v0.59.2

What's Changed

• Add websocket paths including relay to nginx template by @lixmal in #4573

Full Changelog: v0.59.1...v0.59.2

v0.59.1

What's Changed

• [client] fix Windows NRPT Policy Path by @hakansa in #4572

Full Changelog: v0.59.0...v0.59.1

v0.59.0

Release Notes for v0.59.0

What's New

Browser Client for Remote SSH & RDP Access

We’re excited to introduce the NetBird Browser Client – a secure, zero-install way to access your peers directly from your web browser.

Highlights

• No installation required – connect from Chrome, Firefox, Edge, or Safari.
• SSH & RDP support – access Linux and Windows machines with full protocol support.
• Runs in your browser – a complete NetBird peer compiled to WebAssembly.
• End-to-end encrypted – secured with WireGuard®.
• Temporary, secure access – short-lived peers and ACLs are created automatically and cleaned up when the session ends.

How it works

Open your NetBird dashboard → Peers view, choose a machine, and click Launch Console (SSH) or Remote Desktop (RDP).
Your session runs securely in the browser with no software download needed.

📖 Read the full guide

⚠️Note for Self-Hosted Deployments

To use the browser client with self-hosted deployments, you need to upgrade your Management, Signal, Dashboard, and Relay containers.

Learn more here:

• Self-Hosted Quickstart – Support Browser Clients
• Self-Hosted Guide – Upgrade

PRs:

• Added browser client support across client, signal, and management components. #4415
• Adjusted WebSocket proxy paths to ensure proper browser client functionality. #4565
• Updated infrastructure scripts to include WebSocket proxy setup for browser client deployments. #4566

Other Client Enhancements

• Added Windows DNS policies to always use the GPO path. #4460
• Fixed packet loss issues. #3338
• Ordered ICE candidate lists for proper comparison and reliability. #4561
• Made DNS ForwarderPort configurable and updated the default well-known port. #4479

Full Changelog: v0.58.2...v0.59.0

v0.58.2

What's Changed

• [management] Add logs for update channel by @pascal-fischer in #4527
• [client] Add WireGuard interface lifecycle monitoring by @hakansa in #4370
• [management] Fix/nmap dns filter by @crn4 in #4547

Full Changelog: v0.58.1...v0.58.2

v0.58.1

What's Changed

• [client] Skip interface for route lookup if it doesn't exist by @lixmal in #4524

Full Changelog: v0.58.0...v0.58.1

v0.58.0

What's Changed

• [management] Add rule ID validation for policy updates by @bcmmbaga in #4499
• [client] [UI] Down & Up NetBird Async When Settings Updated by @hakansa in #4458
• [android] Add OnLoginSuccess callback to URLOpener interface by @doromaraujo in #4492
• [management] Filter DNS records to include only peers to connect by @bcmmbaga in #4517
• Add a new product demo video by @braginini in #4520
• [client] Use native windows sock opts to avoid routing loops by @lixmal in #4314
• [client] Do not run up cmd if not needed by @pappz in #4508
• [misc] Update SIGN_PIPE_VER to version 0.0.23 by @mlsmaycon in #4521
• [client] Check the client status in the earlier phase by @pappz in #4509

Full Changelog: v0.57.1...v0.58.0

v0.57.1

What's Changed

• [relay] Refactor healthcheck sender and receiver to use configurable options by @pappz in #4433
• [client] Fix ICE latency handling by @pappz in #4501

Full Changelog: v0.57.0...v0.57.1

v0.57.0

What's Changed

• [client] Implement environment variable handling for Android by @pappz in #4440
• [client] Fix/v4 stun routing by @pappz in #4430
• [client] Fix client status check by @pappz in #4474
• [misc] Remove default zitadel admin user in deployment script by @bcmmbaga in #4482

Full Changelog: v0.56.1...v0.57.0

v0.56.1

This release brings an improvement for Windows clients' startup with caching of metadata information that in some systems could take up to 10s to retrieve.

What's Changed

• [management] Add peers manager to integrations by @bcmmbaga in #4405
• [internal] Add missing assignment of iFaceDiscover when netstack is disabled by @doromaraujo in #4444
• [client] Do not block Offer processing from relay worker by @pappz in #4435
• [management] only allow user devices to be expired by @pascal-fischer in #4445
• [client] Move some sys info to a static place by @pappz in #4446
• [management] Extends integration and peers manager by @bcmmbaga in #4450
• [client] Debug information for connection by @pappz in #4439
• [misc] Remove aur support and start service on ostree by @mlsmaycon in #4461

New Contributors

• @doromaraujo made their first contribution in #4444

Full Changelog: v0.56.0...v0.56.1

v0.56.0

Release Notes for v0.56.0

What's New

In this release, we are adding support for user approval. This allows administrators to control whether users can join their account and automatically be allowed to connect their peers to their networks. Learn more at https://docs.netbird.io/how-to/approve-users

Client Enhancements

• Added netstack support for Android CLI. #4319
• Added MTU configuration flag. #4213
• Fixed Darwin DNS errors always being thrown. #4403
• Fixed shared socket buffer allocation. #4409
• Prevented upstream resolvers from deactivating on failure. #4128
• Updated to the latest Pion ICE version. #4388

Management Improvements

• Optimized proxy network map performance. #4324
• Removed redundant store locks for better concurrency. #4385, #4390
• Changed network serial increment to occur at the end of transactions. #4397
• Reported sync and login durations by account ID. #4406
• Split high latency gRPC metrics for more detailed monitoring. #4408
• Continued user updates even after failures (removed locks). #4410
• Fixed ephemeral flag handling in peer batch response. #4420
• Added login filter to prevent multiple peers from connecting with the same public key. #3986
• Removed withContext from store methods. #4422
• Fixed duplicate group removals on peer deletion. #4421
• Added user approval feature for accounts. #4411

Signal & Relay

• Fixed goroutine and memory leaks when forwarding messages between peers. #3896
• Relay now accepts any origin. #4426

Other Changes

• Bumped golang-jwt/jwt from 3.2.2 to 5.3.0. #4375
• Fixed Windows client and management benchmark tests. #4424

New Contributors

• @plusls made their first contribution in #4319

Full Changelog: v0.55.1...v0.56.0