JA EN
shiichan

The Cloudflare One Client for Windows hits GA and clears up tunnel headaches!

Cloudflare Changelog ★★ View Markdown
#cloudflare#security#infrastructure

Hey everyone, it's Shiichan! Today I've got a friendly maintenance update for anyone running Zero Trust on Windows.

Cloudflare Changelog developers.cloudflare.com

What was announced?

From Cloudflare's Changelog: the Windows Cloudflare One Client version 2026.3.851.0 is now GA and available on the stable releases downloads page. It bundles tunnel connectivity fixes, better diagnostic logging, and a batch of quiet-but-useful improvements.

The story so far

On earlier Windows clients, the tunnel interface could fail to initialize, leaving you unable to establish a connection. There were other rough edges too, like RDP multi-user connections deleting registrations, and a degraded WMI (Windows Management Instrumentation) state trapping the client in a failed-connection loop.

What changes

This GA release fixes that tunnel initialization failure.

Fixed an issue causing Windows client tunnel interface initialization failure which prevented clients from establishing a tunnel for connection.

It also brings plenty of stability and troubleshooting fixes. Local proxy mode now uses the Cubic congestion control algorithm for better reliability, and QUIC connection metrics were added to the diagnostic logs so you can chase down issues more easily.

Dive Deep

Here are a few of the changes:

  • Consumer-only CLI commands are now clearly distinguished from Zero Trust commands
  • Fixed packet capture failing when the interface is renamed by SCCM VPN boundary support
  • Fixed slower tunnel start-up caused by a race between duplicate address detection (DAD) and disabling NetBT
  • Empty MDM files are now rejected instead of being accepted as a single config
  • Fixed a prior organization's emergency disconnect status persisting after switching organizations

There are also 3 known issues, covering Windows 11 24H2 performance, antimalware false positives, and DNS resolution under specific conditions, so it's worth a look before you update. You can grab the binary from the stable releases downloads page.

Wrap-up

  • The Windows Cloudflare One Client v2026.3.851.0 is now GA
  • 14 fixes and improvements, including the tunnel initialization failure
  • Local proxy switched to Cubic congestion control, with QUIC metrics for better diagnostics
  • 3 known issues to check before updating

This one's for IT admins running Cloudflare's Zero Trust client on Windows!

Related posts