netbirdio/netbird v0.24.2 on GitHub

Release notes

These release notes summarize what happened in the previous, 0.23, and now with the 0.24 release. There are cool new features and long-awaited enhancements that we want to share.

New features

Mark match domains as search domains

We added support to mark a match domain as a search domain in your peers' systems. See the configuration option below:

The client support was added as part of the release v0.24.0.

This option makes ping or accessing internal nodes easier by simply using their hostname. See example below:

ping -c 4 server

PING server.corporate.internal (10.75.251.48): 56 data bytes
64 bytes from 10.75.251.48: icmp_seq=0 ttl=64 time=239.124 ms
64 bytes from 10.75.251.48: icmp_seq=1 ttl=64 time=240.239 ms
64 bytes from 10.75.251.48: icmp_seq=2 ttl=64 time=238.940 ms
64 bytes from 10.75.251.48: icmp_seq=3 ttl=64 time=235.171 ms

--- server.corporate.internal ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 235.171/238.368/240.239/1.912 ms

JWT group sync

For self-hosted deployments, we made available an option to synchronize user groups from their JWT tokens. See image below:

Each IDP has its way of configuring JWT claims, but the only requirement from our side is to send the list of groups in a single claim. We are looking for contributions to update our documentation for the various IDPs that can be integrated with NetBird.

Talking about that, we added support to JumpCloud IDP; see docs here: https://docs.netbird.io/selfhosted/identity-providers#jump-cloud

Ephemeral peers

When creating a setup key, you can enable an option to make all peers activated by the setup key ephemeral peer. See the option below:

Ephemeral peers will be deleted from the management system after 10 minutes of disconnection. This feature allows for use cases like running agents on containers, auto-scaling groups, and even CI/CD; checkout this great contribution from @Alemiz112: https://github.com/marketplace/actions/netbird-connect

Routing groups

We have added support to routing group in the network routes feature; it allows administrators to configure groups, combined with setup keys auto-groups to automatically assign new peers as routers for a specific network range. Combine this with ephemeral peers to have stateless routers:

SQLite store

We added experimental support to SQLite for the Management service store. See docs at https://docs.netbird.io/selfhosted/sqlite-store

This store is note recommended for production

Enhancements:

Refresh button

Now you can refresh the list of resources in your account by using a refresh button:

User deletion

Account administrators can now delete users. See example below:

Be aware that the peers that belong to the deleted user will be removed from the account.

User group propagation

We now support group propagation from users to the peers they own:

> After enabling this option, you must trigger a group update for the user for this to take effect.

What's Changed

Implement SQLite Store using gorm and relational approach by @surik in (#1065)
Move StoreKind under own StoreConfig configuration and rename to Engine by @surik in (#1219)
chore: pkg import only once by @testwill in (#1222)
Update contribution guide with go version and Windows driver by @mlsmaycon in (#1226)
Use account creator as inviter as a fallback by @mlsmaycon in (#1225)
Add management-integrations by @surik in (#1227)
Make possible set IdpSignKeyRefreshEnabled from setup.env by @Fantu in (#1230)
Contribution guide - Explicitly disable CGO for client by @mlsmaycon in (#1228)
Update grpc clients' keepalive interval by @mlsmaycon in (#1231)
Fix update script's failure to update netbird-ui in binary installation by @bcmmbaga in (#1218)
Add search domains support by @mlsmaycon in (#1224)
Update management.json template with all existing configuration parameters by @pascal-fischer in (#1182)
Log store engine type by @mlsmaycon in (#1234)
Fix SaveUserLastLogin in SQLite store by @surik in #1241
Fix GetAccountByPrivateDomain for SQLite by @surik in #1242
Support pinning version during binary install by @glemsom in #1237
Bump golang.org/x/net from 0.10.0 to 0.17.0 by @dependabot in #1214
Log client version on startup by @mlsmaycon in #1240
Fix redirect urls template processing by @mlsmaycon in #1251

New Contributors

@glemsom made their first contribution in #1237
@nazarewk made their first contribution in (#612)

Full Changelog: v0.23.9...v0.24.0