v0.46.0

Release Notes for v0.46.0

What's New

Client Enhancements

• Added a "Deselect All" option to the Exit Node menu. #3877
• Introduced a block inbound flag to prevent all inbound connections. #3897
• Routes now apply immediately, not only on peer connection. #3907
• Used native route facilities on BSD and Windows. #3862
• Enabled userspace local forwarding to internal interfaces upon request. #3884
• Added debug output similar to wg show. #3922
• Improved DNS match tracing logs. #3928
• Ran registerdns before flushing for consistency. #3926
• Included systemd logs in the debug bundle. #3917
• Increased STUN probe timeout for better status detection. #3930
• Allowed the NetBird service to log to console. #3916
• Logged duplicate client UI PIDs. #3915
• Applied return traffic rules conditionally if firewall is stateless. #3895
• Refactored peer state change subscription mechanism. #3910

Management Improvements

• Supported account creation and retrieval using private domains. #3825
• Enabled REST client impersonation for improved session management. #3879
• Added PostgreSQL support for activity events store. #3890

Other Changes

• Fixed Zitadel user console access. #3446
• Addressed traefik relay accessibility. #3696
• Removed DNF config-manager error. #3925
• Fixed relay exposed address test. #3931
• Updated linter workflows to fail on codespell errors. #3913

New Contributors

• @ghazyami made their first contribution in #3696
• @orchard0 made their first contribution in #3925

Full Changelog: v0.45.3...v0.46.0

v0.45.3

What's Changed

• [client] Fix HA router switch by @pappz in #3889

Full Changelog: v0.45.2...v0.45.3

v0.45.2

What's Changed

• [misc] Add CLA note by @mlsmaycon in #3859
• [misc] Fix CLA link in the PR template by @braginini in #3860
• [management] lazy connection account setting by @pnmcosta in #3855
• [management] Update traffic events pagination filters by @bcmmbaga in #3857
• [management] Extend nameserver match domain validation by @bcmmbaga in #3864
• [client] avoid overwriting state manager on iOS by @pascal-fischer in #3870
• [management] force account id on save groups update by @pnmcosta in #3850
• [management/client/rest] Fix panic on unknown errors by @mohamed-essam in #3865
• [management] Add correlated network traffic event schema by @bcmmbaga in #3680
• [client, android] Fix/android enable server route by @pappz in #3806
• [management] Reset test containers after cleanup by @bcmmbaga in #3885
• [server-test] Install libs for i386 tests by @pappz in #3887
• [client, android] Fix/notifier threading by @pappz in #3807
• [management] Prevent deletion of peers linked to network routers by @bcmmbaga in #3881
• [client] Refactor exclude list handling to use a map for permanent connections by @hakansa in #3901
• [management] Fix user groups propagation by @bcmmbaga in #3902
• [client] Fix peer close deadlock by @pappz in #3904

Full Changelog: v0.45.1...v0.45.2

v0.45.1

This release fixes an issue with traffic flow that caused endless reconnections for some peers.

What's Changed

• [client] Add latest gzipped rotated log file to the debug bundle by @hakansa in #3848
• [client] Do not reconnect to mgm server in case of handler error by @pappz in #3856

Full Changelog: v0.45.0...v0.45.1

v0.45.0

Release Notes for v0.45.0

What's New

Client Enhancements

• Introduced lazy connection support to optimize client startup and resource usage. You can learn more about the feature here. #3379
• Fixed UI notification for new client versions. #3845
• Resolved an issue with legacy route compatibility when connecting to older management servers (pre-v0.30.0). #3854

Management Enhancements

• Added a flag to disable auto-migration, offering more control during deployments. #3840
• Locking strength clause is now optional, improving compatibility and flexibility. #3844
• Migrated the events SQLite store to GORM for more consistent database handling. #3837

