Wiretrustee Versions Save

Release notes

These release notes summarize what happened in the previous 0.25 release and what happened with the 0.26 release. There are cool new features and long-awaited enhancements that we want to share.

New features

Dashboard V2 is here

Our redesigned management dashboard is here. It's faster, more responsive, and has a new look. It's also more intuitive and easier to use. The new dashboard is available to all cloud users and new self-hosted deployments; for existing self-hosted deployments, you can switch between the old and new dashboards at any time by updating the docker image from wiretrustee/dashboard to netbirdio/dashboard:latest.

Checkout these screenshots: Peer's view

Access control

DNS Nameservers

Posture checks

We are introducing a new feature called posture checks. This feature allows you to define a set of conditions a device must meet before connecting to the network. For example, you can require that a device has a specific version of a NetBird or Operating system. In this release, we are introducing the first version of this feature, and we are looking forward to your feedback.

It includes 3 types of checks: OS version NetBird version Geo Location

For self-hosted users: The geo-location check won't work without the databases, and we are working on automated download support for it, which will be released very soon.

Check out more at: https://docs.netbird.io/how-to/manage-posture-checks

NetStack mode

We are introducing a new running mode called NetStack. In this mode, NetBird enables secure connectivity and access from serverless functions like AWS lambda and Azure Functions to cloud or on-premises servers, containers, databases, and other internal resources. See more at https://docs.netbird.io/how-to/netbird-on-faas

Rosenpass integration

We are introducing an experimental integration with Rosenpass, which provides a quantum-resistant pre-shared key rotation mechanism. Learn more at: https://docs.netbird.io/how-to/enable-post-quantum-cryptography

Behavioral changes:

Deprecation of JSON store engine

With this release, we are marking the JSON file store engine as deprecated. New installations will be using SQLite store by default. This change will allow us to support robust relational engines like Postgres.

We plan to keep support for JSON file store engine until v0.28.0, and we will update the community if the plan changes.

To migrate from JSON to SQLite, please follow the guide here: https://docs.netbird.io/selfhosted/sqlite-store#migrating-from-json-store-to-sq-lite-store

SSH server disabled by default on new installations

We have disabled the SSH server on the client side by default for new installations. You can enable it by adding the flag --allow-server-ssh to the NetBird client. Existing installations are unaffected by this change and require you to disable SSH if you don't need it.

To enable SSH:

netbird down
netbird up --allow-server-ssh

To disable SSH

netbird down
netbird up --allow-server-ssh=false

Shout-out to @charnesp for this contribution.

GUI client support is coming soon.

Upgrade step for management version < 0.15.3

As part of our deprecation of Rules in favor of Policies, the users with management on version < v0.15.3 should first upgrade their systems to v0.25.9, run management to properly migrate rules to policies and upgrade to 0.26.0+.

Enhancements:

JWT group-based access control (self-hosted only)

We have added support for group-based access control in the JWT token. Now, you can define a group in the JWT token and use it to control access to the network. Cloud users have a similar feature available with IDP sync.

Access NetBird settings in Windows RDP connections

In 0.25.3, we fixed an issue that prevented users from updating the NetBird settings in Windows RDP connections. Now, you can update the settings in the RDP connection settings.

Control client auto-connection when starting

The ability to control whether the client should automatically connect when the daemon is starting, after an operating system boot, or after netbird service restart, now if you want to disable the default connection, you can run the following steps:

To disable auto-connect:

netbird down
netbird up --disable-auto-connect

To enable auto-connect:

netbird down
netbird up --disable-auto-connect=false

Shout-out to @oskardotglobal for this contribution.

GUI client support is coming soon.

What's Changed

• Allow adding 3 nameserver addresses (#1588)
• Remove Account.Rules from Store engines (#1528)
• Add initial support of device posture checks (#1540)
• feat: add --disable-auto-connectflag to prevent auto connection after daemon service start (#1161)
• Disable SSH server by default on client side and add the flag --allow-server-ssh to enable it (#1508)
• Extend system meta (#1598)
• Make SQLite default for new installations (#1529)
• Fix misassigned peer metadata (#1600)
• Mark new peer meta fields required in OpenAPI spec (#1604)
• Add posture checks metrics report (#1603)
• Fix copying posture checks definitions (#1605)
• Add permissive mode to rosenpass (#1599)

Big thanks to our community contributors

• @charnesp made their first contribution in (#1508)
• @oskardotglobal made another contribution in (#1161)

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.9...v0.26.0

What's Changed

• Make sure the iOS dialer does not get overwritten by @lixmal in https://github.com/netbirdio/netbird/pull/1585

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.8...v0.25.9

What's Changed

• Expose trusted proxy list and counter configuration for realip middleware by @surik in https://github.com/netbirdio/netbird/pull/1535
• Add an extra server reflexive candidate with WG port by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1549
• Properly handle cache error and return userdata by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1571
• Return error when peer is not valid by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1573
• Fix/prevent returning error from external cache by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1576

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.7...v0.25.8

What's Changed

• Get cache from external cache when refresh fails by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1537

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.6...v0.25.7

What's Changed

• Update bug-issue-report and feature request templates by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1499
• Fix data dir creation permissions by @lixmal in https://github.com/netbirdio/netbird/pull/1503
• Fix iOS DNS timeout by @lixmal in https://github.com/netbirdio/netbird/pull/1504
• Restore dns on unclean shutdown by @lixmal in https://github.com/netbirdio/netbird/pull/1494
• getFirstListenerAvailable(): adjust logging levels and add success message by @nazarewk in https://github.com/netbirdio/netbird/pull/1513
• Extract peer real IP from Load Balancer when possible by @surik in https://github.com/netbirdio/netbird/pull/1510
• Export info log level setter for Android by @pappz in https://github.com/netbirdio/netbird/pull/1518
• Update port, ip choice logic in DNS service by @pappz in https://github.com/netbirdio/netbird/pull/1514
• Fix/resolv parser by @pappz in https://github.com/netbirdio/netbird/pull/1520
• Remove query parameter from policy endpoints by @surik in https://github.com/netbirdio/netbird/pull/1527
• Update grpc-middleware to bring changes related to realip by @surik in https://github.com/netbirdio/netbird/pull/1526
• Use dashboard v2 for getting started scripts by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1530

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.5...v0.25.6

What's Changed

• Fix musl build by @xcf13363175 in https://github.com/netbirdio/netbird/pull/1480
• Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @dependabot in https://github.com/netbirdio/netbird/pull/1401
• Add iOS build test by @pappz in https://github.com/netbirdio/netbird/pull/1412
• Upgrade integrations versions to 8a7c87accb22 by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1482
• Fix preshared key not persisted in config by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1474
• Add getGroupByName method by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1481
• Fix race condition with JWT group sync by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1486
• Extend netbird status command to include health information by @lixmal in https://github.com/netbirdio/netbird/pull/1471
• Tidy up mods by @lixmal in https://github.com/netbirdio/netbird/pull/1492
• Validate upstream reachability on first DNS configuration by @lixmal in https://github.com/netbirdio/netbird/pull/1489
• Support disabled resolved stub server mode by @pappz in https://github.com/netbirdio/netbird/pull/1493
• Allow service users with user role read-only access to all resources by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1484

New Contributors

• @xcf13363175 made their first contribution in https://github.com/netbirdio/netbird/pull/1480
• @lixmal made their first contribution in https://github.com/netbirdio/netbird/pull/1471

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.4...v0.25.5

What's Changed

• Update user's last login when authenticating a peer by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1437
• Update setup.env.example by @wisetux in https://github.com/netbirdio/netbird/pull/1433
• Integrate Rosenpass by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1153
• Remove duplicated chain add by @pappz in https://github.com/netbirdio/netbird/pull/1444
• Update contribution and readme file by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1447
• Use cached wintun zip package in github workflows by @pappz in https://github.com/netbirdio/netbird/pull/1448
• Allow iOS to connect to old management versions by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1440
• Add external-ip support for coturn by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1439
• Soft deprecate Rules API by @surik in https://github.com/netbirdio/netbird/pull/1454
• Fix allow netbird traffic for nftables and userspace by @pappz in https://github.com/netbirdio/netbird/pull/1446
• Fix client SSH server error log by @braginini in https://github.com/netbirdio/netbird/pull/1455
• Fix typo in iface/tun_usp_linux.go by @surik in https://github.com/netbirdio/netbird/pull/1457
• Update Android build env by @pappz in https://github.com/netbirdio/netbird/pull/1456
• Add support for setting interface name and wireguard port by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1467
• Remove debug lines by @pappz in https://github.com/netbirdio/netbird/pull/1468
• Enable group propagation by default by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1469

New Contributors

• @wisetux made their first contribution in https://github.com/netbirdio/netbird/pull/1433

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.3...v0.25.4

What's Changed

• Fix quickstart script incompatibility with latest Zitadel version by @bcmmbaga in https://github.com/netbirdio/netbird/pull/1400
• Update cloud management URL to https://api.netbird.io:443 by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1402
• Use integrated activity store by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1421
• Remove the user from the cache without refreshing it by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1422
• Update management-integrations/additions by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1425
• Fix Windows name on WMI error by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1426
• Fix Windows settings popup with mesa 3d openGL emulator by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1428
• Add iOS support to README by @braginini in https://github.com/netbirdio/netbird/pull/1430
• Fix route change notifier by @pappz in https://github.com/netbirdio/netbird/pull/1431
• Netstack by @pappz in https://github.com/netbirdio/netbird/pull/1403
• Cancel peer expiration scheduled job when deleting account by @mlsmaycon in https://github.com/netbirdio/netbird/pull/1434

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.2...v0.25.3

What's Changed

• Update pion v3 by @pappz in https://github.com/netbirdio/netbird/pull/1398

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.1...v0.25.2

What's Changed

• Change docker base image by @pascal-fischer in https://github.com/netbirdio/netbird/pull/1405

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.25.0...v0.25.1