Skip to content

Releases: kubenetworks/kubevpn

Release v2.11.6

Choose a tag to compare

@github-actions github-actions released this 31 Jul 04:06
fc296e4

KubeVPN release v2.11.6

KubeVPN v2.11.6 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.6/kubevpn_v2.11.6_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • fc296e4 naison 2026-07-31 refactor: refactor code (#795)
  • 2d143bc wencaiwulue 2026-07-21 feat: update helm chart index to v2.11.5
  • 660c76c wencaiwulue 2026-07-21 feat: update krew index version to v2.11.5

Release v2.11.5

Choose a tag to compare

@github-actions github-actions released this 21 Jul 13:29
91b3888

KubeVPN release v2.11.5

KubeVPN v2.11.5 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.5/kubevpn_v2.11.5_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 91b3888 naison 2026-07-21 refactor: refactor code (#794)
  • 3ff5a74 wencaiwulue 2026-07-19 feat: update helm chart index to v2.11.4
  • 5cb740b wencaiwulue 2026-07-19 feat: update krew index version to v2.11.4

Release v2.11.4

Choose a tag to compare

@github-actions github-actions released this 19 Jul 07:58
5455e2a

KubeVPN release v2.11.4

KubeVPN v2.11.4 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.4/kubevpn_v2.11.4_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 25e71c3 fengcaiwen 2026-07-18 fix: ut
  • f5aaa6b naison 2026-07-18 docs: add SSH data-plane bypass design document
  • cf80625 naison 2026-07-18 feat(handler): auto-detect SSH data-plane and bypass port-forward
  • f617c1d wencaiwulue 2026-07-18 feat: update helm chart index to v2.11.3
  • a14e00c wencaiwulue 2026-07-18 feat: update krew index version to v2.11.3

Release v2.11.3

Choose a tag to compare

@github-actions github-actions released this 18 Jul 09:28
8bff945

KubeVPN release v2.11.3

KubeVPN v2.11.3 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.3/kubevpn_v2.11.3_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 3487d02 fengcaiwen 2026-07-18 fix: fix release helm charts
  • 1ea848c wencaiwulue 2026-07-18 feat: update krew index version to v2.11.2

Release v2.11.2

Choose a tag to compare

@github-actions github-actions released this 18 Jul 05:50
7b1bc68

KubeVPN release v2.11.2

KubeVPN v2.11.2 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.2/kubevpn_v2.11.2_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • aefdeaf naison 2026-07-18 feat(localproxy): host-egress socks5h + user-daemon-managed SOCKS5 proxy
  • 0f382e3 naison 2026-07-18 ci(release): speed up multi-arch image build and auto-push krew/helm to master
  • be4ad8b naison 2026-07-18 fix(handler): make traffic-manager dial robust — retry inject, fail-fast teardown
  • 1647fa8 naison 2026-07-18 test(daemon/action): fix data race in connection concurrency watchdog
  • 1269fee kubenetworks 2026-07-13 Update charts/index.yaml
  • cef02b1 wencaiwulue 2026-07-13 feat: update krew index version to refs/tags/v2.11.1

