https://www.firezone.dev/changelog Release notes for every Firezone component: Gateway and the macOS, iOS, Windows, Linux, and Android Clients. en-us https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.14 Wed, 17 Jun 2026 00:00:00 GMT

#13719 Fixes an issue where UDP packets could be dropped under high throughput because the receive buffers were too small to hold a full batch of datagrams.

#13726 Fixes an issue where the client failed to launch on Windows 10, and lowers the minimum supported version to Windows 10 2004 (build 19041).

#13744 Fixes an invalid Authenticode signature on the installer and bundled executables caused by the binary being patched after it was signed.

#13647 Fixes an issue where a full WinTUN ring buffer could stall the send thread far longer than intended, reducing throughput under high load.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.14 Wed, 17 Jun 2026 00:00:00 GMT

#13719 Fixes an issue where UDP packets could be dropped under high throughput because the receive buffers were too small to hold a full batch of datagrams.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.11 Fri, 12 Jun 2026 00:00:00 GMT

#13286 Fixes a bug where the app crashed when rotated whilst a resource-detail sheet was open.

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.17 Thu, 11 Jun 2026 00:00:00 GMT

#13649 Fixes an issue where exporting logs could fail with an error if the log directory contained dangling symlinks.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.9 Tue, 09 Jun 2026 00:00:00 GMT

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.9 Tue, 09 Jun 2026 00:00:00 GMT

#12993 Fixes a bug where connectivity was lost when moving from Ethernet to WiFi.

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.13 Mon, 08 Jun 2026 00:00:00 GMT

#13126 Shows currently connected devices in the system tray menu.

#13153 Restricts access to Firezone's configuration directory.

#13275 Restricts the tunnel and GUI named pipes to processes carrying the Firezone MSIX package SID, so other processes running as the same user can no longer drive the tunnel or hijack deep links.

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.13 Mon, 08 Jun 2026 00:00:00 GMT

#12993 Fixes a bug where connectivity was lost when moving from Ethernet to WiFi.

#13126 Shows currently connected devices in the system tray menu.

#13323 Restricts the tunnel service IPC socket to the packaged GUI binary using SO_PEERPIDFD, so other processes running as the same user can no longer drive the tunnel.

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

#13623 Fixes an issue where packets written to the TUN device could be reordered under backpressure, reducing throughput on sustained, high-latency connections.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.16 Wed, 03 Jun 2026 00:00:00 GMT

#13038 Surfaces non-authentication disconnect errors (e.g. failure to reach the portal) to the user via a modal alert instead of silently cancelling the tunnel.

#13282 Moves user-editable settings from UserDefaults into the VPN provider configuration so they can only be modified by Firezone, not by other processes running as the user. MDM-pushed values continue to override these settings.

#13354 Retries portal DNS lookups over TCP when the configured resolvers return no usable IPs over UDP, improving connectivity on networks with broken UDP DNS forwarders.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.10 Tue, 28 Apr 2026 00:00:00 GMT

#12416 Does not send a notification in case the user explicitly signs out.

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.5.2 Mon, 27 Apr 2026 00:00:00 GMT

#12506 Fixes an issue where the Gateway would disconnect from a relay under high-load.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.15 Mon, 27 Apr 2026 00:00:00 GMT

#12849 Fixes an issue on macOS where the app could be silently terminated by the system under memory pressure, leaving the tunnel running without a menu bar icon or session expiry notifications.

#12853 Adds a macOS LaunchAgent helper that relaunches Firezone after unexpected exits.

#12657 Falls back to public DNS resolvers when the system provides only non-routable addresses (loopback, link-local), preventing tunnel bootstrap failures.

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.12 Mon, 27 Apr 2026 00:00:00 GMT

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.12 Mon, 27 Apr 2026 00:00:00 GMT

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.8 Mon, 27 Apr 2026 00:00:00 GMT

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.8 Mon, 27 Apr 2026 00:00:00 GMT

#12684 Takes into account traffic filters when routing packets to resources.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.9 Tue, 24 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12111 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

#12013 Asks for notification permissions on launch.

#11779 Notifies the user when a connection to a resource cannot be established.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.14 Tue, 17 Mar 2026 00:00:00 GMT

#12407 Fixes update notification dismissal on macOS where dismissing one version could be ignored due to reading from the wrong UserDefaults key.

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12236 Fixes an issue on macOS where the app could get stuck on the loading spinner if the system extension was not ready at startup.

