Netbird v0.71.0 released

netbird v0.71.0 released

Release Notes for v0.71.0

What’s New

IPv6 overlay addressing
NetBird’s overlay is now dual-stack. Every account gets its own IPv6 prefix (default /64, configurable from /48 to /120), and peers can receive both an IPv4 and an IPv6 overlay address. DNS serves AAAA
and reverse PTR records alongside A records, ACLs apply to both families automatically, network routes accept IPv6 CIDRs (with masquerade), exit nodes that route 0.0.0.0/0 get a matching ::/0 route, and
domain routes resolve both A and AAAA.

Rollout is group-gated: new accounts enable IPv6 for the All group by default; existing accounts opt in under Settings > Network. Assignment is also gated on a per-peer capability, so older clients keep
working on IPv4 until they upgrade. Hosts can opt out individually with netbird up --disable-ipv6

Read more in the IPv6 Overlay Addressing announcement and the IPv6 documentation.
[management, client] Add IPv6 overlay support by lixmal · Pull Request #5631 · netbirdio/netbird · GitHub by @lixmal

MFA for local users
Local users (non-IdP) can now enable multi-factor authentication, closing a gap for deployments that don’t federate auth through an external provider.
[management] Enable MFA for local users by jnfrati · Pull Request #5804 · netbirdio/netbird · GitHub by @jnfrati

Bring your own proxy (backend ready)
Backend support for per-account reverse-proxy lifecycle has landed: proxy tokens, per-account cluster allow-lists, conflict detection, and one-proxy-per-account enforcement. Full rollout (dashboard, docs) comes
in a later release.
[proxy] feature: bring your own proxy by crn4 · Pull Request #5627 · netbirdio/netbird · GitHub by @crn4

Client Improvements

Management Improvements

Relay Improvements

Misc