Netrinos Client v1.3.1 Release Notes

Release Date: 2026-03-18

Overview

Version 1.3.1 introduces WireGuard obfuscation (“cloak”) for networks where WireGuard is blocked, a faster peer identity check, and improved connection reliability.

WireGuard Obfuscation (Cloak)

The Problem

Some enterprise firewalls use Deep Packet Inspection to identify and block WireGuard traffic, even though the payload is encrypted.

The Solution

Cloak disguises WireGuard traffic so it passes through DPI firewalls undetected. It works transparently with no changes to your applications or network configuration.

Key Features

• Transparent: No changes needed to applications or devices
• Automatic: Enable per-device from the Netrinos portal
• Port flexible: Works on any UDP port. If you run a relay server, port 443 is recommended for the strictest firewalls
• Backward compatible: Cloaked and non-cloaked peers work together. Non-cloaked peers route through relay automatically

Enabling Cloak

1. Log into the Netrinos portal
2. Select the device behind the DPI firewall
3. Enable Cloak in the device settings
4. The device picks up the change within 60 seconds

Faster Peer Identity Check

Peer identity verification is now significantly faster (2-80ms, down from 200-300ms). The improvement is automatic for v1.3.1 peers, with seamless fallback for older versions.

Connection Reliability

• Non-disruptive connection testing: Direct reachability is now verified before changing WireGuard routing, so existing connections are never interrupted during testing
• NAT auto-recovery: Connections automatically recover when enterprise firewalls kill long-lived UDP sessions
• Smarter relay fallback: Peers that cannot connect directly fall back to relay faster and more reliably
• Better endpoint discovery: Peer addresses are discovered from actual traffic, eliminating stale connection problems

CLI Changes

• netrinos lport - Shows the public listen port (wgport is now an alias)
• netrinos id - Now shows the test protocol in a Via column
• netrinos log clear - Properly rotates logs, preserving the previous log as a compressed backup

Desktop UI

• Status page: Virtual devices collapse under their parent peer with an expand/collapse toggle
• Devices page: Click-to-edit redesign with cleaner layout
• Logs page: Log level selector in the header bar

Fixes

• Fixed rare high CPU usage on netrinos ver (aarch64)
• Fixed relay routing briefly unavailable during startup
• Fixed Virtual Device routes being reset on each sync cycle
• Fixed port forward rules lost on firewall rebuild (EdgeNode)
• Fixed intermittent peer connectivity drops after restarts

Compatibility

• Works with v1.2.4, v1.2.5, v1.2.6, and v1.3.0 clients
• Cloak requires v1.3.1 on both peers for direct connection (mixed versions use relay automatically)
• No configuration changes required for non-cloak users

Updating

Use your normal update process. No special steps required.

Enable cloak from the portal after updating to v1.3.1.