed: %v | console | error | cli, foreground, auth, sso, setup-key, netbird |
| parse custom DNS address: %v | console | error | go, cli, netbird, dns, validation, flag-parsing |
| unable to get daemon status: %v | console | error | go, netbird, grpc, daemon, status, wait-for-ready |
| daemon up failed: %v | console | error | go, netbird, cli, wrapper, registration |
| get setup key: %v | console | error | go, netbird, cli, setup-key, file-io, secrets |
| setup login request: %v | console | error | go, netbird, cli, validation, flags, login-request |
| login backoff cycle failed: %v | console | error | go, netbird, grpc, retry, backoff, login, connectivity |
| sso login failed: %v | console | error | go, netbird, sso, oidc, authentication, login |
| empty string is not a valid input for %s | validation | warning | go, netbird, cli, validation, nat, external-ip-map |
| %s is not a valid input for %s. it should be formatted as "S | validation | warning | go, netbird, cli, validation, nat, external-ip-map |
| %s is not a valid input for %s. it should be formatted as "I | validation | warning | go, netbird, cli, validation, nat, ip-parsing, external-ip-map |
| %s is not a valid input for %s. it should be an IP string or | validation | warning | go, netbird, cli, validation, nat, network-interface, external-ip-map |
| %s is not a valid input for %s. it should not contain two in | validation | warning | go, netbird, cli, validation, nat, external-ip-map |
| invalid interface name %s. Please use the prefix utun follow | validation | warning | go, netbird, cli, macos, validation, interface-name, utun |
| invalid IP or network interface name not found | validation | warning | go, netbird, cli, validation, nat, external-ip-map, ip-parsing |
| %s is invalid, it should be formatted as IP:Port string or a | validation | error | go, netbird, cli, dns, validation, netip, flag-parsing |
| failed to validate dns labels: %v | validation | warning | go, netbird, cli, dns, validation, domain-labels |
| one of SetupKey, JWTToken, or PrivateKey must be provided | validation | error | go, netbird, embedded, validation, authentication, setup-key |
| only one of SetupKey, JWTToken, or PrivateKey can be specifi | validation | error | go, netbird, embedded, validation, authentication, credential-selection |
| invalid MTU: %w | validation | error | config, mtu, validation, embed |
| parse log level: %w | validation | error | config, logging, validation, embed |
| setenv: %w | exception | error | environment, runtime, embed, rare |
| invalid dns labels: %w | validation | error | dns, validation, config, embed |
| create config: %w | exception | error | config, filesystem, embed |
| create auth client: %w | exception | error | auth, network, tls, embed |
| login: %w | exception | error | auth, credentials, network, embed |
| stop error after context done. Stop error: %w. Context done: | exception | error | startup, timeout, lifecycle, embed |
| startup: %w | exception | error | startup, engine, network, embed |
| stop: %w | exception | warning | shutdown, lifecycle, cleanup, embed |
| get net: %w | exception | error | network, userspace, netstack, embed |
| split host port: %w | validation | error | network, validation, listen, embed |
| resolve: %w | validation | error | network, validation, listen, embed |
| expose manager not available | exception | error | expose, lifecycle, proxy, embed |
| expose: %w | exception | error | expose, proxy, network, embed |
| get sync response: %w | exception | error | sync, persistence, state, embed |
| parse filter: %w | validation | error | go, capture, filter, parser, embed, validation |
| create capture session: %w | exception | error | go, capture, io, embed, validation |
| add IP to ipset: %w | exception | error | go, linux, iptables, ipset, firewall, acl, netbird |
| create ipset: %w | exception | error | go, linux, ipset, netlink, firewall, permissions, netbird |
| failed to check rule: %w | exception | error | go, linux, iptables, firewall, acl, permissions, netbird |
| rule already exists | exception | warning | go, linux, iptables, firewall, acl, idempotency, netbird |
| invalid rule type | validation | error | go, type-assertion, firewall, api-misuse, netbird |
| parse IP %s | validation | error | go, ip-parsing, firewall, data-corruption, validation |
| delete ip from ipset: %w | exception | error | go, linux, ipset, netlink, firewall, idempotency, netbird |
| failed to delete rule: %s, %v: %w | exception | error | go, linux, iptables, firewall, acl, idempotency, netbird |
| list chains: %w | exception | error | go, linux, iptables, mangle, kernel-modules, firewall, netbird |
| create ipset %s: %w | exception | error | go, linux, ipset, netlink, permissions, kernel-modules, netbird |
