netbird

What's Changed

• Allow owners that did not create the account to delete it by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1825
• Rename variable by @pappz in https://github.com/netbirdio/netbird/pull/1829
• Don't use the custom dialer as non-root by @lixmal in https://github.com/netbirdio/netbird/pull/1823
• Routes is a map, employing safe read/writes ops by @hurricanehrndz in https://github.com/netbirdio/netbird/pull/1760
• Use route active store by @lixmal in https://github.com/netbirdio/netbird/pull/1834
• Use fixed prefs by @lixmal in https://github.com/netbirdio/netbird/pull/1836
• Allow disabling custom routing by @lixmal in https://github.com/netbirdio/netbird/pull/1840
• Add sysctl opts to prevent reverse path filtering from dropping fwmark packets by @lixmal in https://github.com/netbirdio/netbird/pull/1839

New Contributors

• @hurricanehrndz made their first contribution in https://github.com/netbirdio/netbird/pull/1760

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.27.2...v0.27.3

Changelog

• 3ed2f08f Add latency based routing (#1732)
• 4c83408f Add log-level to the management's docker service command (#1820)
• 90bd39c7 Log panics (#1818)
• dd0cf411 Auto restart Windows agent daemon service (#1819)
• 22b2caff Remove dns based cloud detection (#1812)
• c1f66d13 Retry macOS route command (#1817)
• ac0fe602 Fix routing issues with MacOS (#1815)
• c2865771 Fix function names in comments (#1816)
• 1d1d057e Change the dashboard image pull from wiretrustee to netbirdio (#1804)

What's Changed

• Expect correct conn type by @lixmal in https://github.com/netbirdio/netbird/pull/1801

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.27.0...v0.27.1

Changelog

• 3d2a2377 Don't return errors on disallowed routes (#1792)
• 25f5f265 Timeout rule removing loop and catch IPv6 unsupported error in loop (#1791)
• bb0d5c5b Linux legacy routing (#1774)
• 79382951 Feature/exit nodes - Windows and macOS support (#1726)
• 9af532fe Get scope from endpoint url instead of hardcoding (#1770)
• 23a14737 Fix grammar in readme (#1778)

What's Changed

• Eval/higher timeouts by @braginini in https://github.com/netbirdio/netbird/pull/1776

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.6...v0.26.7

What's Changed

• Ignore "Address family not supported by protocol" errors by @lixmal in https://github.com/netbirdio/netbird/pull/1766
• Don't block on failed routing setup by @lixmal in https://github.com/netbirdio/netbird/pull/1768
• Update network security image by @braginini in https://github.com/netbirdio/netbird/pull/1765

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.5...v0.26.6

What's Changed

• Feature/peer validator by @pappz in https://github.com/netbirdio/netbird/pull/1553
• support to configure extra blacklist of iface in "up" command by @hoozecn in https://github.com/netbirdio/netbird/pull/1734
• Fix invalid token on peer login due to the cache race by @braginini in https://github.com/netbirdio/netbird/pull/1763

New Contributors

• @hoozecn made their first contribution in https://github.com/netbirdio/netbird/pull/1734

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.4...v0.26.5

What's Changed

• Update account attributes only when there is a domain by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1701
• Remove deprecated Rules API endpoints by @surik in https://github.com/netbirdio/netbird/pull/1523
• Add support for inviting/deleting users via Zitadel by @synfinatic in https://github.com/netbirdio/netbird/pull/1572
• Disable force jsonfile variable by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1611
• Unblock ACL apply filtering because of dns probes by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1711
• Avoid creating duplicate groups with the same name by @braginini in https://github.com/netbirdio/netbird/pull/1579
• Validate authentik issuer url by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1723
• Add missing dns domain to tests to avoid verbose test logs by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1724
• Remove context niling by @lixmal in https://github.com/netbirdio/netbird/pull/1729
• Add latency checks to peer connection and status output by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1725
• Feature/exit nodes - Linux support by @lixmal in https://github.com/netbirdio/netbird/pull/1667
• Change log level for JWT override message of single account mode by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1747
• In meta info collect chassis serial by @pappz in https://github.com/netbirdio/netbird/pull/1748
• Add limited dashboard view by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1738

New Contributors

• @synfinatic made their first contribution in https://github.com/netbirdio/netbird/pull/1572

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.3...v0.26.4

Release notes

New features

Peer session expiration notification

The NetBird client will notify users when they peer session expires.

