Cluster peer stuck offline when paired over non-multicast link (Tailscale / VPN) — mDNS does not traverse tailscale0
I maintainer di solito rispondono entro 5 giorni
@ckelseynv ci sta già lavorando.
Dal 18/9/2026.
Valutazione
Questa issue non è ancora stata valutata.
Descrizione
Cluster member stuck "offline" when paired over a non-multicast link (Tailscale / VPN)
Summary
After a successful PIN pairing between two nodes connected only via a non-multicast
link (Tailscale, ZeroTier, Hamachi, corporate VPN), the peer is permanently shown
as "offline" in the Overview tab and members.json lastSeen stays null,
even though every cluster TCP port (14318, 14319, 14321) is reachable both ways
and the broker log shows nvpair-ui-broker and nvpair-cluster-manager running.
Reproduction
- Two machines on the same Tailscale network (e.g.
100.100.108.73and
100.121.35.74), neither on the same LAN. - Settings → Cluster → Add node → invite by IP (Tailscale IP) → accept PIN.
Pairing completes; both members showstate: "member". - Engine-manager logs repeat forever:
remote engine status for <peer-uuid> unavailable: -32000: node <peer-uuid> is not a discovered ec peer. members.jsonfor both members showslastSeen: null, even after minutes.- The UI Overview tab never reports the peer as online.
Root cause
Presence / "online" status is driven by the mDNS discovery layer
(nvpair-node-scanner listening for _nvpair-node._tcp announcements), not by
the cluster-manager's roster probe. Multicast DNS (224.0.0.251) does not
traverse Tailscale's userspace WireGuard tunnels — both nodes send mDNS queries
on tailscale0 (mdns send: ... iface=tailscale0 ip=100.100.108.73) but no
peers' announcements ever arrive, so the peer never enters the discovery store.
Once absent from discovery, nvpair-engine-manager rejects every dial with
-32000: not a discovered ec peer, and nvpair-cluster-manager's lastSeen
timestamp is never updated.
Workaround that works today
Seed configs/manual-nodes.json (Electron-side persistence in
desktop/src/electron/service-bridge/manual-nodes-store.ts) and restart the app.
The supervisor's replayManualNodes() re-adds the entry via node/add over the
broker; nvpair-manual-nodes probes the peer directly over Tailscale every
~10 s, emits node/discovered, the broker merges it into the discovery
snapshot, and engine-manager stops rejecting the dial.
[
{
"id": "dabeast",
"address": "100.121.35.74",
"name": "dabeast"
}
]
After app restart, logs confirm:
[nvpair-manual-nodes] INFO manual node state changed node_id=dabeast addr=100.121.35.74 ollama_up=true node_info_up=true models=13 gpus=2discovery:nodes-changedcarries the peer with full model inventory- Overview tab flips the peer to online
Suggested fixes (any one would address the root cause)
- Document the workaround. Surface manual-node entry in the desktop UI
(currentlySettings → Cluster → Add nodedoes PIN-pairing only — see
desktop/src/ui/components/AddNodeModal.tsx— there is no manual-node
registration UI). - Treat manual-nodes entries as authoritative for presence. When a peer
was paired by IP and not seen via mDNS, fall back tonvpair-manual-nodes
status for heartbeat /lastSeenupdates. - Add a Tailscale-aware discovery path. Either (a) a Tailscale MagicDNS /
unicast DNS-SD fallback when mDNS browse times out, or (b) a peer relay
over the cluster's existing mTLS channel so each node advertises its
cluster peers to the others. - Avoid the crash-on-add churn. Adding a manual node today restarts
nvpair-cluster-manager; combined with the worker's in-memory state loss,
this makes the pairing flow itself brittle.
Logs
14:23:05 [nvpair-manual-nodes] INFO log level changed level=debug
14:39:57 [nvpair-manual-nodes] INFO using stdio transport
14:40:30 [nvpair-ui-broker] ERROR nvpair-errors crashed; service-error pipeline
unavailable until it restarts attempt=3
14:40:32 [nvpair-ui-broker] WARN supervisor: worker exited unexpectedly
worker=cluster-manager attempt=3
14:40:42 [nvpair-engine-manager] WARN remote engine status for
18e94d12-e71f-42c9-8c07-355f68bb2fb8 unavailable: -32000: node
18e94d12-e71f-42c9-8c07-355f68bb2fb8 is not a discovered ec peer
(Repeats every ~20 s. Discovery nodes-changed lists only linuxbeast.)
Environment
- nvpair 0.1.1 (pacman build from
release/0.1.1/linux/NVPAIR-Setup-0.1.1-x64.pacman) - Linux 7.2.5-3-omarchy, kernel 7.2.5-3-omarchy
- Tailscale 100.x on both nodes, direct peer-to-peer connection (
active; direct) - 13 models on peer, 2 GPUs
- Lingua principale
- Go
- Stelle
- 1.6k
- Fork
- 266
- Merge medio
- 3g 15h
- PR unite (30g)
- 23
Preparare l'ambiente
- Nessun Dockerfile né file Docker Compose
- Ha un modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di NVIDIA/Personal-AI-Router
-
enhancement
Difficoltà 4/5 Più di una settimana Idoneità per principianti 12/100
NVIDIA/Personal-AI-Router#162 ·
I maintainer di solito rispondono entro 5 giorni
-
enhancement
Difficoltà 4/5 3-5 giorni Idoneità per principianti 25/100
NVIDIA/Personal-AI-Router#154 · 1 commento ·
I maintainer di solito rispondono entro 5 giorni
-
[Feature]: [Ollama] Alert the user about model pull failuresForse già presa @ckelseynv l’ha presa 2 giorni fa. Apertaenhancement
Difficoltà 3/5 1-2 giorni Idoneità per principianti 56/100
NVIDIA/Personal-AI-Router#152 · 1 commento · 1 assegnatario ·
I maintainer di solito rispondono entro 5 giorni
-
[Bug]: /v1/responses bypasses model-owner filtering in the Ollama proxyForse già presa @ilaigold l’ha presa 3 giorni fa. Aperta
Difficoltà 3/5 Mezza giornata Idoneità per principianti 84/100
NVIDIA/Personal-AI-Router#146 ·
I maintainer di solito rispondono entro 5 giorni
-
Make model download cancellation asynchronousForse già presa @ckelseynv l’ha presa 19 giorni fa. Apertaenhancement
NVIDIA/Personal-AI-Router#115 · 1 assegnatario ·
I maintainer di solito rispondono entro 5 giorni
Tutte le issue di NVIDIA/Personal-AI-Router
Issue simili
-
[schema-coverage] elasticstack_kibana_security_detection_ruleForse già presa @github-actions l’ha presa oggi. Apertaacceptance-tests phase-coding schema-coverage testing triaged
Difficoltà 2/5 1-3 ore Idoneità per principianti 65/100
elastic/terraform-provider-elasticstack#5186 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
jaegertracing/jaeger#9830 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 76/100
apache/rocketmq-dashboard#6318 ·
I maintainer di solito rispondono entro 5 giorni
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 83/100
GoogleCloudPlatform/opentelemetry-operations-collector#710 ·
I maintainer di solito rispondono entro 1 giorno