BUG: RecvError on relayed packet references relay index
Author: brad-definedCreated Aug 26, 2025Updated Jul 20, 2026
What version of nebula are you using? (nebula -version)
1.9.6
What operating system are you using?
linux
Describe the Bug
When Nebula receives a packet that it fails to decrypt, it may respond with a RecvError and mirror the index of the received packet back to the sender ip:port.
Relayed packets use a relay-specific index different than the "main" index to reference the direct sender hostinfo. When a peer responds to a relayed message with a RecvError, the original sender will only check direct peer indexes for how to handle the RecvError. It will not check relayed indexes to find the problematic hostinfo.
Logs from affected hosts
Config files from affected hosts
Source: slackhq/nebula