From 1d570361b19150ef73aca031f1a455c6d606e51a Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:32:41 -0700 Subject: [PATCH 01/10] Update 2025.4.929.0 with config warning --- src/content/warp-releases/linux/ga/2025.4.929.0.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/content/warp-releases/linux/ga/2025.4.929.0.yaml b/src/content/warp-releases/linux/ga/2025.4.929.0.yaml index 9727bb60c3e9f97..94b05f3e8e78df5 100644 --- a/src/content/warp-releases/linux/ga/2025.4.929.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.4.929.0.yaml @@ -1,7 +1,8 @@ releaseNotes: |- - This release contains two significant changes all customers should be aware of: + This release contains three significant changes all customers should be aware of: 1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer required to configure their local firewall rules to allow our [DoH IP addresses and domains](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#doh-ip). 2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we detect that HTTP/3 traffic is blocked. This allows for a much more reliable connection on some public WiFi networks. + 3. Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). **Changes and improvements** - Fixed an issue where the managed network policies could incorrectly report network location beacons as missing. From 1e7d48ee907773bfbd2be521e9fe7f2e486f7cc5 Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:37:44 -0700 Subject: [PATCH 02/10] Update 2025.4.943.0 with config warning --- src/content/warp-releases/linux/ga/2025.4.943.0.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.4.943.0.yaml b/src/content/warp-releases/linux/ga/2025.4.943.0.yaml index 89ef49ec34b1446..00280b2b6b0e55d 100644 --- a/src/content/warp-releases/linux/ga/2025.4.943.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.4.943.0.yaml @@ -1,6 +1,8 @@ releaseNotes: |- This release contains a hotfix for [managed networks](/cloudflare-one/connections/connect-devices/warp/configure-warp/managed-networks/) for the 2025.4.929.0 release. + Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + **Changes and improvements** - Fixed an issue where it could take up to 3 minutes for the correct device profile to be applied in some circumstances. In the worst case, it should now only take up to 40 seconds. This will be improved further in a future release. version: 2025.4.943.0 From 60cf7829e4bcbe66cc8746bda2877a32c496354a Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:39:50 -0700 Subject: [PATCH 03/10] Update 2025.5.893.0 with config warning --- src/content/warp-releases/linux/ga/2025.5.893.0.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.5.893.0.yaml b/src/content/warp-releases/linux/ga/2025.5.893.0.yaml index 39ff26ee0ce2e7d..5b6db69b8d3edd5 100644 --- a/src/content/warp-releases/linux/ga/2025.5.893.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.5.893.0.yaml @@ -1,6 +1,8 @@ releaseNotes: |- This release contains improvements and new exciting features, including [post-quantum cryptography](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum). By tunneling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems. + Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + **Changes and improvements** - Fixed a device registration issue causing WARP connection failures when changing networks. - Captive portal improvements and fixes: From 5bbe45586bb610622660f2f719213f35c325f76d Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:41:47 -0700 Subject: [PATCH 04/10] changed format to match later release notes with this warning --- src/content/warp-releases/linux/ga/2025.5.893.0.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/content/warp-releases/linux/ga/2025.5.893.0.yaml b/src/content/warp-releases/linux/ga/2025.5.893.0.yaml index 5b6db69b8d3edd5..370cf18049ab4ac 100644 --- a/src/content/warp-releases/linux/ga/2025.5.893.