> For the complete documentation index, see [llms.txt](https://docs.ionos.com/cloud/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ionos.com/cloud/home/release-notes/november-2026.md).

# November 2026

IONOS CLOUD release notes: new features, improvements, fixes, and deprecations for November 2026.

<a href="https://release-notes-feed.s3.eu-central-3.ionoscloud.com/feed.rss" class="button primary" data-icon="rss">Subscribe through RSS feed</a>

## What's new

### [<mark style="color:blue;">**Larger MTU for Private LANs through DHCP**</mark>](/cloud/home/network-services/vdc-networking/lan/how-tos/configure-private-lan-mtu.md)

{% hint style="success" %}
**November 5**

The <code class="expression">space.vars.ionos\_cloud</code> Dynamic Host Configuration Protocol (DHCP) server now supports the interface maximum transmission unit (MTU) option, DHCP option 26, on private LANs. Larger packets increase throughput and reduce CPU overhead for traffic between virtual machines (VMs) in the same private LAN.

* The change applies to [<mark style="color:blue;">Dedicated Core Servers</mark>](/cloud/home/compute-services/compute-engine/dedicated-core.md), [<mark style="color:blue;">vCPU Servers</mark>](/cloud/home/compute-services/compute-engine/vcpu-server.md), and [<mark style="color:blue;">Cubes</mark>](/cloud/home/compute-services/cubes/overview.md) with a NIC on a private LAN with DHCP enabled.
* VMs whose DHCP client requests this option are automatically configured with the largest MTU that the private LAN supports, up to 4074 bytes. If the DHCP client doesn't request the option, the VM keeps its existing MTU, typically 1500 bytes.
* The change takes effect when the DHCP lease is next renewed or the network is restarted.
* NICs with a public IP address keep their existing MTU.
* If traffic from the private LAN also passes through a component or path with a smaller MTU, Path MTU Discovery must work end to end. To keep an MTU of 1500 bytes, see [<mark style="color:blue;">Configure the MTU for a Private LAN</mark>](/cloud/home/network-services/vdc-networking/lan/how-tos/configure-private-lan-mtu.md).
  {% endhint %}

### [<mark style="color:blue;">**Custom IPv4 CIDR Blocks for Private LANs**</mark>](/cloud/home/network-services/vdc-networking/lan/how-tos/specify-ipv4-cidr-block.md)

{% hint style="success" %}
**November 4**

You can now specify a custom IPv4 Classless Inter-Domain Routing (CIDR) block for a private LAN (`"public": false`) using the <code class="expression">space.vars.ionos\_cloud\_api</code>. The `ipv4CidrBlock` field on the LAN resource is optional; if omitted, the platform automatically assigns a `/23` block. Any custom CIDR must be a valid [<mark style="color:blue;">RFC 1918</mark>](https://www.rfc-editor.org/info/rfc1918/) block with a prefix length between `/23` and `/28`.
{% endhint %}

### [<mark style="color:blue;">**Advisory on Linux Kernel IPv4 TCP Use-After-Free Vulnerability**</mark>](/cloud/home/security-safeguards/vulnerability-register/2026/cve-2026-98432.md)

{% hint style="success" %}
**November 3**

<code class="expression">space.vars.ionos\_cloud</code> has published an advisory on CVE-2026-98432, a critical Linux kernel vulnerability in IPv4 TCP handling.
{% endhint %}

### [<mark style="color:blue;">**Whisper Large v3 speech-to-text model for AI Model Hub**</mark>](/cloud/home/ai/ai-model-hub/models/speech-to-text-models/whisper-large-v3.md)

{% hint style="success" %}
**November 2**

The AI Model Hub now includes [<mark style="color:blue;">Whisper Large v3</mark>](/cloud/home/ai/ai-model-hub/models/speech-to-text-models/whisper-large-v3.md), OpenAI's multilingual speech recognition model, in a new **Speech-to-text models** category. Whisper Large v3 transcribes audio files in 100 languages and detects the spoken language automatically. You can call it through the OpenAI-compatible `v1/audio/transcriptions` endpoint with the `openai/whisper-large-v3` model ID in the `de-txl` region. Audio files can be up to 15 MiB. For more information, see [<mark style="color:blue;">Speech-to-text models</mark>](/cloud/home/ai/ai-model-hub/models/speech-to-text-models.md).
{% endhint %}

## Documentation updates

### [<mark style="color:blue;">**Updated Cloud GPU VMs and Confidential VM Documentation Section**</mark>](/cloud/home/compute-services/cloud-gpu-vm.md)