Other Changes

• Updated the issue template to streamline community feedback. #3842

Full Changelog: v0.44.0...v0.45.0

v0.44.0

What's Changed

• [signal] adjust log levels by @pascal-fischer in #3813
• [signal] adjust signal log levels 2 by @pascal-fischer in #3817
• [client, android] Do not propagate empty routes by @pappz in #3805
• [management] Add connection type filter to Network Traffic API by @bcmmbaga in #3815
• [management,client] PKCE add query parameter flag prompt=login or max… by @crn4 in #3824
• [management] fix bug missed extra dns labels for a new peer by @crn4 in #3798
• [client] Add FreeBSD desktop client support to OAuth flow by @hakansa in #3822
• [signal] remove stream receive server side by @pascal-fischer in #3820
• [management] extend rest client lib by @pascal-fischer in #3830
• [client] Disable dnssec for systemd explicitly by @lixmal in #3831
• [management] Make startup period configurable by @pascal-fischer in #3767
• [client] Offer to remove netbird data in windows uninstall by @lixmal in #3766

Full Changelog: v0.43.3...v0.44.0

v0.43.3

What's Changed

• [management] Delete service users with account manager by @bcmmbaga in #3793
• [management] policy delete cleans policy rules by @pascal-fischer in #3788
• [client] Return with the correct copied length by @pappz in #3804
• [client] Ignore irrelevant route changes to tracked network monitor routes by @lixmal in #3796
• [client] Add TCP support to DNS service listener by @hakansa in #3790

Full Changelog: v0.43.2...v0.43.3

v0.43.2

What's Changed

• [management] limit peers based on module read permission by @pnmcosta in #3757
• [client] Add debug upload option to netbird ui by @lixmal in #3768
• [management] user info with role permissions by @pnmcosta in #3728
• [client] Add debug for duration option to netbird ui by @lixmal in #3772
• [management] Get account id with order by @mlsmaycon in #3773
• [management] Optimize load account by @mlsmaycon in #3774
• [management] add gorm tag for primary key for the networks objects by @pascal-fischer in #3758
• [client] set TLS ServerName for hostname-based QUIC connections by @alindt in #3673
• [client] Fix stale local records by @lixmal in #3776
• [client] Improve NetBird installation script to handle daemon connection timeout by @hakansa in #3761
• [management] removal of foreign key constraint enforcement on sqlite by @pascal-fischer in #3786
• [management/client/rest] fix panic when body is nil by @mohamed-essam in #3714

New Contributors

• @alindt made their first contribution in #3673

Full Changelog: v0.43.1...v0.43.2

v0.43.1

What's Changed

• [client] add byte counters & ruleID for routed traffic on userspace by @hakansa in #3653
• [management] add missing network admin mapping by @pnmcosta in #3751
• [misc] Exclude client benchmarks from CI by @lixmal in #3752
• [management] Skip IdP cache warm-up on Redis if data exists by @bcmmbaga in #3733
• [client] Feature/upload bundle by @mlsmaycon in #3734
• [misc] Add macOS .pkg installer support to installation script by @hakansa in #3755
• [management] Add network traffic events pagination by @bcmmbaga in #3580
• [client] Revert mgm client error handling by @pappz in #3764

Full Changelog: v0.43.0...v0.43.1

v0.43.0

Release Notes for v0.43.0

What's New

Client Improvements

• Fixed exit node deselection behavior. #3722
• Dynamic firewall rules now set up for DNS routes based on DNS responses. #3702
• Userspace ACL received additional filter test cases to improve robustness. #3730
• GRPC error handling improved to catch flow errors better. #3727
• Ensured destination-type local marks can overwrite NAT marks. #3738
• Fixed macOS privacy warnings when accessing static system information. #3496

These updates enhance reliability and system compatibility across platforms.

Management Improvements

• Introduced a new Auditor Role for account access. (API only, dashboard support is coming soon) #3721
• Introduced a Network Admin Role for network-specific administration. (API only, dashboard support is coming soon) #3720
• Impersonation via PATs (Personal Access Tokens) is now supported for streamlined troubleshooting. #3739

Other Changes

• Improved static checks when running in foreground mode. #3742
• Ran container tests in a more generic way for broader coverage. #3737

Full Changelog: v0.42.0...v0.43.0