Release v2.11.1

Choose a tag to compare

@github-actions github-actions released this 13 Jul 14:32
05f1984

KubeVPN release v2.11.1

KubeVPN v2.11.1 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.1/kubevpn_v2.11.1_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 302f2be naison 2026-07-12 refactor(core): per-client gvisor stack with control/data plane separation
  • f6ec048 naison 2026-07-12 fix(core): use correct sniffer direction for INBOUND packets
  • 8078228 naison 2026-07-12 refactor(core): replace gopacket logIPPacket with gvisor sniffer for richer packet logging
  • b298350 naison 2026-07-12 fix(handler): refresh ConfigMap cache after inject so status sees ProxyList immediately
  • d3aae47 naison 2026-07-12 fix(handler): refresh macOS CIDR routes after TUN IP change to prevent EADDRNOTAVAIL
  • 665abf4 naison 2026-07-12 fix(handler): pre-route traffic manager ClusterIP before async route watcher
  • f48b1dc naison 2026-07-12 fix(daemon): refresh sudo health cache after connect; retry sync status in tests
  • 8225492 naison 2026-07-12 fix(util): expand short resource names in byte-backed Factory RESTMapper
  • bb0984a naison 2026-07-12 fix(handler): prevent flaky liveness test by placing sessionStart before MarkReply
  • 5f3943a naison 2026-07-12 docs: document heartbeat-driven port-forward liveness; drop xDS health-check references
  • 67253ef naison 2026-07-12 fix(handler): drive port-forward reconnect from data-plane heartbeat; remove xDS health check
  • aabfd33 naison 2026-07-12 perf(cidr): drop probe pod from GetCIDR; report pod CIDR as its own step
  • 9b7119a naison 2026-07-12 feat(progress): heartbeat lines for long steps on the non-TTY path
  • 2a83afc naison 2026-07-12 fix(progress): gate spinner on smart TTY to stop non-TTY frame leaks
  • 0b6a42b naison 2026-07-12 feat(cidr): bounded upward merge of inferred Pod/Service CIDRs
  • c3e24b5 naison 2026-07-12 docs: correct VPN sidecar security context to privileged
  • 6f9c5f9 naison 2026-07-12 docs: document peer liveness monitor, Connect idempotency, control-plane-in-status
  • 9f6e69d naison 2026-07-12 docs(grpcutil): harden ListenCancel invariant with a regression test
  • 000ed37 naison 2026-07-12 feat(status): reflect xds control-plane health in connection status
  • 86dcc18 naison 2026-07-12 feat(daemon): add user->root liveness monitor with cached health snapshot
  • f42cf35 naison 2026-07-12 fix(daemon): surface sudo-probe errors and invalidate stale cached client
  • 25b2658 naison 2026-07-12 fix(daemon): make root-daemon Connect idempotent per ConnectionID
  • f0d2153 naison 2026-07-12 fix(daemon): cache-only ConfigMap reads so status stops blocking on unreachable clusters
  • f568c65 naison 2026-07-12 feat(xds): server-side CIDR & DNS detection warm-up (client offload)
  • 27b3865 naison 2026-07-12 docs: design for server-side CIDR & DNS detection (client offload)
  • f1adf23 naison 2026-07-12 perf(core): cap packet channel depth to bound client memory
  • 53bbf3f naison 2026-07-12 fix(upgrade): harden self-upgrade & traffic-manager upgrade paths
  • aac8744 naison 2026-07-12 docs+refactor: realign docs with code; unify temp-file naming; tidy xds/idioms
  • a799add naison 2026-07-12 refactor: unify rollback registry, harden temp-dir cleanup & dir perms
  • 1a07e9a naison 2026-07-12 refactor: drop temp kubeconfig files, build Factory from bytes
  • e4eb113 naison 2026-07-12 fix(netutil): add echo id/seq to GenICMPPacketIPv6
  • 06e35a0 naison 2026-07-11 fix(tun): delete IPv6 TUN address via SIOCDIFADDR_IN6 ioctl on macOS, verify removal
  • 7b5abea naison 2026-07-11 fix(handler): route service ClusterIPs from server-side discovery
  • 7c2804d kubenetworks 2026-07-05 Update charts/index.yaml
  • a29b15e wencaiwulue 2026-07-05 feat: update krew index version to refs/tags/v2.11.0

