|
1 | | -## Netclient v1.2.0 Release Notes 🚀 |
| 1 | +## Netclient v1.4.0 Release Notes 🚀 |
2 | 2 |
|
3 | 3 | ## 🚀 What’s New |
4 | 4 |
|
5 | | -### 🌍 Auto-Relays (formerly Failovers) |
| 5 | +### 🌍 Posture Checks (beta) |
6 | 6 |
|
7 | | -- Failovers are now Auto-Relays with High Availability (HA) support. |
| 7 | +- Security feature that validates device compliance against configured policies based on device attributes such as OS, OS version, kernel version, client version, geographic location, and auto-update status. |
| 8 | +- Supports tag-based and user group-based assignment of posture checks to specific devices or users. |
| 9 | +- Tracks violations with configurable severity levels and provides real-time evaluation of device compliance. |
| 10 | +- Helps ensure only compliant devices can access network resources. |
8 | 11 |
|
9 | | -- Enables global routing optimization based on real-time latency between peers across regions. |
| 12 | +### 🔁 Network Traffic Logging (alpha) |
10 | 13 |
|
11 | | -### 🔁 Gateway High Availability |
| 14 | +- Comprehensive network flow logging system that captures and stores network traffic metadata in ClickHouse. |
| 15 | +- Tracks source and destination IPs, ports, protocols, bytes/packets sent/received, and connection timestamps. |
| 16 | +- Provides API endpoints for querying flow data with filters by network, node, user, protocol, and time range. |
| 17 | +- Enables network administrators to monitor, analyze, and audit network traffic patterns for security and troubleshooting purposes. |
12 | 18 |
|
13 | | -- Gateways can now automatically assign peer relays and fallback to healthy nodes when primary gateways become unavailable. |
| 19 | +### 🔄 Auto Removal of Offline Peers |
14 | 20 |
|
15 | | -### 🌐 Egress HA with Latency-Aware Routing |
16 | | - |
17 | | -- Egress gateways now dynamically select the optimal route based on latency, ensuring faster and more resilient connectivity. |
| 21 | +- Automatically removes nodes that have been offline for a configurable threshold period. |
| 22 | +- Configurable per network with customizable timeout thresholds (in minutes). |
| 23 | +- Supports tag-based filtering to selectively apply auto-removal to specific device groups. |
| 24 | +- Helps maintain clean network topology by removing stale or abandoned peer connections. |
18 | 25 |
|
19 | 26 | ### 🧭 DNS Search Domains |
20 | 27 |
|
21 | 28 | - Added DNS search domain functionality for simplified hostname resolution across distributed networks. |
22 | 29 |
|
| 30 | +### 🖥️ New CLI Commands |
23 | 31 |
|
24 | | -## 🧰 Improvements & Fixes |
| 32 | +- **`netclient peers`**: Display WireGuard peer information including public keys, host names, endpoints, last handshake times, traffic statistics (bytes received/sent), and allowed IPs. Supports filtering by network and JSON output format for programmatic access. |
25 | 33 |
|
26 | | -- Metrics Enrichment: Enhanced uptime and connection-status data. |
| 34 | +- **`netclient ping`**: Check connectivity and latency to WireGuard peers across networks. Supports filtering by network or peer name, IPv4/IPv6 address selection, configurable packet count, and JSON output format. Helps diagnose network connectivity issues and measure peer latency. |
27 | 35 |
|
28 | | -- DNS Control Fixes: Fixed toggle behavior for enabling/disabling Netmaker DNS on hosts. |
29 | 36 |
|
30 | | -- DNS Config Update And Cleanup Handling. |
| 37 | +## 🧰 Improvements & Fixes |
| 38 | + |
| 39 | +- DNS Fixes: Debian DNS configuration fix. |
| 40 | + |
| 41 | +- Host Listen Port: Enhanced Port Configuration Logic. |
31 | 42 |
|
32 | 43 | - Egress Domain Updates: Fixed domain-related issues in egress configurations to ensure consistent routing behavior. |
33 | 44 |
|
| 45 | +- Auto Gateway: Refresh connection metrics if no Gateway node found to update cached metrics. |
| 46 | + |
34 | 47 | ## Known Issues 🐞 |
35 | 48 |
|
36 | 49 | - WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04. |
|
39 | 52 |
|
40 | 53 | - Need to optimize multi-network netclient join with enrollment key |
41 | 54 |
|
| 55 | +- On systems using systemd-resolved in unlink mode, the first 3 entries in resolv.conf are used and rest are ignored. So it might cause DNS issues. Stub mode is preferred. |
| 56 | + |
0 commit comments