PackageTrack
Sign in Get early access

github.com/gravitl/netmaker

v1.6.0 #339 most downloaded on Go modules gravitl/netmaker

What this package is like to depend on

Last release 4 days ago

20 Aug 2026

Ships fairly regularly

a new release about every 2 weeks

Rarely documented

notes for 10 of 74 stable releases

Nothing withdrawn

no release was ever pulled

5 years old

887 releases · first in 2021

141 releases in the last 12 months

see the full history below

Release timeline

887 releases · Mar 2021 to Aug 2026
2022 2023 2024 2025 2026
Release Pre-release

Releases

latest 60 of 887
  1. v1.6.1-0.20260820064322-f1eab2701cc4 20 Aug 2026 pre-release

    Nothing published for this version

  2. v1.6.1-0.20260820052330-dbc4ab73456d 20 Aug 2026 pre-release

    Nothing published for this version

  3. v1.6.1-0.20260819162231-048bca951dfa 19 Aug 2026 pre-release

    Nothing published for this version

  4. v1.6.1-0.20260819140808-98c557bab668 19 Aug 2026 pre-release

    Nothing published for this version

  5. v1.6.1-0.20260818145703-b9d1a2fb56a3 18 Aug 2026 pre-release

    Nothing published for this version

  6. v1.6.1-0.20260818105210-c178a617f879 18 Aug 2026 pre-release

    Nothing published for this version

  7. v1.6.1-0.20260810132940-f81fe29d4d6a 10 Aug 2026 pre-release

    Nothing published for this version

  8. v1.6.1-0.20260807044727-4530fb0658d1 07 Aug 2026 pre-release

    Nothing published for this version

  9. v1.6.1-0.20260730051954-28cbda317089 30 Jul 2026 pre-release

    Nothing published for this version

  10. v1.6.1-0.20260730045355-339fdc8fa192 30 Jul 2026 pre-release

    Nothing published for this version

  11. v1.6.1-0.20260729121130-ed5a96a091f2 29 Jul 2026 pre-release

    Nothing published for this version

  12. v1.6.1-0.20260728084201-cb6b8fddafca 28 Jul 2026 pre-release

    Nothing published for this version

  13. v1.6.1-0.20260728063303-acb970b16018 28 Jul 2026 pre-release

    Nothing published for this version

  14. v1.6.1-0.20260727164500-af09261decce 27 Jul 2026 pre-release

    Nothing published for this version

  15. v1.6.1-0.20260724131718-c6a93b895ed2 24 Jul 2026 pre-release

    Nothing published for this version

  16. v1.6.1-0.20260715052756-a780e6505f5f 15 Jul 2026 pre-release

    Nothing published for this version

  17. v1.6.1-0.20260715043713-994f8164cc68 15 Jul 2026 pre-release

    Nothing published for this version

  18. v1.6.1-0.20260714164712-5cdc812e9504 14 Jul 2026 pre-release

    Nothing published for this version

  19. v1.6.1-0.20260714164509-7106cb85c47a 14 Jul 2026 pre-release

    Nothing published for this version

  20. v1.6.1-0.20260714161458-ecb8fe398cb0 14 Jul 2026 pre-release

    Nothing published for this version

  21. v1.6.1-0.20260629033704-5930c525a624 29 Jun 2026 pre-release

    Nothing published for this version

  22. v1.6.1-0.20260622044702-f8c764fa4936 22 Jun 2026 pre-release

    Nothing published for this version

  23. v1.6.1-0.20260618055954-43bc37254d7f 18 Jun 2026 pre-release

    Nothing published for this version

  24. v1.6.1-0.20260615115423-8c71fcbb31aa 15 Jun 2026 pre-release

    Nothing published for this version

  25. v1.6.0 12 Jun 2026
    Release notes

    Netmaker v1.6.0 Release Notes 🚀

    🚀 What’s New

    🔁 Site-to-Site ACLs (Beta)

    Using Netmaker's Egress function at local sites, paired with local routing rules, you can bridge entire networks (site-to-site). Now, Netmaker allows you to define ACL policies that control what traffic is allowed between these sites.

    • Build site-to-site rules between egress resources on different networks.
    • Combine egress resources, nodes, and specific IPs in a single policy.

    🛡️ Egress ACLs with IP Restriction

    Netmaker's Egress function forwards traffic to external networks like offices and data centres. Netmaker's Access Controls can now target individual IPs inside of an egress range using the ip ACL target type. This enables you to limit access to specific IPs within an external network.

    • Restrict access to specific endpoints within a larger egress CIDR.
    • Combine egress resources, nodes, tags, and individual IPs in the same policy.

