2026.8.2

- 2026-08-14 VULN-141859: Revert path normalization

2026.8.1

- 2026-08-13 VULN-141859: Fix missing trailing slash

2026.8.0

- 2026-08-12 AUTH-9041 Generate ephemeral keypair for login token transfer

- 2026-08-12 VULN-141859: Normalize request path

- 2026-08-11 TUN-10748: Add FIPS image variant for Cloudflared tunnel

- 2026-08-10 AUTH-9012 Verify Access app identity with signed metadata

- 2026-08-07 chore: Bump grpc to v.1.83.0 to fix vulnerability

- 2026-07-08 TUN-10557: Bump quic-go v0.59.1

2026.7.3

- 2026-07-22 VULN-143514: Windows svc: use --token-file instead of --token

- 2026-07-22 fix: Bump golang.org/x/text and its dependencies to fix CVE

- 2026-07-20 TUN-10701: Use curves for prechecks

2026.7.2

- 2026-07-15 VULN-118896: MacOS service: use --token-file instead of --token

- 2026-07-14 Update gcr.io/distroless/base-debian13:nonroot Docker digest to b78832f

- 2026-07-14 chore: Change internal image name

- 2026-07-14 Update gcr.io/distroless/base-debian13:nonroot-arm Docker digest to 7a4876f88

- 2026-07-13 VULN-118896: Linux service: Use --token-file instead of --token

- 2026-07-13 chore: Remove bookworm internal register publish

- 2026-07-13 Update gcr.io/distroless/base-debian13:nonroot-amd64 Docker digest to ce2a20e

2026.7.1

- 2026-07-09 Revert "TUN-10621: Propagate max wait timeout"

2026.7.0

- 2026-07-08 chore: Bump go-chi to version 5.3.1

- 2026-07-08 Revert "TUN-10557: Bump quic-go v0.59.1"

- 2026-07-01 TUN-10621: Test websocket path

- 2026-06-30 ci: add Semgrep OSS scanning workflow

- 2026-06-29 TUN-10621: Propagate max wait timeout

- 2026-06-29 Migrate config renovate.json

- 2026-06-25 chore: Fix renovate

- 2026-06-25 Pin dependencies

- 2026-06-25 Consolidate init-system detection into shared inits package

- 2026-06-24 Fix lint issues

- 2026-06-22 Add OpenRC support

- 2026-06-22 Fix broken installed-service detection in systemd uninstall

- 2026-06-18 TUN-10557: Bump quic-go v0.59.1

2026.6.1

- 2026-06-18 TUN-10630: Fix precheck protocol override

- 2026-06-18 Revert "TUN-10557: Bump quic-go v0.59.1"

- 2026-06-16 chore: Fix warnings

- 2026-06-15 TUN-10612: Add renovate to cloudflared to update distroless images explicitely

- 2026-06-11 TUN-9251: Publish internal image

- 2026-05-26 TUN-10557: Bump quic-go v0.59.1

2026.6.0

- 2026-06-08 TUN-10558: Bump go to v1.24.4, x/crypto to v0.52.0 and google.golang.org/grpc to v1.81.1

- 2026-06-01 TUN-10563: introduce QUICConnection interface

2026.5.2

- 2026-05-26 TUN-10391: Avoid using fmt.Println

2026.5.1

- 2026-05-22 fix: Bump go to 1.26.3 and go.opentelemetry.io/otel and go-jose/v4 to fix CVE's

- 2026-05-22 TUN-10391: Avoid blocking cloudflared due to logging

- 2026-05-22 TUN-10391: Add precheck integration tests

- 2026-05-14 TUN-10511: Revise --edge support for pre-checks

- 2026-05-13 fix: Update golang.org/x/net to v0.54.0

- 2026-05-13 TUN-10525: Add prechecks kill switch

2026.5.0

- 2026-05-08 Bump golang.org/x/net from v0.40.0 to v0.53.0

- 2026-05-07 TUN-10507: Bump go and go-boring to 1.26.2

- 2026-05-07 TUN-10511: Add Static DNS Resolvers

- 2026-05-07 TUN-10390: Call prechecks

- 2026-05-07 TUN-10513: Disable /debug/pprof/cmdline endpoint

- 2026-05-06 TUN-10390: Fix missing TLS settings

- 2026-05-05 chore: Fix warnings

- 2026-05-04 TUN-10389: Implement main run method

- 2026-04-30 TUN-10388: Adding probe check

- 2026-04-30 TUN-10388 Implement dialers for connectivity checks

- 2026-04-30 TUN-10389: Improve probe functions

- 2026-04-29 SECENG-13496 update pkg docs for gokeyless to support multiple builds

- 2026-04-29 chore: Add pre-push hooks

- 2026-04-29 TUN-10388: Use pointer for suggested protocol

- 2026-04-27 TUN-10387: Add no-prechecks flag

- 2026-04-23 TUN-10386: Add Table Renderer

- 2026-04-21 AUTH-4699, AUTH-8460, TUN-10179: Vendor gopsutil/v4 for cross-platform process identification

- 2026-04-21 AUTH-4699, AUTH-8460, TUN-10179: Fix .lock file deletion race condition

- 2026-04-20 TUN-10413: Centralize TLS curve configuration in crypto/ and adopt X25519MLKEM768 for QUIC/H2

- 2026-04-15 TUN-10385: Add connectivity checks foundation

- 2026-04-14 chore: Fix errors in cmd

- 2026-04-14 TUN-10384: Probe TLS Helper

- 2026-04-14 TUN-10383: Set edge-ip-version to auto

- 2026-04-10 SECENG-13056 update gokeyless install instructions on pkg.cloudflare.com/index.html

- 2026-04-02 TUN-9952: Bump go to 1.26

2026.3.0

- 2026-03-05 TUN-10292: Add cloudflared management token command

- 2026-03-03 chore: Addressing small fixes and typos

- 2026-03-03 fix: Update go-sentry and go-oidc to address CVE's

- 2026-02-24 TUN-10258: add agents.md

- 2026-02-23 TUN-10267: Update mods to fix CVE GO-2026-4394

- 2026-02-20 TUN-10247: Update tail command to use /management/logs endpoint

- 2026-02-11 TUN-9858: Add more information to proxy-dns removal message

2026.2.0

- 2026-02-06 TUN-10216: TUN fix cloudflare vulnerabilities GO-2026-4340 and GO-2026-4341

- 2026-02-02 TUN-9858: Remove proxy-dns feature from cloudflared

2026.1.2

- 2026-01-23 Revert "TUN-9863: Update pipelines to use cloudflared EV Certificate"

- 2026-01-21 Revert "TUN-9886 notarize cloudflared"

- 2025-12-12 TUN-9886 notarize cloudflared

2026.1.1

- 2026-01-19 fix: Update boto3 to run on trixie

- 2026-01-19 fix: Fix wixl bundling tool for windows msi packages

- 2026-01-19 fix: rpm bundling and rpm key import

2026.1.0

- 2026-01-13 TUN-10162: Update go to 1.24.11 and Debian distroless to debian13

- 2025-11-21 Replace jira.cfops.it with jira.cfdata.org in connection/http2_test.go

- 2025-11-19 TUN-9863: Update pipelines to use cloudflared EV Certificate

- 2025-11-07 TUN-9800: Migrate apt internal builds to Gitlab

- 2025-11-04 TUN-9998: Don't need to read origin cert to determine if the endpoint is fedramp

- 2025-10-13 TUN-9910: Make the metadata key to carry HTTP status over QUIC transport a constant

