netbird

Release Notes

Agent

• Increased reconnect retries to the Management service (https://github.com/netbirdio/netbird/pull/379)
  In some cases (e.g., IoT), devices might be offline for a long time. With this PR device will keep retrying for 3+ months passively with the exponential back-off. The agent won't retry if the device has been off-boarded (removed from the network).
• Improved Easy SSH. The agent does a user login now when connecting to the embedded SSH server and loads the user's profile (https://github.com/netbirdio/netbird/pull/380)
• Enhanced netbird status command to display connected peers and connection status to Management and Signal (https://github.com/netbirdio/netbird/pull/382)

Short status version:

$ netbird status
Daemon status: Connected
Management: Connected
Signal:  Connected
NetBird IP: 100.119.62.6/16
Interface type: Kernel
Peers count: 2/3 Connected

Detailed status version:

$ netbird status -d
Peers detail:
 Peer:
  NetBird IP: 100.119.85.4
  Public key: 2lI3F+fDUWh58g5oRN+y7lPHpNcEVWhiDv/wr1/jiF8=
  Status: Disconnected
  -- detail --
  Connection type: -
  Direct: false
  ICE candidate (Local/Remote): -/-
  Last connection update: 2022-07-07 12:21:31

 Peer:
  NetBird IP: 100.119.201.225
  Public key: +jkH8cs/Fo83qdB6dWG16+kAQmGTKYoBYSAdLtSOV10=
  Status: Connected
  -- detail --
  Connection type: P2P
  Direct: true
  ICE candidate (Local/Remote): host/host
  Last connection update: 2022-07-07 12:21:32

 Peer:
  NetBird IP: 100.119.230.104
  Public key: R7olj0S8jiYMLfOWK+wDto+j3pE4vR54tLGrEQKgBSw=
  Status: Connected
  -- detail --
  Connection type: P2P
  Direct: true
  ICE candidate (Local/Remote): host/host
  Last connection update: 2022-07-07 12:21:33

Daemon status: Connected
Management: Connected to https://api.netbird.io:33073
Signal:  Connected to https://signal2.wiretrustee.com:10000
NetBird IP: 100.119.62.6/16
Interface type: Kernel
Peers count: 2/3 Connected

Release Notes

This release brings seamless SSH access to your machines without managing SSH keys. Every Mac or Linux machine can now run an embedded SSH server that allows access from other connected network participants. SSH server can be enabled per-peer in the Peer view in Web UI.

SSH to a remote machine:

sudo netbird ssh <PEER_IP>

More about NetBird Easy SSH in our blog post.

Management

• SSH key distribution to peers (https://github.com/netbirdio/netbird/pull/361)
• Control the embedded SSH server on peers via HTTP API (https://github.com/netbirdio/netbird/pull/361)

Agent

• Automatic SSH key generation (https://github.com/netbirdio/netbird/pull/361)
• Embedded SSH server support for Mac and Linux (https://github.com/netbirdio/netbird/pull/361)
• Added NetBird SSH command netbird ssh <PEER IP>. Has to be run as sudo.

Web UI

• Enable/Disable the embedded SSH server on peers (https://github.com/netbirdio/dashboard/pull/54)

Release Notes

Minor bug fixes on the NetBird agent.

Major release ref.

Agent

• Fix installation on Mac M1 (https://github.com/netbirdio/netbird/pull/365).

Release Notes

Release blogpost.

This release brings simple Access Controls (ACLs) to the system. 🎆
It is now possible to group peers using a simple tagging system and then apply rules to groups. This allows limiting access to certain resources.

Management

• OpenAPI specification and API Adjustment (#356).
• Introduced ACL logic to group peers and apply rules (#356) to groups.

Web UI

• Added the Access Control UI view to manage rules (https://github.com/netbirdio/dashboard/pull/49)
• Added grouping (or tagging) logic to the Peers UI view (https://github.com/netbirdio/dashboard/pull/49)

Release Notes

CLI

• Minor improvements of interactive login terminal output
• Fix corner cases of the UP command

Daemon

• Fix leaking gorotines that were Signal connection status
• Set LoginNeeded status when peer is removed from Management

Release Notes

Release blogpost

Management

• Multi-user accounts.
  Netbird used to have a single admin user per account. With this release, multiple users can share an account.
• New registering users sharing the same organization domain automatically join the organization's account.
• Support new device registration with the login through IDP.

CLI

• CLI commands migration: wiretrustee replaced with netbird.
  Old commands are deprecated and will be removed in future versions. Example:
  E.g. wiretrustee up -> netbird up
• Packages repo migration (URLs)
• User-friendly device registration with IDP.
  Calling netbird up without a --setup-key will trigger login through the browser and IDP.
• Indirect support for MFA. If your IDP is configured with

Desktop UI

• Netbird got desktop UIs for Linux, Mac, and Windows - a simple systray application implemented with fyne.
• User-friendly device registration with IDP.
  Clicking Connect button in the systray menu will trigger login through the browser and IDP.

Admin Panel (Dashboard)

• New tab - "Users". Displays all users belonging to an account.
• Search and filter for Peers, Setup Keys, and Users.
• Pagination for Peers.
• Fixes for tables on mobile devices.

Changelog

Management

• Fix outdated Network.Serial (enable persistence to the store) (#260)

Client

• Split client app into CMD and Daemon service (#239)
  Now there is a daemon service running in the background and cmd can control it.
• Introduce UP and Down commands to start and stop daemon
  wiretrustee up
wiretrustee down
• Minor bug fixes

Changelog

Management

• Group users for the same private (organization) domain.
  With this change, all users, belonging to the same org will share the network.
  E.g. [email protected] and [email protected] will end up in the same network.
• Minor code refactor.
• Improved testing for the HTTP handler.

Client

• Enable no-proxy mode.
  Client apps, running on hosts with public static IPs or connecting to other peers in the same private network will connect directly Wireguard to Wireguard, bypassing any proxies.

Changelog

Client

• Support single port for server reflexive candidates (ICE UniversalUDPMux) https://github.com/pion/ice/pull/419
• Minor fixes

Management

• Minor Store related bug fixes

Changelog

Management

• Added Serial field to the gRPC protocol and Network struct to order network updates (#179, #191)
• Return Peer version in the HTTP API (#229)

Dashboard

• Display Peer version in the Peers view

Client

• Support new Management gRPC field Serial and discard outdated network updated (#193)
• Support WireguardNT on WIndows (updated WireGuard driver) (#192)
• Refactored iface package (#192)
• Fix detection of WireGuard kernel module on non-amd64 archs (#200)
• Fix Login exit on a single attempt to connect to management (#220)
• Send Wiretristee version to Management (#218, #222)

Changelog

• Removed beta tag from release
• Client stability improvements

Docker images

• docker pull wiretrustee/signal:0.2.3
• docker pull wiretrustee/management:0.2.3
• docker pull wiretrustee/management:debug-latest

Changelog

1fb8b74 set IF arm6 and empty attribute for package (#146)

Docker images

• docker pull wiretrustee/signal:0.2.1-beta.5
• docker pull wiretrustee/management:0.2.1-beta.5
• docker pull wiretrustee/management:debug-latest