| add IP to ipset %s: %w | exception | error | go, linux, ipset, netlink, firewall, permissions, netbird |
| delete IP from ipset %s: %w | exception | error | go, linux, ipset, netlink, firewall, idempotency, netbird |
| init iptables: %w | exception | error | go, linux, iptables, environment, startup, container, netbird |
| create router: %w | exception | error | go, linux, iptables, firewall, startup, netbird |
| create acl manager: %w | exception | error | go, linux, iptables, firewall, startup, netbird |
| create IPv6 firewall: %w | exception | error | go, linux, ip6tables, ipv6, firewall, environment, netbird |
| init ip6tables: %w | exception | error | go, linux, ip6tables, ipv6, environment, container, netbird |
| create v6 router: %w | exception | error | go, linux, ip6tables, ipv6, firewall, startup, netbird |
| create v6 acl manager: %w | exception | error | iptables, ipv6, firewall, initialization, netbird, go |
| %s init: %w | exception | error | iptables, firewall, initialization, permissions, netbird, go |
| add peer filtering for %s: %w | exception | error | iptables, ipv6, firewall, acl, netbird, go |
| add route filtering: %w | exception | error | iptables, ipv6, firewall, routing, netbird, go |
| add NAT rule: %w | exception | error | iptables, ipv6, firewall, nat, netbird, go |
| add v6 NAT rule: %w | exception | error | iptables, ipv6, firewall, nat, partial-state, netbird, go |
| remove v4 NAT rule: %w | exception | warning | iptables, firewall, nat, cleanup, netbird, go |
| remove v6 NAT rule: %w | exception | warning | iptables, ipv6, firewall, nat, cleanup, netbird, go |
| cleanup notrack chain: %w | exception | warning | iptables, firewall, cleanup, raw-table, ebpf-proxy, netbird, go |
| reset v6 acl manager: %w | exception | warning | iptables, ipv6, firewall, acl, cleanup, netbird, go |
| reset v6 router: %w | exception | warning | iptables, ipv6, firewall, routing, cleanup, netbird, go |
| reset acl manager: %w | exception | warning | iptables, firewall, acl, cleanup, netbird, go |
| reset router: %w | exception | warning | iptables, firewall, routing, cleanup, netbird, go |
| delete state: %w | exception | info | iptables, firewall, state, cleanup, filesystem, netbird, go |
| allow netbird v4 interface traffic: %w | exception | error | iptables, firewall, userspace, acl, netbird, go |
| allow netbird v6 interface traffic: %w | exception | error | iptables, ipv6, firewall, userspace, acl, netbird, go |
| add DNAT rule: %w | exception | error | iptables, ipv6, firewall, dnat, netbird, go |
| update v6 set: %w | exception | error | iptables, ipv6, ipset, firewall, partial-state, netbird, go |
| add inbound DNAT: %w | exception | error | iptables, ipv6, firewall, dnat, netbird, go |
| remove inbound DNAT: %w | exception | error | iptables, ipv6, firewall, dnat, cleanup, netbird, go |
| add output DNAT: %w | exception | error | |
| remove output DNAT: %w | exception | error | |
| raw table not available | exception | error | |
| add output sport notrack rule: %w | exception | error | |
| add output dport notrack rule: %w | exception | error | |
| add prerouting wg notrack rule: %w | exception | error | |
| add prerouting proxy notrack rule: %w | exception | error | |
| create chain: %w | exception | error | |
| add output jump rule: %w | exception | error | |
| add prerouting jump rule: %w | exception | error | |
| check chain exists: %w | exception | error | |
| remove output jump rule: %w | exception | error | |
| remove prerouting jump rule: %w | exception | error | |
| clear and delete chain: %w | exception | error | |
| create containers: %w | exception | error | |
| generate route rule spec: %w | exception | error | |
| add route rule: %v | exception | error | |
| delete route rule: %v | exception | error | |
| decrement ipset counter: %w | exception | error | |
| decrement counter: %w | exception | error | |
| create set %s: %w | exception | error | iptables, ipset, linux, netfilter, permissions, netbird |
| add element to set %s: %w | exception | error | iptables, ipset, ipv6, linux, netbird |
| destroy set %s: %w | exception | error | iptables, ipset, cleanup, linux, netbird |
| add legacy routing rule: %w | exception | error | iptables, legacy, compatibility, linux, netbird |
| add nat rule: %w | exception | error | iptables, nat, masquerade, linux, netbird |
| add inverse nat rule: %w | exception | error | iptables, nat, masquerade, linux, netbird |
| remove nat rule: %w | exception | error | iptables, nat, cleanup, linux, netbird |
| remove inverse nat rule: %w | exception | error | iptables, nat, cleanup, linux, netbird |
| remove legacy routing rule: %w | exception | error | iptables, legacy, cleanup, linux, netbird |
| add legacy forwarding rule %s -> %s: %v | exception | error | iptables, legacy, linux, netbird, error-wrapping |