For systems running the GUI client it will send a system notification similar to the example below:

And when there is no CLI running, the daemon service will notify all active terminal sessions as the example below:

Enhancements:

NetBird status command reports DNS server addresses and routes

The netbird status command now reports the DNS server addresses and routes for the peer. This information helps troubleshoot network connectivity issues and verify the network configuration. In the case of a routing client, it will link the active routes to the selected routing peers. See outputs below:

Daemon version: development
CLI version: development
Management: Connected
Signal: Connected
Relays: 2/2 Available
Nameservers: 2/3 Available
FQDN: vik-x1-7.netbird.stage
NetBird IP: 100.119.244.41/16
Interface type: Kernel
Quantum resistance: false
Routes: 20.0.0.0/8, 30.0.0.0/8
Peers count: 0/22 Connected

Peers detail:
 ubuntu.netbird.stage:
  NetBird IP: 100.119.181.187
  Public key: +BRlYReQ5wtzZ/nFSwpc3/S+wyfonEtGo3Qr9KT4wTs=
  Status: Connected
  -- detail --
  Connection type: P2P
  Direct: true
  ICE candidate (Local/Remote): host/srflx
  ICE candidate endpoints (Local/Remote): 192.168.100.1:51820/1.2.3.4:51820
  Last connection update: 2024-03-08 16:52:17
  Last WireGuard handshake: 2024-03-08 16:52:17
  Transfer status (received/sent) 316 B/292 B
  Quantum resistance: false
  Routes: 10.0.0.0/8

Daemon version: development
CLI version: development
Management: Connected to https://stageapi.wiretrustee.com:443
Signal: Connected to https://signal.stage.netbird.io:443
Relays:
  [stun:api.netbird.io:3478] is Available
  [turn:api.netbird.io:3478?transport=udp] is Available
Nameservers:
  [8.8.8.8:53, 8.8.4.4:53] for [.] is Available
  [10.72.0.10:53] for [svc.cluster.local] is Unavailable, reason: 1 error occurred:
	* read udp 192.168.178.38:50445->10.72.0.10:53: i/o timeout
FQDN: vik-x1-7.netbird.stage
NetBird IP: 100.119.244.41/16
Interface type: Kernel
Quantum resistance: false
Routes: -
Peers count: 1/1 Connected

Custom service name in the NetBird service commands

In this version, we received a community contribution that allows custom service names to be configured when installing and managing daemon services. See examples below:

netbird service install --service netbird-custom
netbird service start --service netbird-custom
netbird service stop --service netbird-custom

Big thanks to @nazarewk for this contribution and all the work he is doing in maintaining the NetBird Nix packages up to date.

An additional connection retry mechanism

We have added an additional connection retry mechanism to the client, where even after the client exits its normal connectivity flow, it will try a new connection attempt every hour for 14 days. This is useful for clients that restart right at the moment of a Management service outage and for incorrect management responses that cause the client to exit its other layers of connectivity retries.

What's Changed

• Add reverse proxy settings to management.json template (#1639)
• Update bug-issue-report.md label (#1640)
• Add quotes to timestamp examples in openapi spec (#1642)
• Add open-source network security image (#1643)
• Enable review linter with exported docs check (#1647)
• Log version when starting management and signal (#1649)
• Fix cloud information not stored (#1651)
• Enhance DNS failover reliability (#1637)
• Send UI notification on peer session expiry (#1646)
• Register creation time for peer, user and account (#1654)
• Handle canceling schedule and avoid recursive call (#1636)
• Do not fail on virtualized windows systems (#1669)
• Return 1s when next expiration is too low (#1672)
• add ansible collections contributions (#1675)
• Send terminal notification on peer session expiry (#1660)
• Check for record not found when searching the store (#1686)
• Add fallback retry to daemon (#1690)
• add --service/-s flag for specifying system service name (#1691)
• Add routes and dns servers to status command (#1680)

Big thanks to our community contributors

• @zined made their first contribution in (#1669)

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.2...v0.26.3

Release notes

Enhancements:

New posture check: Peer network ranges

We have added a new posture check that allows you to define a set of IP ranges a device must be in before connecting to the network. This check is useful when you want to control access based on a network a peer is located. e.g., you can disable a connection to a routing peer when the peer is connecting from your office network range:
https://docs.netbird.io/how-to/manage-posture-checks#peer-network-range-check

See example below:

Add support for downloading geolocation databases to the management service

Now, the management service will download the geolocation databases automatically. This feature is useful for self-hosted users using the geolocation posture check. Learn more at https://docs.netbird.io/selfhosted/geo-support

Updated GUI icons to reflect the connection status

We have updated the tray icon to reflect the connection status and update availability. Now you can see if the client is connected or disconnected you will see the NetBird icon alternating colors, proving a more clear view of the connection status.

