v1.5.0

Netclient v1.5.0 Release Notes 🚀

🚀 What’s New

🔁 Overlapping Egress Ranges (beta)

• Virtual NAT mode enables multiple egress routers to share overlapping IP ranges by assigning each egress a virtual range from a configurable pool.
• Configurable per-network IPv4 pool and site prefix length for virtual range allocation.
• Eliminates routing conflicts when multiple sites need to egress the same destination CIDRs (e.g., multiple offices routing to the same cloud VPC).
• Supports both direct NAT and virtual NAT modes for flexible egress configurations.

🧭 macOS Local DNS Resolver

• Darwin netclients now run their own local DNS resolver.

  Benefits

  • More consistent DNS resolution

  • Improved compatibility with macOS networking stack

  • Reduced dependency on system DNS behavior

🌐 Internet Gateways on macOS

• Darwin netclients can now:

  • Use Internet Gateways

  • Participate in fully routed internet traffic

  • This brings feature parity closer to Linux and Windows clients.

🧰 Improvements & Fixes

DNS:

• Debian DNS configuration fix

• Improved Windows DNS management

GeoLocation:

• Consolidated IP location API usage

• Added fallback mechanisms

Windows:

• Improved logging

• Fixed installer issues

• Version command corrections

• Better adapter error handling

LAN Routing:

• Added configurable interface exclusion

• Fixes Kubernetes endpoint detection conflicts

Known Issues 🐞

• netclients cannot auto-upgrade on ipv6-only machines.

• Need to optimize multi-network netclient join with enrollment key

• On systems using systemd-resolved in uplink mode, the first 3 entries in resolv.conf are used and rest are ignored. So it might cause DNS issues. Stub mode is preferred.

v1.4.0

Netclient v1.4.0 Release Notes 🚀

🚀 What’s New

🌍 Posture Checks (beta)

• Security feature that validates device compliance against configured policies based on device attributes such as OS, OS version, kernel version, client version, geographic location, and auto-update status.
• Supports tag-based and user group-based assignment of posture checks to specific devices or users.
• Tracks violations with configurable severity levels and provides real-time evaluation of device compliance.
• Helps ensure only compliant devices can access network resources.

🔁 Network Traffic Logging (alpha)

• Comprehensive network flow logging system that captures and stores network traffic metadata in ClickHouse.
• Tracks source and destination IPs, ports, protocols, bytes/packets sent/received, and connection timestamps.
• Provides API endpoints for querying flow data with filters by network, node, user, protocol, and time range.
• Enables network administrators to monitor, analyze, and audit network traffic patterns for security and troubleshooting purposes.

🔄 Auto Removal of Offline Peers

• Automatically removes nodes that have been offline for a configurable threshold period.
• Configurable per network with customizable timeout thresholds (in minutes).
• Supports tag-based filtering to selectively apply auto-removal to specific device groups.
• Helps maintain clean network topology by removing stale or abandoned peer connections.

🧭 DNS Search Domains

• Added DNS search domain functionality for simplified hostname resolution across distributed networks.

🖥️ New CLI Commands

• netclient peers: Display WireGuard peer information including public keys, host names, endpoints, last handshake times, traffic statistics (bytes received/sent), and allowed IPs. Supports filtering by network and JSON output format for programmatic access.

• netclient ping: Check connectivity and latency to WireGuard peers across networks. Supports filtering by network or peer name, IPv4/IPv6 address selection, configurable packet count, and JSON output format. Helps diagnose network connectivity issues and measure peer latency.

🧰 Improvements & Fixes

• DNS Fixes: Debian DNS configuration fix.

• Host Listen Port: Enhanced Port Configuration Logic.

• Egress Domain Updates: Fixed domain-related issues in egress configurations to ensure consistent routing behavior.

• Auto Gateway: Refresh connection metrics if no Gateway node found to update cached metrics.

Known Issues 🐞

• netclients cannot auto-upgrade on ipv6-only machines.

• Need to optimize multi-network netclient join with enrollment key

• On systems using systemd-resolved in uplink mode, the first 3 entries in resolv.conf are used and rest are ignored. So it might cause DNS issues. Stub mode is preferred.

v1.2.0

Netclient v1.2.0 Release Notes 🚀

🚀 What’s New

🌍 Auto-Relays (formerly Failovers)

• Failovers are now Auto-Relays with High Availability (HA) support.

• Enables global routing optimization based on real-time latency between peers across regions.

🔁 Gateway High Availability

• Gateways can now automatically assign peer relays and fallback to healthy nodes when primary gateways become unavailable.

🌐 Egress HA with Latency-Aware Routing

• Egress gateways now dynamically select the optimal route based on latency, ensuring faster and more resilient connectivity.