| remove legacy forwarding rule %s -> %s: %v | console | error | iptables, legacy, cleanup, linux, netbird |
| remove legacy forwarding rule: %v | console | error | iptables, legacy, cleanup, multierror, linux, netbird |
| clean jump rules: %w | console | warning | iptables, cleanup, linux, netbird |
| check chain %s: %w | console | warning | iptables, cleanup, linux, netbird, diagnostics |
| check chain %s in table %s: %w | console | warning | iptables, cleanup, linux, netbird, kernel-modules |
| clear and delete chain %s in table %s: %w | console | error | iptables, cleanup, chains, linux, netbird |
| create chain %s in table %s: %w | exception | error | iptables, conntrack, initialization, linux, netbird |
| insert established rule: %w | exception | error | iptables, conntrack, initialization, observability, linux, netbird |
| add static nat rules: %w | exception | error | network, linux, iptables, nat, netbird |
| add jump rules: %w | exception | error | network, linux, iptables, firewall, netbird |
| add mangle prerouting rule: %w | console | error | network, linux, iptables, mangle, conntrack |
| add mangle postrouting rule: %w | console | error | network, linux, iptables, mangle, conntrack |
| remove mangle prerouting rule: %w | console | warning | network, linux, iptables, cleanup, mangle |
| remove mangle postrouting rule: %w | console | warning | network, linux, iptables, cleanup, mangle |
| add outbound masquerade rule: %v | exception | error | network, linux, iptables, nat, masquerade |
| add return masquerade rule: %v | exception | error | network, linux, iptables, nat, masquerade |
| add jump to MSS clamp chain: %w | console | error | network, linux, iptables, mss-clamping, mangle |
| add outbound MSS clamp rule: %w | console | error | network, linux, iptables, mss-clamping, tcp |
| failed to insert established rule: %v | exception | error | network, linux, iptables, conntrack, firewall |
| add nat postrouting jump rule: %v | exception | error | network, linux, iptables, nat, firewall |
| add mangle prerouting jump rule: %v | exception | error | network, linux, iptables, mangle, firewall |
| add nat prerouting jump rule: %v | exception | error | network, linux, iptables, nat, dnat |
| apply network -s: %w | console | error | network, linux, ipset, iptables, routing |
| apply network -d: %w | console | error | network, linux, ipset, iptables, routing |
| error while adding marking rule for %s: %v | console | error | network, linux, iptables, mangle, routing |
| invalid translated port: %v | validation | error | |
| add rule %s: %w | console | error | |
| enable forwarding: %w | console | error | |
| rollback rule %s: %w | console | error | |
| delete DNAT rule: %w | console | error | |
| delete SNAT rule: %w | console | error | |
| delete forward rule: %w | console | error | |
| create or get ipset: %w | exception | error | |
| add prefix to ipset: %w | exception | error | |
| add inbound DNAT rule: %w | exception | error | |
| delete inbound DNAT rule: %w | exception | error | |
| create chain %s: %w | exception | error | |
| add OUTPUT jump rule: %w | exception | error | |
| add output DNAT rule: %w | exception | error | |
| delete output DNAT rule: %w | exception | error | |
| create ipset %s: %w | exception | error | |
| add netlink monitor: %w | exception | error | |
| create router: %w | exception | error | |
| create acl manager: %w | exception | error | |
| create IPv6 firewall: %w | exception | error | |
| create v6 router: %w | exception | error | |
| create v6 acl manager: %w | exception | error | |
| create v6 work table: %w | exception | error | |
| v6 router init: %w | exception | error | |
| v6 acl manager init: %w | exception | error | |
| v4: %w | exception | error | |
| v6: %w | exception | error | |
| create work table: %w | exception | error | |
| router init: %w | exception | error | |
| acl manager init: %w | exception | error | |
| init IPv6 firewall (required because peer has IPv6 address): | exception | error | |
| add peer filtering for %s: %w | exception | error | |
| add route filtering: %w | exception | error | |
| refresh v4 rules: %w | exception | error | |
| refresh v6 rules: %w | exception | error | |
| add NAT rule: %w | exception | error | |
| add v6 NAT rule: %w | exception | error | |
| remove v4 NAT rule: %w | exception | error | |
| remove v6 NAT rule: %w | exception | error | |
| create default allow rules: %w | exception | error | |
| create v6 default allow rules: %w | exception | error | |
| flush allow input netbird rules: %w | exception | error | |
| reset router: %v | exception | error | |
| reset v6 router: %v | exception | error | |
| cleanup netbird tables: %v | exception | error | |
| flush: %w | exception | error | |
| delete state: %v | exception | error | |
| list tables: %w | exception | error | |
