Firezone Blog https://www.firezone.dev/blog Zero trust access announcements, networking deep dives, security analysis, and engineering notes from the Firezone team. en-us Action required: Windows MDM policies move to the machine scope in 1.5.13 https://www.firezone.dev/blog/windows-1-5-13-mdm-update https://www.firezone.dev/blog/windows-1-5-13-mdm-update Thu, 04 Jun 2026 00:00:00 GMT Jamil Bou Kheir Announcement Windows Client 1.5.13 reads MDM policy from the machine-scoped registry hive instead of the per-user hive. If you manage the Client with Intune or another MDM, learn how to import the updated ADMX template and migrate your policy.

]]> The enterprise identity crisis: Who's Alice? https://www.firezone.dev/blog/the-enterprise-identity-crisis-part-one https://www.firezone.dev/blog/the-enterprise-identity-crisis-part-one Mon, 11 May 2026 00:00:00 GMT Jamil Bou Kheir Engineering Alice signs in with Google and Okta. Same email address. Different identities. Which one got production access? In this post we answer this question and more by exploring the challenges of multi-provider identity in zero trust applications.

]]> A New Look for Firezone https://www.firezone.dev/blog/new-ui-launch https://www.firezone.dev/blog/new-ui-launch Tue, 14 Apr 2026 00:00:00 GMT Brian Manifold Announcement Announcing the new user interface for the Firezone portal, designed to be more intuitive, faster, and more accessible.

]]> April 2026 Devlog https://www.firezone.dev/blog/devlog/2026-04 https://www.firezone.dev/blog/devlog/2026-04 Thu, 30 Apr 2026 00:00:00 GMT Jamil Bou Kheir Engineering Filter-aware routing on clients fixes a long-standing overlapping-resource bug, the macOS menu bar app stays running under memory pressure, smarter RTT-aware relay selection, and improved Linux network-change detection.

]]> March 2026 Devlog https://www.firezone.dev/blog/devlog/2026-03 https://www.firezone.dev/blog/devlog/2026-03 Tue, 31 Mar 2026 00:00:00 GMT Jamil Bou Kheir Engineering A 25% reduction in client and gateway CPU usage from connlib performance optimizations, Google Workspace group filtering for directory sync, and smaller fixes for DNS forwarding and relay reliability.

]]> February 2026 Devlog https://www.firezone.dev/blog/devlog/2026-02 https://www.firezone.dev/blog/devlog/2026-02 Sat, 28 Feb 2026 00:00:00 GMT Jamil Bou Kheir Engineering Faster sign-ins from distant regions via regional read replicas, automatic tunnel-service recovery on Windows and Linux, OS-native connection-failure notifications on clients, and browser-based authentication for headless clients.

]]> January 2026 Devlog https://www.firezone.dev/blog/devlog/2026-01 https://www.firezone.dev/blog/devlog/2026-01 Sat, 31 Jan 2026 00:00:00 GMT Jamil Bou Kheir Engineering Multi-region infrastructure with database read replicas and Postgres clustering. Portal performance improvements with Bandit HTTP server and WebSocket rate limiting. Enhanced partition tolerance for gateways and relays.

]]> December 2025 Devlog https://www.firezone.dev/blog/devlog/2025-12 https://www.firezone.dev/blog/devlog/2025-12 Wed, 31 Dec 2025 00:00:00 GMT Jamil Bou Kheir Engineering Major portal architecture refactor collapsing umbrella apps, authentication system restructuring, relay connection reliability improvements, and database performance optimizations.

]]> November 2025 Devlog https://www.firezone.dev/blog/devlog/2025-11 https://www.firezone.dev/blog/devlog/2025-11 Sun, 30 Nov 2025 00:00:00 GMT Jamil Bou Kheir Engineering DNS over HTTPS support, Swift 6.2 upgrade for Apple clients, Wayland support for the Linux GUI client, and various Gateway reliability improvements.