{% hint style="success" %}
**November 4**

The [<mark style="color:blue;">Cloud GPU VMs</mark>](/cloud/home/compute-services/cloud-gpu-vm.md) and [<mark style="color:blue;">Confidential VM</mark>](/cloud/home/compute-services/confidential-computing-vm.md) documentation has moved out of the **Compute Engine** section. Both now appear in **Compute Services**, at the same level as **Compute Engine** and **Cubes**. The old URLs redirect to the new pages. No changes have been made to functionality, this update is for documentation organization only.
{% endhint %}

### [<mark style="color:blue;">**Configure Taints and Tolerations for Managed Kubernetes Node Pools**</mark>](/cloud/home/containers/managed-kubernetes/how-tos/configure-node-pool-taints.md)

{% hint style="success" %}
**November 4**

New documentation explains how to use taints and tolerations to control which workloads run on specific node pools in your <code class="expression">space.vars.ionos\_cloud</code> Managed Kubernetes cluster. A taint applied to a node pool affects all nodes in that pool. You can configure node pool taints using the Data Center Designer (DCD), the <code class="expression">space.vars.ionos\_cloud\_api</code>, Terraform provider v6.7.37 or later, or `ionosctl` v6.10.5 or later.

* [<mark style="color:blue;">Taints and Tolerations</mark>](/cloud/home/containers/managed-kubernetes/overview/taints-and-tolerations.md): Explains taint components and the `NoSchedule`, `PreferNoSchedule`, and `NoExecute` effects with examples.
* [<mark style="color:blue;">Configure Taints and Tolerations</mark>](/cloud/home/containers/managed-kubernetes/how-tos/configure-node-pool-taints.md): Shows how to add taints to node pools and individual nodes, and matching tolerations to pods and deployments.
* [<mark style="color:blue;">Remove a Taint</mark>](/cloud/home/containers/managed-kubernetes/how-tos/remove-taint.md): Shows how to remove taints from node pools and individual nodes.
  {% endhint %}

### [<mark style="color:blue;">**Create a WireGuard® Peer Between Two VDCs**</mark>](https://docs.ionos.com/cloud/tutorials/network-services/vpn-gateway/wireguard-vdc-vdc)

{% hint style="success" %}
**November 4**

A new tutorial shows how to create a WireGuard site-to-site VPN between two Virtual Data Centers (VDCs) in different regions, Berlin (`de/txl`) and London (`gb/lhr`), using the <code class="expression">space.vars.ionos\_cloud</code> VPN Gateway. The tutorial covers setting up the VDCs, provisioning a VPN Gateway in each, configuring the peers, and adding routing on the LAN hosts. By the end, hosts in both VDCs will be able to communicate with each other over an encrypted WireGuard tunnel.
{% endhint %}

### [<mark style="color:blue;">**Restore a Snapshot**</mark>](/cloud/home/backup-and-storage/images-snapshots/snapshots/how-tos/restore-snapshot.md)

{% hint style="success" %}
**November 2**

A new how-to guide explains how to restore a snapshot in the **DCD**. You restore a snapshot by creating a new storage volume from it: you add storage to a server, select the snapshot as the image, set the size, and choose the performance class of the new volume. The guide also links to the API and CLI options for overwriting an existing volume with a snapshot.
{% endhint %}

## Deprecations

### [<mark style="color:blue;">**Cloud API v6 User Password Is Now**</mark><mark style="color:blue;">**&#x20;**</mark><mark style="color:blue;">**`write-once`**</mark>](https://docs.ionos.com/cloud/api-reference/cloud-api-v6/user-management)

{% hint style="success" %}
**November 5**

As announced on [<mark style="color:blue;">October 8</mark>](/cloud/home/release-notes/previous-releases/2026/october-2026.md#cloud-api-v6-user-password-becomes-write-once), the `password` property of the Cloud API v6 user management endpoint `PUT /um/users/{userId}` is now write-once. You can set a password only when you create a user with `POST /um/users`, not afterwards with `PUT`. A `PUT /um/users/{userId}` request that includes `password` returns an error stating that the field is immutable and must be removed from the payload, and the request is not executed. Contract owners and administrators can no longer change another user's password through the API. Users can change their own password in the <code class="expression">space.vars.ionos\_cloud</code> DCD under **Menu** > **Your Profile** > **Account Security**, as described in [<mark style="color:blue;">Account Security</mark>](/cloud/home/set-up-ionos-cloud/account-management/account-security.md), or [<mark style="color:blue;">reset a forgotten password</mark>](https://www.ionos.com/help/my-account/access-passwords/resetting-your-ionos-account-password/).
{% endhint %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.ionos.com/cloud/home/release-notes/november-2026.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.