Skip to content

OPNSense Netbird Plugin: Restoring from Backup file renders OPNsense unusable #5083

@Willenborx

Description

@Willenborx

I recently had to restore my OPNsense configuration including a working Netbird plugin configuration from a backup.

After configuring the os-netbird plugin (os-netbird 1.1) I took a backup of the OPNsense configuration. After some issue during upgrade of the underlying Proxmox 8 to 9, I had to reset to defaults and restore the configuration.

After restoring, the assignment of the wt0 interface did not work. Usually the OPNsense reboots automatically after restore which is not happening because of the assignment issue. There's an error message asking to fix the missing assignment, interface wt0 is "red", Netbird would only connect after disabling and enabling again. After assigning ("green") wt0 again and rebooting the OPNsense manually, the entire interface config is gone and only the default WAN/LAN interfaces are set, the 8 other interfaces did not come back.

I had to remove Netbird from the config-XXX.xml file (plugin reference os-netbird, interface and rules refering to interface wt0, the entire ... section) to get a working configuration. I restored the config from that manually modified file and it worked. This indicates the problem is a os-netbird plugin problem

To Reproduce

Steps to reproduce the behavior:

  1. Backup an OPNsense 25.7.10-amd64 with a working Netbird configuration (os-netbird 1.1) and multiple interfaces from within the OPNsense UI
  2. Reset to factory defaults
  3. Restore from the Backup
  4. You should encounter the wt0 interface problem and an interface problem after reboot.

Expected behavior

I would expect the restored configuration to run after automatic reboot of the OPNsense after reboot, bringing up all interfaces including wt0

Are you using NetBird Cloud?
yes

NetBird version
The plugin os-netbird 1.1 appears to use 0.60.7 (according to app.netbird.io)
OPNsense version 25.7.10-amd64

Is any other VPN software installed?
Built-in Wireguard had been used some time ago but had already been switched off in favor of netbird

Debug output
not possible to deliver netbird debug output since the configuration is now restored

Screenshots
N/A

Additional context
N/A

Have you tried these troubleshooting steps?

  • [no client issue] Reviewed client troubleshooting (if applicable)
  • [included in plugin, most recent plugin used, depend on new plugin] Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions