netmaker version history

- Added site-to-site ACLs (Beta) for controlling traffic between networks - Introduced egress ACLs with IP restriction and an egress applications catalogue (Beta) - Implemented JIT group memberships and SIEM integration for security workflows - Added default enrollment keys and database schema changes requiring upgrade validation

# Netmaker v1.5.1 Release Notes 🚀 ## ⚠️ Migration Notes (Important) These changes may impact existing deployments. Please review carefully before upgrading. ### ❗Legacy ACLs Removal Legacy ACLs have been fully removed as part of the transition to the new access control model. #### Impact: - Existing configurations using legacy ACLs will no longer function - Access behaviour may change after the upgrade #### 👉 Action Required: - Review existing access policies - Reconfigure them using the new access control model before upgrading ## 🗄️ Database Schema Migration This release introduces schema changes to the following core entities: - Users - Groups - Roles - Networks - Hosts #### Impact: - The database structure will be updated automatically during the upgrade - Downgrades may not be supported after migration. #### 👉 Action Required: - Ensure the application starts successfully and migrations are complete - Validate core functionality post-upgrade For detailed upgrade steps, refer to the official upgrade documentation: [**Server Upgrades v1.5.1+**](https://learn.netmaker.io/getting-started/server-and-client-manageme

## Netmaker v1.5.0 Release Notes 🚀 ## 🚀 What’s New ### 🔓 Just-In-Time Access (beta) - Time-limited, on-demand network access: users request access, admins approve or deny, and grants expire automatically. - Request/approval workflow with configurable grant duration; admins retain full control over who accesses which networks and when. ### 🔁 Overlapping Egress Ranges (beta) - Virtual NAT mode enables multiple egress routers to share overlapping IP ranges by assigning each egress a virtual range from a configurable pool. - Configurable per-network IPv4 pool and site prefix length for virtual range allocation. - Eliminates routing conflicts when multiple sites need to egress the same destination CIDRs (e.g., multiple offices routing to the same cloud VPC). - Supports both direct NAT and virtual NAT modes for flexible egress configurations. ### 🌍 Gateway Monitoring - Desktop App connections automatically fail over to healthy gateway hubs when the primary becomes unavailable. - Gateway health is monitored via connectivity checks and last-seen metrics; only online gateways are used for new connections. ## 🧰 Improvements & Fixes - **IP Detection Interval** User can now ch

## Netmaker v1.4.0 Release Notes 🚀 ## 🚀 What’s New ### 🌍 Posture Checks (beta) - Security feature that validates device compliance against configured policies based on device attributes such as OS, OS version, kernel version, client version, geographic location, and auto-update status. - Supports tag-based and user group-based assignment of posture checks to specific devices or users. - Tracks violations with configurable severity levels and provides real-time evaluation of device compliance. - Helps ensure only compliant devices can access network resources. ### 🔁 Network Traffic Logging (alpha) - Comprehensive network flow logging system that captures and stores network traffic metadata. - Tracks source and destination IPs, ports, protocols, bytes/packets sent/received, and connection timestamps. - Provides API endpoints for querying flow data with filters by network, node, user, protocol, and time range. - Enables network administrators to monitor, analyze, and audit network traffic patterns for security and troubleshooting purposes. ### 🌐 K8s Operator with Cluster Access, Egress and Ingress functionality (beta) - **Cluster Egress**: Expose Netma

## Netmaker v1.2.0 Release Notes 🚀 ## 🚀 What’s New ### 🌍 Auto-Relays (formerly Failovers) - Failovers are now Auto-Relays with High Availability (HA) support. - Enables global routing optimization based on real-time latency between peers across regions. ### 🔁 Gateway High Availability - Gateways can now automatically assign peer relays and fallback to healthy nodes when primary gateways become unavailable. ### 🌐 Egress HA with Latency-Aware Routing - Egress gateways now dynamically select the optimal route based on latency, ensuring faster and more resilient connectivity. ### 🧭 DNS Search Domains - Added DNS search domain functionality for simplified hostname resolution across distributed networks. ### 👥 New User Roles - Introduced a User Auditor role for security and compliance use-cases, offering read-only visibility into system activity. ### 🧩 Onboarding Flow - Streamlined user onboarding experience during signup for workspace setup. ### ⚙️ Dynamic ACL Deprecation - Added logic to automatically deprecate outdated ACLs on demand, reducing stale configurations and improving policy hygiene. ## 🧰 Improvements & Fixes - Metrics Enrichment: Enhanced uptime

## Netmaker v1.1.0 Release Notes 🚀 ## What’s New ✨ - Okta IDP Integration – Seamless authentication and user provisioning with Okta. - Egress Domain-Based Routing – Route traffic based on domain names, not just network CIDRs. - DNS Nameservers with Match Domain Functionality – Fine-grained DNS resolution control per domain. - Service User Management – Platform Network Admins can now add service users directly to networks. - Device Approval Workflow – Require admin approval before devices can join a network. - Auto-Created User Group Policies – Automatically generate network access policies for new user groups. - User Session Expiry Controls – Set session timeouts for both Dashboard and Client Apps. ## Improvements & Fixes 🛠 - Access Control Lists (ACLs): Enhanced functionality and flexibility. - User Management UX: Streamlined workflows for easier administration. - IDP User/Group Filtering: Improved filtering capabilities for large organizations. - Stability Enhancements: More reliable connections for nodes using Internet Gateways. ## Known Issues 🐞 - WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmak

# Netmaker v1.0.0 ## Whats New ✨ - Multi-Factor Authentication (MFA) for user logins – added an extra layer of security to your accounts. - Gateways Unified: Internet Gateways are now merged into the general Gateway feature and available in Community Edition. - Improved OAuth & IDP Sync: Simplified and more reliable configuration for identity provider integrations. - Global Map View: Visualize all your endpoints and users across the globe in a unified interface. - Network Graph Control: Directly control and manage endpoints via the interactive network graph. - Site-to-Site over IPv6: IPv4 site-to-site communication over IPv6 Netmaker overlay tunnels. ## 🛠 Improvements & Fixes - Auto-Sync DNS Configs: Multi-network DNS configurations now sync automatically between server and clients. - Stability Fixes: Improved connection reliability for nodes using Internet Gateways. - LAN/Private Routing Enhancements: Smarter detection and handling of local/private routes, improving peer-to-peer communication in complex network environments. ## Known Issues 🐞 - WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Netmaker Desktop,

# Netmaker v0.99.0 ## Whats New ✨ - IDP Integration: Seamless integration with Google Workspace and Microsoft Entra ID, including automatic synchronization of users and groups - User Activity & Audit Logs: Comprehensive tracking of control plane events such as user management, node changes, ACL modifications, and user access events. - Updated Egress UI: A redesigned interface for managing egress gateways for improved usability. - User Access API Tokens: Generate and manage API tokens for user-level access and automation. - Server Settings via Dashboard: View and configure core server settings directly from the web dashboard. - ACLs on Community Edition (Beta): The new version of Access Control Lists is now available in CE as a beta feature. - New Metrics Page: Gain better insights with a revamped metrics dashboard. - Offline Node Auto-Cleanup: Automatically remove stale or inactive nodes to keep networks clean. ## 🛠 Improvements & Fixes - Optimized DNS Query Handling: Faster and more efficient internal name resolution. - Improved Failover Handling: Enhanced stability and signaling for NAT traversal peer connections. - User Egress Policies: Mo

# Netmaker v0.90.0 ## Whats New ✨ - ACL Rules for Egress Ranges - High Availability for Egress Routes - Remote Access Gateways and Relays have been merged into "Gateways" and are now available on CE. https://docs.netmaker.io/docs/features/gateways - Enhanced Graph Page - Ability to Define Additional DNS Nameservers in your network - Managed DNS support on Windows - Introducing new desktop apps https://docs.netmaker.io/docs/client-installation/netmaker-desktop ## What's Fixed/Improved 🛠 - Metrics Data - IPv6 DNS Entries. - FailOver connection improvements. - Optimized Failover peer signalling. - Improved Connectivity Status Indicator with real-time troubleshooting help. ## Known Issues 🐞 - WireGuard DNS issue on Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.

# Netmaker v0.30.0 ## Whats New ✨ - All-new Dashboard Navigation - Advanced ACL Rules - port, protocol and traffic direction - Reduced Firewall Requirements To One Single Port for self-hosted (443 udp/tcp). Netclient will default to using port 443 only to listen over Private IPs if it is available; otherwise, it will use port 51821. - Option To Turn Off UDP hole punching, Option To Specify Custom Stun Servers - Improved Connectivity Status Indicator With Real-time Troubleshooting Help. ## What's Fixed/Improved 🛠 - Metrics Data - Optimised MQ message size - FailOver Stability Fixes - Scalability Fixes - Duplicate Node IP check on update ## Known Issues 🐞 - IPv6 DNS Entries Are Not Working. - Stale Peer On The Interface, When Forced Removed From Multiple Networks At Once. - WireGuard DNS issue on most flavours of Ubuntu 24.04 and some other newer Linux distributions. The issue is affecting the Remote Access Client (RAC) and the plain WireGuard external clients. Workaround can be found here https://help.netmaker.io/en/articles/9612016-extclient-rac-dns-issue-on-ubuntu-24-04.