Release Notes for v0.71.0
What's New
IPv6 overlay addressing
NetBird's overlay is now dual-stack. Every account gets its own IPv6 prefix (default /64, configurable from /48 to /120), and peers can receive both an IPv4 and an IPv6 overlay address. DNS serves AAAA
and reverse PTR records alongside A records, ACLs apply to both families automatically, network routes accept IPv6 CIDRs (with masquerade), exit nodes that route 0.0.0.0/0 get a matching ::/0 route, and
domain routes resolve both A and AAAA.
Rollout is group-gated: new accounts enable IPv6 for the All group by default; existing accounts opt in under Settings > Network. Assignment is also gated on a per-peer capability, so older clients keep
working on IPv4 until they upgrade. Hosts can opt out individually with netbird up --disable-ipv6
Read more in the IPv6 Overlay Addressing announcement and the IPv6 documentation.
#5631 by @lixmal
MFA for local users
Local users (non-IdP) can now enable multi-factor authentication, closing a gap for deployments that don't federate auth through an external provider.
#5804 by @jnfrati
Bring your own proxy (backend ready)
Backend support for per-account reverse-proxy lifecycle has landed: proxy tokens, per-account cluster allow-lists, conflict detection, and one-proxy-per-account enforcement. Full rollout (dashboard, docs) comes
in a later release.
#5627 by @crn4
Client Improvements
- Included MTU and SSH auth config in debug bundle by @lixmal.
#6071 - Added public key to debug bundle config.txt by @lixmal.
#6092 - iOS: structured ResolvedIPs collection for domain routes by @pappz.
#6090 - Used unique temp file and clean up on failure when writing ssh config by @lixmal.
#6064 - Hardened uspfilter conntrack and shared TCP relay by @lixmal.
#5936 - Skipped DNS upstream failover on definitive EDE by @lixmal.
#6089 - Fixed --config flag default to point at profile path by @lixmal.
#6122 - Bracketed IPv6 in embed listeners, expanded debug bundle by @lixmal.
#6134 - Added short flags for status command options by @mlsmaycon.
#6137
Management Improvements
- Removed permissions from geolocations API by @pascal-fischer.
#6091 - Added update reason to buffered calls by @pascal-fischer.
#6103 - Allocated and preserved IPv6 overlay addresses for embedded proxy peers by @lixmal.
#6132 - Fixed offline statuses for public proxy clusters by @crn4.
#6133 - Bracketed IPv6 reverse-proxy target hosts when building URL Host field by @lixmal.
#6141
Relay Improvements
Misc
- Updated CONTRIBUTING.md by @mlsmaycon.
#6076