netbird

What's Changed

• Use backoff.retry to check if upstreams are responsive by @mlsmaycon in https://github.com/netbirdio/netbird/pull/901
• Remove drift between docs and openapi by @pascal-fischer in https://github.com/netbirdio/netbird/pull/907
• Adding static files for pkg creation for Mac by @pascal-fischer in https://github.com/netbirdio/netbird/pull/899
• Add retry to sending signal message by @mlsmaycon in https://github.com/netbirdio/netbird/pull/906

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.20.4...v0.20.5

What's Changed

• Measure write requests separately from read requests by @braginini in https://github.com/netbirdio/netbird/pull/880
• Count only successful HTTP request durations by @braginini in https://github.com/netbirdio/netbird/pull/886
• Check if the cancel function was set before using it by @mlsmaycon in https://github.com/netbirdio/netbird/pull/893
• Windows MTU fix and wg/win version update by @pappz in https://github.com/netbirdio/netbird/pull/896

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.20.3...v0.20.4

What's Changed

• Add telemetry to measure app durations by @braginini in https://github.com/netbirdio/netbird/pull/878

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.20.2...v0.20.3

What's Changed

• Fix panic when getting XORMapped addr by @braginini in https://github.com/netbirdio/netbird/pull/874
• Avoid storing account if no peer meta or expiration change by @mlsmaycon in https://github.com/netbirdio/netbird/pull/875
• Fix issue 872 by @pappz in https://github.com/netbirdio/netbird/pull/873
• Clarify XORMapped panic case by @braginini in https://github.com/netbirdio/netbird/pull/877

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.20.1...v0.20.2

What's Changed

• Remove dependency to base62 package by @pascal-fischer in https://github.com/netbirdio/netbird/pull/863
• Prevent setting primary resolver if using custom DNS port by @mlsmaycon in https://github.com/netbirdio/netbird/pull/861
• Track user block/unblock activity event by @braginini in https://github.com/netbirdio/netbird/pull/865

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.20.0...v0.20.1

What's Changed

• Correct sharedsock BPF fields by @braginini in https://github.com/netbirdio/netbird/pull/835
• Fix sharedsock build on android by @pappz in https://github.com/netbirdio/netbird/pull/837
• Fix incomplete verification URI issue in device auth flow by @bcmmbaga in https://github.com/netbirdio/netbird/pull/838
• Add Zitadel IdP by @bcmmbaga in https://github.com/netbirdio/netbird/pull/833
• creates the install dir before moving the bin dir by @mlsmaycon in https://github.com/netbirdio/netbird/pull/844
• Fix cache lookup filter for service user by @pascal-fischer in https://github.com/netbirdio/netbird/pull/849
• Automatically load IdP OIDC configuration by @bcmmbaga in https://github.com/netbirdio/netbird/pull/847
• Fix preshared key command line arg handling by @pappz in https://github.com/netbirdio/netbird/pull/850
• Block user through HTTP API by @braginini in https://github.com/netbirdio/netbird/pull/846
• Resolve issue with AuthIssuer URL assignment in auth0 by @bcmmbaga in https://github.com/netbirdio/netbird/pull/851
• Add mipsle build to enable netbird for devices such as EdgeRouter X by @ovidiuvio in https://github.com/netbirdio/netbird/pull/842

New Contributors

• @ovidiuvio made their first contribution in https://github.com/netbirdio/netbird/pull/842

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.19.0...v0.20.0

Release Notes

This major release brings two significant improvements to the core connectivity layer of NetBird that drops the local proxy for p2p connections and significantly improves the performance :

1. Userspace implementation of WireGuard's Bind interface to directly handle userspace traffic.
2. Shared socket support for Kernel WireGuard that allows performing NAT traversal (STUN) and WireGuard data packet handling on the same port.

Optional. To disable the Kernel WireGuard module to switch entirely to userspace, run:

mkdir -p /etc/sysconfig/
echo "NB_WG_KERNEL_DISABLED=true" > /etc/sysconfig/netbird
systemctl restart netbird

Client

• Share port between WireGuard and NAT traversal logic (https://github.com/netbirdio/netbird/pull/826)
• Use forked Wireguard-go for custom bind (https://github.com/netbirdio/netbird/pull/823)
• Bind implementation (#779)

Management

• API cleanup (https://github.com/netbirdio/netbird/pull/824)
• Add Azure IDP Manager (https://github.com/netbirdio/netbird/pull/822)

