Added support for configuring a firewall mark via the install command.
Traffic Logs have now moved into Beta.
- Traffic Logs are now enriched with relevant domain tagging, making network activity easier to audit and investigate.
The default Netclient port has been changed to 51821/udp (previously 443/udp).
- Updated the Netclient Docker deployment to run in the foreground, moving away from daemon management inside the container.
- Improved peer synchronization by caching peer information and only refreshing when a peer update is triggered.
- Netclient now uses the provided interface name on Windows.
- Added a Noop DNS Config Manager fallback when DNS Manager initialization fails.
- Added Windows Active Directory compatibility mode.
- Netclient now automatically avoids adding conflicting routes with local interfaces.
- Internet Gateways are now marked unhealthy when a node is disconnected or a peer is not found.
- Fixed missing
endpoint-ip6flag name. - Removed the MTU flag from CLI configuration (this can now be configured via the control plane).
-
IPv6-only machines
Netclients cannot currently auto-upgrade on IPv6-only systems. -
Multi-network join performance
Multi-network netclient joins using an enrollment key still require optimization. -
systemd-resolved DNS limitation
On systems using systemd-resolved in uplink mode, only the first 3 entries inresolv.confare honored; additional entries are ignored. This may cause DNS resolution issues. Stub mode is recommended.