| flush v6 acl: %w | exception | error | |
| add DNAT rule: %w | exception | error | |
| update v6 set: %w | exception | error | |
| add inbound DNAT: %w | exception | error | |
| remove inbound DNAT: %w | exception | error | |
| add output DNAT: %w | exception | error | |
| remove output DNAT: %w | exception | error | |
| notrack chains not initialized | exception | error | |
| flush notrack rules: %w | exception | error | |
| flush chain creation: %w | exception | error | |
| list chains: %w | exception | error | |
| list of tables: %w | exception | error | |
| 'filter' table not found | exception | error | |
| create containers: %w | exception | error | |
| remove accept filter rules: %w | exception | error | |
| remove filter prerouting rules: %w | exception | error | |
| get rules from nat table: %w | exception | error | |
| delete rule %s: %w | exception | error | |
| flush: %w | exception | error | |
| initialize tables: %v | exception | error | |
| apply source: %w | exception | error | |
| apply destination: %w | exception | error | |
| convert protocol to number: %w | exception | error | |
| create or get ipset: %w | exception | error | |
| refresh rules map: %w | exception | error | |
| delete: %w | exception | error | |
| decrement set counter: %w | exception | warning | go, nftables, refcount, netlink, firewall, linux |
| error adding set %s: %w | exception | error | go, nftables, netlink, ipset, firewall, linux |
| flush error: %w | exception | error | go, nftables, netlink, ipset, firewall, linux |
| error adding prefixes (%d) to set %s: %w | exception | error | go, nftables, netlink, ipset, firewall, scalability, linux |
| add legacy routing rule: %w | exception | error | go, nftables, firewall, legacy, routing, compatibility |
| add nat rule: %w | exception | error | go, nftables, netlink, nat, masquerade, firewall, routing |
| add inverse nat rule: %w | exception | error | go, nftables, nat, masquerade, routing, firewall, linux |
| insert rules for %s: %w | exception | error | go, nftables, netlink, nat, rollback, firewall, routing |
| remove prerouting rule: %w | exception | error | go, nftables, nat, stale-state, routing, firewall, linux |
| remove legacy routing rule: %w | exception | error | go, nftables, legacy, stale-state, routing, firewall, linux |
| remove legacy forwarding rule %s -> %s: %w | exception | error | |
| remove legacy forwarding rule: %v | exception | error | |
| add accept rules to external chains: %w | exception | error | |
| add iptables forward rule: %v | exception | error | |
| add iptables input rule: %v | exception | error | |
| flush external chain rules: %w | exception | error | |
| list rules: %w | exception | error | |
| remove external chain rules: %w | exception | error | |
| list chains: %v | exception | error | |
| get rules from %s/%s: %v | exception | error | |
| delete rule from %s/%s: %v | exception | error | |
| remove iptables forward rule: %v | exception | error | |
| remove iptables input rule: %v | exception | error | |
| remove inverse prerouting rule: %w | exception | error | |
| flush remove nat rules %s: %w | exception | error | |
| remove prerouting rule %s -> %s: %w | exception | error | nftables, netlink, firewall, nat, linux |
| list rules for chain %s: %w | exception | error | nftables, netlink, ruleset, linux |
| enable forwarding: %w | exception | error | sysctl, ip-forwarding, permissions, containers, linux |
| flush rules: %w | exception | error | nftables, netlink, nat, kernel, batch-commit |
| invalid translated port: %v | validation | error | validation, port-range, port-forwarding |
| delete dnat rule: %w | exception | error | nftables, netlink, dnat, firewall |
| delete snat rule: %w | exception | error | nftables, netlink, snat, masquerade |
| get set %s: %w | exception | error | nftables, nft-set, netlink, routing |
| add elements to set %s: %w | exception | error | nftables, nft-set, netlink, scalability |
| add inbound DNAT rule: %w | exception | error | nftables, netlink, dnat, batch-commit |
| delete inbound DNAT rule %s: %w | exception | error | nftables, netlink, dnat, cleanup |
| flush delete inbound DNAT rule: %w | exception | error | nftables, netlink, batch-commit, dnat |
| create NAT output chain: %w | exception | error | nftables, netlink, nat-chain, initialization |
| add output DNAT rule: %w | exception | error | nftables, netlink, dnat, permissions, linux |
| delete output DNAT rule %s: %w | exception | error | nftables, netlink, dnat, cleanup, linux |
| flush delete output DNAT rule: %w | exception | error | nftables, netlink, cleanup, linux |
| source: %w | exception | error | nftables, ipset, routing, linux |
| create nftables manager: %w | exception | error | nftables, recovery, startup, permissions, linux |
