# Netrinos Client v1.3.1 Release Notes

**Release Date**: 2026-03-18

## Overview

Version 1.3.1 introduces WireGuard obfuscation ("cloak") for
networks where WireGuard is blocked, a faster peer identity
check, and improved connection reliability.

## WireGuard Obfuscation (Cloak)

### The Problem

Some enterprise firewalls use Deep Packet Inspection to identify
and block WireGuard traffic, even though the payload is encrypted.

### The Solution

Cloak disguises WireGuard traffic so it passes through DPI
firewalls undetected. It works transparently with no changes to
your applications or network configuration.

### Key Features

- **Transparent**: No changes needed to applications or devices
- **Automatic**: Enable per-device from the Netrinos portal
- **Port flexible**: Works on any UDP port. If you run a relay
  server, port 443 is recommended for the strictest firewalls
- **Backward compatible**: Cloaked and non-cloaked peers work
  together. Non-cloaked peers route through relay automatically

### Enabling Cloak

1. Log into the Netrinos portal
2. Select the device behind the DPI firewall
3. Enable **Cloak** in the device settings
4. The device picks up the change within 60 seconds

## Faster Peer Identity Check

Peer identity verification is now significantly faster
(2-80ms, down from 200-300ms). The improvement is automatic
for v1.3.1 peers, with seamless fallback for older versions.

## Connection Reliability

- **Non-disruptive connection testing**: Direct reachability is
  now verified before changing WireGuard routing, so existing
  connections are never interrupted during testing
- **NAT auto-recovery**: Connections automatically recover when
  enterprise firewalls kill long-lived UDP sessions
- **Smarter relay fallback**: Peers that cannot connect directly
  fall back to relay faster and more reliably
- **Better endpoint discovery**: Peer addresses are discovered
  from actual traffic, eliminating stale connection problems

## CLI Changes

- `netrinos lport` - Shows the public listen port (`wgport` is
  now an alias)
- `netrinos id` - Now shows the test protocol in a Via column
- `netrinos log clear` - Properly rotates logs, preserving
  the previous log as a compressed backup

## Desktop UI

- **Status page**: Virtual devices collapse under their parent
  peer with an expand/collapse toggle
- **Devices page**: Click-to-edit redesign with cleaner layout
- **Logs page**: Log level selector in the header bar

## Fixes

- Fixed rare high CPU usage on `netrinos ver` (aarch64)
- Fixed relay routing briefly unavailable during startup
- Fixed Virtual Device routes being reset on each sync cycle
- Fixed port forward rules lost on firewall rebuild (EdgeNode)
- Fixed intermittent peer connectivity drops after restarts

## Compatibility

- Works with v1.2.4, v1.2.5, v1.2.6, and v1.3.0 clients
- Cloak requires v1.3.1 on both peers for direct connection
  (mixed versions use relay automatically)
- No configuration changes required for non-cloak users

## Updating

Use your normal update process. No special steps required.

Enable cloak from the portal after updating to v1.3.1.