Spokes v1.6.0 and Client v1.2.0: Updated Tunneling Library, Go Toolchain, and Security Fixes

Published at August 21, 2026 ·  3 min read

We’re releasing Spokes v1.6.0 and Packetriot Client v1.2.0 together because the primary improvement in this update is shared: an updated tunneling protocol library that improves reliability, reduces memory usage, and enhances connection handling under load. Both releases also move to the Go v1.27.0 toolchain and include dependency updates to address security issues.

What’s new:

• Updated tunneling library — reduced heap allocations, lower memory usage, better slow-client handling, and fewer race conditions
• Internal networking improvements — safer handling of large incoming requests and reduced memory growth
• Go v1.27.0 toolchain — latest compiler and runtime improvements for both Spokes and the client
• Security patches — updated dependencies including golang.org/x/net to resolve discovered CVEs

Get the Release

You can download the latest Spokes and Client packages from our downloads page. As always, we recommend upgrading to stay current with reliability improvements and security updates.

Our Spokes containers are updated as well.

docker pull packetriot/spokes:1.6.0

# alternatively

docker pull terrapinlabs/spokes:1.6.0

The Client container is also available at packetriot/pktriot:1.2.0.

Tunneling Library

This release updates both Spokes, our server, and the Packetriot client to the latest version of our tunneling protocol library. Along with protocol-level robustness improvements, the update reduces heap allocations and overall memory usage while improving how connections are managed under load. Slow clients can now be buffered and eventually timed out without blocking other clients from receiving traffic over the same tunnel.

For users, this means better responsiveness and more predictable performance when handling mixed client behavior. A slow or stalled connection is less likely to affect unrelated traffic, which improves overall tunnel stability and makes the system more resilient during long-running sessions and high-traffic periods.

Internal Networking

We also made important updates to Spokes’ internal networking to improve robustness and reduce the likelihood of race conditions. This work includes better handling for edge cases involving very large initial incoming requests, along with additional improvements to memory management and reduced heap allocations.

The result is a networking layer that behaves more reliably across a wider range of real-world traffic patterns. Users should see improved stability under load, especially in scenarios involving bursty traffic, large request payloads, or uneven client performance.

Dependency Updates

This release includes updates to Go dependencies to address discovered CVEs and keep both Spokes and the client aligned with newer upstream releases. This includes updates to core networking and supporting libraries such as golang.org/x/net and other underlying packages.

These changes are mostly behind the scenes, but they are important for maintaining a stronger security posture and reducing exposure to known issues. Keeping dependencies current also helps us improve compatibility and reliability as the platform evolves.

Go Toolchain

Both Spokes v1.6.0 and Client v1.2.0 are built with the Go v1.27.0 toolchain. This update ensures both projects benefit from the latest compiler optimizations, runtime improvements, and security fixes from the Go team.

For users, this helps deliver a more consistent and maintainable release while supporting the performance and memory-efficiency improvements included throughout this version. It also ensures both products remain well-positioned for future dependency and platform updates.

Thanks

These improvements are part of our ongoing effort to make Packetriot’s software faster, simpler, and more reliable to operate.

We appreciate feedback, bug reports, and suggestions from our users. If there are features or improvements you’d like to see next, please let us know.

Cheers!