🧭 DNS Search Domains

• Added DNS search domain functionality for simplified hostname resolution across distributed networks.

🧰 Improvements & Fixes

• Metrics Enrichment: Enhanced uptime and connection-status data.

• DNS Control Fixes: Fixed toggle behavior for enabling/disabling Netmaker DNS on hosts.

• DNS Config Update And Cleanup Handling.

• Egress Domain Updates: Fixed domain-related issues in egress configurations to ensure consistent routing behavior.

Known Issues 🐞

• WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop, previously known as the Remote Access Client (RAC), and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.

• netclients cannot auto-upgrade on ipv6-only machines.

• Need to optimize multi-network netclient join with enrollment key

v1.1.0

Netclient v1.1.0

What’s New ✨

• Egress Domain-Based Routing – Route traffic based on domain names, not just network CIDRs.

• DNS Nameservers with Match Domain Functionality – Fine-grained DNS resolution control per domain.

• Device Approval Workflow – Require admin approval before devices can join a network.

Improvements & Fixes 🛠

• Access Control Lists (ACLs): Enhanced functionality and flexibility.

• Stability Enhancements: More reliable connections for nodes using Internet Gateways.

• DNS: Linux DNS Config Fixes

• Egress HA: Optimised Egress HA routing.

Known Issues 🐞

• Inaccurate uptime info in metrics involving ipv4-only and ipv6-only traffic

• netclients cannot auto-upgrade on ipv6-only machines.

• Need to optimize multi-network netclient join with enrollment key

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v1.0.0

Netclient v1.0.0

Whats New ✨

• Gateways Unified: Internet Gateways are now merged into the general Gateway feature and available in Community Edition.

• Site-to-Site over IPv6: IPv4 site-to-site communication over IPv6 Netmaker overlay tunnels.

🛠 Improvements & Fixes

• Auto-Sync DNS Configs: Multi-network DNS configurations now sync automatically between server and clients.

• Stability Fixes: Improved connection reliability for nodes using Internet Gateways.

• LAN/Private Routing Enhancements: Smarter detection and handling of local/private routes, improving peer-to-peer communication in complex network environments.

Known Issues 🐞

• Inaccurate uptime info in metrics involving ipv4-only and ipv6-only traffic

• netclients cannot auto-upgrade on ipv6-only machines.

• Need to optimize multi-network netclient join with enrollment key

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v0.99.0

Netclient v0.99.0

Whats New ✨

• ACLs on Community Edition (Beta): The new version of Access Control Lists is now available in CE as a beta feature.

• Auto Sync Server Settings: Automatically propagate server configuration changes across nodes.

• DNS Search Domains on Windows: DNS search domains configuration for Windows clients.

🛠 Improvements & Fixes

• Optimized DNS Query Handling: Faster and more efficient internal name resolution.

• Improved Failover Handling: Enhanced stability and signaling for NAT traversal peer connections.

• User Egress Policies: More granular control over user-level outbound traffic policies.

• LAN/Private Routing Enhancements: Better detection and handling of local/private endpoint routes during peer communication.

• Stale Route Cleanup on Node Disconnect: Automatically removes outdated interface routes when nodes disconnect.

Known Issues 🐞

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v0.90.0

Netclient v0.90.0

Whats New ✨

• ACL Rules for Egress Ranges
• High Availability for Egress Routes
• Added Support for Additional Nameservers.
• Managed DNS Support for Windows

What's Fixed/Improved 🛠

• Optimised Metrics Collection.
• IPv6 DNS Entries.
• FailOver connection improvements.
• Optimized Failover peer signaling.
• Improved Connectivity Status Indicator with real-time troubleshooting help.

Known Issues 🐞

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v0.30.0

Netclient v0.30.0

Whats New ✨

• Advanced ACL Rules - port, protocol and traffic direction
• Reduced Firewall Requirements To One Single Port (443 udp/tcp)
• Option to Turn off STUN or specify custom stun servers

What's Fixed/Improved 🛠

• Ipv6 Metrics Data
• Optimised MQ message size

Known Issues 🐞

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v0.26.0

Netclient v0.26.0

Whats New ✨

• Managed DNS System (Linux)
• New ACLs System

What's Fixed/Improved 🛠

• Metrics Data

Known Issues 🐞

• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.

v0.25.0

Netclient v0.25.0

Whats New ✨

What's Fixed/Improved 🛠

• Scalability Improvements
• Fixed MQ Decrypt Error Due To Config Corruption
• Netclient Push Command Fix For Static Endpoint
• Handled Inernet gw issues in Dual Stack Networks

Known Issues 🐞

• Erratic Traffic Data In Metrics
• Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once.