v1.4.0-alpha1

What's Changed

🥳 New Features 🎉

• Assign multiple IP addresses for end clients (IPv4 & IPv6) #1000
• Packet Filter support on FreeBSD, NetBSD and macOS https://docs.defguard.net/enterprise/all-enteprise-features/access-control-list/firewall-internals

Other Changes

• Setup dependency license checks by @j-chmielewski in #166

Full Changelog: v1.3.0...v1.4.0-alpha1

v1.3.0

🚨This gateway version requires defguard core 1.3.0

🎉 This is a major release of defguard with Access Control / Firewall management functionality - ACLs are for now only available for Linux based Defguard Gateway - FreeBSD/OPNSense will come in 1.3.1 stable release.

detailed changes

• Firewall by @t-aleksander in #150
• Fix cross package builds by @t-aleksander in #154
• Setup clippy and cargo-deny on CI by @j-chmielewski in #155
• Update dependencies, clean up, and build correctly on non-Linux by @moubctez in #158
• Ignore traffic not related to the VPN while evaluating ACL rules by @t-aleksander in #159
• handle firewall disable update message by @wojcik91 in #156
• Merge dev -> main (1.3.0) by @t-aleksander in #161
• Restore masquerade after cleaning the table by @t-aleksander in #162
• Create namespaces for each defguard interface by @t-aleksander in #163

Full Changelog: v1.2.1...v1.3.0

v1.3.0-RC2

⚠️ This is a release candidate for 1.3.0 release ⚠️

This is a major release of defguard with some key and long awaited functionalities 🙌
We encourage everyone to test it and provide feedback through:
Matrix: https://matrix.to/#/%23defguard:teonite.com
Email: support @ defguard.net

What's Changed

Other Changes

• Restore masquerade after cleaning the table by @t-aleksander in #162
• Create namespaces for each defguard interface by @t-aleksander in #163

Full Changelog: v1.3.0-RC1...v1.3.0-RC2

v1.3.0-RC1

⚠️ This is a first release candidate for 1.3.0 release ⚠️

This is a major release of defguard with some key and long awaited functionalities 🙌
We encourage everyone to test it and provide feedback through:
Matrix: https://matrix.to/#/%23defguard:teonite.com
Email: support @ defguard.net

🎉 Major new features in 1.3.0 release are:

• Firewall/ACLs management
• Two way LDAP & Active Directory synchronisation

Full Changelog: v1.2.1...v1.3.0-RC1

v1.3.0-alpha2

⚠️ This is an alpha release ⚠️

This is a major release of defguard with some key and long awaited functionalities 🙌
We encourage everyone to test it and provide feedback through:
Matrix: https://matrix.to/#/%23defguard:teonite.com
Email: support @ defguard.net

🪲 Fixes

• Fixed an issue with Gateway disabling some non-VPN traffic when default policy was set to deny

Full Changelog: v1.3.0-alpha1...v1.3.0-alpha2

v1.3.0-alpha1

⚠️ This is an alpha release ⚠️

This is a major release of defguard with some key and long awaited functionalities 🙌
We encourage everyone to test it and provide feedback through:
Matrix: https://matrix.to/#/%23defguard:teonite.com
Email: support @ defguard.net

🥳 New Features 🎉

🚫 ACLs / Firewall management - ACLs are for now only available on Linux - FreeBSD/OPNSense will come in 1.3.1 stable release.

👥 LDAP & Active Directory two-way synchronization

Full Changelog: v1.2.1-rc1...v1.3.0-alpha1

v1.2.1

⚠️ This version requires defguard core v1.2 ⚠️

What's Changed

Other Changes

• Fixed issue with sending stats to core in #148

Full Changelog: v1.2.0...v1.2.1

v1.2.1-rc1

What's Changed

Other Changes

• Fix stats sending loop by @t-aleksander in #148

Full Changelog: v1.2.0...v1.2.1-rc1

v1.2.0

⚠️ This version required defguard core v1.2 ⚠️

What's changed

• Multi address by @moubctez in #144
• Fix stats thread by @t-aleksander in #145
• Merge dev -> main by @t-aleksander in #146

Full Changelog: v1.1.4...v1.2.0

v1.1.4

🛑 This is a testing pre-release 🛑

📖 Upgrade notes

🎇 OPNSense package is fixed!

❇️ This upgrade changes how gRPC reconnection is handled between gateway<->core.

If you have a reverse-proxy through which gateway communicates with core, the reverse-proxy may disconnect gateway<->core communication after some timeout. Gateway in this release will better handle that and do a re-connect, but then core detects this disconnect and sends an email notification.

We plan to change gateway disconnect notifications, for now you can change in core: DEFGUARD_GATEWAY_DISCONNECTION_NOTIFICATION_TIMEOUT to more time (1h, or 1d) not to get multiple disconnect notifications.

What's Changed

• Handle config files properly by @moubctez in #141
• Refactor gRPC stream handling by @moubctez in #142

Full Changelog: v1.1.0...v1.1.1