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.16.0...v0.19.0

What's Changed

• Add support for refreshing signing keys on expiry by @bcmmbaga in https://github.com/netbirdio/netbird/pull/808
• FIx account creation issue after auth refactor by @pascal-fischer in https://github.com/netbirdio/netbird/pull/831

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.18.0...v0.18.1

What's Changed

• Use local time zone for display last update changes by @mlsmaycon in https://github.com/netbirdio/netbird/pull/825
• Use forked Wireguard-go for custom bind by @pappz in https://github.com/netbirdio/netbird/pull/823
• Enable roaming for mobile by @braginini in https://github.com/netbirdio/netbird/pull/827

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.17.0...v0.18.0

What's Changed

• Add route management for Android interface by @pappz in https://github.com/netbirdio/netbird/pull/801
• Remove unnecessary uapi open by @pappz in https://github.com/netbirdio/netbird/pull/807
• Send a status notification on offline peers change by @mlsmaycon in https://github.com/netbirdio/netbird/pull/821
• feat: add support for custom device hostname by @Thunderbottom in https://github.com/netbirdio/netbird/pull/789
• Merging full service user feature into main by @pascal-fischer in https://github.com/netbirdio/netbird/pull/819

New Contributors

• @Thunderbottom made their first contribution in https://github.com/netbirdio/netbird/pull/789

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.16.0...v0.17.0

Release Notes

This release brings performance improvements to userspace-based NetBird agents (any platforms that don't support kernel WireGuard, e.g., macOS, Windows, and old Linux). The implementation uses a custom wireguard-go Bind interface, eliminating the need for a local proxy that was decreasing performance dramatically.

Client

• Bind implementation (#779)

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.15.3...v0.16.0

Release Notes

Due to performance reasons, this release reverts rego policy evaluation from the regular network map update that is sent to peers. We will review the policy specification and how to improve performance.

Management

• Use UTC to store date time data (#778)
• Fix network map fetch when adding a peer (#800)
• Rollback simple ACL rule processing (#803)

Client

• Update calculate server state (#796)

Misc

• Fix export path for certificate files (#794)

Client

• Fix nil pointer exception on management connection failure (#790)

Misc

• Add scope and id token environment variables (#785)

Release Notes

Management

• Support remote scope and use id token configuration (#784)

Misc

• Configurable port defaults from setup.env (#783)

Release Notes

The new version introduces Personal Access Tokens.

Personal Access Tokens (PATs) can be used to authenticate against Netbird’s Public API (coming soon).

Users can create as many tokens for themself as they need. Each token requires the user to set how long the token will be valid, we support token expiration between 1 and 365 days; after that, the token will be rejected.

All users can now access the Personal Settings section under the Dashboard > Settings tab. This section shows an overview of all the Personal Access Tokens belonging to a user, when they were created, when they were last used to authenticate, and when they will expire.

When adding a new token, you must provide a name and specify how long the token should be valid.

After successfully creating the token you will see the token in plain text to copy and store in a secure location. Once you close the window, there is no way to retrieve the plain token again.

You can use the new token to send API requests to the management API by adding the header Authorization: Token NEW_TOKEN, below you have an example of a request to the peer's endpoint of our Public API:

curl 'https://api.wiretrustee.com/api/users' -X GET -H "Authorization: Token nbp_61efTM2ZvmiLpaOa5mpx1MLnL5zXc13bcMhm”

More API documentation will come soon!

Management

• Add API authentication with PATs (#774)
• Add activity events (#776)
• Add disable let's encrypt and traefik template (#747)
• Add token source and device flow audience variables (#780)
• Check multiple audience values (#781)

Client

• Add single line installer (#775)
• Fix connection listener (#777)

Dashboard

• Use ID token payload when oidcUser is nil (https://github.com/netbirdio/dashboard/pull/127)
• Handle additional activity events (https://github.com/netbirdio/dashboard/pull/128)
• Feat add custom id claim (https://github.com/netbirdio/dashboard/pull/129)
• Use peerID in the Routes view (https://github.com/netbirdio/dashboard/pull/130)

Big thanks to our new contributors

• @Ruakij made their first contribution in (#747)

