LoginSign Up
← Back to all sparks
N

NetBird

INFRA · APIS
Velocity5.0

Open-source overlay network platform for secure remote access and VPN

netbird.io ↗

NetBird's second v0.82 candidate keeps the MySQL removal and deprecates Rosenpass.

zero-trustself-hostedpostgresqlssh-hardeningpost-quantum
◆Current state
NetBird is preparing v0.82 as a breaking release for self-hosters. Both candidates remove MySQL, require a migration to PostgreSQL, and move reverse-proxy access logs to their own store. rc.2 adds a Rosenpass deprecation notice with a replacement said to be in final testing, and tightens the SSH server: the root-login setting now applies to uid 0, and path-bearing locale, TERM and TZ values from clients are refused.
◆Where it's heading
After v0.81 focused on device trust through certificate posture checks, v0.82 is about the management plane's storage and on hardening the built-in SSH server. Deprecating Rosenpass signals a change in how NetBird approaches post-quantum key exchange, though the entries do not name the replacement.
◆Prediction
Expect v0.82.0 final with the MySQL removal intact, and a later release introducing the Rosenpass replacement.

◆Recent moves

  1. 18h ago

    v0.82.0-rc.2: Rosenpass deprecated, SSH root-login and env hardening

    rc.2 keeps rc.1's breaking storage changes and adds a Rosenpass deprecation plus two SSH hardening fixes. The release now carries a migration burden and a security cleanup, and the deprecation hints at a new post-quantum approach.

    View source ↗
  2. 2d ago

    v0.82.0-rc.1: MySQL removed, access logs get their own database

    The first v0.82 candidate shifts from v0.81's device trust to management scale: MySQL support is removed in favor of PostgreSQL, access logs get a dedicated store, and peer listing is paginated with reads moved to a replica. Self-hosters on MySQL face a required migration.

    View source ↗
  3. 7d ago

    NetBird canary rebuild: group-restricted daemon socket

    A rebuild of the group-restricted daemon socket canary with no new notes. The feature is still in testing.

    View source ↗
  4. 14d ago

    v0.81.0-rc.3: management and Traefik backports

    The third v0.81 candidate backports a management account-hierarchy change and a Traefik and CrowdSec version fix for the self-hosted stack. Nothing user-facing was added, which signals the release line is frozen ahead of final.

    View source ↗
  5. 14d ago

    v0.81 canary: route hysteresis stops HA peer flapping

    This canary adds time hysteresis to route selection, so clients stop switching between HA group routing peers that advertise the same metric. It is a reliability fix for exactly the failover setups NetBird's enterprise push depends on.

    View source ↗
  6. 15d ago

    NetBird v0.81 RC2 adds batch group audit events

    The second v0.81 candidate backports two management fixes: audit events for batch group changes and in-place snapshot expansion. A diff this small suggests the release is close to final.

    View source ↗