Release v2.11.0

Choose a tag to compare

@github-actions github-actions released this 05 Jul 13:47
bd480c2

KubeVPN release v2.11.0

KubeVPN v2.11.0 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.11.0/kubevpn_v2.11.0_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 53c225c naison 2026-09-07 test(daemon): cover LoadFromConfig restore-entry branches
  • 0b8905c naison 2026-09-07 refactor(handler): move prepareSyncPodSpec to sync_podspec.go; add tests
  • 7f247f0 naison 2026-09-06 refactor(dhcp): extract retryUpdate wrapper for the stateless mutate sites
  • 459937a naison 2026-09-06 refactor(core): split tun_client.go by concern
  • 4e2126e naison 2026-09-06 refactor(util): split cidr.go into pure helpers vs cluster-I/O detectors
  • 87bc4aa naison 2026-09-06 test(util): cover cidr.go pure functions without a cluster
  • 80101b4 naison 2026-09-06 fix(daemon): clear currentConnectionID on Quit; add connection concurrency tests
  • 616abad naison 2026-09-06 test(inject): guard envoyRuleSpec completeness; enforce fargate port invariant
  • 8f611a4 naison 2026-09-06 refactor: replace hand-rolled supervision loops with wait.UntilWithContext
  • b1eec9e naison 2026-09-06 refactor(handler): extract cohesive helpers from startTUN and setupDNS
  • 95249bf naison 2026-09-06 refactor(xds): split tun_config.go god file by concern
  • df43b75 naison 2026-09-06 test(controlplane): add Virtual serialization round-trip tests; document key format
  • a835dd1 naison 2026-09-06 refactor(handler): parameterize duplicated RBAC generators
  • fd280dc naison 2026-09-06 refactor(util): extract GetNamespace helper to dedupe kubeconfig namespace lookup
  • 4addbd7 naison 2026-09-06 fix(daemon): stop sync early-error from crashing the daemon; don't undo on leave
  • 2ef8e6c fengcaiwen 2026-09-06 fix(util): retry pod-exec on transient stream errors with bounded backoff
  • 29d335f naison 2026-09-06 ci: fix macOS build failure (merge conflict, TMPDIR, go version)
  • 8e9f5da naison 2026-09-06 fix(inject): always redirect Service targetPort in fargate/service mode
  • 64f658a naison 2026-09-06 fix(daemon): leave proxies before tearing down the VPN on quit/disconnect
  • 22e7f96 naison 2026-09-06 build: add ut-compile to catch integration-tagged build breakage without a cluster
  • 024d0f4 naison 2026-09-06 fix(handler): rename integration test type status to avoid grpc/status import clash
  • 20adc69 naison 2026-09-05 docs: pure server-side injection + dual-scope proxy RBAC
  • e092977 naison 2026-09-05 feat(rbac): connect uses a ClusterRole for the central (kubevpn-namespace) manager
  • 0afffcc naison 2026-09-05 refactor(handler): pure server-side proxy/leave, remove local injection fallback
  • bb9261b naison 2026-09-05 feat(xds): LeaveInject supports leave-all-by-owner for disconnect cleanup
  • 1c0297c naison 2026-09-05 feat(rbac): proxy ClusterRole for helm central install + namespaced Role for connect
  • 87c619d naison 2026-08-30 feat(xds): server-side sidecar injection via TunConfigService.ProxyInject
  • 396daca naison 2026-08-30 refactor(controlplane): extract envoy config types to break inject↔xds cycle
  • 9282a35 naison 2026-08-30 fix(dns): scope Linux cluster DNS to the TUN (split), never global resolv.conf
  • c22c74f naison 2026-08-30 feat(xds): clean up abandoned envoy rules after a TTL (not on lease reap)
  • bdad628 naison 2026-08-30 perf(handler): exponential backoff for port-forward reconnect; extract+test applyRouteFrame
  • 110cc1c naison 2026-08-29 perf(dns): real answer/negative cache with singleflight and cancel-on-first-win
  • 96f641c naison 2026-08-29 docs: document server-side route/service discovery (44) + update 01/19/24
  • 80d0fb4 naison 2026-08-29 test(xds): cover WatchNamespaceRoutes snapshot/delta, CIDR aggregation, degrade
  • 5f0ab71 naison 2026-08-29 feat(handler,dns): consume server-side route discovery; drop client pod/svc informers
  • 5071993 naison 2026-08-29 revert(xds): do not remove envoy rules on lease expiry
  • c10e643 naison 2026-08-23 feat(xds): server-side per-namespace route/service discovery pushed to clients
  • 4a9b188 naison 2026-08-23 perf(gvisor): enable GVisorGSO on client local stacks for consistency
  • 2cdf4b1 naison 2026-08-23 fix(core): stop gvisor ICMP handler from double-freeing injected packets