What's Changed

• Add custom ice stdnet implementation by @pappz in https://github.com/netbirdio/netbird/pull/754
• Add ipv6 test for stdnet pkg by @pappz in https://github.com/netbirdio/netbird/pull/761
• Add fqdn and address for notification listener by @pappz in https://github.com/netbirdio/netbird/pull/757
• Fix nil pointer exception when create config by @pappz in https://github.com/netbirdio/netbird/pull/765
• Refactor the authentication part of mobile exports by @pappz in https://github.com/netbirdio/netbird/pull/759
• Add OnDisconnecting service callback by @pappz in https://github.com/netbirdio/netbird/pull/767
• Fix slice bounds out of range in msg decryption by @pappz in https://github.com/netbirdio/netbird/pull/768
• Fix pre-shared key query name for android wg configuration by @mlsmaycon in https://github.com/netbirdio/netbird/pull/773
• Feature/add rest endpoints for pat by @pascal-fischer in https://github.com/netbirdio/netbird/pull/766
• Fix broken auto-generated Rego rule by @gigovich in https://github.com/netbirdio/netbird/pull/769

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.14.5...v0.14.6

Key Release Notes

Management

• Introduce a new ACL engine based on Rego (Open Policy Agent) for firewall control (https://github.com/netbirdio/netbird/pull/700)
• Personal access tokens generation as a first iteration toward public API release (https://github.com/netbirdio/netbird/pull/725 and https://github.com/netbirdio/netbird/pull/745)
• Add Keycloak support as an IDP manager (https://github.com/netbirdio/netbird/pull/746)

Agent

• Introduce a Firewall interface to apply granular access control (e.g., connection direction, port, or protocol level) (https://github.com/netbirdio/netbird/pull/740)
• Make the agent run on Android (mobile support) (https://github.com/netbirdio/netbird/pull/735)

Changelog

• Feat rego default policy by @gigovich in https://github.com/netbirdio/netbird/pull/700
• Don't drop Rules from file storage after migration to Policies by @gigovich in https://github.com/netbirdio/netbird/pull/741
• Add version info command to signal server by @pappz in https://github.com/netbirdio/netbird/pull/739
• Feat firewall controller interface by @gigovich in https://github.com/netbirdio/netbird/pull/740
• Adding Personal Access Token generation by @pascal-fischer in https://github.com/netbirdio/netbird/pull/725
• Exchange proxy mode via signal by @mlsmaycon in https://github.com/netbirdio/netbird/pull/727
• Fix connstate indication by @pappz in https://github.com/netbirdio/netbird/pull/732
• Mobile by @pappz in https://github.com/netbirdio/netbird/pull/735
• PAT persistence by @pascal-fischer in https://github.com/netbirdio/netbird/pull/745
• Add Keycloak Idp Manager by @bcmmbaga in https://github.com/netbirdio/netbird/pull/746
• Adjustments for the change server flow by @mlsmaycon in https://github.com/netbirdio/netbird/pull/756
• Disable peer expiration of peers added with setup keys by @braginini in https://github.com/netbirdio/netbird/pull/758
• Add JWT middleware validation failure log by @mlsmaycon in https://github.com/netbirdio/netbird/pull/760

New Contributors

• @bcmmbaga made their first contribution in https://github.com/netbirdio/netbird/pull/746

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.14.4...v0.14.5

Release Notes

Bug fixes & refactor

Management

• Fix: send remote agents updates when peer re-authenticates (#737)

Release Notes

Bug fixes & refactor

Management

• Fix peer network map distribution that caused 0/0 peers to connect (https://github.com/netbirdio/netbird/pull/731)
• Remove Management close steps, in defer doing it already (#729)
• Report offline peers to agents (#728)
• Update ICE to version 2.3.1 (#720)

Agent

• Update ICE to version 2.3.1 to resolve TURN TLS issues (#720)

Release Notes

The new version introduces peer login expiration logic that requires peers added with interactive SSO login (by a user) to expire after a certain period of time (e.g., 24 hours by default). Expired peers will automatically disconnect and will not be able to connect to other machines without reauthenticating.

You can configure this setting globally for the account in the new Settings tab in the dashboard https://app.netbird.io/settings.

Under the Peers tab, you can disable expiration for each peer individually.

Management

• Add peer login expiration (https://github.com/netbirdio/netbird/pull/682, https://github.com/netbirdio/netbird/pull/698)
• New log format (https://github.com/netbirdio/netbird/pull/681)

Agent

• JSON and YAML agent status output (https://github.com/netbirdio/netbird/pull/704)

netbird status --json
netbird status --yaml

• A few refactors and bug fixes (https://github.com/netbirdio/netbird/pull/710, https://github.com/netbirdio/netbird/pull/701)

New contributors

• @pascal-fischer made their first contribution in https://github.com/netbirdio/netbird/pull/705