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.5.893.0.yaml @@ -1,8 +1,6 @@ releaseNotes: |- This release contains improvements and new exciting features, including [post-quantum cryptography](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/parameters/#enable_post_quantum). By tunneling your corporate network traffic over Cloudflare, you can now gain the immediate protection of post-quantum cryptography without needing to upgrade any of your individual corporate applications or systems. - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). - **Changes and improvements** - Fixed a device registration issue causing WARP connection failures when changing networks. - Captive portal improvements and fixes: @@ -13,6 +11,10 @@ releaseNotes: |- - Improvement to handle client configuration changes made by MDM while WARP is not running. - Fixed an issue affecting Split Tunnel Include mode, where traffic outside the tunnel was blocked when switching between Wi-Fi and Ethernet networks. - Added a WARP client device posture check for SAN attributes to the [client certificate check](/cloudflare-one/identity/devices/warp-client-checks/client-certificate/). + + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + version: 2025.5.893.0 releaseDate: 2025-06-30T19:44:34.251Z packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.5.893.0 From 0a18806b7be59427dd12ed15c989d53d1da6f10d Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:42:25 -0700 Subject: [PATCH 05/10] changed to match formatting of existing release notes with this warning --- src/content/warp-releases/linux/ga/2025.4.943.0.yaml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/src/content/warp-releases/linux/ga/2025.4.943.0.yaml b/src/content/warp-releases/linux/ga/2025.4.943.0.yaml index 00280b2b6b0e55d..9870b7a038900b1 100644 --- a/src/content/warp-releases/linux/ga/2025.4.943.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.4.943.0.yaml @@ -1,10 +1,12 @@ releaseNotes: |- This release contains a hotfix for [managed networks](/cloudflare-one/connections/connect-devices/warp/configure-warp/managed-networks/) for the 2025.4.929.0 release. - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). - **Changes and improvements** - Fixed an issue where it could take up to 3 minutes for the correct device profile to be applied in some circumstances. In the worst case, it should now only take up to 40 seconds. This will be improved further in a future release. + + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + version: 2025.4.943.0 releaseDate: 2025-05-22T19:22:32.439Z packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.4.943.0 From 74e7fb629b79cfc461e2cec12897eb301e59cd81 Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:43:06 -0700 Subject: [PATCH 06/10] changed format to match existing release notes with this warning --- src/content/warp-releases/linux/ga/2025.4.929.0.yaml | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/src/content/warp-releases/linux/ga/2025.4.929.0.yaml b/src/content/warp-releases/linux/ga/2025.4.929.0.yaml index 94b05f3e8e78df5..d148f5247ad5c1d 100644 --- a/src/content/warp-releases/linux/ga/2025.4.929.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.4.929.0.yaml @@ -1,9 +1,8 @@ releaseNotes: |- - This release contains three significant changes all customers should be aware of: + This release contains two significant changes all customers should be aware of: 1. All DNS traffic now flows inside the WARP tunnel. Customers are no longer required to configure their local firewall rules to allow our [DoH IP addresses and domains](/cloudflare-one/connections/connect-devices/warp/deployment/firewall/#doh-ip). 2. When using MASQUE, the connection will fall back to HTTP/2 (TCP) when we detect that HTTP/3 traffic is blocked. This allows for a much more reliable connection on some public WiFi networks. - 3. Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). - + **Changes and improvements** - Fixed an issue where the managed network policies could incorrectly report network location beacons as missing. - Improved DEX test error reporting. @@ -14,6 +13,10 @@ releaseNotes: |- - DNS over HTTPS traffic is now included in the WARP tunnel by default. - Improvement for WARP to check if tunnel connectivity fails or times out at device wake before attempting to reconnect. - Fixed an issue causing WARP connection disruptions after network changes. + + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + version: 2025.4.929.0 releaseDate: 2025-05-12T23:21:47.865Z packageURL: https://downloads.cloudflareclient.com/v1/download/noble-intel/version/2025.4.929.0 From 7408a8387a058b99897c93044ca69b5984c169b4 Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:45:14 -0700 Subject: [PATCH 07/10] Update 2025.7.176.0 with config warning --- src/content/warp-releases/linux/ga/2025.7.176.0.