Changelog

• #6434 Adds support for routing the Internet Resource for Clients.

• #5901 Implements glob-like matching of domains for DNS resources.

• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• Removes `FIREZONE_ENABLE_MASQUERADE` env variable. Masquerading is now always enabled unconditionally.

• Fixes an issue where Gateways could become unresponsive after new versions of the Firezone infrastructure was deployed.

• Reduces log noise for the default log level.

• Fixes a minor connectivity issue that could occur for some DNS Resources.

This release introduces a new method of resolving and routing DNS Resources that is more reliable on some poorly-behaved networks. To use this new method, Client versions 1.1.0 or later are required. Client versions 1.0.x will continue to work with Gateway 1.1.x, but will not benefit from the new DNS resolution method.

Read more about this change in the announcement post here.

• #6518 Minor improvements to the look of the internet resource and makes the Internet resource off by default.
• #6584 Prevents routing loops for some Windows installation when the Internet resource was on, taking down network connections.

• #6434 Adds the Internet Resource feature.

• #6432 Shows an orange dot on the tray icon when an update is ready to download.
• #6449 Checks for updates once a day

• #6414 Waits for Internet to connect to Firezone if there's no Internet at startup and you're already signed in.
• #6455 Fixes a false positive warning log at startup about DNS interception being disabled.
• #6458 Fixes a bug where we considered our own startup to be a network change event, which may interfere with access to DNS Resources.

• #5901 Implements glob-like matching of domains for DNS resources.
• #6351 The log filter on the IPC service is now reloaded immediately when you change the setting in the GUI.
• #6361 Connections to Gateways are now sticky for the duration of the Client's session to fix issues with long-lived TCP connections.

• #6226 Fixes a bug where clearing the log files would delete the current logfile, preventing logs from being written.
• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• #6233 Fixes an issue where the IPC service can panic during DNS resolution.

• #5923 Adds the ability to mark Resources as favorites.
• #6163 Supports using `etc-resolv-conf` DNS control method, or disabling DNS control
• #6181 Improves reliability of DNS resolution of non-resources.
• #6184 Mitigates a bug where the IPC service can panic if an internal channel fills up

• #6143 Fixes an issue where DNS queries could time out on some networks.

• #5978 Adds network roaming support.
• #6017 Removes keyboard accelerators, which were not working.
• #6071 Puts angle brackets around hyperlinks in the menu.

• #5848 Stops the GUI and prompts you to re-launch it if you update Firezone while the GUI is running.

• #5795 Unexpected IPC service stops are now reported as "IPC connection closed".
• #5817 Shows different tray icons when signed out, signing in, and signed in.

• #5793 The Linux GUI Client is now built for both x86-64 and ARM64.

• #5700 Fixes an issue where a stale DNS cache could prevent traffic from routing to DNS Resources if they were updated while the Client was signed in.

• Prevents Firezone's stub resolver from intercepting DNS record types besides A, AAAA, and PTR. These are now forwarded to your upstream DNS resolver.

• Fixes an issue that could cause Resources to be unreachable a few hours after roaming networks.
• Reduces noise in logs for the default log level.

This is a maintenance release with no user-facing changes.

• Introduces the new DNS routing system supported by 1.1.0 Gateways which results in much more stable connections for DNS Resources, especially when wildcards are used.
• Improves reliability when roaming between networks.
• Closes idle connections to Gateways that have not seen traffic for more than 5 minutes which reduces power consumption when not accessing Resources.
• Updates log file endings to JSONL and adds syslog-style logs for easier readability.

Note: Client versions 1.1.x are incompatible with Gateways running 1.0.x.

• #6434 Adds the Internet Resource feature.

• #6406 Shows the Git SHA corresponding to the build on the Settings -> Advanced screen.
• #6424 Fixes a bug where packets would be lost when a connection is first established to a Gateway due to routes being updated with no actual change.

• #5901 Implements glob-like matching of domains for DNS resources.
• #6186 Adds the ability to mark Resources as favorites.
• #6361 Connections to Gateways are now sticky for the duration of the Client's session. This fixes potential issues maintaining long-lived TCP connections to Gateways in a high-availability setup.

• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• #6181 Improves reliability of DNS resolution of non-resources.

• Fixes an issue where DNS queries could time out on some networks.

• Prevents Firezone's stub resolver from intercepting DNS record types besides A, AAAA, and PTR. These are now forwarded to your upstream DNS resolver.

• Fixes an issue that could cause Resources to be unreachable a few hours after roaming networks.
• Reduces noise in logs for the default log level.

• Introduces the new DNS routing system supported by 1.1.0 Gateways which results in much more stable connections for DNS Resources, especially when wildcards are used.
• Improves reliability when roaming between networks.
• Closes idle connections to Gateways that have not seen traffic for more than 5 minutes which reduces power consumption when not accessing Resources.
• Updates log file endings to JSONL and adds syslog-style logs for easier readability.

Note: Client versions 1.1.x are incompatible with Gateways running 1.0.x.

• #6518 Minor improvements to the look of the internet resource and makes the Internet resource off by default.
• #6584 Prevents routing loops for some Windows installation when the Internet resource was on, taking down network connections.

• #6434 Adds the Internet Resource feature.

• #6432 Shows an orange dot on the tray icon when an update is ready to download.
• #6449 Checks for updates once a day
• #6472 Fixes an issue where Split DNS didn't work for domain-joined Windows machines

• #6414 Waits for Internet to connect to Firezone if there's no Internet at startup and you're already signed in.
• #6455 Fixes a false positive warning log at startup about DNS interception being disabled.
• #6458 Fixes a bug where we considered our own startup to be a network change event, which may interfere with access to DNS Resources.

