Release Notes for v0.71.0
What’s New
IPv6 overlay addressing
NetBird’s overlay is now dual-stack. Every account gets its own IPv6 prefix (default /64, configurable from /48 to /120), and peers can receive both an IPv4 and an IPv6 overlay address. DNS serves AAAA
and reverse PTR records alongside A records, ACLs apply to both families automatically, network routes accept IPv6 CIDRs (with masquerade), exit nodes that route 0.0.0.0/0 get a matching ::/0 route, and
domain routes resolve both A and AAAA.
Rollout is group-gated: new accounts enable IPv6 for the All group by default; existing accounts opt in under Settings > Network. Assignment is also gated on a per-peer capability, so older clients keep
working on IPv4 until they upgrade. Hosts can opt out individually with netbird up --disable-ipv6
Read more in the IPv6 Overlay Addressing announcement and the IPv6 documentation.
[management, client] Add IPv6 overlay support by lixmal · Pull Request #5631 · netbirdio/netbird · GitHub by @lixmal
MFA for local users
Local users (non-IdP) can now enable multi-factor authentication, closing a gap for deployments that don’t federate auth through an external provider.
[management] Enable MFA for local users by jnfrati · Pull Request #5804 · netbirdio/netbird · GitHub by @jnfrati
Bring your own proxy (backend ready)
Backend support for per-account reverse-proxy lifecycle has landed: proxy tokens, per-account cluster allow-lists, conflict detection, and one-proxy-per-account enforcement. Full rollout (dashboard, docs) comes
in a later release.
[proxy] feature: bring your own proxy by crn4 · Pull Request #5627 · netbirdio/netbird · GitHub by @crn4
Client Improvements
- Included MTU and SSH auth config in debug bundle by @lixmal.
[client] Include MTU and SSH auth config in debug bundle by lixmal · Pull Request #6071 · netbirdio/netbird · GitHub - Added public key to debug bundle config.txt by @lixmal.
[client] Add public key to debug bundle config.txt by lixmal · Pull Request #6092 · netbirdio/netbird · GitHub - iOS: structured ResolvedIPs collection for domain routes by @pappz.
[client] iOS: structured ResolvedIPs collection for domain routes by pappz · Pull Request #6090 · netbirdio/netbird · GitHub - Used unique temp file and clean up on failure when writing ssh config by @lixmal.
[client] Use unique temp file and clean up on failure when writing ssh config by lixmal · Pull Request #6064 · netbirdio/netbird · GitHub - Hardened uspfilter conntrack and shared TCP relay by @lixmal.
[client, proxy] Harden uspfilter conntrack and share TCP relay by lixmal · Pull Request #5936 · netbirdio/netbird · GitHub - Skipped DNS upstream failover on definitive EDE by @lixmal.
[client] Skip DNS upstream failover on definitive EDE by lixmal · Pull Request #6089 · netbirdio/netbird · GitHub - Fixed –config flag default to point at profile path by @lixmal.
[client] Fix --config flag default to point at profile path by lixmal · Pull Request #6122 · netbirdio/netbird · GitHub - Bracketed IPv6 in embed listeners, expanded debug bundle by @lixmal.
[client] Bracket IPv6 in embed listeners, expand debug bundle by lixmal · Pull Request #6134 · netbirdio/netbird · GitHub - Added short flags for status command options by @mlsmaycon.
[client] Add short flags for status command options by mlsmaycon · Pull Request #6137 · netbirdio/netbird · GitHub
Management Improvements
- Removed permissions from geolocations API by @pascal-fischer.
[management] remove permissions from geolocations api by pascal-fischer · Pull Request #6091 · netbirdio/netbird · GitHub - Added update reason to buffered calls by @pascal-fischer.
[management] add update reason to buffered calls by pascal-fischer · Pull Request #6103 · netbirdio/netbird · GitHub - Allocated and preserved IPv6 overlay addresses for embedded proxy peers by @lixmal.
[management] Allocate IPv6 overlay addresses to embedded proxy peers by lixmal · Pull Request #6132 · netbirdio/netbird · GitHub - Fixed offline statuses for public proxy clusters by @crn4.
[management] fix offline statuses for public proxy clusters by crn4 · Pull Request #6133 · netbirdio/netbird · GitHub - Bracketed IPv6 reverse-proxy target hosts when building URL Host field by @lixmal.
[management] Bracket IPv6 in reverse-proxy target URLs by lixmal · Pull Request #6141 · netbirdio/netbird · GitHub
Relay Improvements
- Preserved non-standard port in WS dialer URL prep by @lixmal.
[relay] Preserve non-standard port in WS dialer URL prep by lixmal · Pull Request #6061 · netbirdio/netbird · GitHub
Misc
- Updated CONTRIBUTING.md by @mlsmaycon.
[misc] Update CONTRIBUTING.md by mlsmaycon · Pull Request #6076 · netbirdio/netbird · GitHub