Connect your devices into a single secure private WireGuard®-based mesh network with SSO/MFA and simple access controls.
The NetBird client will notify users when they peer session expires.
For systems running the GUI client it will send a system notification similar to the example below:
And when there is no CLI running, the daemon service will notify all active terminal sessions as the example below:
The netbird status
command now reports the DNS server addresses and routes for the peer. This information helps troubleshoot network connectivity issues and verify the network configuration. In the case of a routing client, it will link the active routes to the selected routing peers. See outputs below:
Daemon version: development
CLI version: development
Management: Connected
Signal: Connected
Relays: 2/2 Available
Nameservers: 2/3 Available
FQDN: vik-x1-7.netbird.stage
NetBird IP: 100.119.244.41/16
Interface type: Kernel
Quantum resistance: false
Routes: 20.0.0.0/8, 30.0.0.0/8
Peers count: 0/22 Connected
Peers detail:
ubuntu.netbird.stage:
NetBird IP: 100.119.181.187
Public key: +BRlYReQ5wtzZ/nFSwpc3/S+wyfonEtGo3Qr9KT4wTs=
Status: Connected
-- detail --
Connection type: P2P
Direct: true
ICE candidate (Local/Remote): host/srflx
ICE candidate endpoints (Local/Remote): 192.168.100.1:51820/1.2.3.4:51820
Last connection update: 2024-03-08 16:52:17
Last WireGuard handshake: 2024-03-08 16:52:17
Transfer status (received/sent) 316 B/292 B
Quantum resistance: false
Routes: 10.0.0.0/8
Daemon version: development
CLI version: development
Management: Connected to https://stageapi.wiretrustee.com:443
Signal: Connected to https://signal.stage.netbird.io:443
Relays:
[stun:api.netbird.io:3478] is Available
[turn:api.netbird.io:3478?transport=udp] is Available
Nameservers:
[8.8.8.8:53, 8.8.4.4:53] for [.] is Available
[10.72.0.10:53] for [svc.cluster.local] is Unavailable, reason: 1 error occurred:
* read udp 192.168.178.38:50445->10.72.0.10:53: i/o timeout
FQDN: vik-x1-7.netbird.stage
NetBird IP: 100.119.244.41/16
Interface type: Kernel
Quantum resistance: false
Routes: -
Peers count: 1/1 Connected
In this version, we received a community contribution that allows custom service names to be configured when installing and managing daemon services. See examples below:
netbird service install --service netbird-custom
netbird service start --service netbird-custom
netbird service stop --service netbird-custom
Big thanks to @nazarewk for this contribution and all the work he is doing in maintaining the NetBird Nix packages up to date.
We have added an additional connection retry mechanism to the client, where even after the client exits its normal connectivity flow, it will try a new connection attempt every hour for 14 days. This is useful for clients that restart right at the moment of a Management service outage and for incorrect management responses that cause the client to exit its other layers of connectivity retries.
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.2...v0.26.3
We have added a new posture check that allows you to define a set of IP ranges a device must be in before connecting to the network. This check is useful when you want to control access based on a network a peer is located. e.g., you can disable a connection to a routing peer when the peer is connecting from your office network range: https://docs.netbird.io/how-to/manage-posture-checks#peer-network-range-check
See example below:
Now, the management service will download the geolocation databases automatically. This feature is useful for self-hosted users using the geolocation posture check. Learn more at https://docs.netbird.io/selfhosted/geo-support
We have updated the tray icon to reflect the connection status and update availability. Now you can see if the client is connected or disconnected you will see the NetBird icon alternating colors, proving a more clear view of the connection status.
Connected: Disconnected:
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.0...v0.26.1
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.26.0...v0.26.1
These release notes summarize what happened in the previous 0.25 release and what happened with the 0.26 release. There are cool new features and long-awaited enhancements that we want to share.
Our redesigned management dashboard is here. It's faster, more responsive, and has a new look. It's also more intuitive and easier to use. The new dashboard is available to all cloud users and new self-hosted deployments; for existing self-hosted deployments, you can switch between the old and new dashboards at any time by updating the docker image from wiretrustee/dashboard
to netbirdio/dashboard:latest
.
Checkout these screenshots: Peer's view
Access control
DNS Nameservers
We are introducing a new feature called posture checks. This feature allows you to define a set of conditions a device must meet before connecting to the network. For example, you can require that a device has a specific version of a NetBird or Operating system. In this release, we are introducing the first version of this feature, and we are looking forward to your feedback.
It includes 3 types of checks: OS version NetBird version Geo Location
For self-hosted users: The geo-location check won't work without the databases, and we are working on automated download support for it, which will be released very soon.
Check out more at: https://docs.netbird.io/how-to/manage-posture-checks
We are introducing a new running mode called NetStack. In this mode, NetBird enables secure connectivity and access from serverless functions like AWS lambda and Azure Functions to cloud or on-premises servers, containers, databases, and other internal resources. See more at https://docs.netbird.io/how-to/netbird-on-faas
We are introducing an experimental integration with Rosenpass, which provides a quantum-resistant pre-shared key rotation mechanism. Learn more at: https://docs.netbird.io/how-to/enable-post-quantum-cryptography
With this release, we are marking the JSON file store engine as deprecated. New installations will be using SQLite store by default. This change will allow us to support robust relational engines like Postgres.
We plan to keep support for JSON file store engine until v0.28.0, and we will update the community if the plan changes.
To migrate from JSON to SQLite, please follow the guide here: https://docs.netbird.io/selfhosted/sqlite-store#migrating-from-json-store-to-sq-lite-store
We have disabled the SSH server on the client side by default for new installations. You can enable it by adding the flag --allow-server-ssh
to the NetBird client. Existing installations are unaffected by this change and require you to disable SSH if you don't need it.
To enable SSH:
netbird down
netbird up --allow-server-ssh
To disable SSH
netbird down
netbird up --allow-server-ssh=false
Shout-out to @charnesp for this contribution.
GUI client support is coming soon.
As part of our deprecation of Rules in favor of Policies, the users with management on version < v0.15.3 should first upgrade their systems to v0.25.9, run management to properly migrate rules to policies and upgrade to 0.26.0+.
We have added support for group-based access control in the JWT token. Now, you can define a group in the JWT token and use it to control access to the network. Cloud users have a similar feature available with IDP sync.
In 0.25.3, we fixed an issue that prevented users from updating the NetBird settings in Windows RDP connections. Now, you can update the settings in the RDP connection settings.
The ability to control whether the client should automatically connect when the daemon is starting, after an operating system boot, or after netbird service restart
, now if you want to disable the default connection, you can run the following steps:
To disable auto-connect:
netbird down
netbird up --disable-auto-connect
To enable auto-connect:
netbird down
netbird up --disable-auto-connect=false
Shout-out to @oskardotglobal for this contribution.
GUI client support is coming soon.
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.9...v0.26.0
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.8...v0.25.9
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.7...v0.25.8
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.6...v0.25.7
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.5...v0.25.6
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.4...v0.25.5
Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.3...v0.25.4