2025.11.1

- 2025-11-07 TUN-9800: Fix docker hub push step

2025.11.0

- 2025-11-06 TUN-9863: Introduce Code Signing for Windows Builds

- 2025-11-06 TUN-9800: Prefix gitlab steps with operating system

- 2025-11-04 chore: Update cloudflared signing key name in index.html

- 2025-10-31 chore: add claude review

- 2025-10-31 Chore: Update documentation links in README

- 2025-10-31 TUN-9800: Add pipelines for linux packaging

2025.10.1

- 2025-10-30 chore: Update ci image to use goboring 1.24.9

- 2025-10-28 TUN-9849: Add cf-proxy-* to control response headers

- 2025-10-24 TUN-9961: Add pkg.cloudflared.com index.html to git repo

- 2025-10-23 TUN-9954: Update from go1.24.6 to go1.24.9

- 2025-10-23 Fix systemd service installation hanging

- 2025-10-21 TUN-9941: Use new GPG key for RPM builds

- 2025-10-21 TUN-9941: Fix typo causing r2-release-next deployment to fail

- 2025-10-21 TUN-9941: Lookup correct key for RPM signature

- 2025-10-15 TUN-9919: Make RPM postinstall scriplet idempotent

- 2025-10-14 TUN-9916: Fix the cloudflared binary path used in the component test

2025.10.0

- 2025-10-14 chore: Fix upload of RPM repo file during double signing

- 2025-10-13 TUN-9882: Bump datagram v3 write channel capacity

- 2025-10-10 chore: Fix import of GPG keys when two keys are provided

- 2025-10-10 chore: Fix parameter order when uploading RPM .repo file to R2

- 2025-10-10 TUN-9883: Add new datagram v3 feature flag

- 2025-10-09 chore: Force usage of go-boring 1.24

- 2025-10-08 TUN-9882: Improve metrics for datagram v3

- 2025-10-07 GRC-16749: Add fedramp tags to catalog

- 2025-10-07 TUN-9882: Add buffers for UDP and ICMP datagrams in datagram v3

- 2025-10-07 TUN-9882: Add write deadline for UDP origin writes

- 2025-09-29 TUN-9776: Support signing Debian packages with two keys for rollover

- 2025-09-22 TUN-9800: Add pipeline to sync between gitlab and github repos

2025.9.1

- 2025-09-22 TUN-9855: Create script to ignore vulnerabilities from govuln check

- 2025-09-19 TUN-9852: Remove fmt.Println from cloudflared access command

2025.9.0

- 2025-09-15 TUN-9820: Add support for FedRAMP in originRequest Access config

- 2025-09-11 TUN-9800: Migrate cloudflared-ci pipelines to Gitlab CI

- 2025-09-04 TUN-9803: Add windows builds to gitlab-ci

- 2025-08-27 TUN-9755: Set endpoint in tunnel credentials when generating locally managed tunnel with a Fed token

2025.8.1

- 2025-08-19 AUTH-7480 update fed callback url for login helper

- 2025-08-19 CUSTESC-53681: Correct QUIC connection management for datagram handlers

- 2025-08-12 AUTH-7260: Add support for login interstitial auto closure

2025.8.0

- 2025-08-07 vuln: Fix GO-2025-3770 vulnerability

- 2025-07-23 TUN-9583: set proper url and hostname for cloudflared tail command

- 2025-07-07 TUN-9542: Remove unsupported Debian-based releases

2025.7.0

- 2025-07-03 TUN-9540: Use numeric user id for Dockerfiles

- 2025-07-01 TUN-9161: Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences

- 2025-07-01 TUN-9531: Bump go-boring from 1.24.2 to 1.24.4

- 2025-07-01 TUN-9511: Add metrics for virtual DNS origin

- 2025-06-30 TUN-9470: Add OriginDialerService to include TCP

- 2025-06-30 TUN-9473: Add --dns-resolver-addrs flag

- 2025-06-27 TUN-9472: Add virtual DNS service

- 2025-06-23 TUN-9469: Centralize UDP origin proxy dialing as ingress service

2025.6.1

- 2025-06-16 TUN-9467: add vulncheck to cloudflared

- 2025-06-16 TUN-9495: Remove references to cloudflare-go

- 2025-06-16 TUN-9371: Add logging format as JSON

- 2025-06-12 TUN-9467: bump coredns to solve CVE

2025.6.0

- 2025-06-06 TUN-9016: update go to 1.24

- 2025-06-05 TUN-9171: Use `is_default_network` instead of `is_default` to create vnet's

2025.5.0

- 2025-05-14 TUN-9319: Add dynamic loading of features to connections via ConnectionOptionsSnapshot

- 2025-05-13 TUN-9322: Add metric for unsupported RPC commands for datagram v3

- 2025-05-07 TUN-9291: Remove dynamic reloading of features for datagram v3

2025.4.2

- 2025-04-30 chore: Do not use gitlab merge request pipelines

- 2025-04-30 DEVTOOLS-16383: Create GitlabCI pipeline to release Mac builds

- 2025-04-24 TUN-9255: Improve flush on write conditions in http2 tunnel type to match what is done on the edge

- 2025-04-10 SDLC-3727 - Adding FIPS status to backstage

2025.4.0

- 2025-04-02 Fix broken links in `cmd/cloudflared/*.go` related to running tunnel as a service

- 2025-04-02 chore: remove repetitive words

- 2025-04-01 Fix messages to point to one.dash.cloudflare.com

- 2025-04-01 feat: emit explicit errors for the `service` command on unsupported OSes

- 2025-04-01 Use RELEASE_NOTES date instead of build date

- 2025-04-01 chore: Update tunnel configuration link in the readme

- 2025-04-01 fix: expand home directory for credentials file

- 2025-04-01 fix: Use path and filepath operation appropriately

- 2025-04-01 feat: Adds a new command line for tunnel run for token file

- 2025-04-01 chore: fix linter rules

- 2025-03-17 TUN-9101: Don't ignore errors on `cloudflared access ssh`

- 2025-03-06 TUN-9089: Pin go import to v0.30.0, v0.31.0 requires go 1.23

2025.2.1

- 2025-02-26 TUN-9016: update base-debian to v12

- 2025-02-25 TUN-8960: Connect to FED API GW based on the OriginCert's endpoint

- 2025-02-25 TUN-9007: modify logic to resolve region when the tunnel token has an endpoint field

- 2025-02-13 SDLC-3762: Remove backstage.io/source-location from catalog-info.yaml

- 2025-02-06 TUN-8914: Create a flags module to group all cloudflared cli flags

2025.2.0

- 2025-02-03 TUN-8914: Add a new configuration to locally override the max-active-flows

- 2025-02-03 Bump x/crypto to 0.31.0

2025.1.1

- 2025-01-30 TUN-8858: update go to 1.22.10 and include quic-go FIPS changes

- 2025-01-30 TUN-8855: fix lint issues

- 2025-01-30 TUN-8855: Update PQ curve preferences

- 2025-01-30 TUN-8857: remove restriction for using FIPS and PQ

- 2025-01-30 TUN-8894: report FIPS+PQ error to Sentry when dialling to the edge

- 2025-01-22 TUN-8904: Rename Connect Response Flow Rate Limited metadata

- 2025-01-21 AUTH-6633 Fix cloudflared access login + warp as auth

- 2025-01-20 TUN-8861: Add session limiter to UDP session manager

- 2025-01-20 TUN-8861: Rename Session Limiter to Flow Limiter

- 2025-01-17 TUN-8900: Add import of Apple Developer Certificate Authority to macOS Pipeline

- 2025-01-17 TUN-8871: Accept login flag to authenticate with Fedramp environment

- 2025-01-16 TUN-8866: Add linter to cloudflared repository

- 2025-01-14 TUN-8861: Add session limiter to TCP session manager

- 2025-01-13 TUN-8861: Add configuration for active sessions limiter

- 2025-01-09 TUN-8848: Don't treat connection shutdown as an error condition when RPC server is done

2025.1.0

- 2025-01-06 TUN-8842: Add Ubuntu Noble and 'any' debian distributions to release script

- 2025-01-06 TUN-8807: Add support_datagram_v3 to remote feature rollout

- 2024-12-20 TUN-8829: add CONTAINER_BUILD to dockerfiles

2024.12.2

- 2024-12-19 TUN-8822: Prevent concurrent usage of ICMPDecoder

- 2024-12-18 TUN-8818: update changes document to reflect newly added diag subcommand