Connected:


Disconnected:

What's Changed

• Add account usage logic (#1567)
• Use SQLite store as default when running tests when env is not set (#1612)
• Add private network posture check (#1606)
• Make SQLite default in configuration generation script (#1610)
• Check git status after go mod tidy on CI (#1614)
• Add quantum resistance status output (#1608)
• Update download-geolite2.sh to use packages URLs (#1624)
• Add support for device flow on getting started with zitadel (#1616)
• Extend bypass middleware with support of wildcard paths (#1628)
• Add support for downloading Geo databases to the management service (#1626)
• Combine update-available and connected/disconnected tray icon states (#1615)
• Rename PrivateNetworkCheck to PeerNetworkRangeCheck (#1629)
• FIx order when validating account settings (#1632)
• Fix invalid cross-device link when moving geolocation databases (#1638)

Big thanks to our community contributors

• @ph1ll made their first contribution in (#1610)

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.0...v0.26.1

What's Changed

• Add account usage logic by @lixmal in https://github.com/netbirdio/netbird/pull/1567
• Use SQLite store as default when running tests when env is not set by @surik in https://github.com/netbirdio/netbird/pull/1612
• Add peer network posture check by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1606
• Make SQLite default in configuration generation script by @ph1ll in https://github.com/netbirdio/netbird/pull/1610
• Check git status after go mod tidy on CI by @surik in https://github.com/netbirdio/netbird/pull/1614
• Add quantum resistance status output by @braginini in https://github.com/netbirdio/netbird/pull/1608
• Update download-geolite2.sh to use packages URLs by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1624
• Add support for device flow on getting started with zitadel by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1616
• Extend bypass middleware with support of wildcard paths by @surik in https://github.com/netbirdio/netbird/pull/1628
• Add support for downloading Geo databases to the management service by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1626
• Combine update-available and connected/disconnected tray icon states by @lixmal in https://github.com/netbirdio/netbird/pull/1615
• Rename PrivateNetworkCheck to PeerNetworkRangeCheck by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1629
• FIx order when validating account settings by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1632

New Contributors

• @ph1ll made their first contribution in https://github.com/netbirdio/netbird/pull/1610

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.0...v0.26.1

What's Changed

• Allow adding 3 nameserver addresses by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1588
• Remove Account.Rules from Store engines by @surik in https://github.com/netbirdio/netbird/pull/1528
• Add initial support of device posture checks by @surik in https://github.com/netbirdio/netbird/pull/1540
• feat: add --disable-auto-connectflag to prevent auto connection after daemon service start (fixes #444, fixes #1382) by @oskardotglobal in https://github.com/netbirdio/netbird/pull/1161
• Disable SSH server by default on client side and add the flag --allow-server-ssh to enable it by @charnesp in https://github.com/netbirdio/netbird/pull/1508
• Extend system meta by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1598
• Make SQLite default for new installations by @surik in https://github.com/netbirdio/netbird/pull/1529
• Fix misassigned peer metadata by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1600
• Mark new peer meta fields required in OpenAPI spec by @surik in https://github.com/netbirdio/netbird/pull/1604
• Add posture checks metrics report by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1603
• Fix copying posture checks definitions by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1605
• Add permissive mode to rosenpass by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1599

New Contributors

• @charnesp made their first contribution in https://github.com/netbirdio/netbird/pull/1508

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.9...v0.26.0

What's Changed

• Make sure the iOS dialer does not get overwritten by @lixmal in https://github.com/netbirdio/netbird/pull/1585

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.8...v0.25.9

What's Changed

• Expose trusted proxy list and counter configuration for realip middleware by @surik in https://github.com/netbirdio/netbird/pull/1535
• Add an extra server reflexive candidate with WG port by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1549
• Properly handle cache error and return userdata by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1571
• Return error when peer is not valid by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1573
• Fix/prevent returning error from external cache by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1576

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.7...v0.25.8

What's Changed

• Get cache from external cache when refresh fails by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1537