| reset nftables manager: %w | exception | error | nftables, cleanup, recovery, linux |
| remove windows firewall rule: %w | exception | warning | windows, firewall, netsh, cleanup |
| remove windows v6 firewall rule: %w | exception | warning | windows, firewall, netsh, ipv6, cleanup |
| update local IPs: %w | exception | error | uspfilter, firewall, interface-init, userspace |
| set filter: %w | exception | error | uspfilter, firewall, acl, mode-mismatch |
| block wg v4 net: %w | exception | error | uspfilter, routing, firewall, validation |
| block wg v6 net: %w | exception | error | uspfilter, routing, ipv6, firewall |
| create forwarder: %w | exception | error | uspfilter, forwarder, netstack, gvisor, routing |
| determine routing: %w | exception | error | uspfilter, routing, configuration, env-flags |
| block invalid routed: %w | exception | error | uspfilter, routing, firewall, partial-state |
| delete block rule: %w | exception | warning | uspfilter, routing, cleanup, idempotency |
| create NIC: %v | exception | error | gvisor, netstack, forwarder, uspfilter |
| failed to add protocol address: %s | exception | error | gvisor, netstack, forwarder, validation |
| add IPv6 protocol address: %s | exception | error | go, netbird, gvisor, netstack, ipv6, firewall |
| creating default subnet: %w | exception | info | go, netbird, gvisor, netstack, defensive |
| creating default v6 subnet: %w | exception | info | go, netbird, gvisor, netstack, ipv6, defensive |
| set promiscuous mode: %s | exception | error | go, netbird, gvisor, netstack, race, firewall |
| set spoofing: %s | exception | error | go, netbird, gvisor, netstack, race, firewall |
| panic: %v | panic | error | go, netbird, panic, race, firewall, diagnostics |
| output DNAT not supported without native firewall | exception | warning | go, netbird, firewall, nat, userspace, netstack |
| mixed address families: src=%s dst=%s | exception | error | go, netbird, gopacket, ipv6, validation, tracer |
| set network layer for TCP checksum: %w | console | error | go, netbird, gopacket, tcp, checksum, tracer |
| set network layer for UDP checksum: %w | console | error | go, netbird, gopacket, udp, checksum, tracer |
| serialize packet: %w | console | error | go, netbird, gopacket, serialization, tracer, buffer |
| build packet: %w | console | error | go, netbird, tracer, gopacket, wrapper |
| dial context: %w | console | error | go, netbird, grpc, tls, network, timeout |
| ICEBind has not been initialized yet | console | warning | go, netbird, ice, pion, wireguard, lifecycle |
| received error "%w" while configuring interface %s with port | console | error | go, netbird, wireguard, kernel, netlink, privileges |
| received error "%w" while updating peer on interface %s with | exception | error | go, netbird, wireguard, kernel, netlink, peers |
| get peer: %w | exception | error | go, netbird, wireguard, kernel, peers, idempotency |
| error removing peer %s from interface %s: %w | exception | error | go, netbird, wireguard, kernel, peers, retry |
| error re-adding peer %s to interface %s with allowed IPs %v: | exception | error | go, netbird, wireguard, kernel, peers, state-loss |
| received error "%w" while removing peer %s from interface %s | exception | error | go, netbird, wireguard, kernel, netlink, peers |
| received error "%w" while adding allowed Ip to peer on inter | exception | error | wireguard, wgctrl, netlink, kernel, go, networking |
| parse peer key: %w | exception | error | wireguard, key-parsing, base64, go, validation |
| remove allowed IP %s on interface %s: %w | exception | error | wireguard, wgctrl, netlink, concurrency, peer-management |
| wgctl: %w | exception | error | wireguard, wgctrl, kernel-module, privileges, go, environment |
| get device %s: %w | exception | error | wireguard, wgctrl, interface-management, netlink, go |
| failed to parse endpoint address: %w | exception | error | wireguard, userspace, endpoint, netip, parsing, go |
| parse peer key: %w | exception | error | wireguard, key-parsing, base64, userspace, validation |
| get IPC config: %w | exception | error | wireguard-go, userspace, uapi, lifecycle, go |
| parse IPC config: %w | exception | warning | wireguard-go, uapi, parsing, defense-in-depth, go |
| peer %s not found | exception | error | wireguard-go, peer-management, idempotency, concurrency, userspace |
| failed to remove peer: %s | exception | error | wireguard-go, uapi, error-wrapping, lifecycle, userspace |
| remove endpoint address: %w | exception | error | wireguard-go, uapi, atomicity, recovery, userspace |
| IpcGet failed: %w | exception | warning | wireguard-go, stats, uapi, lifecycle, diagnostics |
| ipc get: %w | exception | warning | wireguard-go, stats, cache, uapi, lifecycle |
| decode peerID: %w | exception | warning | wireguard-go, uapi, hex, parsing, stats |
