Releases: gravitl/netmaker
v1.4.0
Netmaker v1.4.0 Release Notes 🚀
🚀 What’s New
🌍 Posture Checks (beta)
- Security feature that validates device compliance against configured policies based on device attributes such as OS, OS version, kernel version, client version, geographic location, and auto-update status.
- Supports tag-based and user group-based assignment of posture checks to specific devices or users.
- Tracks violations with configurable severity levels and provides real-time evaluation of device compliance.
- Helps ensure only compliant devices can access network resources.
🔁 Network Traffic Logging (alpha)
- Comprehensive network flow logging system that captures and stores network traffic metadata.
- Tracks source and destination IPs, ports, protocols, bytes/packets sent/received, and connection timestamps.
- Provides API endpoints for querying flow data with filters by network, node, user, protocol, and time range.
- Enables network administrators to monitor, analyze, and audit network traffic patterns for security and troubleshooting purposes.
🌐 K8s Operator with Cluster Access, Egress and Ingress functionality (beta)
- Cluster Egress: Expose Netmaker network services to Kubernetes workloads using standard Service names.
- Cluster Ingress: Expose Kubernetes services to devices on your Netmaker network.
- API Proxy: Secure access to Kubernetes API servers through Netmaker tunnels with RBAC support.
🔄 Auto Removal of Offline Peers
- Automatically removes nodes that have been offline for a configurable threshold period.
- Configurable per network with customizable timeout thresholds (in minutes).
- Supports tag-based filtering to selectively apply auto-removal to specific device groups.
- Helps maintain clean network topology by removing stale or abandoned peer connections.
🧩 Onboarding Flow
- Streamlined user onboarding experience during signup for workspace setup.
🧰 Improvements & Fixes
-
Azure IDP sync: Fixed User sync by group filters.
-
User Migration: Optimised User migration logic to reduce server start up time.
-
Config Files: Avoid Auto enabling of configs on user login.
-
Egress Domain Updates: Fixed domain-related issues in egress configurations to ensure consistent routing behavior.
Known Issues 🐞
-
netclients cannot auto-upgrade on ipv6-only machines.
-
Need to optimize multi-network netclient join with enrollment key
-
On systems using systemd-resolved in uplink mode, the first 3 entries in resolv.conf are used and rest are ignored. So it might cause DNS issues. Stub mode is preferred.
v1.2.0
Netmaker v1.2.0 Release Notes 🚀
🚀 What’s New
🌍 Auto-Relays (formerly Failovers)
-
Failovers are now Auto-Relays with High Availability (HA) support.
-
Enables global routing optimization based on real-time latency between peers across regions.
🔁 Gateway High Availability
- Gateways can now automatically assign peer relays and fallback to healthy nodes when primary gateways become unavailable.
🌐 Egress HA with Latency-Aware Routing
- Egress gateways now dynamically select the optimal route based on latency, ensuring faster and more resilient connectivity.
🧭 DNS Search Domains
- Added DNS search domain functionality for simplified hostname resolution across distributed networks.
👥 New User Roles
- Introduced a User Auditor role for security and compliance use-cases, offering read-only visibility into system activity.
🧩 Onboarding Flow
- Streamlined user onboarding experience during signup for workspace setup.
⚙️ Dynamic ACL Deprecation
- Added logic to automatically deprecate outdated ACLs on demand, reducing stale configurations and improving policy hygiene.
🧰 Improvements & Fixes
-
Metrics Enrichment: Enhanced uptime and connection-status data.
-
DNS Control Fixes: Fixed toggle behavior for enabling/disabling Netmaker DNS on hosts.
-
Device Approvals: Improved logic for device approval management.
-
Egress Domain Updates: Fixed domain-related issues in egress configurations to ensure consistent routing behavior.
Known Issues 🐞
-
WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
-
netclients cannot auto-upgrade on ipv6-only machines.
-
Need to optimize multi-network netclient join with enrollment key
v1.1.0
Netmaker v1.1.0 Release Notes 🚀
What’s New ✨
-
Okta IDP Integration – Seamless authentication and user provisioning with Okta.
-
Egress Domain-Based Routing – Route traffic based on domain names, not just network CIDRs.
-
DNS Nameservers with Match Domain Functionality – Fine-grained DNS resolution control per domain.
-
Service User Management – Platform Network Admins can now add service users directly to networks.
-
Device Approval Workflow – Require admin approval before devices can join a network.
-
Auto-Created User Group Policies – Automatically generate network access policies for new user groups.
-
User Session Expiry Controls – Set session timeouts for both Dashboard and Client Apps.
Improvements & Fixes 🛠
-
Access Control Lists (ACLs): Enhanced functionality and flexibility.
-
User Management UX: Streamlined workflows for easier administration.
-
IDP User/Group Filtering: Improved filtering capabilities for large organizations.
-
Stability Enhancements: More reliable connections for nodes using Internet Gateways.
Known Issues 🐞
-
WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
-
Inaccurate uptime info in metrics involving ipv4-only and ipv6-only traffic
-
netclients cannot auto-upgrade on ipv6-only machines.
-
Need to optimize multi-network netclient join with enrollment key
v1.0.0
Netmaker v1.0.0
Whats New ✨
-
Multi-Factor Authentication (MFA) for user logins – added an extra layer of security to your accounts.
-
Gateways Unified: Internet Gateways are now merged into the general Gateway feature and available in Community Edition.
-
Improved OAuth & IDP Sync: Simplified and more reliable configuration for identity provider integrations.
-
Global Map View: Visualize all your endpoints and users across the globe in a unified interface.
-
Network Graph Control: Directly control and manage endpoints via the interactive network graph.
-
Site-to-Site over IPv6: IPv4 site-to-site communication over IPv6 Netmaker overlay tunnels.
🛠 Improvements & Fixes
-
Auto-Sync DNS Configs: Multi-network DNS configurations now sync automatically between server and clients.
-
Stability Fixes: Improved connection reliability for nodes using Internet Gateways.
-
LAN/Private Routing Enhancements: Smarter detection and handling of local/private routes, improving peer-to-peer communication in complex network environments.
Known Issues 🐞
-
WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
-
Inaccurate uptime info in metrics involving ipv4-only and ipv6-only traffic
-
netclients cannot auto-upgrade on ipv6-only machines.
-
Need to optimize multi-network netclient join with enrollment key
v0.99.0
Netmaker v0.99.0
Whats New ✨
-
IDP Integration: Seamless integration with Google Workspace and Microsoft Entra ID, including automatic synchronization of users and groups
-
User Activity & Audit Logs: Comprehensive tracking of control plane events such as user management, node changes, ACL modifications, and user access events.
-
Updated Egress UI: A redesigned interface for managing egress gateways for improved usability.
-
User Access API Tokens: Generate and manage API tokens for user-level access and automation.
-
Server Settings via Dashboard: View and configure core server settings directly from the web dashboard.
-
ACLs on Community Edition (Beta): The new version of Access Control Lists is now available in CE as a beta feature.
-
New Metrics Page: Gain better insights with a revamped metrics dashboard.
-
Offline Node Auto-Cleanup: Automatically remove stale or inactive nodes to keep networks clean.
🛠 Improvements & Fixes
-
Optimized DNS Query Handling: Faster and more efficient internal name resolution.
-
Improved Failover Handling: Enhanced stability and signaling for NAT traversal peer connections.
-
User Egress Policies: More granular control over user-level outbound traffic policies.
-
LAN/Private Routing Enhancements: Better detection and handling of local/private endpoint routes during peer communication.
-
Deprecated Support For RQlite DB.
Known Issues 🐞
- WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
v0.90.0
Netmaker v0.90.0
Whats New ✨
- ACL Rules for Egress Ranges
- High Availability for Egress Routes
- Remote Access Gateways and Relays have been merged into "Gateways" and are now available on CE. https://docs.netmaker.io/docs/features/gateways
- Enhanced Graph Page
- Ability to Define Additional DNS Nameservers in your network
- Managed DNS support on Windows
- Introducing new desktop apps https://docs.netmaker.io/docs/client-installation/netmaker-desktop
What's Fixed/Improved 🛠
- Metrics Data
- IPv6 DNS Entries.
- FailOver connection improvements.
- Optimized Failover peer signalling.
- Improved Connectivity Status Indicator with real-time troubleshooting help.
Known Issues 🐞
- WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
v0.30.0
Netmaker v0.30.0
Whats New ✨
- All-new Dashboard Navigation
- Advanced ACL Rules - port, protocol and traffic direction
- Reduced Firewall Requirements To One Single Port for self-hosted (443 udp/tcp). Netclient will default to using port 443 only to listen over Private IPs if it is available; otherwise, it will use port 51821.
- Option To Turn Off UDP hole punching, Option To Specify Custom Stun Servers
- Improved Connectivity Status Indicator With Real-time Troubleshooting Help.
What's Fixed/Improved 🛠
- Metrics Data
- Optimised MQ message size
- FailOver Stability Fixes
- Scalability Fixes
- Duplicate Node IP check on update
Known Issues 🐞
- IPv6 DNS Entries Are Not Working.
- Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.
- WireGuard DNS issue on most flavours of Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
v0.26.0
Netmaker v0.26.0
Whats New ✨
- New ACLs and Tag Management System
- Managed DNS system (Linux)
- Simplified User Mgmt With Default Roles and Groups (Hidden away network roles)
- New Add a Node Flow for netclient and static wireguard files
What's Fixed/Improved 🛠
- Metrics Data
- FailOver Stability Fixes
- Scalability Fixes
Known Issues 🐞
- Adding Custom Private/Public Key For Remote Access Gw Clients Doesn't Get Propagated To Other Peers.
- IPv6 DNS Entries Are Not Working.
- Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.
- Can Still Ping The Domain Name Even When The DNS Toggle Is Switched Off.
- WireGuard DNS issue on most flavours of Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
v0.25.0
Netmaker v0.25.0
Whats New ✨
- Advanced User Management with RBAC Roles
- User Invitation via Email and Magic Links
What's Fixed/Improved 🛠
- Scalability Improvements
- Optimised Traffic Flow Over MQ
- Improved Peer Updates with Batching
Known Issues 🐞
- Erratic Traffic Data In Metrics.
- Adding Custom Private/Public Key For Remote Access Gw Clients Doesn't Get Propagated To Other Peers.
- IPv6 DNS Entries Are Not Working.
- Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.
- Can Still Ping Domain Name Even When DNS Toggle Is Switched Off.
- WireGuard DNS issue on most flavours of Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.
v0.24.3
Netmaker v0.24.3
Whats New ✨
- Validation Checks For Egress Routes
- Network Change Detection System
- Removed Creation Of ACLs For EMQX
What's Fixed/Improved 🛠
- Removed RAG Metadata Length Restriction
- Scalability Improvements
- Optimised Traffic Flow Over MQ
- Improved Validation Checks For Internet GWS
Known Issues 🐞
- Erratic Traffic Data In Metrics.
- Adding Custom Private/Public Key For Remote Access Gw Clients Doesn't Get Propagated To Other Peers.
- IPv6 DNS Entries Are Not Working.
- Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.
- Can Still Ping Domain Name Even When DNS Toggle Is Switched Off.
- WireGuard DNS issue on most flavors of Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.