# frp v0.66.0

- Product: frp (https://whatsnew.fyi/product/frp)
- Vendor: fatedier
- Date: 2026-01-04
- Version: v0.66.0
- Original notes: https://github.com/fatedier/frp/releases/tag/v0.66.0
- Permalink: https://whatsnew.fyi/product/frp/releases/v0.66.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **added** — HTTPS proxies now support load balancing groups with loadBalancer.group and loadBalancer.groupKey to share the same custom domain and distribute traffic across multiple backend services
- **added** — Individual frpc proxies and visitors now accept an enabled flag (defaults to true) to disable specific entries without relying on the global start list
- **added** — OIDC authentication now supports a tokenSource field with type = "file" to read a token from a file or type = "exec" to run an external command and capture its stdout as the token, requiring the --allow-unsafe=TokenSourceExec CLI flag
- **changed** — VirtualNet implemented intelligent reconnection with exponential backoff, increasing reconnect interval from 60s to 300s max when connection errors occur repeatedly, while normal disconnections reconnect at 10s intervals
- **fixed** — Fix deadlock issue when TCP connection is closed that previously caused sending messages to block forever if the connection handler had already stopped

##### Features

* HTTPS proxies now support load balancing groups. Multiple HTTPS proxies can be configured with the same `loadBalancer.group` and `loadBalancer.groupKey` to share the same custom domain and distribute traffic across multiple backend services, similar to the existing TCP and HTTP load balancing capabilities.
* Individual frpc proxies and visitors now accept an `enabled` flag (defaults to true), letting you disable specific entries without relying on the global `start` list—disabled blocks are skipped when client configs load.
* OIDC authentication now supports a `tokenSource` field to dynamically obtain tokens from external sources. You can use `type = "file"` to read a token from a file, or `type = "exec"` to run an external command (e.g., a cloud CLI or secrets manager) and capture its stdout as the token. The `exec` type requires the `--allow-unsafe=TokenSourceExec` CLI flag for security reasons.

##### Improvements

* **VirtualNet**: Implemented intelligent reconnection with exponential backoff. When connection errors occur repeatedly, the reconnect interval increases from 60s to 300s (max), reducing unnecessary reconnection attempts. Normal disconnections still reconnect quickly at 10s intervals.

##### Fixes

* Fix deadlock issue when TCP connection is closed. Previously, sending messages could block forever if the connection handler had already stopped.