Highlights
-
start-tunnel auth session killtakes--pubkey <key>for each session to end, in place of positional session IDs. Theauth.session.killRPC takespubkeysin place ofids, andauth.session.listreturns sessions as{ pubkeys, tokens }. -
Prevent Add device dialogs from opening before subnet data loads.
-
WireGuard configs can use a separate endpoint when StartTunnel is behind NAT.
The UI config dialog defaults to the browser URL's host and accepts an edited IP
address or DNS name. CLIdevice show-config --endpointsupplies the same
per-config override independently of the WAN address used for SNAT and forwarding. -
Forwarded ports no longer occasionally fail to accept connections because the host was using the port for an outbound connection.
Important
Choose an endpoint reachable by the device; an HTTPS reverse proxy may not forward WireGuard UDP. The configured WireGuard port is retained. CLI config generation with a non-public WAN override requires Prevent Add device dialogs from opening before subnet data loads.
A dialog's Help toggle sits over the Help toggle in the header.
WireGuard configs can use a separate endpoint when StartTunnel is behind NAT. Forwarded ports no longer occasionally fail to accept connections because the host was using the port for an outbound connection.
--endpoint. Configs already installed on devices remain unchanged.
Full changelog
[1.5.0]
Changed
start-tunnel auth session kill takes --pubkey <key> for each session to end, in place of positional session IDs. The auth.session.kill RPC takes pubkeys in place of ids, and auth.session.list returns sessions as { pubkeys, tokens }.
Fixed
The UI config dialog defaults to the browser URL's host and accepts an edited IP
address or DNS name. CLI device show-config --endpoint supplies the same
per-config override independently of the WAN address used for SNAT and forwarding.
start-tunnel packages Checksums
SHA-256
d5d7fa6f0fcd086dfa7b4c4be962e56009083c63e4cf152fe52a13a7ce7255ee start-tunnel_1.5.0_amd64.deb
64806606212a39e9e46a56c5600cc7d418375bfb4daa326aa1f02b753aeea7c8 start-tunnel_1.5.0_arm64.deb
0baa158817a26eb2179f4b2b051fa6333e872bf0108871e5cf61a37dd3085857 start-tunnel_1.5.0_riscv64.deb
BLAKE-3
14dd4194a010da15fc05b27a69f3314511821209370427c86b9d697217b3512f start-tunnel_1.5.0_amd64.deb
d480f13465d387ed0214ce9ac2a7044329686a0a17705c77801b804a7492875a start-tunnel_1.5.0_arm64.deb
5e9c933f4d0c2c024689063e4b905e7d62299170cd4797705d4c9932c829b864 start-tunnel_1.5.0_riscv64.deb