#12279 Bumps minimum iOS version from 15.6 to 16.0 to enable SwiftUI NavigationStack and NavigationSplitView API.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12016 Uses the system's DNS resolver ordering on macOS for more accurate DNS resolution behavior.

#11988 Fixes a crash if the currently active log file gets deleted.

#11779 Notifies the user when a connection to a resource cannot be established.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.5.1 Mon, 16 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12134 Fixes an issue where outdated and thus irrelevant candidates were sent to Clients, causing connectivity issues in rare situations.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

#12504 Greatly improves performance for cases where many Clients (100+) are connected to a single Gateway.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.11 Mon, 16 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12111 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11779 Notifies the user when a connection to a resource cannot be established.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.11 Mon, 16 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12111 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11779 Notifies the user when a connection to a resource cannot be established.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.7 Mon, 16 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12111 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11882 Adds the sign-in and sign-out commands to allow authenticating the Client as a normal user via browser-based authentication.

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.7 Mon, 16 Mar 2026 00:00:00 GMT

#12355 Reduces CPU overhead by processing up to 16 UDP datagram batches at a time.

#12251 Gracefully handles WebSocket closes from the portal instead of logging a deserialization error.

#12111 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11882 Adds the sign-in and sign-out commands to allow authenticating the Client as a normal user via browser-based authentication.

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

#12248 Re-establishes the WebSocket connection to the control plane if it becomes unresponsive.

#12322 Fixes an issue where the WebSocket connection to the control plane was lost under load.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.5.0 Mon, 02 Feb 2026 00:00:00 GMT

#11771 BREAKING: Remove support for Firezone 1.3.x Clients and lower.

#11770 Enables detailed flow logs for tunneled TCP and UDP connections. SetFIREZONE_FLOW_LOGS=true or --flow-logs to enable.

#11664 Adds a FIREZONE_MAX_PARTITION_TIME environment variable to configure how long the Gateway will retry connecting to the portal before exiting. Accepts human-readable durations like 5m, 1h, or 30d. Defaults to 24 hours.

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing faster restarts by the process manager.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.10 Mon, 02 Feb 2026 00:00:00 GMT

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.10 Mon, 02 Feb 2026 00:00:00 GMT

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

#11813 Fixes an issue where notifications would not always be displayed.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.13 Fri, 30 Jan 2026 00:00:00 GMT

#11901 Fixes an issue where the tunnel may not come up after a fresh install of the Firezone client.

#11892 Exports logs in plain text format instead of JSONL for easier reading.

#11834 Fixes an issue where the tunnel might hang or crash on iOS immediately after signing in.

#11659 Prevents unbounded log growth by enforcing a 100 MB log size cap with automatic cleanup of oldest files.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

#11891 Fixes an issue where cached IPv6 addresses for a resource got returned for IPv4-only DNS resources if the setting was only changed after a DNS query had already been processed.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.12 Tue, 20 Jan 2026 00:00:00 GMT

#11735 Fixes an issue on iOS where the system resolvers could not be reliably read, causing DNS queries to fail system-wide.

#11625 Fails faster when the initial connection to the control plane cannot be established, allowing the user to retry sooner.

#11634 Bumps minimum macOS version from 12.4 to 13.0 (Ventura) to enable SwiftUI MenuBarExtra API.

#11584 Improves connection reliability on systems where certain UDP socket features are unavailable.

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11654 Implements retry with exponential backoff for anything but 401 responses. For example, this allows Firezone to automatically sign-in even if Internet Access is gated by a captive portal.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.6 Tue, 06 Jan 2026 00:00:00 GMT

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.6 Tue, 06 Jan 2026 00:00:00 GMT

#11627 Fixes an issue where reconnections would fail if the portal host is an IP address.

#11626 Fixes an issue where reconnecting to the portal would fail if the DNS resolver list was empty due to a network reset or other edge case.

#11595 Passes the authentication token in the x-authorization header instead of in the URL, improving rate limiting for users behind shared IPs.

#11594 Implements retry with exponential backoff on 429 (Too Many Requests) responses from the portal.

