ErrLookup › slackhq/nebula
slackhq/nebula
A scalable overlay networking tool with a focus on performance, simplicity and security · Go · 176 source files
Analyzed at dd8f660c0a on 2026-09-03. 466 documented errors.
| Code / Message | Type | Severity | Tags |
|---|---|---|---|
| no connection manager | validation | critical | config, nebula, startup, wiring |
ErrPeerRejected remote address is not within a network that we handle | error_code | warning | firewall, packet-drop, vpn-peer, nebula |
ErrInvalidRemoteIP remote address is not in remote certificate networks | error_code | error | firewall, ip-spoofing, certificate, packet-drop |
| could not parse rule | validation | error | configuration, yaml, firewall-rules, parse-error |
| curve of in-pub does not match ca | console | error | pki, certificate-signing, curve-mismatch, nebula |
| unable to determine IP version from packet | exception | error | freebsd, tun, packet-format, ipv6, network |
ErrInvalidLocalIP local address is not in list of handled local addresses | error_code | error | firewall, routing, configuration, packet-drop |
ErrPublicKeyMismatch public key mismatch between certificate and handshake | error_code | critical | handshake, certificate, public-key, security |
ErrNoMatchingRule no matching rule in firewall table | error_code | warning | firewall, access-control, default-deny, rule-mismatch |
| CoInitializeEx | exception | error | windows, com, network |
| could not calculate alternate fingerprint to verify | validation | error | certificate, fingerprint, p256, signature |
| hostmap LocalIndex ' ' does not match RelayState LocalIndex | error_code | warning | relay, hostmap, state-inconsistency, nebula |
| IEnumNetworkConnections.Next | exception | error | windows, com, winapi, enumeration |
| could not find hostinfo | exception | warning | nebula, hostmap, relay, vpn, diagnostics |
| failed to enable offload on multiqueue tun fd | exception | error | network, tun, linux, ioctl |
ErrTruncatedPEMBlock truncated PEM block | error_code | error | pem, certificate, parsing, go |
| INetworkListManager.GetNetworkConnections | exception | error | windows, com, network-list-manager, winapi |
| unable to unmarshal pubkey | exception | error | go, noise-protocol, ecdh, key-parsing |
| rule # ; | validation | error | go, firewall, config, port-range |
ErrIndexAllocation failed to allocate local index | error_code | error | handshake, resources, index-allocation |
ErrPublicPrivateKeyMismatch public key and private key are not a pair | error_code | error | |
| ${ce.Context} | exception | error | nebula, error-wrapping, contextual-error, go |
| public key in cert and private key supplied don't match | exception | error | certificate, ed25519, key-mismatch, crypto |
| bad IPv4 IHL | exception | error | network, ipv4, checksum, packet-parsing |
| error while reading ca-crt | console | error | |
| unsupported version | exception | error | lighthouse, certificate-version, protocol-compatibility |
| invalid mask | validation | error | config, yaml, cidr, network |
ErrIPv6PacketTooShort ipv6 packet is too short | error_code | warning | network, ipv6, packet-parsing, firewall |
| error while reading in-pub | console | error | |
| failed to run tun device | exception | error | network, darwin, ioctl, tun-device |
| add v4 filter | exception | error | windows, wfp, firewall, network |
| recombine cert | exception | error | handshake, certificate, curve-mismatch |
ErrPublicPrivateCurveMismatch public key does not match private key curve | error_code | error | |
| FwpmEngineOpen0: 0x | exception | error | wfp, windows, bfe, firewall, privileges |
| multiple udp listeners not supported on windows | exception | error | windows, udp, unsupported-feature, configuration |
| bytes did not contain a proper nebula encrypted… | exception | error | pem, banner-mismatch, key-management, go |
| failed to create route.RouteMessage | exception | error | freebsd, routing, route-message, serialization, network |
ErrUnexpectedContent received unexpected handshake content | error_code | error | handshake, protocol, noise |
| %w: %w | exception | error | handshake, index-allocation, resource-exhaustion |
| error while unmarshaling cert | console | error | parsing, pem, certificate, nebula-cert |
| handshake message index | exception | error | |
ErrIncompleteHandshake handshake completed without receiving required content | error_code | error | handshake, protocol, noise |
| invalid certificate | error_code | error | pki, certificate, type-assertion |
| path resolves to the sandbox directory itself | validation | error | path-validation, ssh-debug, security, nebula |
| relay hostinfo is no longer in the hostmap | exception | error | relay, hostmap, race-condition, nebula |
| salt must be at least 128 bits | exception | error | crypto, argon2, salt, validation |
| curve in cert and private key supplied don't match | error_code | error | certificate, curve-mismatch, signing, key-type |
ErrMachineFailed handshake machine has failed | error_code | error | handshake, state-machine, noise |
