innernet

No entries match these filters. Clear filters

1. v2.0.0 Jul 2, 2026 · issue 007

   innernet v2.0.0 adds custom host suffix, client endpoint override, verbose full public keys, and a new innernet-client-core Rust library

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v2.0.0 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v2.0.0

   └──▷ TRY IT
   Assign a custom DNS suffix (e.g. .corp.example) to all peers on the network instead of the default <interface>.wg.
   copy

   $ sudo innernet-server serve <interface> --host-suffix corp.example

   Inspect full public keys of all peers when diagnosing connectivity — useful when truncated keys are ambiguous.
   copy

   $ sudo innernet --verbose list <interface>

   Manually pin a peer's advertised endpoint (e.g. behind a NAT or load balancer) so other peers connect to the correct address.
   copy

   $ sudo innernet override-endpoint <interface>

   • Adds --host-suffix CLI option to client and server to override the default <interface>.wg hostname suffix.
   • Adds override-endpoint command to the client, enabling manual peer endpoint specification without going through the server.
   • Prints full WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer. public keys (instead of truncated 10-char versions) when the global --verbose flag is used.
   • Introduces new innernet-client-core Rust library crate exposing create_peer_and_invitation(), set_listen_port, redeem_invite, and fetch APIs for programmatic integration.

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The Rust libraries innernet-client-core, innernet-server, and innernet-shared have semver-incompatible API changes requiring a major version bump for consumers of these crates
2. v1.7.0 Aug 13, 2025 · release notes

   innernet v1.7.0 adds OpenBSD support, CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. rename, peer enable/disable CLI flags, and offline state restore.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.7.0 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.7.0

   └──▷ TRY IT
   Install innernet directly from crates.io without needing a pre-built package.
   copy

   $ cargo install innernet

   • Supports unspecified IP addresses with override-endpoint, giving more flexibility when overriding peer endpoints.
   • Adds new client and server commands to rename a CIDR block.
   • Adds CLI parameters to enable or disable individual peers.
   • Experimental support for OpenBSD as a new platform.
   • Periodically writes peer mappings to /etc/hosts on the innernet server, enabling hostname-based access across the network.

   +3 more show less

   • Exposes innernet-server as a library crate (renamed from server) for programmatic use.
   • Adds a /user/capabilities API endpoint to query server capabilities.
   • Published on crates.io, enabling installation via cargo install innernet.

   8 details in Everything

3. v1.5.5 Sep 24, 2022 · release notes

   Adds disable-peer and enable-peer commands to innernet-server

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.5 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.5.5

   └──▷ TRY IT
   Temporarily block a specific peer's access to the mesh network using their public key.
   copy

   $ innernet-server disable-peer <peer_public_key>

   Restore network access for a previously disabled peer.
   copy

   $ innernet-server enable-peer <peer_public_key>

4. v1.5.4 Mar 16, 2022 · release notes

   Adds IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. NAT traversal and --mtu flag; default MTU becomes 1280.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.4 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.5.4

   └──▷ TRY IT
   Override the new default 1280-byte MTU when your path supports larger packets for better throughput.
   copy

   $ innernet --mtu 9000

   • Adds --mtu CLI flag to override the new default MTU of 1280 bytes
   • Changes default MTU to a constant 1280 bytes for maximum compatibility

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The default MTU is changed to 1280 bytes; peers with higher path MTUs will see reduced throughput unless the --mtu flag is set.
5. v1.5.2 Dec 6, 2021 · release notes

   Innernet v1.5.2 adds configurable data directories, disables NAT traversal, and non-interactive subcommands.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.2 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.5.2

   • Adds NAT_TRAVERSAL config key to .innernet/client.toml (or equivalent) to disable NAT traversal logic
   • Allows running innernet up without specifying an interface to apply configuration to all installed networks
   • Enables non-interactive mode for the set-listen-port and override-endpoint subcommands via new CLI arguments
   • Makes config and data directories configurable, allowing users to override default paths

   4 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The inn command-line shortcut is deprecated; running the binary as inn now triggers a warning that it will be removed in favor of innernet
6. v1.5.0 Sep 17, 2021 · release notes

   v1.5.0 adds local IP reporting for better NAT traversal and releases wireguard-control crate.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.5.0 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.5.0

   • Adds support for peers and servers to report local IP addresses to establish connections within the same NAT
   • Releases wireguard-control as an independent Rust crate

   2 details in Everything

7. v1.4.0 Jul 11, 2021 · release notes

   innernet v1.4.0 adds non-root execution via CAP_NET_ADMIN and the list-cidrs subcommand

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.4.0 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.4.0

   └──▷ USE IT
   List all configured CIDRs in the network without needing root privileges.
   shell copy

   capsh --caps="cap_net_admin+eip" -- -c "innernet list-cidrs"

   • Enables running innernet without root using CAP_NET_ADMIN and proper permissions on /etc/innernet and /var/lib/innernet.
   • Makes MTU configurable on both client and server.

