Sourced from github.com/netbirdio/netbird's releases.
v0.69.0
Release Notes for v0.69.0
What's New
Reverse Proxy IP Reputation Integration Now you can use CrowdSec to block malicious traffic based on IP reputation on your exposed service in the reverse proxy.
This feature requires self-hosted installations to add another container to their deployment. See instructions in the reverse proxy migration documentation.
For Cloud users, support is coming soon.
Learn more about here.
macOS p2p connectivity improvements We've improved macOS p2p connectivity with a better routing exclusion mechanism to avoid loops. Now the client doesn't add /32 routes per remote candidate addresses avoiding limitations on accessing remote peer's local addresses via tunnel connections. Learn more about this change.
To use the old behavior run:
sudo netbird service reconfigure --service-env "NB_USE_LEGACY_ROUTING=true"Client Improvements
- Added PCP support. This change adds support for the PCP protocol to the client to improve the rate of P2P connectivity. netbirdio/netbird#5219
- Added --disable-networks flag to block network selection for users.
netbirdio/netbird#5896- Fixed clearing service env vars with --service-env "".
netbirdio/netbird#5893- Guarded against container DNAT bypass of ACL rules in iptables.
netbirdio/netbird#5697- Populated NetworkAddresses on iOS for posture checks.
netbirdio/netbird#5900- Reconnected conntrack netlink listener on error.
netbirdio/netbird#5885- Replaced exclusion routes with scoped default + IP_BOUND_IF on macOS.
netbirdio/netbird#5918- Fixed incorrect SSH client config combining Host and Match directives.
netbirdio/netbird#5903- Fixed WGIface.Close deadlock when DNS filter hook re-enters GetDevice.
netbirdio/netbird#5916Management Improvements
- Enforced peer or peer groups requirement for network routers.
netbirdio/netbird#5894- Reused single cache store across all management server consumers.
netbirdio/netbird#5889- Fixed lint error on Google Workspace integration.
netbirdio/netbird#5907Proxy Enhancements
- Added CrowdSec IP reputation integration for reverse proxy.
... (truncated)
3098f48
[client] fix ios network addresses mac filter (#5906)7f023ce
[client] Android debug bundle support (#5888)e361126
[client] Fix WGIface.Close deadlock when DNS filter hook re-enters
GetDevice ...95213f7
[client] Use Match host+exec instead of Host+Match in SSH client config
(#5903)2e0e3a3
[client] Replace exclusion routes with scoped default + IP_BOUND_IF on
macOS ...8ae8f20
[management] chores: fix lint error on google workspace (#5907)a39787d
[infrastructure] Add CrowdSec LAPI container to self-hosted setup script
(#5880)53b04e5
[management] Reuse a single cache store across all management server
consumer...633dde8
[client] Reconnect conntrack netlink listener on error (#5885)7e4542a
fix(client): populate NetworkAddresses on iOS for posture checks (#5900)