Stratum v1.0.0-rc.32

Release candidate. Continues the Stratum 1.0 preview — recommended for evaluation and staging. Hold production rollouts for the stable v1.0.0 release.

Highlights

Hairpin NAT (NAT loopback). Clients on a private network can now reach an internal service through its public address — the gateway rewrites the connection to the internal host and returns the reply correctly.

NAT64. IPv6-only clients can reach IPv4-only services through the gateway (RFC 6146, 64:ff9b::/96; TCP and UDP).

BGP EVPN for VXLAN overlays. Adds the BGP EVPN address-family — type-2 (MAC/IP) and type-3 (inclusive-multicast) routes — so overlay MAC and VTEP reachability can be exchanged over BGP.

More resilient updates. In-kernel packet filtering on the tenant bridges now re-attaches cleanly when the agent updates to a new build, closing a brief window where enforcement could lapse during the restart.

Feedback on this release candidate is welcome — report issues through your account before the stable v1.0.0 cut.