Posts for: #zero-trust

Netmaker Releases Version v0.21.2 of WireGuard Mesh VPN

Netmaker, a tool that creates networks using WireGuard, has released version v0.21.2. This tool automates the creation of fast, secure, and distributed virtual networks. Netmaker leverages Kernel WireGuard, which provides maximum speed, performance, and security for the virtual networks it creates.

The latest release, v0.21.2, brings several improvements and fixes to Netmaker. Some of the new features include auto relay via enrollment key and improvements in local routing.

In terms of fixes, the release addresses an inconsistency in DNS entries for networks, ensures validation of unique network CIDR, fixes caching discrepancies in extclient, resolves issues with deleted node peer updates when disconnected from the network, and adds a force deletion option for daemon nodes stuck in the removing state.

However, there are a few known issues with this release. The Windows installer does not install WireGuard, and the netclient-gui may continuously display an error dialog if the Netmaker server is offline. Additionally, there are IPv6 address and route issues on Mac, and the network tab in netclient-gui may appear blank after disconnecting.

Overall, Netmaker’s latest release offers improved functionality and fixes for a smoother experience in creating virtual networks with WireGuard.

Netmaker Releases Version v0.21.1 of WireGuard Mesh VPN

Netmaker has released its latest version, v0.21.1, of their WireGuard mesh VPN. Netmaker is a platform that automates the creation of fast, secure, and distributed virtual networks.

With Netmaker, users can easily create virtual networks between data centers, clouds, and edge devices without the need for manual configuration. This automation saves time and effort for users, allowing them to focus on other important tasks.

One of the key features of Netmaker is its integration with Kernel WireGuard, which provides maximum speed, performance, and security. This ensures that the virtual networks created with Netmaker are not only efficient but also highly secure.

Netmaker is designed to scale from small businesses to enterprise-level organizations. This means that whether you are a small startup or a large corporation, Netmaker can meet your networking needs.

One of the standout features of Netmaker is its ability to be highly customized. Users can configure Netmaker with WireGuard for various use cases, such as peer-to-peer connections, site-to-site connections, Kubernetes deployments, and more. This flexibility allows users to tailor Netmaker to their specific requirements.

The latest version, v0.21.1, brings several new features and fixes to the Netmaker platform:

What’s New in v0.21.1:

  • Remote access client session management: Users now have more control over managing remote access client sessions. Refer to the users section in the documentation for more details.
  • Generic DNS entries: It is now possible to create generic DNS entries, providing more flexibility in configuring DNS settings.
  • Upgrade client version: Users can now easily upgrade the client version to match the server version directly from the user interface.
  • Moved PersistentKeepAlive setting: The PersistentKeepAlive setting has been moved from the node level to the host level, simplifying network configuration.

What’s Fixed in v0.21.1:

  • Extclients DNS properly set: The issue of Extclients DNS not being properly set from the ingress DNS value provided has been resolved.
  • Role update of OAuth user allowed: Users can now update the role of an OAuth user without any issues.
  • Zombie node issue fixed: The issue of zombie nodes has been fixed, ensuring a smoother user experience.

Despite the improvements in v0.21.1, there are still a few known issues that users should be aware of:

  • Windows installer does not install WireGuard: Users running the Windows installer may encounter an issue where WireGuard is not installed automatically. This can be resolved by manually installing WireGuard.
  • netclient-gui error dialog: If the Netmaker server is offline, the netclient-gui application will continuously display an error dialog. This is a known issue that will be addressed in future releases.
  • Mac IPv6 addresses/route issues: Mac users may experience issues with IPv6 addresses and routes. This is a known issue that is currently being investigated.
  • Docker client re-join issue: Users may encounter difficulties when trying to re-join a network using the Docker client after complete deletion. This issue is currently being addressed.
  • netclient-gui network tab blank: After disconnecting from a network, the network tab in the netclient-gui application may appear blank. This is a known issue that will be fixed in future updates.

Despite these known issues, Netmaker’s latest release, v0.21.1, brings several new features and fixes that further enhance its capabilities as a WireGuard mesh VPN solution. With its automation, scalability, and customization options, Netmaker continues to be a valuable tool for those interested in servers, Linux, DevOps, and home labs.

Linux Foundation, BastionZero, and Docker Collaborate on OpenPubkey Initiative

The Linux Foundation, BastionZero, and Docker have collaborated to launch the OpenPubkey project. OpenPubkey is an open-source cryptographic protocol that aims to enhance the security of the open-source software ecosystem through zero-trust passwordless authentication.

OpenPubkey was developed as part of BastionZero’s secure infrastructure access product. It allows users to securely bind cryptographic keys to users and workloads by transforming an OpenID Connect Identity Provider (IdP) into a Certificate Authority (CA). In conjunction with the launch of OpenPubkey, BastionZero has integrated it for Docker container signing, further strengthening the security of the software supply chain. Developers can leverage OpenPubkey to build software supply chain or security applications. By augmenting OpenID Connect, OpenPubkey enables users and workloads to sign artifacts under their OpenID identity. These cryptographic keys can be used for secure remote access, as well as signed builds, deployments, and code commits for software supply chain security.

For more information about OpenPubkey, including how to get involved, contribute, and join the community, visit the GitHub page.