  • 0d8641f naison 2026-08-23 refactor(core): make the inter-client gvisor stack transport-level
  • abed43b naison 2026-08-23 perf(gvisor): revert TCP buffer caps to gvisor defaults for shared-tunnel model
  • 37e65b6 naison 2026-08-22 docs: document conn-pool slot liveness (active-in-either-direction)
  • 0e1d421 naison 2026-08-22 fix(core): keep an actively-sending conn-pool slot alive
  • 2407379 naison 2026-08-22 perf(gvisor): set TCP send/receive buffer size ranges
  • b417618 naison 2026-08-22 feat(tun): upgrade wireguard-go and add segment-aware batched TUN IO
  • 16aa23d naison 2026-08-22 chore(deps): upgrade gvisor to go-branch tip (2026-06-29)
  • b0aac45 naison 2026-08-16 chore(build): bump Go toolchain to 1.26
  • 2f41c9d naison 2026-08-16 fix(ci,test): make macOS mesh e2e resilient to apiserver flakiness
  • 3f23a55 naison 2026-08-16 test(handler): fail fast in commonTest when no active connection
  • fde51d6 naison 2026-08-16 fix(xds): make TunConfigServer init fatal with retry, not silent nil
  • 75b6f68 fengcaiwen 2026-08-16 fix(docs): resolve duplicate document number 41, rename origin-loopback-cluster to 42
  • 76ce0f2 naison 2026-08-15 refactor(inject): drop -s $POD_IP PREROUTING loop guard, now covered by loopback cluster
  • f734de8 naison 2026-08-15 fix(xds): route mesh declared-port origin return path over loopback
  • 1e3cc47 fengcaiwen 2026-08-15 test(ssh): add testify assert for SSH start error check
  • 9a2e49f naison 2026-08-15 refactor(dns): resolve extra-domain/ExternalName via in-cluster DNS, drop dnsutils
  • 3eae62a naison 2026-08-15 feat(core): partition connection pool by five-tuple hash
  • e20b57e naison 2026-08-09 fix(core): harden data-plane reconnect against ghost-conn black-holing
  • 9bd9d07 fengcaiwen 2026-08-09 fix(log): per-RPC Level propagation, context-aware debug gating
  • 525a80d naison 2026-08-09 fix(inject,ci): envoy ORIGINAL_DST loop guard, pod IP via Downward API
  • 8bc541e naison 2026-08-09 refactor: decouple session layer, unify envoy writes, split net utils
  • 2e436e7 naison 2026-08-09 build: force LF for YAML to keep go:embed configs CRLF-free on Windows
  • 198471c naison 2026-08-08 fix(handler): re-create traffic manager when only a stale pod lingers
  • 68384a2 naison 2026-08-08 test(daemon/action): close daemon.log before TempDir cleanup
  • 6cb7b70 naison 2026-08-08 fix(inject): match baked traffic-manager address regardless of line ending
  • 8b2602e naison 2026-08-08 test(handler): prefix e2e subtest labels with phase names
  • fe5d358 naison 2026-08-08 fix(run): leave proxy on exit, clean Ctrl-C teardown, animated progress
  • b7140b2 naison 2026-08-02 fix(sync): wait for rollout before tearing down the SSH tunnel
  • b3cfc19 naison 2026-08-02 refactor(dhcp): stamp host mask (/32,/128) on TUN leases
  • 3e81967 naison 2026-08-02 refactor(naming): rename envoy-proxy->envoy and control-plane->xds
  • d421249 naison 2026-08-02 docs(controlplane): clarify the stale-echo guard is a TOCTOU, not cache staleness
  • 0e03f81 naison 2026-08-02 test(controlplane): reproduce TUN_ALLOCS manual-edit reconcile oscillation
  • df8b3f4 naison 2026-08-01 docs: add design docs for previously undocumented subsystems
  • 05bcba7 naison 2026-08-01 feat(progress): style proxy-out managed SOCKS lines as bold-green success
  • 969f0d3 naison 2026-08-01 feat(exitcode): rich exit-code taxonomy carried via gRPC error details
  • 03f638b naison 2026-08-01 docs(dhcp): document hostname field in TUN_ALLOCS lease record
  • a9196bf naison 2026-08-01 feat(cli): classified process exit codes
  • 0bef3e6 naison 2026-08-01 feat(dhcp): record client hostname in TUN_ALLOCS
  • 310279a naison 2026-07-26 fix(controlplane): deliver RDS over ADS and add envoy xDS keepalive
  • ebf71d5 naison 2026-07-26 fix(inject): re-inject sidecar when traffic-manager namespace changes
  • dd5ffb1 naison 2026-07-26 feat(progress): render command steps as a kind-style spinner
  • f8e03a7 naison 2026-07-26 fix: triage PR #784 CI failures — container cleanup, empty-TUN-IP route, diagnostics
  • d4a4788 naison 2026-07-26 test(handler): dump run container output on startup timeout
  • 1f62105 naison 2026-07-26 fix(controlplane): replay pending TUN IP proposal to reconnected watcher
  • 1c885e6 naison 2026-07-25 fix(controlplane): persist TUN_ALLOCS rejection annotation atomically
  • e665444 naison 2026...
Read more

