v1.3.0-beta.5

release v1.3.0-beta.5

v1.3.0-beta.4

release v1.3.0-beta.4

v1.3.0-beta.3

release v1.3.0-beta.3

v1.3.0-beta.2

release v1.3.0-beta.2

v1.3.0-beta.1

release v1.3.0-beta.1

v1.2.0

Additions

• #48: Add non-interactive CLI options, so you can now create networks and add CIDRs and peers without the interactive wizard-style prompts. You can check out the docker-tests for some examples.

  innernet-server add-peer evilcorp \
      --name "admin" --cidr "humans" --admin true --auto-ip --save-config "peer1.toml" --yes

• #56: You can use a hostname instead of an IP address for the external endpoints of servers and peers now.

  innernet-server new --network-name "evilcorp" --network-cidr "10.66.0.0/16" \
      --external-endpoint "innernet-server.evilcorp.com:51820" --listen-port 51820

Fixes

• #54: Get build working on RPi4 and other similar ARM platforms, thanks to @blesson3.
• #59: Fix cargo install documentation, thanks to @dbr.

v1.2.0-beta.1

release v1.2.0-beta.1

v1.1.0

Heads up: breaking change requiring all peers update to v1.1.0 with server.

Once a server upgrades to v1.1.0, all clients will get Unauthorized errors until they also upgrade due to a newly required security header to prevent CSRF-type attacks.

Additions

• #36: Userspace WireGuard users can now override the wireguard-go implementation choice with their own selection using the WG_USERSPACE_IMPLEMENTATION (or WG_QUICK_USERSPACE_IMPLEMENTATION) environment variable.
• a44fe0d: innernet uninstall [interface] now exists to permanently remove an innernet network.

Fixes

• #37: The server now requires an X-Innernet-Server-Key header with its own public key in it to help dissuade naive unauthorized requests being sent from other unprivileged applications on a peer's OS.
• #33: Removed unsafe code in wgctrl-rs and replaced it with an interface name validation that matches the kernel and iproute2. Thanks @BlackHoleFox!
• 72dc14c: Enforce safe permissions on innernet and innernet-server files and directories. (Open an issue if this is a problem in your setup and we can tweak this!)
• dde58c8: Fix an issue where innernet would often not successfully start its interface the first run on macOS due to a directory not being created before running wireguard-go.

v1.1.0-rc.2

release v1.1.0-rc.2

v1.1.0-rc.1

release v1.1.0-rc.1