Skip to content

netbird

v0.72.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 1mo VPN & Tunnels
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

go mesh mesh-networks nat-traversal netbird vpn
+3 more
wireguard-vpn wiretrustee zero-trust-network-access

Summary

AI summary

Updates Client Improvements, Management Improvements, and What's New across a mixed release.

Changes in this release

Feature Medium

Adds support to expose NetBird-only services over tunnel peers.

Adds support to expose NetBird-only services over tunnel peers.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Adds private service expose support in the dashboard.

Adds private service expose support in the dashboard.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Updates reverse proxy modals in the dashboard.

Updates reverse proxy modals in the dashboard.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Improves Rosenpass support.

Improves Rosenpass support.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Recognizes NetBird DNS forwarder port in capture text format.

Recognizes NetBird DNS forwarder port in capture text format.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Captures injected ICMPv6 echo replies in debug capture.

Captures injected ICMPv6 echo replies in debug capture.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Gates DNS forwarder on BlockInbound setting.

Gates DNS forwarder on BlockInbound setting.

Source: llm_adapter@2026-06-05

Confidence: high

Feature Medium

Persists sync response via pluggable store, adding disk support on iOS.

Persists sync response via pluggable store, adding disk support on iOS.

Source: llm_adapter@2026-06-05

Confidence: high

Bugfix Medium

Fixes possible deadlock in statemanager Stop.

Fixes possible deadlock in statemanager Stop.

Source: llm_adapter@2026-06-05

Confidence: high

Bugfix Medium

Applies netroute default‑gateway workaround on Android.

Applies netroute default‑gateway workaround on Android.

Source: llm_adapter@2026-06-05

Confidence: high

Full changelog

Release Notes for v0.72.0

What's New

Private Service Expose & Reverse Proxy

  • Added support to expose NetBird-only services over tunnel peers across management, client, and proxy.
    https://github.com/netbirdio/netbird/pull/6226
  • Added follow-up fixes for private reverse-proxy services.
    https://github.com/netbirdio/netbird/pull/6268
  • Added private service expose support in the dashboard.
    https://github.com/netbirdio/dashboard/pull/646
  • Updated reverse proxy modals in the dashboard.
    https://github.com/netbirdio/dashboard/pull/661
  • Bound embed client WireGuard per-device memory across proxy and client.
    https://github.com/netbirdio/netbird/pull/5962

Client Improvements

  • Filtered scoped/cloned default routes from BSD network monitor.
    https://github.com/netbirdio/netbird/pull/6208
  • Matched DNS wildcard handlers on label boundaries.
    https://github.com/netbirdio/netbird/pull/6255
  • Refactored Linux system info to use syscalls.
    https://github.com/netbirdio/netbird/pull/6230
  • Released WASM js.FuncOf callbacks in SSH and RDP paths.
    https://github.com/netbirdio/netbird/pull/5982
  • Fixed possible deadlock in statemanager Stop.
    https://github.com/netbirdio/netbird/pull/6228
  • Improved Rosenpass support.
    https://github.com/netbirdio/netbird/pull/6136
  • Recognized NetBird DNS forwarder port in capture text format.
    https://github.com/netbirdio/netbird/pull/6177
  • Applied netroute default-gateway workaround on Android.
    https://github.com/netbirdio/netbird/pull/6192
  • Captured injected ICMPv6 echo replies in debug capture.
    https://github.com/netbirdio/netbird/pull/6321
  • Gated DNS forwarder on BlockInbound.
    https://github.com/netbirdio/netbird/pull/6257
  • Persisted sync response via pluggable store, including disk support on iOS.
    https://github.com/netbirdio/netbird/pull/6331
  • Allowed WireGuard port to be zero in UI and showed the port in status command.
    https://github.com/netbirdio/netbird/pull/6158
  • Prevented corruption from competing log rotation and improved debug bundle.
    https://github.com/netbirdio/netbird/pull/6214

Management Improvements

  • Fixed owner role update.
    https://github.com/netbirdio/netbird/pull/6264
  • Refactored management server bootstrap.
    https://github.com/netbirdio/netbird/pull/6256
  • Updated log levels.
    https://github.com/netbirdio/netbird/pull/6266
  • Extended nmap monitoring.
    https://github.com/netbirdio/netbird/pull/6271
  • Added SSO session extend flow.
    https://github.com/netbirdio/netbird/pull/6197
  • Extended combined server initialization.
    https://github.com/netbirdio/netbird/pull/6156
  • Enriched context in permissions manager.
    https://github.com/netbirdio/netbird/pull/6286
  • Exported ResolveDomain.
    https://github.com/netbirdio/netbird/pull/6334

Dashboard Improvements

  • Added simplified dashboard layout.
    https://github.com/netbirdio/dashboard/pull/649
  • Fixed broken SSH and RDP in the dashboard.
    https://github.com/netbirdio/dashboard/pull/650
  • Moved setup keys to Settings.
    https://github.com/netbirdio/dashboard/pull/653
  • Improved table filters layout.
    https://github.com/netbirdio/dashboard/pull/654
  • Grouped Networks and Routes under Network Routing.
    https://github.com/netbirdio/dashboard/pull/660

Infrastructure & CI

  • Pinned GitHub Actions with SHA and improved workflows.
    https://github.com/netbirdio/netbird/pull/6249
  • Added Codecov integration and coverage reporting across workflows.
    https://github.com/netbirdio/netbird/pull/6333
  • Allowed Docker image overrides for getting started.
    https://github.com/netbirdio/netbird/pull/6335
  • Exposed VCS revision in dev build version output across client, management, and misc.
    https://github.com/netbirdio/netbird/pull/6263

New Contributors

  • @phillebaba made their first contribution in https://github.com/netbirdio/netbird/pull/6230
  • @riccardomanfrin made their first contribution in https://github.com/netbirdio/netbird/pull/6228
  • @theodorsm made their first contribution in https://github.com/netbirdio/netbird/pull/6249

Full Changelog: https://github.com/netbirdio/netbird/compare/v0.71.4...v0.72.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track netbird

Get notified when new releases ship.

Sign up free

About netbird

Connect your devices into a secure WireGuard®-based overlay network with SSO, MFA and granular access controls.

All releases →

Related context

Earlier breaking changes

  • v0.74.7 Rename isValidAccessToken to reflect audience-only check
  • v0.74.5 Removes proxy peer stale deduplication logic.

Beta — feedback welcome: [email protected]