JA EN
shiichan

Cloudflare One Client for macOS Beta Is Here: A Bundle of Connectivity Fixes

Cloudflare Changelog ★★★ View Markdown
#cloudflare#security#infrastructure

Hi, it's Shii-chan!

Cloudflare Changelog developers.cloudflare.com

A new beta of Cloudflare One Client for macOS just landed, so let's take a look. The fixes are quiet ones, but they matter if you use the client every day!

What was announced?

The Cloudflare Changelog announced Cloudflare One Client for macOS beta 2026.8.2028.1 (released September 29, 2026). You can get it from the beta releases downloads page. Known Issues is listed as none.

The story so far

While the client was connecting or reconnecting, traffic to resources excluded by split tunnel could be blocked for a moment. Reauthentication could also be flaky, and the client did not react well when a network lowered its MTU.

What changes

Connectivity gets more reliable. It should especially help people in these situations:

  • Split tunnel users who saw excluded resources become briefly unreachable on reconnect
  • People on low-MTU networks who had unstable DNS
  • People on IPv6-only networks, or whose client got unstable after sleep and wake

Dive Deep

Here are the changes listed in the changelog.

  • Fixed an issue that could briefly block traffic to split tunnel excluded resources while connecting or reconnecting
  • Improved reauthentication reliability and fixed a case where reauthentication forced a new registration
  • Improved the client's reaction to the current network lowering its MTU
  • Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled by policy or MDM
  • Improved DNS reliability on lower-MTU networks by clamping the TCP MSS for DNS-over-HTTPS connections sent through the tunnel
  • Improved API reliability by retrying requests dropped when reusing pooled connections
  • Fixed Extra Logging failing to capture packets across all interfaces
  • Fixed an issue that could prevent remote diagnostics from completing
  • Fixed DNS connectivity checks failing on IPv6-only networks
  • Fixed the client service exiting when its route-monitoring socket was closed after sleep or wake
  • Fixed DNS enforcement checks making the service unresponsive on systems with large routing tables
  • Fixed slow captive portal checks causing the service to become unresponsive or restart
  • Fixed a race when switching tunnel protocols during key rotation that could prevent WireGuard from connecting
  • Fixed the client continuing to report "No network" after a manual disconnect
  • Fixed a UI crash caused by daemon connection resets during IPC requests
  • Fixed a startup crash related to system locale date formatting

Wrap-up

  • Beta 2026.8.2028.1 of Cloudflare One Client for macOS is out
  • It improves split tunnel behavior on reconnect, reauthentication, and DNS on low-MTU networks
  • Non-RFC 1918 local IPv4 networks can now be routed through the tunnel
  • No Known Issues are reported

This is a good fit for admins running Cloudflare One on Macs and anyone with a test environment for betas!

Related posts