[GH-ISSUE #2343] iOS and macOS app stuck at registering #4085

Closed
opened 2026-04-20 08:31:28 -05:00 by GiteaMirror · 8 comments
Owner

Originally created by @mrprofessork on GitHub (Jan 26, 2026).
Original GitHub issue: https://github.com/fosrl/pangolin/issues/2343

Describe the Bug

iOS and macOS clients stuck at registering when trying to connect. The pangolin logs show:
client last hole punch is too old and we have sites to send; skipping this register

After removing the private resources and archiving all user client devices, it connects. as soon as I re add a private resource, CIDR or IP address, it stops connecting and goes back to the same error.

Environment

  • OS Type & Version: (e.g., Ubuntu 22.04) ubuntu 24.04.2
  • Pangolin Version: 1.15.1
  • Gerbil Version:1.3.0
  • Traefik Version: v3.4.1
  • Newt Version: v1.9.0
  • Olm Version: (if applicable)

To Reproduce

Create private resource, try to connect ios or macos client, if it gets stuck at registering, remove private resource and archive clients and it will connect.

Expected Behavior

In previous versions, I was able to connect the macos client and get access to private resources remotely.

Originally created by @mrprofessork on GitHub (Jan 26, 2026). Original GitHub issue: https://github.com/fosrl/pangolin/issues/2343 ### Describe the Bug iOS and macOS clients stuck at registering when trying to connect. The pangolin logs show: `client last hole punch is too old and we have sites to send; skipping this register` After removing the private resources and archiving all user client devices, it connects. as soon as I re add a private resource, CIDR or IP address, it stops connecting and goes back to the same error. ### Environment - OS Type & Version: (e.g., Ubuntu 22.04) ubuntu 24.04.2 - Pangolin Version: 1.15.1 - Gerbil Version:1.3.0 - Traefik Version: v3.4.1 - Newt Version: v1.9.0 - Olm Version: (if applicable) ### To Reproduce Create private resource, try to connect ios or macos client, if it gets stuck at registering, remove private resource and archive clients and it will connect. ### Expected Behavior In previous versions, I was able to connect the macos client and get access to private resources remotely.
Author
Owner

@mrprofessork commented on GitHub (Jan 26, 2026):

Restarting Newt seems to have resolved this.

<!-- gh-comment-id:3801666053 --> @mrprofessork commented on GitHub (Jan 26, 2026): Restarting Newt seems to have resolved this.
Author
Owner

@xdonu2x commented on GitHub (Jan 27, 2026):

I have the same problem. Removing private resource and archive client and rstarting Newt didn't resolve this.
Any other ideas are appreciated.

<!-- gh-comment-id:3806859271 --> @xdonu2x commented on GitHub (Jan 27, 2026): I have the same problem. Removing private resource and archive client and rstarting Newt didn't resolve this. Any other ideas are appreciated.
Author
Owner

@mrprofessork commented on GitHub (Jan 27, 2026):

You can try this:
Open UDP port 21820 open on your VPS and in the docker compose. If you have upgraded from older versions of the stack this was not the default. Also please make sure you are on the latest version of gerbil 1.3.0. To do this in your docker compose file just add this line under the ports section: "- 21820:21820/udp"

<!-- gh-comment-id:3806938799 --> @mrprofessork commented on GitHub (Jan 27, 2026): You can try this: Open UDP port 21820 open on your VPS and in the docker compose. If you have upgraded from older versions of the stack this was not the default. Also please make sure you are on the latest version of gerbil 1.3.0. To do this in your docker compose file just add this line under the ports section: "- 21820:21820/udp"
Author
Owner

@xdonu2x commented on GitHub (Jan 27, 2026):

Thank you mrprofessork, need to add the 21820 port to my docker compose file. My iphone can now connect but I still can't access the CIDR private resource. I have explicitly added my user (also the admin) to the private resource.

<!-- gh-comment-id:3807459059 --> @xdonu2x commented on GitHub (Jan 27, 2026): Thank you mrprofessork, need to add the 21820 port to my docker compose file. My iphone can now connect but I still can't access the CIDR private resource. I have explicitly added my user (also the admin) to the private resource.
Author
Owner

@mrprofessork commented on GitHub (Jan 27, 2026):

Ok No problem.

Do you have the CIDR resource like this? 192.168.1.0/24

Also try removing the explicit user from the access policy and if you have more than 1 site, make sure the correct site is selected.

<!-- gh-comment-id:3807492932 --> @mrprofessork commented on GitHub (Jan 27, 2026): Ok No problem. Do you have the CIDR resource like this? 192.168.1.0/24 Also try removing the explicit user from the access policy and if you have more than 1 site, make sure the correct site is selected.
Author
Owner

@xdonu2x commented on GitHub (Jan 27, 2026):

Yes, CIDR 192.168.1.0/24. I only have one site. I even tried host private resource, still can't seem to access it

<!-- gh-comment-id:3807568940 --> @xdonu2x commented on GitHub (Jan 27, 2026): Yes, CIDR 192.168.1.0/24. I only have one site. I even tried host private resource, still can't seem to access it
Author
Owner

@mrprofessork commented on GitHub (Jan 27, 2026):

Hmm, not sure, maybe head over to their discord and see if someone there may be able to help. Without actually seeing the setup I won't be able to offer more help. Sorry about that.

<!-- gh-comment-id:3807589029 --> @mrprofessork commented on GitHub (Jan 27, 2026): Hmm, not sure, maybe head over to their discord and see if someone there may be able to help. Without actually seeing the setup I won't be able to offer more help. Sorry about that.
Author
Owner

@xdonu2x commented on GitHub (Jan 27, 2026):

Thanks again.

<!-- gh-comment-id:3807593778 --> @xdonu2x commented on GitHub (Jan 27, 2026): Thanks again.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#4085