v0.63.0

## Release Notes for v0.63.0

### What's New

#### Custom DNS Zones

NetBird now supports private DNS zones, allowing you to host DNS records directly within your network without external DNS servers.

Create zones like `internal.company.io`, add A, AAAA, or CNAME records, and distribute them to specific peer groups. Resolution happens locally on peers, and records propagate automatically when group membership
  changes. With search domain support enabled, peers can query short names like `api` instead of the full `api.internal.company.io`.

Custom zones take precedence over nameserver configurations, giving you control over how specific domains resolve within your network. This works well with routed networks—map friendly names to private IPs behind
   routing peers, and NetBird handles both DNS resolution and traffic routing. Your teams access `postgres.internal` instead of remembering `192.168.0.68`.

Zone distribution is group-based, so different teams can see different records for the same zone, or have access to entirely separate zones.

##### Use Cases

- **Environment separation** — Distinct zones for production, staging, and development, distributed only to relevant teams
- **Routed network resources** — DNS names for services in data centers or cloud VPCs accessed through routing peers
- **Split-horizon DNS** — Internal-only resolution for domains that resolve differently outside your network

##### Screenshots
Create a new Zone:
<img width="400" height="400" alt="image" src="https://github.com/user-attachments/assets/7e222c9e-3048-4594-b94a-409fa356f53f" />

Create a new record:
<img width="400" height="400" alt="image" src="https://github.com/user-attachments/assets/dd25db09-3420-4e52-8bc0-26e2c0844300" />

View all records:
<img width="400" height="400" alt="image" src="https://github.com/user-attachments/assets/9fbdd978-98bf-4e49-9a4c-2a0f73513331" />

Learn more at:

[Custom Zones](https://docs.netbird.io/manage/dns/custom-zones)
[DNS Aliases for Routed Networks](https://docs.netbird.io/manage/dns/dns-aliases-for-routed-networks)

#### DNS & Networking Improvements
- Ensured **musl compatibility** by chasing CNAMEs in the local resolver.
  [#5046](https://github.com/netbirdio/netbird/pull/5046)
- Improved **DNS resolution flow** by falling through the DNS chain for custom DNS zones.
  [#5081](https://github.com/netbirdio/netbird/pull/5081)
- Changed **priority between local and DNS route handlers** for more predictable routing.
  [#5106](https://github.com/netbirdio/netbird/pull/5106)
- Fixed **netstack upstream DNS handling** and added **WASM debug methods**.
  [#4648](https://github.com/netbirdio/netbird/pull/4648)

#### Client Improvements
- Fixed **WASM peer connections** to lazy peers.
  [#5097](https://github.com/netbirdio/netbird/pull/5097)
- Added **fallback handling** for invalid `loginuid` in `ui-post-install.sh`.
  [#5099](https://github.com/netbirdio/netbird/pull/5099)
- Removed **duplicate audience checks** in the client.
  [#5117](https://github.com/netbirdio/netbird/pull/5117)

#### Management Enhancements
- Added **Custom DNS zones** support.
  [#4849](https://github.com/netbirdio/netbird/pull/4849)
- Added **configuration compatibility checks** during startup.
  [#5087](https://github.com/netbirdio/netbird/pull/5087)
- Optimized **external cache access** by fetching all users in a single request.
  [#5104](https://github.com/netbirdio/netbird/pull/5104)
- Adapted **rate limiting** behavior.
  [#5080](https://github.com/netbirdio/netbird/pull/5080)
- Fixed **SSH server audience validation** across management and client.
  [#5105](https://github.com/netbirdio/netbird/pull/5105)
- Skipped `email_verified` validation when not present in IdP responses.
  [#5118](https://github.com/netbirdio/netbird/pull/5118)
- Added **IdP timeout configuration** via environment variable.
  [#4647](https://github.com/netbirdio/netbird/pull/4647)

#### Infrastructure & Security
- Introduced **embedded STUN** support for relay and STUN components.
  [#5062](https://github.com/netbirdio/netbird/pull/5062)
- Added a **Quickstart reverse proxy assistant** to simplify initial setup.
  [#5100](https://github.com/netbirdio/netbird/pull/5100)
- Upgraded **Alpine Linux** from 3.22.2 to 3.23.2 for security hardening.
  [#5119](https://github.com/netbirdio/netbird/pull/5119)

### Other Changes
- Added a **hiring announcement** with a link to careers.netbird.io.
  [#5095](https://github.com/netbirdio/netbird/pull/5095)

### New Contributors
- @nsadeghi97 made their first contribution in [#5095](https://github.com/netbirdio/netbird/pull/5095)
- @ressys1978 made their first contribution in [#4647](https://github.com/netbirdio/netbird/pull/4647)

**Full Changelog**: [v0.62.2...v0.63.0](https://github.com/netbirdio/netbird/compare/v0.62.2...v0.63.0)