StartOS start-tunnel/v1.2.1

Release notes

What's Changed

Fixed

• **IPv6 delegation now works when the WAN interface holds the delegated block

itself.** Some providers configure the delegated range directly on the WAN interface at its exact size (DigitalOcean assigns its /124 this way), which left the kernel with two equally-specific routes for the block — WAN and tunnel — and the WAN won. Traffic toward device addresses, including replies to connections devices opened, exited the WAN and was lost, so devices had IPv6 addresses but no connectivity. The tunnel now installs an explicit host route per device address, which always takes precedence. Routed prefixes, and on-link blocks configured at a shorter length than the delegated prefix, were unaffected.

• Port 80 is the HTTP→HTTPS redirect on every public IPv4. Upgrading

re-enables the redirect on every public IPv4 (clearing any per-address opt-outs) and removes any published forward that occupies port 80, so a plain http:// request always bounces to https://. Republish port 80 to a device afterward if you need it there — turn the redirect off for that address first.

start-tunnel packages Checksums

SHA-256

5b566fe289698ac788df58728d598cb9887d2d08a970b7c3b422dfbdca899291  start-tunnel-1.2.1-66c33c6_aarch64.deb
a5586e0a2d2efffc7491744e1902b888864e4efc3a5af37f1377db1b975c4967  start-tunnel-1.2.1-66c33c6_riscv64.deb
332501a4ed6ba627ebf7ac389c0c202b5175aa82c5e4916a91da2476619f54ec  start-tunnel-1.2.1-66c33c6_x86_64.deb

BLAKE-3

811ac855808c8992e02fe65ff02503068a860fd276cdfcf653d5dafcc9442703  start-tunnel-1.2.1-66c33c6_aarch64.deb
586a451fbb049d75d819ccddb114ccd6d1e909f2f54f87589c2ab5b70909630d  start-tunnel-1.2.1-66c33c6_riscv64.deb
8bc3538b94fd4f7d3e7084d6483061f78e08baed2bab26057e77fba0437c94db  start-tunnel-1.2.1-66c33c6_x86_64.deb