<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Netbird on Hallblazzar: Dev Journal</title>
    <link>https://dev-journal.hallblazzar.dev/categories/netbird/</link>
    <description>Recent content in Netbird on Hallblazzar: Dev Journal</description>
    <generator>Hugo</generator>
    <language>en</language>
    <lastBuildDate>Sat, 23 May 2026 00:00:00 +0000</lastBuildDate>
    <atom:link href="https://dev-journal.hallblazzar.dev/categories/netbird/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>DNS Resolution Issue Caused By NetBird </title>
      <link>https://dev-journal.hallblazzar.dev/posts/2026_may_23_netbird_dns/</link>
      <pubDate>Sat, 23 May 2026 00:00:00 +0000</pubDate>
      <guid>https://dev-journal.hallblazzar.dev/posts/2026_may_23_netbird_dns/</guid>
      <description>&lt;p&gt;If you use NetBird as VPN solution and occasionally encounter DNS resolution issue, this topic could help.&lt;/p&gt;&#xA;&lt;h1 id=&#34;background&#34;&gt;&#xA;  Background&#xA;  &lt;a class=&#34;heading-link&#34; href=&#34;#background&#34;&gt;&#xA;    &lt;i class=&#34;fa-solid fa-link&#34; aria-hidden=&#34;true&#34; title=&#34;Link to heading&#34;&gt;&lt;/i&gt;&#xA;    &lt;span class=&#34;sr-only&#34;&gt;Link to heading&lt;/span&gt;&#xA;  &lt;/a&gt;&#xA;&lt;/h1&gt;&#xA;&lt;p&gt;I&amp;rsquo;ve been using &lt;a href=&#34;https://netbird.io/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;NetBird&lt;/a&gt; to access my homelab for a while. There are few reasons I chose it:&lt;/p&gt;&#xA;&lt;ul&gt;&#xA;&lt;li&gt;Sovereignty - I can deploy and gain control over all components.&lt;/li&gt;&#xA;&lt;li&gt;Run Out-Of-Box - NetBird provides good web-based GUI to manage clients and certs. I can control everything through the well-designed web interface without having to interact with config files and CLIs&lt;/li&gt;&#xA;&lt;li&gt;Custom DNS - To provide HTTPs/TLS to my homelab services, I want to bind public domains map to service IPs. However, DNS providers like CloudFlare restrict &lt;a href=&#34;https://en.wikipedia.org/wiki/DNS_rebinding&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;DNS rebinding&lt;/a&gt; to public domains and private IPs. Therefore, an alternative approach is binding private IPs to private DNS records, and mapping them to public DNS records via CNAME. This approach requires VPN solutions to support custom private DNS. Though some people might compelely rely on private DNS and private IP, that means they need to manage certificates by themselves as generally modern SSL issuers like &lt;a href=&#34;https://letsencrypt.org/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;Let&amp;rsquo;s Encrypt&lt;/a&gt; require DNS validation, where public domains are necessary (especially for free solutions).&lt;/li&gt;&#xA;&lt;/ul&gt;&#xA;&lt;p&gt;Other VPN solutions also support some features above like &lt;a href=&#34;https://www.zerotier.com/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;ZeroTier&lt;/a&gt; and &lt;a href=&#34;https://tailscale.com/&#34;  class=&#34;external-link&#34; target=&#34;_blank&#34; rel=&#34;noopener&#34;&gt;TailScale&lt;/a&gt;, but their control plane are basically non-open-sourced and cannot be self-hosted.&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