| parse rx_bytes: %w | exception | error | |
| parse tx_bytes: %w | exception | error | |
| parse handshake sec: %w | exception | error | |
| failed to decode hex key: %w | exception | error | |
| invalid key length: expected 32 bytes, got %d | exception | error | |
| device not initialized | exception | error | |
| error creating tun device: %s | exception | error | |
| error assigning ip: %s | exception | error | |
| error configuring interface: %s | exception | error | |
| add v4 address: %s: %w | exception | error | |
| add route %s via %s: %s: %w | exception | error | |
| tun device %s panic: %v | panic | error | |
| invalid tunnel file descriptor: fd is 0 (Swift failed to loc | exception | error | |
| recreate: %w | exception | error | |
| assign addr: %w | exception | error | |
| set mtu: %w | exception | error | |
| error configuring interface: %s | exception | error | |
| device is not ready yet | exception | error | |
| last ip: %w | exception | error | |
| error creating tun device: %s | exception | error | |
| error configuring interface: %s | exception | error | netstack, wireguard, userspace, configuration, go |
| device is not ready yet | exception | error | netstack, lifecycle, state, go |
| this function has not been implemented in Netstack for Andro | exception | warning | android, netstack, not-implemented, go |
| error creating tun device: %s | exception | critical | tun, linux, freebsd, userspace, permissions, container |
| error assigning ip: %s | exception | error | netlink, ip-address, linux, freebsd, userspace, go |
| error configuring interface: %s | exception | error | wireguard, userspace, configuration, ipc, go |
| device is not ready yet | exception | error | lifecycle, state, userspace, go |
| error creating tun device: %s | exception | critical | windows, wintun, adapter, driver, permissions |
| got error when getting ip interface %s | exception | error | windows, winipcfg, adapter, transient, mtu |
| set IPv4 interface MTU: %s | exception | error | windows, mtu, winipcfg, configuration |
| error assigning ip: %s | exception | error | windows, ip-address, routes, winipcfg |
| error configuring interface: %s | exception | error | windows, wireguard, configuration, ipc |
| interface has not been initialized yet | exception | error | windows, lifecycle, guid, adapter, state |
| couldn't find module path for %s, error: %v | exception | warning | linux, kernel-module, wireguard, filesystem, fallback |
| up: %w | exception | error | freebsd, ifconfig, interface, privileges, go |
| link by name: %w | exception | error | freebsd, ifconfig, interface, ip-address, go |
| assign addr: %w | exception | error | freebsd, ifconfig, ip-address, netmask, go |
| link by name: %w | exception | error | linux, netlink, interface, permissions, go |
| link add: %w | exception | critical | linux, netlink, wireguard, kernel-module, permissions |
| link set mtu: %w | exception | error | |
| link setup: %w | exception | error | |
| list addr: %w | exception | error | |
| del addr: %w | exception | error | |
| add addr %s: %w | exception | error | |
| failed to parse line: %s | exception | error | |
| interface name not found in ifconfig output | exception | error | |
| failed to parse MTU: %w | exception | error | |
| no output returned | exception | error | |
| invalid output | exception | error | |
| command run: %w | exception | error | |
| parse ifconfig output: %w | exception | error | |
| is exist: %w | exception | error | |
| del: %w | exception | error | |
| create link: %w | exception | error | |
| del on rename link: %w: %w | exception | error | |
| rename link: %w | exception | error | |
| link by name: %w | exception | error | go, freebsd, ifconfig, interface, netbird |
| create %s interface: %w | exception | error | go, freebsd, wireguard, kernel-module, interface |
| parse interface name: %w | exception | error | go, freebsd, ifconfig, parsing |
| change name %q -> %q: %w | exception | error | go, freebsd, ifconfig, rename, interface |
| parse new name: %w | exception | error | go, freebsd, ifconfig, parsing, rename |
| destroy %s interface: %w | exception | error | go, freebsd, ifconfig, destroy, teardown |
| set interface mtu: %w | exception | error | go, freebsd, ifconfig, mtu, configuration |
| set interface addr: %w | exception | error | go, freebsd, ifconfig, ip-address, configuration |
| up %s interface: %w | exception | error | go, freebsd, ifconfig, interface, startup |
| failed to close wireguard interface %s: %w | exception | error | go, netbird, tun, shutdown, wireguard |
| failed to remove WireGuard interface %s: %w | exception | error | go, netbird, interface, teardown, wireguard |
| userspace packet filtering not handled on this device | exception | warning | go, netbird, packet-filter, kernel-mode, userspace |
