v1.5.0-beta.2

release v1.5.0-beta.2

v1.5.0-beta.1

This release is a long time coming, and includes some notable improvements to NAT traversal for peers that don't have port forwarding.

Fixes

• Established connections with peers won't have their functional endpoints ripped out from under them any more. The server-reported IP won't inherently override a working endpoint if there's been a recent handshake while running innernet up. This was causing certain connections to pause every 60 seconds very annoyingly.
• macOS users won't see confusing systemd instructions any more.
• The IPv6 anycast address is no longer allocated within CIDRs. There's no migration for this fix, so if you are having issues with IPv6 forwarding, you'll need to create a new network.
• /etc/innernet/[network].conf was created by default with the default file permissions and then innernet immediately warned that it was not wise. Innernet has become wise itself.

Additions

• #134, #151: Peers and servers now report local IP addresses for establishing connections within the same NAT. Local networkers rejoice!

v1.4.1

This is a minor fix release.

Fixes

• macOS: gracefully handle stale .name files on macOS. If the WireGuard userspace binary didn't clean up after itself for some reason, innernet will no longer get stuck in the confusion.
• innernet install: Will now warn and bail if there's an existing WireGuard interface with the same name as network trying to be installed.

v1.4.0

This is the first release that no longer requires innernet to be run as root: it can instead be run with CAP_NET_ADMIN capabilities and the proper permissions set on /etc/innernet and /var/lib/innernet.

The easiest way to run innernet is still as root, and there are probably some rough edges still around messaging and compatibility (for example, non-root users that want to still edit the hosts file will have to modify the permissions of /etc/hosts as well, by either changing the owning group or setfacl).

Additions

• innernet can now run without root (given more granular permissions).
• innernet list-cidrs is now a command to list all CIDRs in the network.
• MTU is now configurable on the client and server.

Modifications

• Interactive prompts will now fail if no TTY is present, useful for scripting.

v1.4.0-beta.3

release v1.4.0-beta.3

v1.4.0-beta.2

release v1.4.0-beta.2

v1.4.0-beta.1

release v1.4.0-beta.1

v1.3.1

Note to package maintainers: This release now includes completions in doc/ that you're welcome to package.

Additions

• #84: Add shell completions (thanks to @kbknapp)
• #92: Add command to rename peers (thanks to @kbknapp)

Modifications

• macOS: Fix issue with first run of innernet up failing
• Clean up the help text output just a smidge

v1.3.0

This was a sizable release and includes our first server database migration (to add invite expiration times!).

Additions

• #69: Invite expirations: CIDRs
• Online indicators in inn list -s and inn list -t - peers will be marked as "online" if there has been a handshake within the last 180 seconds.
• #88: You can delete CIDRs now with inn delete-cidr <network>! (thanks to @kbknapp)

Modifications

• Fix IPv6 external endpoints being zero-filled in wgctrl-sys (thanks to @mk-fg)
• #71: Make modifications to the OS's routing table optional (thanks to @Johann150)
• #67: The server now uses hyper as its HTTP server implementation rather than warp, speeding up compile times by almost 50%, and cleaning up the session management code by a good amount.
• #72: Use a DNS public IP resolver, and ask before making any requests.
• CIDRs are listed in numerical order for inn list -t.
• #79: hostsfile crate now has Windows support (thanks to @Johann150)
• The wgctrl userspace backend works on Linux now (it was broken before due to wireguard-go having different behavior vs. BSD-likes).
• You can now enable verbose output on the innernet binary for easier debugging/troubleshooting.

v1.3.0-beta.7

release v1.3.0-beta.7