• #5901 Implements glob-like matching of domains for DNS resources.
• #6280 Fixes a bug where the "Clear Logs" button did not clear the IPC service logs.
• #6308 Fixes a bug where the GUI could not run if the user is Administrator
• #6351 The log filter on the IPC service is now reloaded immediately when you change the setting in the GUI.
• #6361 Connections to Gateways are now sticky for the duration of the Client's session to fix issues with long-lived TCP connections.

• #6226 Fixes a bug where clearing the log files would delete the current logfile, preventing logs from being written.
• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• #6233 Fixes an issue where the IPC service can panic during DNS resolution.

• #5923 Adds the ability to mark Resources as favorites.
• #6181 Improves reliability of DNS resolution of non-resources.
• #6163 Supports disabling DNS control
• #6184 Mitigates a bug where the IPC service can panic if an internal channel fills up

• #6143 Fixes an issue where DNS queries could time out on some networks.

• #6051 Fixes "Element not found" error when setting routes.
• #6017 Removes keyboard accelerators, which were not working.
• #6071 Puts angle brackets around hyperlinks in the menu.

• #5375 Improves sign-in speed and fixes a DNS leak

• #5795 Unexpected IPC service stops are now reported as "IPC connection closed".
• #5827 Fixes a bug where DNS could stop working when you sign out.
• #5817 Shows different tray icons when signed out, signing in, and signed in.

• This is a maintenance release with no user-facing changes.

• #5700 Fixes an issue where a stale DNS cache could prevent traffic from routing to DNS Resources if they were updated while the Client was signed in.

• Prevents Firezone's stub resolver from intercepting DNS record types besides A, AAAA, and PTR. These are now forwarded to your upstream DNS resolver.

• Fixes an issue that could cause Resources to be unreachable a few hours after roaming networks.
• Reduces noise in logs for the default log level.
• Substantially reduces memory usage for the IPC service.

This release fixes a performance issue.

• Introduces the new DNS routing system supported by 1.1.0 Gateways which results in much more stable connections for DNS Resources, especially when wildcards are used.
• Improves reliability when roaming between networks.
• Closes idle connections to Gateways that have not seen traffic for more than 5 minutes which reduces power consumption when not accessing Resources.
• Updates log file endings to JSONL and adds syslog-style logs for easier readability.
• Fixes a hang that could occur when the Client is quit, preventing it from opening again.

Note: Client versions 1.1.x are incompatible with Gateways running 1.0.x.

• #6517 Fixes a bug where the tunnel would immediately disconnect after connecting.

• #6424 Fixes a bug where packets would be lost when a connection is first established to a gateway, due to routes being updated with no actual change.
• #6405 Shows the Git SHA corresponding to the build on the Settings -> Advanced screen.
• #6495 Fixes a bug where the Firezone tunnel wasn't shutdown properly if you disconnect the VPN in system settings.
• #6434 Adds the Internet Resource feature.

• #5901 Implements glob-like matching of domains for DNS resources.
• #6361 Connections to Gateways are now sticky for the duration of the Client's session. This fixes potential issues maintaining long-lived TCP connections to Gateways in a high-availability setup.

• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• #6107 Adds the ability to mark Resources as favorites.
• #6181 Improves reliability of DNS resolution of non-resources.

• Fixes an issue where DNS queries could time out on some networks.

• Fixes an issue where the app would crash if IPv6 scopes were present in the DNS servers discovered on the local system.

• Prevents Firezone's stub resolver from intercepting DNS record types besides A, AAAA, and PTR. These are now forwarded to your upstream DNS resolver.

• Fixes an issue that could cause Resources to be unreachable a few hours after roaming networks.
• Reduces noise in logs for the default log level.

• Introduces the new DNS routing system supported by 1.1.0 Gateways which results in much more stable connections for DNS Resources, especially when wildcards are used.
• Improves reliability when roaming between networks.
• Closes idle connections to Gateways that have not seen traffic for more than 5 minutes which reduces power consumption when not accessing Resources.
• Updates log file endings to JSONL and adds syslog-style logs for easier readability.
• Fixes various crashes.

Note: Client versions 1.1.x are incompatible with Gateways running 1.0.x.

• #6434 Adds the Internet Resource feature.

• #5901 Implements glob-like matching of domains for DNS resources.
• #6361 Connections to Gateways are now sticky for the duration of the Client's session to fix issues with long-lived TCP connections.

• #6276 Fixes a bug where relayed connections failed to establish after an idle period.
• #6277 Fixes a bug where restrictive NATs caused connectivity problems.

• #6233 Fixes an issue where the IPC service can panic during DNS resolution.

• #6163 Uses `systemd-resolved` DNS control by default on Linux
• #6184 Mitigates a bug where the Client can panic if an internal channel fills up
• #6181 Improves reliability of DNS resolution of non-resources.

• #6143 Fixes an issue where DNS queries could time out on some networks.

• Fixes an issue where a stale DNS cache could prevent traffic from routing to DNS Resources if they were updated while the Client was signed in.

• Prevents Firezone's stub resolver from intercepting DNS record types besides A, AAAA, and PTR. These are now forwarded to your upstream DNS resolver.

• Fixes an issue that could cause Resources to be unreachable a few hours after roaming networks.
• Reduces noise in logs for the default log level.

• Introduces the new DNS routing system supported by 1.1.0 Gateways which results in much more stable connections for DNS Resources, especially when wildcards are used.
• Improves reliability when roaming between networks.
• Closes idle connections to Gateways that have not seen traffic for more than 5 minutes which reduces power consumption when not accessing Resources.
• Updates log file endings to JSONL and adds syslog-style logs for easier readability.

Note: Client versions 1.1.x are incompatible with Gateways running 1.0.x.