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.7.176.0.yaml b/src/content/warp-releases/linux/ga/2025.7.176.0.yaml index e76c571b95dd3f4..0237d7fbe950f6a 100644 --- a/src/content/warp-releases/linux/ga/2025.7.176.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.7.176.0.yaml @@ -11,6 +11,10 @@ releaseNotes: >- - Improvements to maintain [Global WARP override](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-settings/#global-warp-override) settings when [switching between organizations](/cloudflare-one/connections/connect-devices/warp/deployment/mdm-deployment/switch-organizations/#switch-organizations-in-warp). - Improvements to maintain client connectivity during network changes. + + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + version: 2025.7.176.0 releaseDate: 2025-09-30T20:20:30.460Z packageURL: https://downloads.cloudflareclient.com/v1/download/fedora35-arm/version/2025.7.176.0 From 74332cf26dad9b33add4281e9c48dea97f7d6662 Mon Sep 17 00:00:00 2001 From: Tommy Jensen <45110146+tojens-ietf@users.noreply.github.com> Date: Tue, 14 Oct 2025 10:45:42 -0700 Subject: [PATCH 08/10] Update 2025.8.779.0 with config warning --- src/content/warp-releases/linux/ga/2025.8.779.0.yaml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.8.779.0.yaml b/src/content/warp-releases/linux/ga/2025.8.779.0.yaml index f850d0c34ea4139..4079ce0b7734716 100644 --- a/src/content/warp-releases/linux/ga/2025.8.779.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.8.779.0.yaml @@ -5,6 +5,10 @@ releaseNotes: >- **Changes and improvements** - The MASQUE protocol is now the only protocol that can use [Proxy mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#proxy-mode). If you previously configured a device profile to use Proxy mode with Wireguard, you will need to select a new WARP mode or switch to the MASQUE protocol. Otherwise, all devices matching the profile will lose connectivity. + + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). + version: 2025.8.779.0 releaseDate: 2025-10-07T19:20:00.003Z packageURL: https://downloads.cloudflareclient.com/v1/download/bullseye-intel/version/2025.8.779.0 From d12052369e10524b43fbb2376dd41439013fea80 Mon Sep 17 00:00:00 2001 From: ranbel <101146722+ranbel@users.noreply.github.com> Date: Tue, 14 Oct 2025 17:14:22 -0400 Subject: [PATCH 09/10] fix formatting issue --- src/content/warp-releases/linux/ga/2025.8.779.0.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.8.779.0.yaml b/src/content/warp-releases/linux/ga/2025.8.779.0.yaml index 4079ce0b7734716..48348b9788312c6 100644 --- a/src/content/warp-releases/linux/ga/2025.8.779.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.8.779.0.yaml @@ -6,7 +6,9 @@ releaseNotes: >- - The MASQUE protocol is now the only protocol that can use [Proxy mode](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/#proxy-mode). If you previously configured a device profile to use Proxy mode with Wireguard, you will need to select a new WARP mode or switch to the MASQUE protocol. Otherwise, all devices matching the profile will lose connectivity. + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). version: 2025.8.779.0 From 4c131215d2d48fae89e7aec293c3299f52b3644e Mon Sep 17 00:00:00 2001 From: ranbel <101146722+ranbel@users.noreply.github.com> Date: Tue, 14 Oct 2025 17:15:00 -0400 Subject: [PATCH 10/10] fix formatting issue --- src/content/warp-releases/linux/ga/2025.7.176.0.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/content/warp-releases/linux/ga/2025.7.176.0.yaml b/src/content/warp-releases/linux/ga/2025.7.176.0.yaml index 0237d7fbe950f6a..f6e80b480ffeb5b 100644 --- a/src/content/warp-releases/linux/ga/2025.7.176.0.yaml +++ b/src/content/warp-releases/linux/ga/2025.7.176.0.yaml @@ -12,7 +12,9 @@ releaseNotes: >- - Improvements to maintain client connectivity during network changes. + **Known issues** + - Devices using WARP client 2025.4.929.0 and up may experience Local Domain Fallback failures if a fallback server has not been configured. To configure a fallback server, refer to [Route traffic to fallback server](/cloudflare-one/connections/connect-devices/warp/configure-warp/route-traffic/local-domains/#route-traffic-to-fallback-server). version: 2025.7.176.0