| timeout when waiting for interface %s to be removed | exception | error | go, netbird, interface, teardown, timeout |
| failed to remove interface %s: %w - %s | exception | error | go, bsd, macos, ifconfig, teardown |
| failed to delete link %s: %w | exception | error | go, linux, netlink, interface, teardown |
| failed to remove interface %s: %w - %s | exception | error | go, windows, netsh, adapter, teardown |
| invalid address %s | validation | error | go, udp, mux, ice, network |
| address %s is part of the NetBird network %s, refusing to wr | exception | warning | go, netbird, routing-loop, udp, security |
| decode v6 overlay address: %w | exception | error | go, netbird, ipv6, encoding, network-map |
| expected IPv6 address, got %s | exception | error | go, netbird, ipv6, address-parsing, version-mismatch |
| failed to bind free port for eBPF proxy | exception | error | go, netbird, ebpf, port-binding, udp, linux |
| failed to read UDP packet from WG: %w | exception | warning | go, netbird, ebpf, udp, shutdown-race, linux |
| failed to forward local WG packet (%d) to remote turn conn: | exception | error | go, netbird, relay, turn, udp, connection-lifecycle |
| setting fwmark failed: %w | exception | error | go, netbird, raw-socket, fwmark, capabilities, linux |
| converting fd to file failed | exception | error | go, netbird, raw-socket, unreachable-invariant, linux |
| converting file to packet conn failed: %w | exception | error | go, netbird, raw-socket, fd-exhaustion, linux |
| proxy not started | exception | error | go, netbird, udp-proxy, lifecycle, api-misuse |
| remote conn: %s | exception | warning | go, netbird, udp-proxy, teardown, multierror |
| local conn: %s | exception | warning | go, netbird, udp-proxy, teardown, multierror |
| src faker raw conn: %s | exception | warning | go, netbird, udp-proxy, raw-socket, teardown, race |
| serialize layers: %w | exception | error | go, netbird, gopacket, udp-proxy, mtu, serialization |
| write to raw conn: %w | exception | warning | go, netbird, raw-socket, ipv6, loopback, udp-proxy |
| set network layer for checksum: %w | exception | warning | go, netbird, gopacket, unreachable-invariant, checksum |
| apply firewall rule: %w | console | error | go, netbird, acl, firewall, nftables, version-mismatch |
| add route rule: %w | console | error | go, netbird, acl, routing, firewall, policy |
| delete route rule: %w | console | warning | go, netbird, acl, firewall, reconciliation, cleanup |
| parse source range: %w | console | error | go, netbird, acl, cidr, validation, management-api |
| determine destination: %w | console | error | go, netbird, acl, cidr, destination, policy |
| invalid protocol: %w | console | error | go, netbird, acl, protocol-enum, version-mismatch, policy |
| invalid action: %w | console | error | |
| skipping firewall rule: %s | console | error | |
| invalid port: %w | console | error | |
| invalid direction, skipping firewall rule | console | error | |
| add firewall rule: %w | console | error | |
| decode source prefix: %w | console | error | |
| invalid IP address, skipping firewall rule | console | error | |
| invalid protocol type: %s | console | error | |
| invalid action type: %d | console | error | |
| parse destination: %w | console | error | |
| invalid provider configuration received from management: %s | validation | error | |
| doing request failed with error: %v | exception | error | |
| reading body failed with error: %v | exception | error | |
| request device code returned status %d error: %s | exception | error | |
| unmarshaling response failed with error: %v | exception | error | |
| failed to create request access token: %v | exception | error | |
| failed to request access token with error: %v | exception | error | |
| failed reading access token response body with error: %v | exception | error | oauth2, device-flow, network, idp, timeout |
| access token response returned code: %s | exception | error | oauth2, device-flow, idp, http-5xx, network |
| parsing token response failed with error: %v | exception | error | oauth2, device-flow, json, idp, captive-portal, proxy |
| validate access token failed with error: %v | exception | error | oauth2, jwt, audience, idp, azure-ad, configuration |
| failed to create auth client: %v | exception | error | grpc, management, connectivity, pkce, tls |
| getting pkce authorization flow info failed with error: %v | exception | warning | grpc, pkce, management, sso, version-mismatch |
| no SSO provider returned from management. Please proceed wit | exception | error | sso, management, setup-keys, grpc, configuration |
| the management server, %s, does not support SSO providers, p | exception | error | sso, management, version-mismatch, grpc, upgrade |