Release v2.10.2

Choose a tag to compare

@github-actions github-actions released this 19 Apr 14:29
3646046

KubeVPN release v2.10.2

KubeVPN v2.10.2 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.2/kubevpn_v2.10.2_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 3646046 naison 2026-04-19 Revert "hotfix: remove http filter grpc-web for support http content type for…" (#778)
  • 5d39a03 naison 2026-04-13 Update charts/index.yaml (#777)
  • a7cf68f naison 2026-04-13 feat: update krew index version to refs/tags/v2.10.1 (#776)

Release v2.10.1

Choose a tag to compare

@github-actions github-actions released this 12 Apr 16:39
6130fcb

KubeVPN release v2.10.1

KubeVPN v2.10.1 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.1/kubevpn_v2.10.1_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • 6130fcb naison 2026-04-13 hotfix: remove http filter grpc-web for support http content type form-data (#775)
  • 899ed35 Andrey Tvorozhkov 2026-04-11 Add local outbound proxy mode (#773)
  • 6354d0e naison 2026-04-02 Update charts/index.yaml (#772)
  • e83df1f naison 2026-04-02 feat: update krew index version to refs/tags/v2.10.0 (#771)

Release v2.10.0

Choose a tag to compare

@github-actions github-actions released this 02 Apr 08:44
dfe0440

KubeVPN release v2.10.0

KubeVPN v2.10.0 is available now ! 🎉

Download KubeVPN for your platform

Mac (x86-64/Intel)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_darwin_amd64.zip && unzip -d kubevpn kubevpn.zip

Mac (AArch64/Apple M1 silicon)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_darwin_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (x86-64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_linux_amd64.zip && unzip -d kubevpn kubevpn.zip

Linux (AArch64)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_linux_arm64.zip && unzip -d kubevpn kubevpn.zip

Linux (i386)

curl -Lo kubevpn.zip https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_linux_386.zip && unzip -d kubevpn kubevpn.zip

Windows (x86-64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_windows_amd64.zip

Windows (AArch64)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_windows_arm64.zip

Windows (i386)

curl -LO https://github.com/kubenetworks/kubevpn/releases/download/v2.10.0/kubevpn_v2.10.0_windows_386.zip

Checksums

SHA256 checksums available for compiled binaries.
Run shasum -a 256 -c checksums.txt to verify.

Upgrading

Run kubevpn upgrade to upgrade from a previous version.

Changelog

  • dfe0440 naison 2026-04-02 refactor: update inner ip range from 198.19/16 to 198.18/16 (#770)
  • 0ffd217 naison 2026-03-23 Update charts/index.yaml (#769)
  • a9abdb2 naison 2026-03-23 feat: update krew index version to refs/tags/v2.9.15 (#768)