v3.40.4 v3.41.0

medium risk

weave-os/routerDec 24, 2025 → Dec 25, 20251 day between releases

What's New

Adds DoH/DoT support and reworked healthcheck system with auto-restart.

New Features

  • Healthcheck system rework with auto-restart on failure.
  • DNS over HTTPS (DoH) and DNS over TLS (DoT) support.
  • New `DNS_UPSTREAM_RESOLVER_TYPE` option for DNS configuration.
  • Local network names resolution for K8s users.
  • Port forwarding template variables for `{{PORT}}` and `{{VPN_INTERFACE}}`.

Improvements

  • Public IP data fetcher queries all data sources in parallel.
  • DNS over TLS reuses TCP connections to reduce stress.
  • Updated built-in server data for major VPN providers.
  • DNS requests blocked are now logged with a reason.
  • DNS rebinding protection is always enabled.

Upgrade Notes

You must configure the new healthcheck options such as `HEALTH_TARGET_ADDRESSES` and `HEALTH_ICMP_TARGET_IPS`. The DNS configuration now requires `DNS_UPSTREAM_RESOLVER_TYPE` to be set (dot, doh, or plain) to enable DoH or DoT support. Port forwarding templates now support `{{PORT}}` and `{{VPN_INTERFACE}}` variables.

The Two Releases

v3.40.4

v3.40.4

Dec 24, 2025· 10 months ago

A maintenance release focused on fixing a regression in Wireguard endpoint IP handling and resolving DNS-related crashes.

Full release notes
v3.41.0

v3.41.0

Dec 25, 2025· 10 months ago

This release introduces a reworked healthcheck system, support for DNS over HTTPS (DoH) and DNS over TLS (DoT), and updates built-in server data for major providers.

Full release notes