]]> Nov 28 2025 Incident Post-Mortem https://www.firezone.dev/blog/2025-11-28-incident-post-mortem https://www.firezone.dev/blog/2025-11-28-incident-post-mortem Fri, 28 Nov 2025 00:00:00 GMT Jamil Bou Kheir Announcement On November 28, 2025, a PII leak incident occurred affecting a small number of user names and email addresses. This post-mortem details the incident, its impact, and the steps we're taking to prevent future occurrences.

]]> Scheduled Maintenance - December 6, 2025 https://www.firezone.dev/blog/2025-12-06-scheduled-maintenance https://www.firezone.dev/blog/2025-12-06-scheduled-maintenance Sat, 22 Nov 2025 00:00:00 GMT Firezone Team Announcement Firezone will undergo scheduled maintenance on Saturday, December 6, 2025 from 8:00 PM to 10:00 PM Pacific Time to roll out major improvements to authentication, directory sync, and user and group management. We expect only a few minutes of downtime.

]]> October 2025 Devlog https://www.firezone.dev/blog/devlog/2025-10 https://www.firezone.dev/blog/devlog/2025-10 Fri, 31 Oct 2025 00:00:00 GMT Jamil Bou Kheir Engineering October delivered substantial improvements to Gateway observability, Linux networking stack refinements, and new deployment mechanisms. This month's work focused on implementing comprehensive flow logging, addressing routing conflicts through tiered routing tables, and introducing native Debian packages for easier deployments.

]]> September 2025 Devlog https://www.firezone.dev/blog/devlog/2025-09 https://www.firezone.dev/blog/devlog/2025-09 Tue, 30 Sep 2025 00:00:00 GMT Jamil Bou Kheir Engineering September brought significant improvements to Firezone's networking stack, administrative tooling, and cross-platform reliability. This month's work focused on optimizing relay performance through eBPF, improving DNS resolution behavior, and enhancing the admin portal's visibility into client and Gateway states.

]]> Migrate your Internet Resource by March 15, 2025 https://www.firezone.dev/blog/migrate-your-internet-resource https://www.firezone.dev/blog/migrate-your-internet-resource Sun, 16 Feb 2025 00:00:00 GMT Jamil Bou Kheir Announcement We're making some changes to the way Internet Resources work to improve security and performance. Migrate your Internet Resources by March 15, 2025 to avoid any interruptions.

]]> September 2024 update https://www.firezone.dev/blog/sep-2024-update https://www.firezone.dev/blog/sep-2024-update Mon, 02 Sep 2024 00:00:00 GMT Jamil Bou Kheir Announcement
In this update:
]]> sans-IO: The secret to effective Rust for network services https://www.firezone.dev/blog/sans-io https://www.firezone.dev/blog/sans-io Tue, 02 Jul 2024 00:00:00 GMT Thomas Eizinger Learn Firezone's data plane extensively uses the sans-IO design pattern. This post explains why we chose it and how you too can make use of it.

]]> June 2024 update https://www.firezone.dev/blog/jun-2024-update https://www.firezone.dev/blog/jun-2024-update Fri, 21 Jun 2024 00:00:00 GMT Jamil Bou Kheir Announcement
In this update:
]]> Improving reliability for DNS Resources https://www.firezone.dev/blog/improving-reliability-for-dns-resources https://www.firezone.dev/blog/improving-reliability-for-dns-resources Thu, 20 Jun 2024 00:00:00 GMT Jamil Bou Kheir Announcement We're making some changes to the way DNS Resources are routed in Firezone. These changes will be coming in Client and Gateway versions 1.1 and later. Continue reading to understand how these changes will affect your network and what you need to do to take advantage of them.

]]> Using Tauri to build a cross-platform security app https://www.firezone.dev/blog/using-tauri https://www.firezone.dev/blog/using-tauri Tue, 11 Jun 2024 00:00:00 GMT ReactorScram Learn We chose Tauri over other frameworks because it was the fastest way to get the Firezone Client working on Linux and Windows.

