Netmaker 1.7.0

What's new in 1.7.0

Netmaker v1.7.0 Release Notes 🚀

🚀 What’s New

🏢 Multi-Tenancy for MSPs (Organizations & Tenants)

Run multiple customer environments from a single Netmaker server.

• Organizations & tenants — Group customers under an organization; each tenant is an isolated Netmaker environment (networks, devices, users).
• MSP license sync — EE/MSP installs create and update orgs/tenants from the MSP license (including teardown when a tenant is removed from the license). CE and normal Pro accounts continues to use a single local default tenant.
• Scoped access — API and nmctl select the target org/tenant via X-Organization-ID / X-Tenant-ID (--org_id / --tenant_id), with nmctl organization list and nmctl tenant list for discovery.

🔌 TCP Proxy / WSS Uplink

Gateways can publish a TCP/WSS uplink so clients can reach the mesh in restrictive environments when UDP is blocked.

• Enable TCP proxy on the gateway/host (tcp_proxy_enabled and related listen/TLS settings).
• Clients can opt into a TCP uplink to the gateway when the proxy is enabled.
• Supports self-signed and externally terminated TLS modes for WSS endpoints.

🛡️ EDR Integration (Pro)

Connect endpoint detection and response platforms for posture checks from Integrations.

• Supported providers：Microsoft Defender, CrowdStrike, SentinelOne, and Wazuh.
• Sync managed endpoints and evaluate EDR compliance (agent health / risk level) as part of device posture.
• Configure, test, and manage integrations via the REST API (/api/v1/integrations/edr/{provider}).

📱 MDM Integration (Pro)

Connect mobile device management platforms for device compliance posture from Integrations.

• Supported providers：Microsoft Intune, Jamf, JumpCloud, and Iru.
• Match devices by Entra device ID, serial number, hardware UUID, or hostname.
• Enforce MDM enrollment/compliance checks alongside existing posture policies.
• Configure, test, and manage integrations via the REST API (/api/v1/integrations/mdm/{provider}).

🗄️ Database Schema Migration

This release completes the SQL schema path and introduces multi-tenancy (org/tenant) bootstrap as part of the v1.7.0 migration.

Upgrade requirement (existing deployments):

• You must run Netmaker v1.6.0 successfully before upgrading to v1.7.0.
• v1.7.0 will refuse to start if migration-v1.6.0 has not completed on a prior v1.6.0 deployment. …

Full release notes »