| error while getting public key with PKCS#11 | console | error | pkcs11, hsm, pki, nebula |
| failed to set tun device head | exception | critical | netbsd, tun, ioctl, network |
| failed to get tun address list | exception | error | network, tun, linux, netlink |
| invalid passphrase or corrupt private key | exception | critical | encryption, passphrase, aes-gcm, decryption |
| packet is too short | exception | warning | linux, virtio, tcp, packet-parsing, network |
| path is outside the sandbox directory | validation | error | path-validation, ssh-debug, security, nebula |
ErrInvalidPEMX25519PrivateKeyBanner bytes did not contain a proper X25519 private key banner | error_code | error | pem, x25519, key-parsing, config |
| unknown tun.network_category | validation | error | windows, configuration, tun, network-category |
| error rx.Open() | exception | error | windows, udp, rio, network |
| unable to discover link_addr for tun interface | exception | error | freebsd, tun, interface-lookup, network-config |
| INetwork.SetCategory | exception | error | windows, com, winapi, privileges, network-category |
| ( ) | exception | info | error-handling, wrapping, logging |
| entry .gateway in tun.unsafe_routes | validation | error | |
| failed to set tun v4 address | exception | error | network, darwin, ipv4, ioctl, address-assignment |
| config ' . | validation | error | nebula, config, error-wrapping, calculated-remotes |
ErrCertPubkeyPresent certificate has unexpected pubkey present | error_code | error | |
ErrAsymmetricCipherKeys noise produced only one cipher key | error_code | critical | handshake, noise, cryptography |
| input did not contain a valid PEM encoded block | exception | error | pem, parsing, key-management, go |
ErrExistingHostInfo existing hostinfo | error_code | info | handshake, hostmap, race-condition |
| no issuer in certificate | validation | error | certificate, issuer, ca-lookup |
ErrUnknownNetworkType unknown network type | error_code | error | firewall, packet-processing, go |
errAdapterNotFound adapter not present in network connections enumeration | exception | warning | windows, network, com, network-category |
| Send ring corrupt | exception | critical | nebula, wintun, windows, tun, ring-buffer |
| entry .route in tun.routes is not contained within the… | validation | error | config, validation, routing |
| use of Curve25519 is not allowed in FIPS 140-only mode | validation | error | fips, crypto, curve25519, pki |
ErrPacketTooShort packet too short | error_code | warning | network, handshake, malformed-packet |
ErrPrivateKeyEncrypted private key must be decrypted | error_code | error | |
| failed to apply logging config | exception | error | |
ErrNoTerminal cannot read password from nonexistent terminal | error_code | error | terminal, password, stdin, automation |
| unsupported sock type: %T | exception | warning | udp, linux, localaddr, sockaddr, unreachable |
| %w: %v | exception | error | handshake, certificate, version-mismatch |
| error while marshalling certificate | console | error | go, cli, certificate, pem |
| error while setting up graphite sink | exception | error | config, stats, graphite, dns, network, nebula |
| error while writing out-pub | console | error | filesystem, file-write, nebula-cert |
| ca-key is encrypted and must be decrypted interactively | console | error | encryption, tty, passphrase, ca-key, nebula-cert |
| invalid curve | error_code | error | certificate, curve, signing, misconfiguration |
ErrMultiMessageUnsupported multi-message handshake patterns are not yet supported by the manager | error_code | error | handshake, unsupported-feature, noise-protocol |
| entry .gateway in tun.unsafe_routes | validation | error | |
| config ` .interfaces` has invalid value (type %T) | validation | error | config, validation, interfaces, allowlist |
ErrAlreadySeen already seen | error_code | warning | replay-attack, crypto, packet-processing |
| entry .gateway in tun.unsafe_routes | validation | error | |
| newTunFromFd not supported in FreeBSD | exception | error | freebsd, tun, unsupported-platform, file-descriptor |
ErrNoCredential no handshake credential available for cert version | error_code | error | handshake, credentials, configuration |
| CoCreateInstance(NetworkListManager) | exception | error | windows, com, network |
| failed to create route.RouteMessage for change | exception | error | openbsd, routing, route-socket, serialization |
| must be using user device | validation | error | service, device, nebula, tun |
notImplemented not implemented | error_code | error | hsm, pkcs11, build-tags, stub, cgo |
ErrUnknownSubtype unknown handshake subtype | error_code | error | handshake, protocol, versioning |
| refusing to overwrite existing CA key | error_code | error | filesystem, safety, cli, overwrite-guard |
| failed to make read call for tun | exception | error | netbsd, tun, read, syscall |
| refusing to sign, root certificate does not match private… | console | error | |
| create TUN device failed | exception | critical | windows, tun, wintun, network-interface |