- 2024-12-17 TUN-8817: Increase close session channel by one since there are two writers

- 2024-12-13 TUN-8797: update CHANGES.md with note about semi-deterministic approach used to bind metrics server

- 2024-12-13 TUN-8724: Add CLI command for diagnostic procedure

- 2024-12-11 TUN-8786: calculate cli flags once for the diagnostic procedure

- 2024-12-11 TUN-8792: Make diag/system endpoint always return a JSON

- 2024-12-10 TUN-8783: fix log collectors for the diagnostic procedure

- 2024-12-10 TUN-8785: include the icmp sources in the diag's tunnel state

- 2024-12-10 TUN-8784: Set JSON encoder options to print formatted JSON when writing diag files

2024.12.1

- 2024-12-10 TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py script

2024.12.0

- 2024-12-09 TUN-8640: Add ICMP support for datagram V3

- 2024-12-09 TUN-8789: make python package installation consistent

- 2024-12-06 TUN-8781: Add Trixie, drop Buster. Default to Bookworm

- 2024-12-05 TUN-8775: Make sure the session Close can only be called once

- 2024-12-04 TUN-8725: implement diagnostic procedure

- 2024-12-04 TUN-8767: include raw output from network collector in diagnostic zipfile

- 2024-12-04 TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile

- 2024-12-04 TUN-8768: add job report to diagnostic zipfile

- 2024-12-03 TUN-8726: implement compression routine to be used in diagnostic procedure

- 2024-12-03 TUN-8732: implement port selection algorithm

- 2024-12-03 TUN-8762: fix argument order when invoking tracert and modify network info output parsing.

- 2024-12-03 TUN-8769: fix k8s log collector arguments

- 2024-12-03 TUN-8727: extend client to include function to get cli configuration and tunnel configuration

- 2024-11-29 TUN-8729: implement network collection for diagnostic procedure

- 2024-11-29 TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic http client

- 2024-11-27 TUN-8733: add log collection for docker

- 2024-11-27 TUN-8734: add log collection for kubernetes

- 2024-11-27 TUN-8640: Refactor ICMPRouter to support new ICMPResponders

- 2024-11-26 TUN-8735: add managed/local log collection

- 2024-11-25 TUN-8728: implement diag/tunnel endpoint

- 2024-11-25 TUN-8730: implement diag/configuration

- 2024-11-22 TUN-8737: update metrics server port selection

- 2024-11-22 TUN-8731: Implement diag/system endpoint

- 2024-11-21 TUN-8748: Migrated datagram V3 flows to use migrated context

2024.11.1

- 2024-11-18 Add cloudflared tunnel ready command

- 2024-11-14 Make metrics a requirement for tunnel ready command

- 2024-11-12 TUN-8701: Simplify flow registration logs for datagram v3

- 2024-11-11 add: new go-fuzz targets

- 2024-11-07 TUN-8701: Add metrics and adjust logs for datagram v3

- 2024-11-06 TUN-8709: Add session migration for datagram v3

- 2024-11-04 Fixed 404 in README.md to TryCloudflare

- 2024-09-24 Update semgrep.yml

2024.11.0

- 2024-11-05 VULN-66059: remove ssh server tests

- 2024-11-04 TUN-8700: Add datagram v3 muxer

- 2024-11-04 TUN-8646: Allow experimental feature support for datagram v3

- 2024-11-04 TUN-8641: Expose methods to simplify V3 Datagram parsing on the edge

- 2024-10-31 TUN-8708: Bump python min version to 3.10

- 2024-10-31 TUN-8667: Add datagram v3 session manager

- 2024-10-25 TUN-8692: remove dashes from session id

- 2024-10-24 TUN-8694: Rework release script

- 2024-10-24 TUN-8661: Refactor connection methods to support future different datagram muxing methods

- 2024-07-22 TUN-8553: Bump go to 1.22.5 and go-boring 1.22.5-1

2024.10.1

- 2024-10-23 TUN-8694: Fix github release script

- 2024-10-21 Revert "TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport"

- 2024-10-18 TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS

- 2024-10-17 TUN-8685: Bump coredns dependency

- 2024-10-16 TUN-8638: Add datagram v3 serializers and deserializers

- 2024-10-15 chore: Remove h2mux code

- 2024-10-11 TUN-8631: Abort release on version mismatch

2024.10.0

- 2024-10-01 TUN-8646: Add datagram v3 support feature flag

- 2024-09-30 TUN-8621: Fix cloudflared version in change notes to account for release date

- 2024-09-19 Adding semgrep yaml file

- 2024-09-12 TUN-8632: Delay checking auto-update by the provided frequency

- 2024-09-11 TUN-8630: Check checksum of downloaded binary to compare to current for auto-updating

- 2024-09-09 TUN-8629: Cloudflared update on Windows requires running it twice to update

- 2024-09-06 PPIP-2310: Update quick tunnel disclaimer

- 2024-08-30 TUN-8621: Prevent QUIC connection from closing before grace period after unregistering

- 2024-08-09 TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport

- 2024-06-26 TUN-8484: Print response when QuickTunnel can't be unmarshalled

2024.9.1

- 2024-09-10 Revert Release 2024.9.0

2024.9.0

- 2024-09-10 TUN-8621: Fix cloudflared version in change notes.

- 2024-09-06 PPIP-2310: Update quick tunnel disclaimer

- 2024-08-30 TUN-8621: Prevent QUIC connection from closing before grace period after unregistering

- 2024-08-09 TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport

- 2024-06-26 TUN-8484: Print response when QuickTunnel can't be unmarshalled

2024.8.3

- 2024-08-15 TUN-8591 login command without extra text

- 2024-03-25 remove code that will not be executed

- 2024-03-25 remove code that will not be executed

2024.8.2

- 2024-08-05 TUN-8583: change final directory of artifacts

- 2024-08-05 TUN-8585: Avoid creating GH client when dry-run is true

2024.7.3

- 2024-07-31 TUN-8546: Fix final artifacts paths

2024.7.2

- 2024-07-17 TUN-8546: rework MacOS build script

2024.7.1

- 2024-07-16 TUN-8543: use -p flag to create intermediate directories

2024.7.0

- 2024-07-05 TUN-8520: add macos arm64 build

- 2024-07-05 TUN-8523: refactor makefile and cfsetup

- 2024-07-02 TUN-8504: Use pre-installed python version instead of downloading it on Windows builds

- 2024-06-26 TUN-8489: Add default noop logger for capnprpc

- 2024-06-25 TUN-8487: Add user-agent for quick-tunnel requests

- 2023-12-12 TUN-8057: cloudflared uses new PQ curve ID

2024.6.1

- 2024-06-12 TUN-8461: Don't log Failed to send session payload if the error is EOF

- 2024-06-07 TUN-8456: Update quic-go to 0.45 and collect mtu and congestion control metrics

- 2024-06-06 TUN-8452: Add flag to control QUIC stream-level flow control limit

- 2024-06-06 TUN-8451: Log QUIC flow control frames and transport parameters received

- 2024-06-05 TUN-8449: Add flag to control QUIC connection-level flow control limit and increase default to 30MB

2024.6.0

- 2024-05-30 TUN-8441: Correct UDP total sessions metric to a counter and add new ICMP metrics

- 2024-05-28 TUN-8422: Add metrics for capnp method calls

- 2024-05-24 TUN-8424: Refactor capnp registration server

- 2024-05-23 TUN-8427: Fix BackoffHandler's internally shared clock structure

- 2024-05-21 TUN-8425: Remove ICMP binding for quick tunnels

- 2024-05-20 TUN-8423: Deprecate older legacy tunnel capnp interfaces

- 2024-05-15 TUN-8419: Add capnp safe transport

- 2024-05-13 TUN-8415: Refactor capnp rpc into a single module

2024.5.0

- 2024-05-07 TUN-8407: Upgrade go to version 1.22.2

2024.4.1

- 2024-04-22 TUN-8380: Add sleep before requesting quick tunnel as temporary fix for component tests

- 2024-04-19 TUN-8374: Close UDP socket if registration fails

- 2024-04-18 TUN-8371: Bump quic-go to v0.42.0

- 2024-04-03 TUN-8333: Bump go-jose dependency to v4

- 2024-04-02 TUN-8331: Add unit testing for AccessJWTValidator middleware

2024.4.0

- 2024-04-02 feat: provide short version (#1206)

- 2024-04-02 Format code

- 2024-01-18 feat: auto tls sni

- 2023-12-24 fix checkInPingGroup bugs

- 2023-12-15 Add environment variables for TCP tunnel hostname / destination / URL.