    📦 Egress Applications Catalogue (Beta)

    Simplified application-aware egress routing with a built-in catalogue of popular SaaS and cloud services.

    • Select from a catalogue of applications, including AWS, Google Cloud, Microsoft 365, Salesforce, GitHub, etc.
    • Create egress resources directly from predefined application templates without manually managing domain lists.
    • Automatically resolve and maintain application domains, ensuring routing policies stay up to date as services evolve.
    • Reduce administrative overhead and improve policy consistency across environments.

    ⏱️ JIT Group Memberships

    Just-In-Time (JIT) access is a workflow within Netmaker where users request temporary access to the network, which is approved by administrators for a predefined time period. JIT access within Netmaker can now be scoped to user groups per network.

    • Enable JIT for all non-admin users, or limit it to selected user groups.
    • Users request access; admins approve or deny with email notifications.
    • Expired grants are cleaned up automatically, and users are notified.

    🔗 SIEM Integration

    Netmaker provides audit logs of actions and events on the platform. Netmaker can now be integrated with certain providers to forward audit events to your security stack.

    • Supported providers: Splunk, Datadog, Elastic, and Microsoft Sentinel.
    • Events are exported through the SIEM exporter service.

    🔑 Default Enrollment Keys

    Enrollment keys are how devices join the network via Netclient. Administrators can now designate a default enrollment key for any network in order to simplify device onboarding.

    • Set default enrollment keys per network.
    • Regenerate key tokens without recreating the key.

    🗄️ Database Schema Migration

    This release introduces schema changes to the following core entities:

    • Nodes
    • Pending Users
    • User Invites
    • Posture Check Violations

    Impact:

    • The database structure will be updated automatically during the upgrade.
    • Downgrades may not be supported after migration.

    👉 Action Required:

    • Ensure the application starts successfully and migrations are complete.
    • Validate core functionality post-upgrade.

    For detailed upgrade steps, refer to the official upgrade documentation:

    Server Upgrades v1.5.1+

    🧰 Improvements & Fixes

    • Netclient registration UX — Host registration over OAuth/basic auth now returns clear websocket close reasons on failure (auth errors, missing access, posture violations, and server errors).

    • User group management — Streamlined user role permissions and group updates, role-downgrade handling.

    • Orphan reference cleanup — Removes stale network references left behind after resource deletion.

    • Scalability & reliability — Optimised node status calculation, offline-status hooks, zombie/orphan node cleanup, and ACL cache race fixes.

    • API hardening — Auth rate limiting on REST endpoints and activity-log permission fixes.

    • Egress improvements — CIDR validation for ACL egress IPs, multi-domain egress routing, and domain-answer handling for preset-based egress.

    • Failover removed — Legacy per-node failover APIs and CLI commands have been removed in favour of gateway-based patterns.

    🐞 Known Issues

    • IPv6-only machines
      Netclients cannot currently auto-upgrade on IPv6-only systems.

    • Multi-network join performance
      Multi-network netclient joins using an enrollment key still require optimisation.

    • systemd-resolved DNS limitation
      On systems using systemd-resolved in uplink mode, only the first 3 entries in resolv.conf are honoured; additional entries are ignored. This may cause DNS resolution issues. Stub mode is recommended.

    • Windows Desktop App + mixed gateway modes
      When the Windows Desktop App is connected to both:

      • a Full Tunnel Gateway, and
      • a Split Tunnel Gateway

      The gateway monitoring component may disconnect from the Split Tunnel Gateway.

