v0.49.0

What's Changed

• [management] add transaction for integrated validator groups update and prim acc by @pascal-fischer in #4014
• [client] Handle lazy routing peers that are part of HA groups by @lixmal in #3943
• [client] Refactor showLoginURL to improve error handling and connection status checks by @hakansa in #4026
• [client] close window when process needs to exit by @mlsmaycon in #4027
• [misc] add additional metrics by @mlsmaycon in #4028
• [management] check and log on new management version by @mlsmaycon in #4029
• [misc] Specify netbird binary location in Dockerfiles by @lixmal in #4024
• [client] Don't open cmd.exe during MSI actions by @lixmal in #4041

Full Changelog: v0.48.0...v0.49.0

v0.48.0

Release Notes for v0.48.0

What's New

This release brings port range support to NetBird. Now you can add rules with ports formated as <range_start>-<range_end>, with that, if you need to allow all TCP ports, you can configure it with 1-65535, see dashboard example below:

The feature support is available for management and client version 0.48.0 and for dashboard version 2.14.0

Client Enhancements

• Fixed Android route notification behavior. #3971
• Added more advanced settings for Android clients. #4001
• Fixed port range squashing to ensure correct firewall rule behavior. #4007

Management Improvements

• Refactored route handling to use store methods for consistency and maintainability. #2928
• Added backward compatibility for clients without firewall rules port range support. #4003
• Exported ephemeral peer flag via API for better visibility. #4004

Full Changelog: v0.47.2...v0.48.0

v0.47.2

What's Changed

• [client] Fix UI Download URL by @hakansa in #3990
• [client] Prioritze the local resolver in the dns handler chain by @lixmal in #3965
• [client] Tighten allowed domains for dns forwarder by @lixmal in #3978
• [client] Fix DNS Interceptor Build Error by @hakansa in #3993
• [management] Avoid recalculating next peer expiration by @mlsmaycon in #3991
• [client] Fix logic in updateStatus to correctly handle connection state by @hakansa in #3994

Full Changelog: v0.47.1...v0.47.2

v0.47.1

What's Changed

• [client] Fix status recorder panic by @lixmal in #3988

Full Changelog: v0.47.0...v0.47.1

v0.47.0

Release Notes for v0.47.0

What's New

Client Enhancements

• Added lazy connections support for routed networks. #3908
• Added advanced settings to the UI for better configurability. #3941
• Added missing client meta flags. #3898
• Improved Android client with preference handling and propagation networks. #3957, #3966
• Displayed login popup on session expiration. #3955
• Fixed local DNS resolver errors for domains with other record types. #3959
• Optimized process check timing. #3938
• Removed strings from allowed IPs. #3920
• Improved ICMP connection tracking logs. #3963
• Prevented unnecessary UI updates. #3785
• Included peer's actual state in notifications. #3929
• Refactored ConnMgr context management for clarity. #3951
• Included Support wildcard DNS on iOS #3979

Management Improvements

• Added port range support in firewall rules. #3823
• Enabled unidirectional rules for all-port policies. #3826
• Added account ID index to activity events. #3946
• Ensured peer flags persist in meta updates. #3958
• Propagated user groups when re-enabling group propagation. #3912
• Added event streaming metrics. #3814
• Used xID for setup keys to avoid collisions. #3977

Signal Service

• Enabled setting signal flags via environment variables. #3972

Other Changes

• All Docker images are now pushed to GHCR as additional registry during release. #3954

Full Changelog: v0.46.0...v0.47.0

v0.46.0

Release Notes for v0.46.0

What's New

Client Enhancements

• Added a "Deselect All" option to the Exit Node menu. #3877
• Introduced a block inbound flag to prevent all inbound connections. #3897
• Routes now apply immediately, not only on peer connection. #3907
• Used native route facilities on BSD and Windows. #3862
• Enabled userspace local forwarding to internal interfaces upon request. #3884
• Added debug output similar to wg show. #3922
• Improved DNS match tracing logs. #3928
• Ran registerdns before flushing for consistency. #3926
• Included systemd logs in the debug bundle. #3917
• Increased STUN probe timeout for better status detection. #3930
• Allowed the NetBird service to log to console. #3916
• Logged duplicate client UI PIDs. #3915
• Applied return traffic rules conditionally if firewall is stateless. #3895
• Refactored peer state change subscription mechanism. #3910

Management Improvements

• Supported account creation and retrieval using private domains. #3825
• Enabled REST client impersonation for improved session management. #3879
• Added PostgreSQL support for activity events store. #3890

Other Changes

• Fixed Zitadel user console access. #3446
• Addressed traefik relay accessibility. #3696
• Removed DNF config-manager error. #3925
• Fixed relay exposed address test. #3931
• Updated linter workflows to fail on codespell errors. #3913

New Contributors

• @ghazyami made their first contribution in #3696
• @orchard0 made their first contribution in #3925

Full Changelog: v0.45.3...v0.46.0

v0.45.3

What's Changed

• [client] Fix HA router switch by @pappz in #3889

Full Changelog: v0.45.2...v0.45.3

v0.45.2

What's Changed

• [misc] Add CLA note by @mlsmaycon in #3859
• [misc] Fix CLA link in the PR template by @braginini in #3860
• [management] lazy connection account setting by @pnmcosta in #3855
• [management] Update traffic events pagination filters by @bcmmbaga in #3857
• [management] Extend nameserver match domain validation by @bcmmbaga in #3864
• [client] avoid overwriting state manager on iOS by @pascal-fischer in #3870
• [management] force account id on save groups update by @pnmcosta in #3850
• [management/client/rest] Fix panic on unknown errors by @mohamed-essam in #3865
• [management] Add correlated network traffic event schema by @bcmmbaga in #3680
• [client, android] Fix/android enable server route by @pappz in #3806
• [management] Reset test containers after cleanup by @bcmmbaga in #3885
• [server-test] Install libs for i386 tests by @pappz in #3887
• [client, android] Fix/notifier threading by @pappz in #3807
• [management] Prevent deletion of peers linked to network routers by @bcmmbaga in #3881
• [client] Refactor exclude list handling to use a map for permanent connections by @hakansa in #3901
• [management] Fix user groups propagation by @bcmmbaga in #3902
• [client] Fix peer close deadlock by @pappz in #3904

Full Changelog: v0.45.1...v0.45.2

v0.45.1

This release fixes an issue with traffic flow that caused endless reconnections for some peers.

What's Changed

• [client] Add latest gzipped rotated log file to the debug bundle by @hakansa in #3848
• [client] Do not reconnect to mgm server in case of handler error by @pappz in #3856

Full Changelog: v0.45.0...v0.45.1

v0.45.0

Release Notes for v0.45.0

What's New

Client Enhancements

• Introduced lazy connection support to optimize client startup and resource usage. You can learn more about the feature here. #3379
• Fixed UI notification for new client versions. #3845
• Resolved an issue with legacy route compatibility when connecting to older management servers (pre-v0.30.0). #3854

Management Enhancements

• Added a flag to disable auto-migration, offering more control during deployments. #3840
• Locking strength clause is now optional, improving compatibility and flexibility. #3844
• Migrated the events SQLite store to GORM for more consistent database handling. #3837

Other Changes

• Updated the issue template to streamline community feedback. #3842

Full Changelog: v0.44.0...v0.45.0