]]> How DNS works in Firezone https://www.firezone.dev/blog/how-dns-works-in-firezone https://www.firezone.dev/blog/how-dns-works-in-firezone Wed, 08 May 2024 00:00:00 GMT Gabriel Steinberg Learn Firezone's approach to DNS works a bit differently than one might expect. One question we often get from new users is, "why do my DNS Resources resolve to a different IP address with Firezone enabled?". Great question -- read on to find out.

]]> May 2024 update https://www.firezone.dev/blog/may-2024-update https://www.firezone.dev/blog/may-2024-update Wed, 01 May 2024 00:00:00 GMT Jamil Bou Kheir Announcement
In this update:
]]> April 2024 update: GA https://www.firezone.dev/blog/apr-2024-update https://www.firezone.dev/blog/apr-2024-update Mon, 01 Apr 2024 00:00:00 GMT Jamil Bou Kheir Announcement Firezone 1.0 GA is now available! Also in this update:

  • Firezone 1.0 signups are now open
  • New Team plan with self-serve billing
  • Clients available for Windows, macOS, iOS, Android, and Linux
  • Network roaming support
]]> March 2024 update https://www.firezone.dev/blog/mar-2024-update https://www.firezone.dev/blog/mar-2024-update Fri, 01 Mar 2024 00:00:00 GMT Jamil Bou Kheir Announcement Firezone 1.0.0-pre.9 is released! In this update:

  • Windows and Linux betas
  • Directory sync for Microsoft Entra ID and Okta
  • Improved performance and stability
]]> January 2024 update https://www.firezone.dev/blog/jan-2024-update https://www.firezone.dev/blog/jan-2024-update Mon, 01 Jan 2024 00:00:00 GMT Jamil Bou Kheir Announcement Happy new year from the Firezone team!

After a long year of building, we're incredibly excited to announce 1.0 beta testing for Apple and Android platforms. Firezone 1.0 is an entirely new product with a brand new architecture that includes many of the features you've been asking for. To summarize just a few:

]]> Enterprises choose open source https://www.firezone.dev/blog/enterprises-choose-open-source https://www.firezone.dev/blog/enterprises-choose-open-source Wed, 06 Dec 2023 00:00:00 GMT Jeff Spencer Insights More enterprises are turning to open source software (OSS) to reduce costs, improve efficiency, and extend their competitive advantage. The core technologies chosen by organizations often persist for decades, so decisions that IT leaders make today are bound to affect their organizations’ ability to function and adapt in the future — whether that’s one year, or 10.

]]> Secure remote access makes remote work a win-win https://www.firezone.dev/blog/secure-access https://www.firezone.dev/blog/secure-access Fri, 17 Nov 2023 00:00:00 GMT Jeff Spencer Insights The number of employees working remotely is accelerating, so secure remote access should be a large part of any organization’s cybersecurity strategy. Secure remote access lets remote and hybrid employees work from anywhere in the world, on any device, without compromising your organization’s network, data, and system security.

]]> Firezone 1.0 https://www.firezone.dev/blog/firezone-1-0 https://www.firezone.dev/blog/firezone-1-0 Sat, 15 Jul 2023 00:00:00 GMT Jamil Bou Kheir Announcement Firezone comes from humble roots.

When we launched on Hacker News nearly two years ago, we never envisioned Firezone to be more than a simple tool for managing your WireGuard configurations.

]]> Release 0.6.0 https://www.firezone.dev/blog/release-0-6-0 https://www.firezone.dev/blog/release-0-6-0 Mon, 17 Oct 2022 00:00:00 GMT Jamil Bou Kheir Announcement Today, I'm excited to announce we've closed the first public issue on our GitHub repository, more than a year after it was originally opened: Containerization support! We're also releasing preliminary support for SAML 2.0 identity providers like Okta and OneLogin.

]]> Release 0.5.0 https://www.firezone.dev/blog/release-0-5-0 https://www.firezone.dev/blog/release-0-5-0 Mon, 25 Jul 2022 00:00:00 GMT Jamil Bou Kheir Announcement As the first post on our new blog, we thought it'd be fitting to kick things off with a release announcement. So without further ado, we're excited to announce: Firezone 0.5.0 is here! It's packed with new features, bug fixes, and other improvements — more on that below.

]]>