    Open source →
    Release notes

    v1.6.0 Latest

    Latest

    Compare

    Choose a tag to compare

    Open source →
  26. v1.5.2-0.20260612030258-57f4076ac06a 12 Jun 2026 pre-release

    Nothing published for this version

  27. v1.5.2-0.20260606055337-79ccbfbc939e 06 Jun 2026 pre-release

    Nothing published for this version

  28. v1.5.2-0.20260602065525-0f25e814e386 02 Jun 2026 pre-release

    Nothing published for this version

  29. v1.5.2-0.20260601131500-3bd7666aa461 01 Jun 2026 pre-release

    Nothing published for this version

  30. v1.5.2-0.20260601093845-006dfdced61c 01 Jun 2026 pre-release

    Nothing published for this version

  31. v1.5.2-0.20260601081057-316df944e0e8 01 Jun 2026 pre-release

    Nothing published for this version

  32. v1.5.2-0.20260531031124-20060c100071 31 May 2026 pre-release

    Nothing published for this version

  33. v1.5.2-0.20260522101710-420ad981312e 22 May 2026 pre-release

    Nothing published for this version

  34. v1.5.2-0.20260521182620-bc618a9533e0 21 May 2026 pre-release

    Nothing published for this version

  35. v1.5.2-0.20260521173550-38a0f2c5cc1b 21 May 2026 pre-release

    Nothing published for this version

  36. v1.5.2-0.20260521030310-fb0f0ba3cf03 21 May 2026 pre-release

    Nothing published for this version

  37. v1.5.2-0.20260515175015-282d7e8072f0 15 May 2026 pre-release

    Nothing published for this version

  38. v1.5.2-0.20260515164025-4be236777451 15 May 2026 pre-release

    Nothing published for this version

  39. v1.5.2-0.20260505191939-059fded1c370 05 May 2026 pre-release

    Nothing published for this version

  40. v1.5.2-0.20260430093427-575d44f4e0d7 30 Apr 2026 pre-release

    Nothing published for this version

  41. v1.5.2-0.20260406054623-55c2d19c30f7 06 Apr 2026 pre-release

    Nothing published for this version

  42. v1.5.1 31 Mar 2026
    Release notes

    Netmaker v1.5.1 Release Notes 🚀

    ⚠️ Migration Notes (Important)

    These changes may impact existing deployments. Please review carefully before upgrading.

    ❗Legacy ACLs Removal

    Legacy ACLs have been fully removed as part of the transition to the new access control model.

    Impact:

    • Existing configurations using legacy ACLs will no longer function
    • Access behaviour may change after the upgrade

    👉 Action Required:

    • Review existing access policies
    • Reconfigure them using the new access control model before upgrading

    🗄️ Database Schema Migration

    This release introduces schema changes to the following core entities:

    • Users
    • Groups
    • Roles
    • Networks
    • Hosts

    Impact:

    • The database structure will be updated automatically during the upgrade
    • Downgrades may not be supported after migration.

    👉 Action Required:

    • Ensure the application starts successfully and migrations are complete
    • Validate core functionality post-upgrade

    For detailed upgrade steps, refer to the official upgrade documentation:

    Server Upgrades v1.5.1+

    🚀 What’s New

    🔁 Traffic Logs (Beta)

    Traffic Logs have now moved into Beta.

    • Traffic Logs are now enriched with relevant domain tagging, making network activity easier to audit and investigate.

    🧰 Improvements & Fixes

    • Scalability & Reliability Improvements
      Introduced a peer update debouncer that coalesces rapid-fire PublishPeerUpdate calls into a single broadcast — a 500ms resettable debounce window capped by a 3s max-wait deadline ensures back-to-back operations (bulk node updates, gateway changes, host deletions) produce one peer update instead of dozens, drastically reducing CPU and MQTT pressure on the control plane

      Pre-warms peer update caches after each debounced broadcast so pull requests from hosts are served instantly from cache instead of triggering expensive on-demand computation

      Batched metrics export to netmaker exporter via periodic ticker instead of publishing on every individual MQTT metrics message, reducing continuous CPU pressure from Prometheus scraping

    • Database Schema Migration
      Added schema migrations for the Users, Groups, Roles, Networks, and Hosts tables.

    • Deprecated Legacy ACLs
      Legacy ACLs have been fully removed as part of the platform’s transition to the updated access control model.

    • Paginated APIs
      Introduced pagination support for Users and Hosts APIs.

    • DNS
      Added native Active Directory support.

    • Posture Checks
      Nodes can now skip the auto-update check during join, improving join reliability in controlled environments.

    • IDP Sync
      Improved identity provider sync behavior:

      • Synced IDP groups are now denied access by default until explicitly granted.
      • Okta-specific settings are now reset when an IDP integration is removed.

    • HA Setup
      Streamlined high availability (HA) setup and operational workflows.

    • Install Script
      Added on-demand Monitoring Stack installation support via:
      ./nm-quick.sh -m

    • Monitoring Stack
      Updated the monitoring stack to use the official Prometheus and Grafana images.

    • HA Gateways
      Reset Auto Assigned gw when it is disconnected from the network.

    🐞 Known Issues

    • IPv6-only machines
      Netclients cannot currently auto-upgrade on IPv6-only systems.

    • Multi-network join performance
      Multi-network netclient joins using an enrollment key still require optimization.

    • systemd-resolved DNS limitation
      On systems using systemd-resolved in uplink mode, only the first 3 entries in resolv.conf are honored; additional entries are ignored. This may cause DNS resolution issues. Stub mode is recommended.