2024.3.0

- 2024-03-14 TUN-8281: Run cloudflared query list tunnels/routes endpoint in a paginated way

- 2024-03-13 TUN-8297: Improve write timeout logging on safe_stream.go

- 2024-03-07 TUN-8290: Remove `|| true` from postrm.sh

- 2024-03-05 TUN-8275: Skip write timeout log on "no network activity"

- 2024-01-23 Update postrm.sh to fix incomplete uninstall

- 2024-01-05 fix typo in errcheck for response parsing logic in CreateTunnel routine

- 2023-12-23 Update linux_service.go

- 2023-12-07 ci: bump actions/checkout to v4

- 2023-12-07 ci/check: bump actions/setup-go to v5

- 2023-04-28 check.yaml: bump actions/setup-go to v4

2024.2.1

- 2024-02-20 TUN-8242: Update Changes.md file with new remote diagnostics behaviour

- 2024-02-19 TUN-8238: Fix type mismatch introduced by fast-forward

- 2024-02-16 TUN-8243: Collect metrics on the number of QUIC frames sent/received

- 2024-02-15 TUN-8238: Refactor proxy logging

- 2024-02-14 TUN-8242: Enable remote diagnostics by default

- 2024-02-12 TUN-8236: Add write timeout to quic and tcp connections

- 2024-02-09 TUN-8224: Fix safety of TCP stream logging, separate connect and ack log messages

2024.2.0

- 2024-02-07 TUN-8224: Count and collect metrics on stream connect successes/errors

2024.1.5

- 2024-01-22 TUN-8176: Support ARM platforms that don't have an FPU or have it enabled in kernel

- 2024-01-15 TUN-8158: Bring back commit e6537418859afcac29e56a39daa08bcabc09e048 and fixes infinite loop on linux when the socket is closed

2024.1.4

- 2024-01-19 Revert "TUN-8158: Add logging to confirm when ICMP reply is returned to the edge"

2024.1.3

- 2024-01-15 TUN-8161: Fix broken ARM build for armv6

- 2024-01-15 TUN-8158: Add logging to confirm when ICMP reply is returned to the edge

2024.1.2

- 2024-01-11 TUN-8147: Disable ECN usage due to bugs in detecting if supported

- 2024-01-11 TUN-8146: Fix export path for install-go command

- 2024-01-11 TUN-8146: Fix Makefile targets should not be run in parallel and install-go script was missing shebang

- 2024-01-10 TUN-8140: Remove homebrew scripts

2024.1.1

- 2024-01-10 TUN-8134: Revert installed prefix to /usr

- 2024-01-09 TUN-8130: Fix path to install go for mac build

- 2024-01-09 TUN-8129: Use the same build command between branch and release builds

- 2024-01-09 TUN-8130: Install go tool chain in /tmp on build agents

- 2024-01-09 TUN-8134: Install cloudflare go as part of make install

- 2024-01-08 TUN-8118: Disable FIPS module to build with go-boring without CGO_ENABLED

2024.1.0

- 2024-01-01 TUN-7934: Update quic-go to a version that queues datagrams for better throughput and drops large datagram

- 2023-12-20 TUN-8072: Need to set GOCACHE in mac go installation script

- 2023-12-17 TUN-8072: Add script to download cloudflare go for Mac build agents

- 2023-12-15 Fix nil pointer dereference segfault when passing "null" config json to cloudflared tunnel ingress validate (#1070)

- 2023-12-15 configuration.go: fix developerPortal link (#960)

- 2023-12-14 tunnelrpc/pogs: fix dropped test errors (#1106)

- 2023-12-14 cmd/cloudflared/updater: fix dropped error (#1055)

- 2023-12-14 use os.Executable to discover the path to cloudflared (#1040)

- 2023-12-14 Remove extraneous `period` from Path Environment Variable (#1009)

- 2023-12-14 Use CLI context when running tunnel (#597)

- 2023-12-14 TUN-8066: Define scripts to build on Windows agents

- 2023-12-11 TUN-8052: Update go to 1.21.5

- 2023-12-07 TUN-7970: Default to enable post quantum encryption for quic transport

- 2023-12-04 TUN-8006: Update quic-go to latest upstream

- 2023-11-15 VULN-44842 Add a flag that allows users to not send the Access JWT to stdout

- 2023-11-13 TUN-7965: Remove legacy incident status page check

- 2023-11-13 AUTH-5682 Org token flow in Access logins should pass CF_AppSession cookie

2023.10.0

- 2023-10-06 TUN-7864: Document cloudflared versions support

- 2023-10-03 CUSTESC-33731: Make rule match test report rule in 0-index base

- 2023-09-22 TUN-7824: Fix usage of systemctl status to detect which services are installed

- 2023-09-20 TUN-7813: Improve tunnel delete command to use cascade delete

- 2023-09-20 TUN-7787: cloudflared only list ip routes targeted for cfd_tunnel

- 2023-09-15 TUN-7787: Refactor cloudflared to use new route endpoints based on route IDs

- 2023-09-08 TUN-7776: Remove warp-routing flag from cloudflared

- 2023-09-05 TUN-7756: Clarify that QUIC is mandatory to support ICMP proxying

2023.8.2

- 2023-08-25 TUN-7700: Implement feature selector to determine if connections will prefer post quantum cryptography

- 2023-08-22 TUN-7707: Use X25519Kyber768Draft00 curve when post-quantum feature is enabled

2023.8.1

- 2023-08-23 TUN-7718: Update R2 Token to no longer encode secret

2023.8.0

- 2023-07-26 TUN-7584: Bump go 1.20.6

2023.7.3

- 2023-07-25 TUN-7628: Correct Host parsing for Access

- 2023-07-24 TUN-7624: Fix flaky TestBackoffGracePeriod test in cloudflared

2023.7.2

- 2023-07-19 TUN-7599: Onboard cloudflared to Software Dashboard

- 2023-07-19 TUN-7587: Remove junos builds

- 2023-07-18 TUN-7597: Add flag to disable auto-update services to be installed

- 2023-07-17 TUN-7594: Add nightly arm64 cloudflared internal deb publishes

- 2023-07-14 TUN-7586: Upgrade go-jose/go-jose/v3 and core-os/go-oidc/v3

- 2023-07-14 TUN-7589: Remove legacy golang.org/x/crypto/ssh/terminal package usage

- 2023-07-14 TUN-7590: Remove usages of ioutil

- 2023-07-14 TUN-7585: Remove h2mux compression

- 2023-07-14 TUN-7588: Update package coreos/go-systemd

2023.7.1

- 2023-07-13 TUN-7582: Correct changelog wording for --management-diagnostics

- 2023-07-12 TUN-7575: Add option to disable PTMU discovery over QUIC

2023.7.0

- 2023-07-06 TUN-7558: Flush on Writes for StreamBasedOriginProxy

- 2023-07-05 TUN-7553: Add flag to enable management diagnostic services

- 2023-07-05 TUN-7564: Support cf-trace-id for cloudflared access

- 2023-07-05 TUN-7477: Decrement UDP sessions on shutdown

- 2023-07-03 TUN-7545: Add support for full bidirectionally streaming with close signal propagation

- 2023-06-30 TUN-7549: Add metrics route to management service

- 2023-06-30 TUN-7551: Complete removal of raven-go to sentry-go

- 2023-06-30 TUN-7550: Add pprof endpoint to management service

- 2023-06-29 TUN-7543: Add --debug-stream flag to cloudflared access ssh

- 2023-06-26 TUN-6011: Remove docker networks from ICMP Proxy test

- 2023-06-20 AUTH-5328 Pass cloudflared_token_check param when running cloudflared access login

2023.6.1

- 2023-06-19 TUN-7480: Added a timeout for unregisterUDP.

