Release Notes for v0.66.0
New Feature: netbird expose
We’re excited to introduce netbird expose — a simple and secure way to expose your local services through the NetBird reverse proxy.
Expose Local Services with Protection
Expose a local HTTP server:
netbird expose 8080
This instantly publishes your local service via NetBird’s reverse proxy.
You can enhance the exposure with built-in protection and customization:
With PIN protection (6 digits)
netbird expose 3000 --with-pin 123456
With password protection and name prefix
netbird expose 8080 --with-password my-secret --with-name-prefix my-app
Restrict by SSO user groups
netbird expose 8080 --with-user-groups engineering,devops
Use a custom domain (pre-configured in your account)
netbird expose 8080 --with-custom-domain app.example.com
Supported Flags
--with-pin string— Protect the exposed service with a 6-digit
PIN\--with-password string— Add password protection\--with-user-groups strings— Restrict access to specific user
groups\--with-custom-domain string— Specify a custom domain\--with-name-prefix string— Prefix the generated service name\--protocol string— Protocol to use (httporhttps, default
http)
NetBird Cloud support is coming soon with hosted proxy nodes.
Learn more at: Expose from CLI - NetBird Docs
Or watch the video below:
Client Improvements
- Stopped upstream retry loop immediately on context cancellation.
#5403 - Fixed busy-loop in network monitor routing socket on macOS/BSD.
#5424 - Fixed missed sleep/wakeup events on macOS.
#5418 - Removed connection semaphore to simplify connection handling.
#5419 - Skipped UAPI listener in netstack mode.
#5397 - Simplified DNS logging by removing domain list from log output.
#5396 - Excluded Flow domain from caching to prevent TLS failures.
#5433 - Added non-default socket file discovery support.
#5425
Client Service Expose
- Introduced client service expose feature across client and management.
#5411 - Refactored expose feature by moving business logic from gRPC to manager layer.
#5435
Proxy Improvements
- Added access log cleanup.
#5376 - Implemented access log sorting.
#5378 - Sent proxy updates on account deletion.
#5375 - Added pre-shared key (PSK) support to proxy.
#5377
Management Improvements
- Refactored network map component assembly.
#5193 - Added custom domain counts and service metrics to self-hosted metrics.
#5414
Self-Hosted Enhancements
- Added support for activity store engine in the combined server.
#5406 - Added Embedded IdP metrics for improved observability.
#5407
Full Changelog: v0.65.3…v0.66.0