JA EN
shiichan

Cloudflare One Client for Linux 2026.8.2100.0 Is GA with Faster Reconnects

Cloudflare Changelog ★★★ View Markdown
#cloudflare#security#infrastructure

Hi, it's Shii-chan! A new GA release of the Cloudflare One Client for Linux is here.

Cloudflare Changelog developers.cloudflare.com

What was announced?

In the Cloudflare Changelog, version 2026.8.2100.0 of the Linux Cloudflare One Client was released. It is a GA release available on the stable releases downloads page.

The story so far

While the client was connecting or reconnecting, traffic to split tunnel excluded resources could be briefly blocked. This release fixes that.

What changes

The highlights:

  • Traffic to split tunnel excluded resources is no longer briefly blocked while connecting or reconnecting
  • The learned split tunnel configuration is kept across reconnects
  • Non-RFC 1918 local IPv4 networks can be routed through the tunnel when unrestricted LAN inclusion is enabled by policy or MDM
  • The hosts file is read once and shared across DNS resolvers, so reconnects are faster and memory use is lower
  • A new MDM setting prefers IPv4 when resolving hostnames in proxy mode (off by default)

Dive Deep

Other improvements and fixes:

  • More reliable reauthentication, and a fix for reauthentication forcing a new registration
  • Better reaction when the current network lowers its MTU
  • TCP MSS clamping for DNS-over-HTTPS connections through the tunnel, improving DNS reliability on low-MTU networks
  • Individual DNS-over-HTTPS queries now time out instead of hanging when the upstream stops responding
  • Requests dropped on reused pooled connections are retried
  • Fixed reconnecting during Emergency Disconnect after switching organizations or re-registering
  • Fixed being unable to connect after an upgrade when stored registration credentials no longer matched the configuration
  • Fixed unexpected service restarts when the service responded slowly, such as after waking from sleep
  • Fixed the client window not appearing on first launch after a fresh install on RHEL 10
  • Fixed duplicate WARP routing policy rules piling up on reconnect
  • Fixed slow captive portal checks that made the service unresponsive or caused restarts while connecting
  • Fixed a race during tunnel protocol switching on key rotation that could stop WireGuard from connecting
  • Fixed the client showing "No network" after a successful manual disconnect
  • Fixed a UI crash when the daemon connection reset, and a startup crash when locale date formatting data had not loaded

There is one known issue. In DNS Only mode, queries for Local Domain Fallback names may go to the encrypted DNS server instead of the system configuration. Other modes work correctly.

Wrap-up

  • Linux Cloudflare One Client 2026.8.2100.0 is GA
  • No more brief blocking while connecting, and split tunnel settings persist across reconnects
  • Faster reconnects and lower memory use
  • Many stability fixes for low-MTU networks, captive portals, and more
  • Known issue: Local Domain Fallback in DNS Only mode

This is for admins running the Cloudflare One Client on Linux who want a steadier connection!

Related posts