- 2023-06-16 TUN-7477: Add UDP/TCP session metrics

- 2023-06-14 TUN-7468: Increase the limit of incoming streams

2023.6.0

- 2023-06-15 TUN-7471: Fixes cloudflared not closing the quic stream on unregister UDP session

- 2023-06-09 TUN-7463: Add default ingress rule if no ingress rules are provided when updating the configuration

- 2023-05-31 TUN-7447: Add a cover build to report code coverage

2023.5.1

- 2023-05-16 TUN-7424: Add CORS headers to host_details responses

- 2023-05-11 TUN-7421: Add *.cloudflare.com to permitted Origins for management WebSocket requests

- 2023-05-05 TUN-7404: Default configuration version set to -1

- 2023-05-05 TUN-7227: Migrate to devincarr/quic-go

2023.5.0

- 2023-04-27 TUN-7398: Add support for quic safe stream to set deadline

- 2023-04-26 TUN-7394: Retry StartFirstTunnel on quic.ApplicationErrors

- 2023-04-26 TUN-7392: Ignore release checksum upload if asset already uploaded

- 2023-04-25 TUN-7392: Ignore duplicate artifact uploads for github release

- 2023-04-25 TUN-7393: Add json output for cloudflared tail

- 2023-04-24 TUN-7390: Remove Debian stretch builds

2023.4.2

- 2023-04-24 TUN-7133: Add sampling support for streaming logs

- 2023-04-21 TUN-7141: Add component tests for streaming logs

- 2023-04-21 TUN-7373: Streaming logs override for same actor

- 2023-04-20 TUN-7383: Bump requirements.txt

- 2023-04-19 TUN-7361: Add a label to override hostname

- 2023-04-19 TUN-7378: Remove RPC debug logs

- 2023-04-18 TUN-7360: Add Get Host Details handler in management service

- 2023-04-17 AUTH-3122 Verify that Access tokens are still valid in curl command

- 2023-04-17 TUN-7129: Categorize TCP logs for streaming logs

- 2023-04-17 TUN-7130: Categorize UDP logs for streaming logs

- 2023-04-10 AUTH-4887 Add aud parameter to token transfer url

2023.4.1

- 2023-04-13 TUN-7368: Report destination address for TCP requests in logs

- 2023-04-12 TUN-7134: Acquire token for cloudflared tail

- 2023-04-12 TUN-7131: Add cloudflared log event to connection messages and enable streaming logs

- 2023-04-11 TUN-7132 TUN-7136: Add filter support for streaming logs

- 2023-04-06 TUN-7354: Don't warn for empty ingress rules when using --token

- 2023-04-06 TUN-7128: Categorize logs from public hostname locations

- 2023-04-06 TUN-7351: Add streaming logs session ping and timeout

- 2023-04-06 TUN-7335: Fix cloudflared update not working in windows

2023.4.0

- 2023-04-07 TUN-7356: Bump golang.org/x/net package to 0.7.0

- 2023-04-07 TUN-7357: Bump to go 1.19.6

- 2023-04-06 TUN-7127: Disconnect logger level requirement for management

- 2023-04-05 TUN-7332: Remove legacy tunnel force flag

- 2023-04-05 TUN-7135: Add cloudflared tail

- 2023-04-04 Add suport for OpenBSD (#916)

- 2023-04-04 Fix typo (#918)

- 2023-04-04 TUN-7125: Add management streaming logs WebSocket protocol

- 2023-03-30 TUN-9999: Remove classic tunnel component tests

- 2023-03-30 TUN-7126: Add Management logger io.Writer

- 2023-03-29 TUN-7324: Add http.Hijacker to connection.ResponseWriter

- 2023-03-29 TUN-7333: Default features checkable at runtime across all packages

- 2023-03-21 TUN-7124: Add intercept ingress rule for management requests

2023.3.1

- 2023-03-13 TUN-7271: Return 503 status code when no ingress rules configured

- 2023-03-10 TUN-7272: Fix cloudflared returning non supported status service which breaks configuration migration

- 2023-03-09 TUN-7259: Add warning for missing ingress rules

- 2023-03-09 TUN-7268: Default to Program Files as location for win32

- 2023-03-07 TUN-7252: Remove h2mux connection

- 2023-03-07 TUN-7253: Adopt http.ResponseWriter for connection.ResponseWriter

- 2023-03-06 TUN-7245: Add bastion flag to origin service check

- 2023-03-06 EDGESTORE-108: Remove deprecated s3v2 signature

- 2023-03-02 TUN-7226: Fixed a missed rename

2023.3.0

- 2023-03-01 GH-352: Add Tunnel CLI option "edge-bind-address" (#870)

- 2023-03-01 Fixed WIX template to allow MSI upgrades (#838)

- 2023-02-28 TUN-7213: Decode Base64 encoded key before writing it

- 2023-02-28 check.yaml: update actions to v3 (#876)

- 2023-02-27 TUN-7213: Debug homebrew-cloudflare build

- 2023-02-15 RTG-2476 Add qtls override for Go 1.20

2023.2.2

- 2023-02-22 TUN-7197: Add connIndex tag to debug messages of incoming requests

- 2023-02-08 TUN-7167: Respect protocol overrides with --token

- 2023-02-06 TUN-7065: Remove classic tunnel creation

- 2023-02-06 TUN-6938: Force h2mux protocol to http2 for named tunnels

- 2023-02-06 TUN-6938: Provide QUIC as first in protocol list

- 2023-02-03 TUN-7158: Correct TCP tracing propagation

- 2023-02-01 TUN-7151: Update changes file with latest release notices

2023.2.1

- 2023-02-01 TUN-7065: Revert Ingress Rule check for named tunnel configurations

- 2023-02-01 Revert "TUN-7065: Revert Ingress Rule check for named tunnel configurations"

- 2023-02-01 Revert "TUN-7065: Remove classic tunnel creation"

2023.1.0

- 2023-01-10 TUN-7064: RPM digests are now sha256 instead of md5sum

- 2023-01-04 RTG-2418 Update qtls

- 2022-12-24 TUN-7057: Remove dependency github.com/gorilla/mux

- 2022-12-24 TUN-6724: Migrate to sentry-go from raven-go

2022.12.1

- 2022-12-20 TUN-7021: Fix proxy-dns not starting when cloudflared tunnel is run

- 2022-12-15 TUN-7010: Changelog for release 2022.12.0

2022.12.0

- 2022-12-14 TUN-6999: cloudflared should attempt other edge addresses before falling back on protocol

- 2022-12-13 TUN-7004: Dont show local config dirs for remotely configured tuns

- 2022-12-12 TUN-7003: Tempoarily disable erroneous notarize-app

- 2022-12-12 TUN-7003: Add back a missing fi

- 2022-12-07 TUN-7000: Reduce metric cardinality of closedConnections metric by removing error as tag

- 2022-12-07 TUN-6994: Improve logging config file not found

- 2022-12-07 TUN-7002: Randomise first region selection

- 2022-12-07 TUN-6995: Disable quick-tunnels spin up by default

- 2022-12-05 TUN-6984: Add bash set x to improve visibility during builds

- 2022-12-05 TUN-6984: [CI] Ignore security import errors for code_sigining

- 2022-12-05 TUN-6984: [CI] Don't fail on unset.