   2 details in Everything

8. v1.3.1 May 31, 2021 · release notes

   Adds innernet peer rename command and doc shell completions

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.1 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.3.1

   • Adds the innernet peer rename subcommand to rename peers in a managed network.
   • Provides generated shell completion scripts in doc/ for supported shells.

   2 details in Everything

9. v1.3.0 May 21, 2021 · release notes

   Adds invite expiration tracking, online peer indicators, inn delete-cidr subcommand, and verbose logging flag.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch v1.3.0 https://github.com/tonarino/innernet.git
   # already have the repo? check out this version:
   $ git checkout v1.3.0

   └──▷ USE IT
   Remove a specific network CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. from the server configuration.
   shell copy

   inn delete-cidr <network>

   Check peer status and identify which nodes are currently online based on recent handshakes.
   shell copy

   inn list -s
   inn list -t

   Enable detailed logging for troubleshooting connectivity or configuration issues.
   shell copy

   innernet --verbose

   • innernet now tracks invite_expiration times for server-side database migrations to handle invite expiry
   • Online indicators in inn list -s and inn list -t mark peers as online if there has been a handshake within the last 180 seconds
   • Adds inn delete-cidr <network> subcommand to remove CIDRs
   • Support for optional OS routing table modifications
   • Enables verbose output on the innernet binary

   5 details in Everything

10. v1.2.0 Apr 24, 2021 · release notes

    Innernet v1.2.0 adds non-interactive CLI flags and hostname support for external endpoints

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.2.0 https://github.com/tonarino/innernet.git
    # already have the repo? check out this version:
    $ git checkout v1.2.0

    └──▷ USE IT
    Automate peer provisioning in CI/CD scripts by bypassing interactive prompts.
    shell copy

    innernet-server add-peer evilcorp --name 'admin' --cidr 'humans' --admin true --auto-ip --save-config 'peer1.toml' --yes

    Configure network endpoints using DNS names for easier management.
    shell copy

    innernet-server new --network-name 'evilcorp' --network-cidr '10.66.0.0/16' --external-endpoint 'innernet-server.evilcorp.com:51820' --listen-port 51820

    • Adds --name, --cidr, --admin, --auto-ip, --save-config, and --yes flags to innernet-server add-peer for non-interactive peer creation
    • Enables using hostnames in the --external-endpoint argument of innernet-server new instead of only IP addresses

    2 details in Everything

11. v1.1.0 Apr 11, 2021 · release notes

    Adds innernet uninstall [interface] command and WG_USERSPACE_IMPLEMENTATION env var for userspace WireGuardWireGuardA modern VPN protocol and Linux kernel module, maintained as an open-source project, that establishes encrypted tunnels using minimal code and fast cryptography, giving cyber tools a lightweight, high-performance transport layer. backend selection

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.1.0 https://github.com/tonarino/innernet.git
    # already have the repo? check out this version:
    $ git checkout v1.1.0

    • Introduces the innernet uninstall [interface] subcommand to permanently remove an existing innernet network.
    • Allows override of the WireGuard userspace implementation via the WG_USERSPACE_IMPLEMENTATION (or WG_QUICK_USERSPACE_IMPLEMENTATION) environment variable.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Clients must upgrade to v1.1.0 to avoid Unauthorized errors after the server upgrades, due to a newly required X-Innernet-Server-Key header for CSRFCSRFCross-site request forgery, an attack that makes a signed-in browser send an unwanted request to a site. The site may accept the request using the victim's existing session. protection.
12. v1.0.1 Apr 8, 2021 · release notes

    New --no-write-hosts and --hosts-path flags allow controlling /etc/hosts behavior.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch v1.0.1 https://github.com/tonarino/innernet.git
    # already have the repo? check out this version:
    $ git checkout v1.0.1

    └──▷ TRY IT
    Install a server without modifying the local system's hosts file.
    copy

    $ innernet-server install --no-write-hosts

    Write host entries to a custom directory like /etc/alternatives/hosts.
    copy

    $ innernet-client add --hosts-path /etc/alternatives/hosts

    • Adds the --no-write-hosts flag to prevent writing to /etc/hosts
    • Adds the --hosts-path flag to write hosts entries to a custom location

    2 details in Everything