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.6...v0.25.7

What's Changed

• Update bug-issue-report and feature request templates by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1499
• Fix data dir creation permissions by @lixmal in https://github.com/netbirdio/netbird/pull/1503
• Fix iOS DNS timeout by @lixmal in https://github.com/netbirdio/netbird/pull/1504
• Restore dns on unclean shutdown by @lixmal in https://github.com/netbirdio/netbird/pull/1494
• getFirstListenerAvailable(): adjust logging levels and add success message by @nazarewk in https://github.com/netbirdio/netbird/pull/1513
• Extract peer real IP from Load Balancer when possible by @surik in https://github.com/netbirdio/netbird/pull/1510
• Export info log level setter for Android by @pappz in https://github.com/netbirdio/netbird/pull/1518
• Update port, ip choice logic in DNS service by @pappz in https://github.com/netbirdio/netbird/pull/1514
• Fix/resolv parser by @pappz in https://github.com/netbirdio/netbird/pull/1520
• Remove query parameter from policy endpoints by @surik in https://github.com/netbirdio/netbird/pull/1527
• Update grpc-middleware to bring changes related to realip by @surik in https://github.com/netbirdio/netbird/pull/1526
• Use dashboard v2 for getting started scripts by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1530

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.5...v0.25.6

What's Changed

• Fix musl build by @xcf13363175 in https://github.com/netbirdio/netbird/pull/1480
• Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in https://github.com/netbirdio/netbird/pull/1401
• Add iOS build test by @pappz in https://github.com/netbirdio/netbird/pull/1412
• Upgrade integrations versions to 8a7c87accb22 by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1482
• Fix preshared key not persisted in config by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1474
• Add getGroupByName method by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1481
• Fix race condition with JWT group sync by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1486
• Extend netbird status command to include health information by @lixmal in https://github.com/netbirdio/netbird/pull/1471
• Tidy up mods by @lixmal in https://github.com/netbirdio/netbird/pull/1492
• Validate upstream reachability on first DNS configuration by @lixmal in https://github.com/netbirdio/netbird/pull/1489
• Support disabled resolved stub server mode by @pappz in https://github.com/netbirdio/netbird/pull/1493
• Allow service users with user role read-only access to all resources by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1484

New Contributors

• @xcf13363175 made their first contribution in https://github.com/netbirdio/netbird/pull/1480
• @lixmal made their first contribution in https://github.com/netbirdio/netbird/pull/1471

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.4...v0.25.5

What's Changed

• Update user's last login when authenticating a peer by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1437
• Update setup.env.example by @wisetux in https://github.com/netbirdio/netbird/pull/1433
• Integrate Rosenpass by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1153
• Remove duplicated chain add by @pappz in https://github.com/netbirdio/netbird/pull/1444
• Update contribution and readme file by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1447
• Use cached wintun zip package in github workflows by @pappz in https://github.com/netbirdio/netbird/pull/1448
• Allow iOS to connect to old management versions by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1440
• Add external-ip support for coturn by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1439
• Soft deprecate Rules API by @surik in https://github.com/netbirdio/netbird/pull/1454
• Fix allow netbird traffic for nftables and userspace by @pappz in https://github.com/netbirdio/netbird/pull/1446
• Fix client SSH server error log by @braginini in https://github.com/netbirdio/netbird/pull/1455
• Fix typo in iface/tun_usp_linux.go by @surik in https://github.com/netbirdio/netbird/pull/1457
• Update Android build env by @pappz in https://github.com/netbirdio/netbird/pull/1456
• Add support for setting interface name and wireguard port by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1467
• Remove debug lines by @pappz in https://github.com/netbirdio/netbird/pull/1468
• Enable group propagation by default by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1469

New Contributors

• @wisetux made their first contribution in https://github.com/netbirdio/netbird/pull/1433

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.3...v0.25.4

What's Changed

• Fix quickstart script incompatibility with latest Zitadel version by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1400
• Update cloud management URL to https://api.netbird.io:443 by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1402
• Use integrated activity store by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1421
• Remove the user from the cache without refreshing it by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1422
• Update management-integrations/additions by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1425
• Fix Windows name on WMI error by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1426
• Fix Windows settings popup with mesa 3d openGL emulator by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1428
• Add iOS support to README by @braginini in https://github.com/netbirdio/netbird/pull/1430
• Fix route change notifier by @pappz in https://github.com/netbirdio/netbird/pull/1431
• Netstack by @pappz in https://github.com/netbirdio/netbird/pull/1403
• Cancel peer expiration scheduled job when deleting account by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1434

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.2...v0.25.3

What's Changed

• Update pion v3 by @pappz in https://github.com/netbirdio/netbird/pull/1398

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.1...v0.25.2