- 2022-11-30 TUN-6984: Set euo pipefile for homebrew builds

2022.11.1

- 2022-11-29 TUN-6981: We should close UDP socket if failed to connecto to edge

- 2022-11-25 CUSTESC-23757: Fix a bug where a wildcard ingress rule would match an host without starting with a dot

- 2022-11-24 TUN-6970: Print newline when printing tunnel token

- 2022-11-22 TUN-6963: Refactor Metrics service setup

2022.11.0

- 2022-11-16 Revert "TUN-6935: Cloudflared should use APIToken instead of serviceKey"

- 2022-11-16 TUN-6929: Use same protocol for other connections as first one

- 2022-11-14 TUN-6941: Reduce log level to debug when failing to proxy ICMP reply

- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey

- 2022-11-14 TUN-6935: Cloudflared should use APIToken instead of serviceKey

- 2022-11-11 TUN-6937: Bump golang.org/x/* packages to new release tags

- 2022-11-10 ZTC-234: macOS tests

- 2022-11-09 TUN-6927: Refactor validate access configuration to allow empty audTags only

- 2022-11-08 ZTC-234: Replace ICMP funnels when ingress connection changes

- 2022-11-04 TUN-6917: Bump go to 1.19.3

- 2022-11-02 Issue #574: Better ssh config for short-lived cert (#763)

- 2022-10-28 TUN-6898: Fix bug handling IPv6 based ingresses with missing port

- 2022-10-28 TUN-6898: Refactor addPortIfMissing

2022.10.3

- 2022-10-24 TUN-6871: Add default feature to cloudflared to support EOF on QUIC connections

- 2022-10-19 TUN-6876: Fix flaky TestTraceICMPRouterEcho by taking account request span can return before reply

- 2022-10-18 TUN-6867: Clear spans right after they are serialized to avoid returning duplicate spans

2022.10.2

- 2022-10-18 TUN-6869: Fix Makefile complaining about missing GO packages

- 2022-10-18 TUN-6864: Don't reuse port in quic unit tests

- 2022-10-18 TUN-6868: Return left padded tracing ID when tracing identity is converted to string

2022.10.1

- 2022-10-16 TUN-6861: Trace ICMP on Windows

- 2022-10-15 TUN-6860: Send access configuration keys to the edge

- 2022-10-14 TUN-6858: Trace ICMP reply

- 2022-10-13 TUN-6855: Add DatagramV2Type for IP packet with trace and tracing spans

- 2022-10-13 TUN-6856: Refactor to lay foundation for tracing ICMP

- 2022-10-13 TUN-6604: Trace icmp echo request on Linux and Darwin

- 2022-10-12 Fix log message (#591)

- 2022-10-12 TUN-6853: Reuse source port when connecting to the edge for quic connections

- 2022-10-11 TUN-6829: Allow user of datagramsession to control logging level of errors

- 2022-10-10 RTG-2276 Update qtls and go mod tidy

- 2022-10-05 Add post-quantum flag to quick tunnel

- 2022-10-05 TUN-6823: Update github release message to pull from KV

- 2022-10-04 TUN-6825: Fix cloudflared:version images require arch hyphens

- 2022-10-03 TUN-6806: Add ingress rule number to log when filtering due to middlware handler

- 2022-08-17 Label correct container

- 2022-08-16 Fix typo in help text for `cloudflared tunnel route lb`

- 2022-07-18 drop usage of cat when sed is invoked to generate the manpage

- 2021-03-15 update-build-readme

- 2021-03-15 fix link

2022.10.0

- 2022-09-30 TUN-6755: Remove unused publish functions

- 2022-09-30 TUN-6813: Only proxy ICMP packets when warp-routing is enabled

- 2022-09-29 TUN-6811: Ping group range should be parsed as int32

- 2022-09-29 TUN-6812: Drop IP packets if ICMP proxy is not initialized

- 2022-09-28 TUN-6716: Document limitation of Windows ICMP proxy

- 2022-09-28 TUN-6810: Add component test for post-quantum

- 2022-09-27 TUN-6715: Provide suggestion to add cloudflared to ping_group_range if it failed to open ICMP socket

- 2022-09-22 TUN-6792: Fix brew core release by not auditing the formula

- 2022-09-22 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware

- 2022-09-22 TUN-6775: Add middleware.Handler verification to ProxyHTTP

- 2022-09-22 TUN-6791: Calculate ICMPv6 checksum

- 2022-09-22 TUN-6801: Add punycode alternatives for ingress rules

- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier

- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier

- 2022-09-21 TUN-6774: Validate OriginRequest.Access to add Ingress.Middleware

- 2022-09-21 TUN-6772: Add a JWT Validator as an ingress verifier

- 2022-09-20 TUN-6741: ICMP proxy tries to listen on specific IPv4 & IPv6 when possible

2022.9.1

- 2022-09-20 TUN-6777: Fix race condition in TestFunnelIdleTimeout

- 2022-09-20 TUN-6595: Enable datagramv2 and icmp proxy by default

- 2022-09-20 TUN-6773: Add access based configuration to ingress.OriginRequestConfig

- 2022-09-19 TUN-6778: Cleanup logs about ICMP

- 2022-09-19 TUN-6779: cloudflared should also use the root CAs from system pool to validate edge certificate

- 2022-09-19 TUN-6780: Add support for certReload to also include support for client certificates

- 2022-09-16 TUN-6767: Build ICMP proxy for Windows only when CGO is enabled

- 2022-09-15 TUN-6590: Use Windows Teamcity agent to build binary

- 2022-09-13 TUN-6592: Decrement TTL and return ICMP time exceed if it's 0

- 2022-09-09 TUN-6749: Fix icmp_generic build

- 2022-09-09 TUN-6744: On posix platforms, assign unique echo ID per (src, dst, echo ID)

- 2022-09-08 TUN-6743: Support ICMPv6 echo on Windows

- 2022-09-08 TUN-6689: Utilize new RegisterUDPSession to begin tracing

- 2022-09-07 TUN-6688: Update RegisterUdpSession capnproto to include trace context

- 2022-09-06 TUN-6740: Detect no UDP packets allowed and fallback from QUIC in that case

- 2022-09-06 TUN-6654: Support ICMPv6 on Linux and Darwin

- 2022-09-02 TUN-6696: Refactor flow into funnel and close idle funnels

- 2022-09-02 TUN-6718: Bump go and go-boring 1.18.6

- 2022-08-29 TUN-6531: Implement ICMP proxy for Windows using IcmpSendEcho

- 2022-08-24 RTG-1339 Support post-quantum hybrid key exchange

2022.9.0

- 2022-09-05 TUN-6737: Fix datagramV2Type should be declared in its own block so it starts at 0

- 2022-09-01 TUN-6725: Fix testProxySSEAllData

- 2022-09-01 TUN-6726: Fix maxDatagramPayloadSize for Windows QUIC datagrams

- 2022-09-01 TUN-6729: Fix flaky TestClosePreviousProxies

- 2022-09-01 TUN-6728: Verify http status code ingress rule

- 2022-08-25 TUN-6695: Implement ICMP proxy for linux

2022.8.4

- 2022-08-31 TUN-6717: Update Github action to run with Go 1.19

- 2022-08-31 TUN-6720: Remove forcibly closing connection during reconnect signal

- 2022-08-29 Release 2022.8.3

2022.8.3

- 2022-08-26 TUN-6708: Fix replace flow logic

- 2022-08-25 TUN-6705: Tunnel should retry connections forever

- 2022-08-25 TUN-6704: Honor protocol flag when edge discovery is unreachable

- 2022-08-25 TUN-6699: Add metric for packet too big dropped

- 2022-08-24 TUN-6691: Properly error check for net.ErrClosed

- 2022-08-22 TUN-6679: Allow client side of quic request to close body

- 2022-08-22 TUN-6586: Change ICMP proxy to only build for Darwin and use echo ID to track flows

- 2022-08-18 TUN-6530: Implement ICMPv4 proxy

- 2022-08-17 TUN-6666: Define packet package

- 2022-08-17 TUN-6667: DatagramMuxerV2 provides a method to receive RawPacket

- 2022-08-16 TUN-6657: Ask for Tunnel ID and Configuration on Bug Report

- 2022-08-16 TUN-6676: Add suport for trailers in http2 connections

- 2022-08-11 TUN-6575: Consume cf-trace-id from incoming http2 TCP requests

2022.8.2

- 2022-08-16 TUN-6656: Docker for arm64 should not be deployed in an amd64 container

2022.8.1

- 2022-08-15 TUN-6617: Updated CHANGES.md for protocol stickiness

- 2022-08-12 EDGEPLAT-3918: bump go and go-boring to 1.18.5

- 2022-08-12 TUN-6652: Publish dockerfile for both amd64 and arm64

- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.

- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.

- 2022-08-11 Revert "TUN-6617: Dont fallback to http2 if QUIC conn was successful."

- 2022-08-11 TUN-6617: Dont fallback to http2 if QUIC conn was successful.

- 2022-08-01 TUN-6584: Define QUIC datagram v2 format to support proxying IP packets

2022.8.0

- 2022-08-10 TUN-6637: Upgrade quic-go

- 2022-08-10 TUN-6646: Add support to SafeStreamCloser to close only write side of stream

- 2022-08-09 TUN-6642: Fix unexpected close of quic stream triggered by upstream origin close

- 2022-08-09 TUN-6639: Validate cyclic ingress configuration

- 2022-08-08 TUN-6637: Upgrade go version and quic-go

- 2022-08-08 TUN-6639: Validate cyclic ingress configuration

- 2022-08-04 EDGEPLAT-3918: build cloudflared for Bookworm

- 2022-08-02 Revert "TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span"

- 2022-07-27 TUN-6601: Update gopkg.in/yaml.v3 references in modules

- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span

- 2022-07-26 TUN-6576: Consume cf-trace-id from incoming TCP requests to create root span

- 2022-07-25 TUN-6598: Remove auto assignees on github issues

- 2022-07-20 TUN-6583: Remove legacy --ui flag

- 2022-07-20 cURL supports stdin and uses os pipes directly without copying

- 2022-07-07 TUN-6517: Use QUIC stream context while proxying HTTP requests and TCP connections

2022.7.1

- 2022-07-06 TUN-6503: Fix transport fallback from QUIC in face of dial error "no network activity"

2022.7.0

- 2022-07-05 TUN-6499: Remove log that is per datagram

- 2022-06-24 TUN-6460: Rename metric label location to edge_location

- 2022-06-24 TUN-6459: Add cloudflared user-agent to access calls

- 2022-06-17 TUN-6427: Differentiate between upstream request closed/canceled and failed origin requests

- 2022-06-17 TUN-6388: Fix first tunnel connection not retrying

- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first

- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration

- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version

- 2022-05-20 TUN-6007: Implement new edge discovery algorithm

- 2022-02-18 Ensure service install directories are created before writing file

2022.6.3

- 2022-06-20 TUN-6362: Add armhf support to cloudflare packaging

2022.6.2

- 2022-06-13 TUN-6381: Write error data on QUIC stream when we fail to talk to the origin; separate logging for protocol errors vs. origin errors.

- 2022-06-17 TUN-6414: Remove go-sumtype from cloudflared build process

- 2022-06-01 Add Http2Origin option to force HTTP/2 origin connections

- 2022-06-02 fix ingress rules unit test

- 2022-06-09 Update remaining OriginRequestConfig functions for Http2Origins

- 2022-05-31 Add image source label to docker container.

- 2022-05-10 Warp Private Network link updated

2022.6.1

- 2022-06-14 TUN-6395: Fix writing RPM repo data

2022.6.0

- 2022-06-14 Revert "TUN-6010: Add component tests for --edge-ip-version"

- 2022-06-14 Revert "TUN-6373: Add edge-ip-version to remotely pushed configuration"

- 2022-06-14 Revert "TUN-6384: Correct duplicate connection error to fetch new IP first"

- 2022-06-14 Revert "TUN-6007: Implement new edge discovery algorithm"

- 2022-06-13 TUN-6385: Don't share err between acceptStream loop and per-stream goroutines

- 2022-06-13 TUN-6384: Correct duplicate connection error to fetch new IP first

- 2022-06-13 TUN-6373: Add edge-ip-version to remotely pushed configuration

- 2022-06-13 TUN-6380: Enforce connect and keep-alive timeouts for TCP connections in both WARP routing and websocket based TCP proxy.

- 2022-06-11 Update issue templates

- 2022-06-11 Amendment to previous PR

- 2022-06-09 TUN-6347: Add TCP stream logs with FlowID

- 2022-06-08 TUN-6361: Add cloudflared arm builds to pkging as well

- 2022-06-07 TUN-6357: Add connector id to ready check endpoint

- 2022-06-07 TUN-6010: Add component tests for --edge-ip-version

- 2022-06-06 TUN-6191: Update quic-go to v0.27.1 and with custom patch to allow keep alive period to be configurable

- 2022-06-03 TUN-6343: Fix QUIC->HTTP2 fallback

- 2022-06-02 TUN-6339: Add config for IPv6 support

- 2022-06-02 TUN-6341: Fix default config value for edge-ip-version

- 2022-06-01 TUN-6323: Add Xenial and Trusty for Ubuntu pkging

- 2022-05-31 TUN-6210: Add cloudflared.repo to make it easy for yum installs

- 2022-05-30 TUN-6293: Update yaml v3 to latest hotfix

- 2022-05-20 TUN-6007: Implement new edge discovery algorithm

2022.5.3

- 2022-05-30 TUN-6308: Add debug logs to see if packets are sent/received from edge

- 2022-05-30 TUN-6301: Allow to update logger used by UDP session manager

2022.5.2

- 2022-05-23 TUN-6270: Import gpg keys from environment variables

- 2022-05-24 TUN-6209: Improve feedback process if release_pkgs to deb and rpm fail

- 2022-05-24 TUN-6280: Don't wrap qlog connection tracer for gatethering QUIC metrics since we're not writing qlog files.

- 2022-05-25 TUN-6209: Sign RPM packages

- 2022-05-25 TUN-6285: Upload pkg assets to repos when cloudflared is released.

- 2022-05-24 TUN-6282: Upgrade golang to 1.17.10, go-boring to 1.17.9

- 2022-05-26 TUN-6292: Debug builds for cloudflared

- 2022-05-28 TUN-6304: Fixed some file permission issues

- 2022-05-11 TUN-6197: Publish to brew core should not try to open the browser

- 2022-05-12 TUN-5943: Add RPM support

- 2022-05-18 TUN-6248: Fix panic in cloudflared during tracing when origin doesn't provide header map

- 2022-05-18 TUN-6250: Add upstream response status code to tracing span attributes

2022.5.1

- 2022-05-06 TUN-6146: Release_pkgs is now a generic command line script

- 2022-05-06 TUN-6185: Fix tcpOverWSOriginService not using original scheme for String representation

- 2022-05-05 TUN-6175: Simply debian packaging by structural upload

- 2022-05-05 TUN-5945: Added support for Ubuntu releases

- 2022-05-04 TUN-6054: Create and upload deb packages to R2

- 2022-05-03 TUN-6161: Set git user/email for brew core release

- 2022-05-03 TUN-6166: Fix mocked QUIC transport for UDP proxy manager to return expected error

- 2022-04-27 TUN-6016: Push local managed tunnels configuration to the edge

2022.5.0

- 2022-05-02 TUN-6158: Update golang.org/x/crypto

- 2022-04-20 VULN-8383 Bump yaml.v2 to yaml.v3

- 2022-04-21 TUN-6123: For a given connection with edge, close all datagram sessions through this connection when it's closed