    • Windows Desktop App + mixed gateway modes
      When the Windows Desktop App is connected to both:

      • a Full Tunnel Gateway, and
      • a Split Tunnel Gateway

      the gateway monitoring component may disconnect from the Split Tunnel Gateway.

    Open source →
    Release notes

    v1.5.1

    Compare

    Choose a tag to compare

    Open source →
  43. v1.5.1-0.20260323061422-81398cdd4408 23 Mar 2026 pre-release

    Nothing published for this version

  44. v1.5.1-0.20260317185529-dfb6c4171f7b 17 Mar 2026 pre-release

    Nothing published for this version

  45. v1.5.1-0.20260313043205-fac047399757 13 Mar 2026 pre-release

    Nothing published for this version

  46. v1.5.1-0.20260309081322-3a4419793fc4 09 Mar 2026 pre-release

    Nothing published for this version

  47. v1.5.1-0.20260304061827-8de81263c07c 04 Mar 2026 pre-release

    Nothing published for this version

  48. v1.5.1-0.20260303124234-0c4d431df2b5 03 Mar 2026 pre-release

    Nothing published for this version

  49. v1.5.1-0.20260225200227-c23a7b9ea1b6 25 Feb 2026 pre-release

    Nothing published for this version

  50. v1.5.1-0.20260225195456-168ef57faf29 25 Feb 2026 pre-release

    Nothing published for this version

  51. v1.5.1-0.20260224144440-0a76d6ce756f 24 Feb 2026 pre-release

    Nothing published for this version

  52. v1.5.1-0.20260223100047-582d9b97daaa 23 Feb 2026 pre-release

    Nothing published for this version

  53. v1.5.1-0.20260223095428-d64f1c16389e 23 Feb 2026 pre-release

    Nothing published for this version

  54. v1.5.1-0.20260223080133-6ad4d77d65dc 23 Feb 2026 pre-release

    Nothing published for this version

  55. v1.5.1-0.20260217111637-15f050ff6cfb 17 Feb 2026 pre-release

    Nothing published for this version

  56. v1.5.0 11 Feb 2026
    Release notes

    Netmaker v1.5.0 Release Notes 🚀

    🚀 What’s New

    🔓 Just-In-Time Access (beta)

    • Time-limited, on-demand network access: users request access, admins approve or deny, and grants expire automatically.

    • Request/approval workflow with configurable grant duration; admins retain full control over who accesses which networks and when.

    🔁 Overlapping Egress Ranges (beta)

    • Virtual NAT mode enables multiple egress routers to share overlapping IP ranges by assigning each egress a virtual range from a configurable pool.
    • Configurable per-network IPv4 pool and site prefix length for virtual range allocation.
    • Eliminates routing conflicts when multiple sites need to egress the same destination CIDRs (e.g., multiple offices routing to the same cloud VPC).
    • Supports both direct NAT and virtual NAT modes for flexible egress configurations.

    🌍 Gateway Monitoring

    • Desktop App connections automatically fail over to healthy gateway hubs when the primary becomes unavailable.
    • Gateway health is monitored via connectivity checks and last-seen metrics; only online gateways are used for new connections.

    🧰 Improvements & Fixes

    • IP Detection Interval User can now choose the Device Endpoint IP detection interval based on their requirements.

    • User Migration: Optimized user migration logic to reduce server startup time.

    • DNS: Use Global Nameservers only if no match-all nameservers are configured, added fallback nameserver configuration.

    • Darwin: Netclients on macOS can now use internet gateway.

    • GeoLocation: Consolidate IP location API usage with fallbacks

    Known Issues 🐞

    • netclients cannot auto-upgrade on ipv6-only machines.

    • Need to optimize multi-network netclient join with enrollment key

    • On systems using systemd-resolved in uplink mode, the first 3 entries in resolv.conf are used and rest are ignored. So it might cause DNS issues. Stub mode is preferred.

    • When a Windows desktop app is connected to a Full Tunnel Gateway, and a Split Tunnel Gateway at the same time,
      the gateway monitoring component would disconnect from the split tunnel gateway.

    Open source →
    Release notes

    v1.5.0

    Compare

    Choose a tag to compare

    Open source →
  57. v1.4.1-0.20260223090338-eb49016e5ef0 23 Feb 2026 pre-release

    Nothing published for this version

  58. v1.4.1-0.20260223084020-6bf86205ee40 23 Feb 2026 pre-release

    Nothing published for this version

  59. v1.4.1-0.20260211060328-9b4f9a4a5063 11 Feb 2026 pre-release

    Nothing published for this version

  60. v1.4.1-0.20260210171355-b935e3795a94 10 Feb 2026 pre-release

    Nothing published for this version

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive