Skip to content

Commit 7190aee

Browse files
authored
[WARP] Release notes (#22401)
1 parent 957bb47 commit 7190aee

File tree

2 files changed

+74
-0
lines changed

2 files changed

+74
-0
lines changed
Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
releaseNotes: >-
2+
This release contains two significant changes all customers should be aware
3+
of:
4+
5+
1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer
6+
required to configure their local Firewall rules to allow our DoH IP Address
7+
or domains.
8+
9+
2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we
10+
detect that HTTP/3 traffic is blocked. This allows for a much more reliable
11+
connection on some public WiFi networks.
12+
13+
14+
**Changes and improvements**
15+
16+
- Fixed an issue where the managed network policies could incorrectly report
17+
network location beacons as missing.
18+
19+
- Improved DEX Test Error reporting.
20+
21+
- Fixed an issue causing client notifications to fail in IPv6 only
22+
environments which prevented the client from receiving configuration changes
23+
to settings like device profile.
24+
25+
- Added a TCP fallback for the MASQUE tunnel protocol to improve connectivity
26+
on networks that block UDP or http/3 specifically.
27+
28+
- Added new IPs for Client Orchestration API for operations like tunnel
29+
connectivity checks. If your organization uses a firewall or other policies
30+
you will need to exempt these IPs.
31+
32+
- Fixed an issue where frequent network changes could cause WARP to become
33+
unresponsive.
34+
35+
- DNS over HTTPS traffic is now included in the WARP tunnel by default.
36+
37+
- Improvement for WARP to check if tunnel connectivity fails or times out at
38+
device wake before attempting to reconnect.
39+
40+
- Fixed an issue causing WARP connection disruptions after network changes.
41+
version: 2025.4.929.0
42+
releaseDate: 2025-05-12T23:21:47.865Z
43+
packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.4.929.0
44+
packageSize: 45528916
45+
platformName: Linux
Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
releaseNotes: |-
2+
This release contains two significant changes all customers should be aware of:
3+
1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer required to configure their local Firewall rules to allow our [DoH IP Address or domains](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#doh-ip).
4+
2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we detect that HTTP/3 traffic is blocked. This allows for a much more reliable connection on some public WiFi networks.
5+
6+
7+
**Changes and improvements**
8+
- Fixed an issue where the managed network policies could incorrectly report network location beacons as missing.
9+
- Improved DEX Test Error reporting.
10+
- Fixed an issue causing client notifications to fail in IPv6 only environments which prevented the client from receiving configuration changes to settings like device profile.
11+
- Improved captive portal detection.
12+
- Added a TCP fallback for the MASQUE tunnel protocol to improve connectivity on networks that block UDP or http/3 specifically.
13+
- Added new [IPs for Client Orchestration API](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#connectivity-check) for operations like tunnel connectivity checks. If your organization uses a firewall or other policies you will need to exempt these IPs.
14+
- DNS over HTTPS traffic is now included in the WARP tunnel by default.
15+
- Improved the error message displayed in the client GUI when the rate limit for entering an incorrect admin override code is met.
16+
- Added a [Collect Captive Portal Diag](https://developers.cloudflare.com/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/captive-portals/#get-captive-portal-logs) button in the client GUI to make it easier for users to collect captive portal debugging diagnostics.
17+
- Improved handling of non-SLAAC IPv6 interface addresses for better connectivity in IPv6 only environments.
18+
- Fixed an issue where frequent network changes could cause WARP to become unresponsive.
19+
- Improvement for WARP to check if tunnel connectivity fails or times out at device wake before attempting to reconnect.
20+
- Fixed an issue causing WARP connection disruptions after network changes.
21+
22+
23+
**Known issues**
24+
- macOS Sequoia: Due to changes Apple introduced in macOS 15.0.x, the WARP client may not behave as expected. Cloudflare recommends the use of macOS 15.4 or later.
25+
version: 2025.4.929.0
26+
releaseDate: 2025-05-12T23:20:27.810Z
27+
packageURL: https://downloads.cloudflareclient.com/v1/download/macos/version/2025.4.929.0
28+
packageSize: 96424041
29+
platformName: macOS

0 commit comments

Comments
 (0)