Tunnet v0.9.0
This release focuses on significant improvements across the Tunnet core networking stack, security, routing, access control, cloud infrastructure, and developer tooling.
Highlights
- Added a new ACL engine and improved policy ordering.
- Unified flow handling with a priority scheduler.
- Introduced a proper relay architecture and renamed the previous relay component to Edge.
- Added cloud traffic support and cloud service tiers.
- Added a new
tunnet getworkflow. - Overhauled DNS resolution using
hickory-resolver. - Reworked route management to use native reconciliation instead of shell commands.
- Improved mesh route preservation and restored relay fallback behavior.
- Unified packet parsing with
etherparse. - Improved CLI behavior for unprivileged operations.
- Hardened CA encryption key handling and cleaned up crypto key decoding.
- Hardened control endpoints against SSRF.
- Upgraded authentication infrastructure and multiple core dependencies.
Cloud & Infrastructure
- Separated the cloud site from the dashboard and introduced a unified UI package.
- Redesigned the cloud experience.
- Improved licensing and development CLI tooling.
- Fixed deployment Dockerfiles and control service container configuration.
- Fixed authentication redirects, date handling, TLS WebSocket connectivity, and health-check behavior.
Networking
- Improved DNS resolution.
- Reworked route reconciliation using native platform APIs.
- Improved mesh route handling and relay fallback.
- Unified packet parsing.
- Improved TLS/WebSocket connectivity for agents.
Maintenance
- Updated Rust, Go, authentication, SSH, crypto, and other dependencies.
- Refactored test infrastructure.
- General stability, build, and tooling improvements.
Full Changelog: v0.8.0...v0.9.0