v2.0.0-rc10

weave-os/routerv2.0.0-rc10Dec 22, 2025by qdm12

Upgrading?

Release notes summary

This RC release introduces performance optimizations for DNS over TLS, adds configuration options for health checks and rebinding protection, and fixes several DNS middleware behaviors and IPv6 support issues.

Key Highlights

  • DNS over TLS now uses a connection pool to re-use TCP connections.
  • New configuration options: `HEALTH_SERVER_ADDRESS` and `REBINDING_PROTECTION_EXEMPT_HOSTNAMES`.
  • Enhanced logging for blocked elements and debug logging for I/O timeouts.
  • Fixes for public TLD detection and Windows IPv6 error message handling.

Breaking Changes

  • `pkg/nameserver.GetDNSServers` no longer returns localhost IPs, now returns an error, and returns `[]netip.Addr` instead of `[]netip.AddrPort`.

New Features

  • DNS over TLS connection pooling
  • Health server address configuration
  • Rebinding protection exemption hostnames
  • Logging blocked elements with a reason

Full Release Notes

## Features

- DNS over TLS now uses a pool of connections to re-use TCP connections when possible (#150)
- `HEALTH_SERVER_ADDRESS` option, defaulting to `127.0.0.1:9999`
- by default log i/o timeout errors are logged at debug level because these are fairly common
- `REBINDING_PROTECTION_EXEMPT_HOSTNAMES` option
- `pkg/middlewares/filter`: log blocked elements with a reason

## Fixes

- `internal/local`: "site" and "network" TLDs are public, not local
- `pkg/middlewares/localdns`:
  - do not log request twice on errors
  - do not debug log NXDOMAIN coded responses since these happen often especially with search domains
- `internal/support/ipv6`: handle Windows error message
- Grafana dashboard plain DNS section updated

## Go API breaking changes

- `pkg/nameserver`: `GetDNSServers`
  - does not return localhost IPs if no nameserver is found 
  - returns an eventual error
  - returns []netip.Addr instead of []netip.AddrPort since it can only be an ip address without port

## Maintenance

- Grafana JSON dashboard upgraded to newer schema version 3
- Fix documentation URLs and CI links check
- bump markdownlint from v11 to v21

Related Repositories