JA EN
shiichan

macOS WARP Beta Cleans Up Bugs, Including a DNS Failure on IPv6-Only Networks!

Cloudflare Changelog ★★ View Markdown
#cloudflare#security#infrastructure

Hi, it's me, Shiichan! Today I found news about a new beta release of the Cloudflare One Client for macOS, so let's take a look.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Cloudflare's Changelog announced that a new beta release of the Cloudflare One Client (WARP) for macOS, version 2026.8.1290.1, is now available on the beta releases downloads page. It bundles new capabilities along with a batch of bug fixes.

The story so far

The previous macOS client had a few macOS-specific quirks. The client service could exit when its route-monitoring socket was closed after the Mac went to sleep and woke back up, and DNS enforcement checks could make the service unresponsive on systems with large routing tables. On IPv6-only networks, DNS connectivity checks themselves could fail outright. Extra Logging also wasn't reliably capturing packets across all interfaces, and remote diagnostics sometimes wouldn't complete.

What changes

This beta clears out that friction. On the feature side, when unrestricted LAN inclusion is enabled by policy or MDM, the client can now route non-RFC 1918 local IPv4 networks through the WARP tunnel too. DNS reliability on lower-MTU networks improved by clamping the TCP maximum segment size (MSS) for DNS-over-HTTPS connections sent through the tunnel. API reliability also got better, since requests dropped while reusing pooled connections are now retried automatically.

Dive Deep

There's a long list of fixes in this release, including:

  • Extra Logging failing to capture packets across all interfaces
  • Remote diagnostics that could fail to complete
  • DNS connectivity checks failing on IPv6-only networks
  • The client service exiting when its route-monitoring socket was closed after sleep or wake
  • DNS enforcement checks making the client service unresponsive on systems with large routing tables
  • Slow captive portal checks causing the client service to become unresponsive or restart while connecting
  • A race when switching tunnel protocols during key rotation that could prevent WireGuard from connecting
  • The client continuing to report "No network" after a successful manual disconnect
  • A client UI crash that could occur when the daemon connection was reset during an IPC request
  • A startup crash when date formatting data for the system locale hadn't loaded yet

Known issues for this release: none reported.

Wrap-up

  • A new beta of the Cloudflare One Client for macOS, version 2026.8.1290.1, is now available.
  • It adds routing for non-RFC 1918 local networks under policy/MDM settings and improves DNS reliability via MSS clamping for DNS-over-HTTPS.
  • macOS-specific issues got fixed too: the service exiting after sleep/wake, DNS checks failing on IPv6-only networks, and unresponsiveness on systems with large routing tables.
  • Captive-portal freezes and WireGuard connection races were fixed here as well, matching the Windows release.
  • A quietly solid update for IT admins and engineers running Cloudflare Zero Trust's WARP client on Mac.

Related posts