| getting device authorization flow info failed with error: %v | exception | error | grpc, management, sso, network, error-handling |
| invalid provider configuration received from management: %s | validation | error | pkce, configuration, sso, idp, administrator |
| no available port found from configured redirect URLs: %q | exception | error | pkce, redirect-url, ports, windows, hyper-v, concurrency |
| could not generate random state: %v | exception | error | crypto, entropy, pkce, sandbox, vm |
| could not create a code verifier: %v | exception | error | crypto, entropy, pkce, sandbox, vm |
| failed to parse redirect URL: %v | exception | error | pkce, redirect-url, url-parsing, configuration, validation |
| PKCE authorization flow failed: %v | exception | error | oauth2, pkce, authentication, idp, network |
| authentication failed: %s | exception | error | oauth2, idp, consent, authentication |
| authentication failed: Invalid state | exception | error | oauth2, state, csrf, pkce, authentication |
| authentication failed: missing code | exception | error | oauth2, pkce, callback, redirect |
| authentication failed: invalid access token - %w | exception | error | oauth2, jwt, audience, idp, configuration |
| %w: %v | exception | warning | session, sso, time, protocol, errors-is |
| %w: %v (now=%v) | exception | warning | session, sso, time, clock-skew, errors-is |
| could not generate %d random bytes: %v | exception | error | crypto, entropy, random, sandbox, environment |
| token received is empty | validation | error | oauth2, jwt, idp, validation |
| token is not a well-formed JWT | validation | error | oauth2, jwt, idp, opaque-token |
| required token field audience is absent | validation | error | oauth2, jwt, audience, idp, claims |
| parse overlay address %q: %w | exception | critical | configuration, netip, management, overlay, connect |
| close archive writer: %w | exception | error | go, netbird, zip, debug-bundle, disk-full, io |
| add readme: %w | exception | error | go, netbird, zip, debug-bundle, disk-full, io |
| add status: %w | exception | error | go, netbird, zip, debug-bundle, status, disk-full |
| add sync response: %w | exception | error | go, netbird, debug-bundle, sync-response, protojson, anonymization |
| add README file to zip: %w | exception | error | go, netbird, zip, debug-bundle, io, disk-full |
| add status file to zip: %w | exception | error | go, netbird, zip, debug-bundle, status, io |
| anonymize sync response: %w | exception | error | go, netbird, debug-bundle, anonymization, network-map |
| unexpected config protocol type %v | panic | critical | go, netbird, panic, grpc, protocol-mapping, management, config |
| Failed to exchange code for token | http | error | |
| Failed to validate token | http | error | |
| Forbidden | http | error | |
| OIDC requires TLS — use port 443 | http | error | |
| invalid session token | http | error | |
| authentication service unavailable | http | error | |
| Unauthorized | http | error | |
| Client not found: {} | http | error | |
| Error getting status: {} | http | error | |
| Error getting sync response: {} | http | error | |
| No sync response available for client: {} | http | error | |
| Error marshaling sync response: {} | http | error | |
| value parameter is required | http | warning | http, proxy, debug-ui, validation, query-param |
| invalid value %q: %v | http | warning | http, proxy, debug-ui, validation, uint32 |
| client not found | http | warning | http, proxy, debug-ui, packet-capture, not-found |
| invalid duration: {} | http | warning | http, proxy, debug-ui, packet-capture, duration, validation |
| duration must not be negative | http | warning | http, proxy, debug-ui, packet-capture, duration, validation |
| failed handling request | http | warning | http, management, rest, client-disconnect, json |
| invalid path | http | warning | security, path-traversal, http, upload, go |
| failed to create upload dir | http | error | filesystem, permissions, upload, go, deployment |
| file already exists | http | warning | http, conflict, upload, idempotency, go |
| failed to create file | http | error | filesystem, permissions, upload, go |
| failed to write file | http | error | filesystem, disk-full, upload, go |
| failed to presign URL | http | error | aws, s3, presign, credentials, go |
| id query param required | http | warning | http, query-params, upload, go |
| unauthorized | http | warning | http, unauthorized, headers, upload, go |
| failed to marshal response | http | error | json, serialization, go, dead-code |
| unclosed parenthesis | validation | error | parser, filter, capture, go, syntax |
| xembed: X error (ignored): %s (code=%d, request=%d.%d, resou | console | info | x11, xlib, system-tray, linux, c |
| xembed: X I/O error (connection lost) | console | error | x11, xlib, connection-lost, linux, c |