- 2022-04-20 TUN-6015: Add RPC method for pushing local config

- 2022-04-21 TUN-6130: Fix vendoring due to case sensitive typo in package

- 2022-04-27 TUN-6142: Add tunnel details support to RPC

- 2022-04-28 TUN-6014: Add remote config flag as default feature

- 2022-04-12 TUN-6000: Another fix for publishing to brew core

- 2022-04-11 TUN-5990: Add otlp span export to response header

- 2022-04-19 TUN-6070: First connection retries other edge IPs if the error is quic timeout(likely due to firewall blocking UDP)

- 2022-04-11 TUN-6030: Add ttfb span for origin http request

2022.4.1

- 2022-04-11 TUN-6035: Reduce buffer size when proxying data

- 2022-04-11 TUN-6038: Reduce buffer size used for proxying data

- 2022-04-11 TUN-6043: Allow UI-managed Tunnels to fallback from QUIC but warn about that

- 2022-04-07 TUN-6000 add version argument to bump-formula-pr

- 2022-04-06 TUN-5989: Add in-memory otlp exporter

2022.4.0

- 2022-04-01 TUN-5973: Add backoff for non-recoverable errors as well

- 2022-04-05 TUN-5992: Use QUIC protocol for remotely managed tunnels when protocol is unspecified

- 2022-04-06 Update Makefile

- 2022-04-06 TUN-5995: Update prometheus to 1.12.1 to avoid vulnerabilities

- 2022-04-07 TUN-5995: Force prometheus v1.12.1 usage

- 2022-04-07 TUN-4130: cloudflared docker images now have a latest tag

- 2022-03-30 TUN-5842: Fix flaky TestConcurrentUpdateAndRead by making sure resources are released

- 2022-03-30 carrier: fix dropped errors

- 2022-03-25 TUN-5959: tidy go.mod

- 2022-03-25 TUN-5958: Fix release to homebrew core

- 2022-03-28 TUN-5960: Do not log the tunnel token or json credentials

- 2022-03-28 TUN-5956: Add timeout to session manager APIs

2022.3.4

- 2022-03-22 TUN-5918: Clean up text in cloudflared tunnel --help

- 2022-03-22 TUN-5895 run brew bump-formula-pr on release

- 2022-03-22 TUN-5915: New cloudflared command to allow to retrieve the token credentials for a Tunnel

- 2022-03-24 TUN-5933: Better messaging to help user when installing service if it is already installed

- 2022-03-25 TUN-5954: Start cloudflared service in Linux too similarly to other OSs

- 2022-03-14 TUN-5869: Add configuration endpoint in metrics server

2022.3.3

- 2022-03-17 TUN-5893: Start windows service on install, stop on uninstall. Previously user had to manually start the service after running 'cloudflared tunnel install' and stop the service before running uninstall command.

- 2022-03-17 Revert "CC-796: Remove dependency on unsupported version of go-oidc"

- 2022-03-18 TUN-5881: Clarify success (or lack thereof) of (un)installing cloudflared service

- 2022-03-18 CC-796: Remove dependency on unsupported version of go-oidc

- 2022-03-18 TUN-5907: Change notes for 2022.3.3

2022.3.2

- 2022-03-10 TUN-5833: Create constant for allow-remote-config

- 2022-03-15 TUN-5867: Return error if service was already installed

- 2022-03-16 TUN-5833: Send feature `allow_remote_config` if Tunnel is run with --token

- 2022-03-08 TUN-5849: Remove configuration debug log

- 2022-03-08 TUN-5850: Update CHANGES.md with latest releases

- 2022-03-08 TUN-5851: Update all references to point to Apache License 2.0

- 2022-03-07 TUN-5853 Add "install" make target and build package manager info into executable

- 2022-03-08 TUN-5801: Add custom wrapper for OriginConfig for JSON serde

- 2022-03-09 TUN-5703: Add prometheus metric for current configuration version

- 2022-02-05 CC-796: Remove dependency on unsupported version of go-oidc

2022.3.1

- 2022-03-04 TUN-5837: Log panic recovery in http2 logic with debug level log

- 2022-03-04 TUN-5696: HTTP/2 Configuration Update

- 2022-03-04 TUN-5836: Avoid websocket#Stream function from crashing cloudflared with unexpected memory access

- 2022-03-05 TUN-5836: QUIC transport no longer sets body to nil in any condition

2022.3.0

- 2022-03-02 TUN-5680: Adapt component tests for new service install based on token

- 2022-02-21 TUN-5682: Remove name field from credentials

- 2022-02-21 TUN-5681: Add support for running tunnel using Token

- 2022-02-28 TUN-5824: Update updater no-update-in-shell link

- 2022-02-28 TUN-5823: Warn about legacy flags that are ignored when ingress rules are used

- 2022-02-28 TUN-5737: Support https protocol over unix socket origin

- 2022-02-23 TUN-5679: Add support for service install using Tunnel Token

2022.2.2

- 2022-02-22 TUN-5754: Allow ingress validate to take plaintext option

- 2022-02-17 TUN-5678: Cloudflared uses typed tunnel API

2022.2.1

- 2022-02-10 TUN-5184: Handle errors in bidrectional streaming (websocket#Stream) gracefully when 1 side has ended

- 2022-02-14 Update issue templates

- 2022-02-14 Update issue templates

- 2022-02-11 TUN-5768: Update cloudflared license file

- 2022-02-11 TUN-5698: Make ingress rules and warp routing dynamically configurable

- 2022-02-14 TUN-5678: Adapt cloudflared to use new typed APIs

- 2022-02-17 Revert "TUN-5678: Adapt cloudflared to use new typed APIs"

- 2022-02-11 TUN-5697: Listen for UpdateConfiguration RPC in quic transport

- 2022-02-04 TUN-5744: Add a test to make sure cloudflared uses scheme defined in ingress rule, not X-Forwarded-Proto header

- 2022-02-07 TUN-5749: Refactor cloudflared to pave way for reconfigurable ingress - Split origin into supervisor and proxy packages - Create configManager to handle dynamic config

- 2021-10-19 TUN-5184: Make sure outstanding websocket write is finished, and no more writes after shutdown

2022.2.0

- 2022-02-02 TUN-4947: Use http when talking to Unix sockets origins

- 2022-02-02 TUN-5695: Define RPC method to update configuration

- 2022-01-27 TUN-5621: Correctly manage QUIC stream closing

- 2022-01-28 TUN-5702: Allow to deserialize config from JSON

2022.1.3

- 2022-01-21 TUN-5477: Unhide vnet commands

- 2022-01-24 TUN-5669: Change network command to vnet

- 2022-01-25 TUN-5675: Remove github.com/dgrijalva/jwt-go dependency by upgrading coredns version

- 2022-01-27 TUN-5719: Re-attempt connection to edge with QUIC despite network error when there is no fallback

- 2022-01-28 TUN-5724: Fix SSE streaming by guaranteeing we write everything we read

- 2022-01-17 TUN-5547: Bump golang x/net package to fix http2 transport bugs

- 2022-01-19 TUN-5659: Proxy UDP with zero-byte payload

- 2021-10-22 Add X-Forwarded-Host for http proxy

2022.1.2

- 2022-01-13 TUN-5650: Fix pynacl version to 1.4.0 and pygithub version to 1.55 so release doesn't break unexpectedly

2022.1.1

- 2022-01-10 TUN-5631: Build everything with go 1.17.5

- 2022-01-06 TUN-5623: Configure quic max datagram frame size to 1350 bytes for none Windows platforms

2022.1.0

- 2022-01-03 TUN-5612: Add support for specifying TLS min/max version

- 2022-01-03 TUN-5612: Make tls min/max version public visible

- 2022-01-03 TUN-5551: Internally published debian artifacts are now named just cloudflared even though they are FIPS compliant