#11804 Fixes an issue where connections would flap between relayed and direct, causing WireGuard connection timeouts.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.19 Tue, 23 Dec 2025 00:00:00 GMT

#10972 Fixes an issue where IPv6-only DNS resources could not be reached.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

#11208 Fixes an issue where the Gateway could reboot when the WebSocket connection to the portal got cut.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.11 Tue, 23 Dec 2025 00:00:00 GMT

#11141 Fixes an issue where spurious resource updates would result in perceived network interruptions resulting in errors like ERR_NETWORK_CHANGED in Google Chrome.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.9 Tue, 23 Dec 2025 00:00:00 GMT

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.9 Tue, 23 Dec 2025 00:00:00 GMT

#10742 Fixes an issue where CIDR/IP resources whose routes conflict with the local network were not routable.

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10849 Fixes some rendering issues on Wayland-only systems.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

#11243 Fixes an issue where upgrading from version 1.5.8 on Fedora fails due to a bad scriptlet. To uninstall version 1.5.8, use sudo dnf remove firezone-client-gui --setopt=tsflags=noscripts

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.5 Tue, 23 Dec 2025 00:00:00 GMT

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.5 Tue, 23 Dec 2025 00:00:00 GMT

#10742 Fixes an issue where CIDR/IP resources whose routes conflict with the local network were not routable.

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.8 Tue, 23 Dec 2025 00:00:00 GMT

#11077 Fixes an issue where the authentication link would not open in the correct app.

#11115 Fixes an issue where Firezone would not connect if an IPv6 interface is present but not routable.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.7 Fri, 05 Dec 2025 00:00:00 GMT

#10752 Fixes an issue where the reported client version was out of date.

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.10 Thu, 04 Dec 2025 00:00:00 GMT

#10986 Fixes a minor race condition that could arise on sign out.

#10855 Fixes an issue on macOS where the utun index would auto-increment by itself on configuration updates.

#10752 Fixes an issue where the reported client version was out of date.

#10773 Fixes an issue where the order of upstream / system DNS resolvers was not respected.

#10824 Adds support for hideResourceList managed configuration key to hide the Resource List in the macOS and iOS apps.

#10914 Fixes an issue where concurrent DNS queries with the same ID would be dropped.

#10965 Fixes an issue where some packets would get dropped under high throughput scenarios.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.18 Mon, 10 Nov 2025 00:00:00 GMT

#10620 Adds a --log-format CLI option to output logs as JSON.

#10796 Fixes an issue where packets for DNS resources would be routed to stale IPs after DNS record changes.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.6 Tue, 28 Oct 2025 00:00:00 GMT

#10667 Fixes an issue where the Tunnel service would crash when trying to connect Firezone without an Internet connection.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.9 Mon, 20 Oct 2025 00:00:00 GMT

#10603 Fixes an issue on macOS where DNS resources might fail to be routed properly after many (150+) Firezone session restarts.

#10509 Fixes an issue where the Internet Resource could be briefly active on startup, despite it being disabled.

#10533 Improves reliability by caching DNS responses as per their TTL.

#10567 Fixes an issue where the Resources menu would not populate when launching the app while already connected.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.5 Sat, 18 Oct 2025 00:00:00 GMT

#10509 Fixes an issue where the Internet Resource could be briefly active on startup, despite it being disabled.

#10533 Improves reliability by caching DNS responses as per their TTL.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.17 Thu, 16 Oct 2025 00:00:00 GMT

#10367 Fixes a rare CPU-spike issue in case a Client connected with many possible IPv6 addresses.

#10349 Attempts to increase the system-wide parameters core.rmem_max to 128 MB and core.wmem_max to 16 MB for improved performance. See the Performance tuningsection for details.

#10373 Switches to user-space DNS resolution, allowing for accurate caching based on the TTL in the DNS response.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.8 Thu, 16 Oct 2025 00:00:00 GMT

#10509 Fixes an issue where the Internet Resource could be briefly active on startup, despite it being disabled.

#10533 Improves reliability by caching DNS responses as per their TTL.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.8 Thu, 16 Oct 2025 00:00:00 GMT

#10509 Fixes an issue where the Internet Resource could be briefly active on startup, despite it being disabled.

#10533 Improves reliability by caching DNS responses as per their TTL.

#10539 Fixes an issue where the Tunnel Service was not running after a version upgrade.

#10554 Fixes an issue where local LAN traffic was dropped when the Internet Resource was active.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.4 Thu, 16 Oct 2025 00:00:00 GMT

#10533 Improves reliability by caching DNS responses as per their TTL.

#10553 Adds a CLI switch --activate-internet-resource. By default, the Internet Resource is now off.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.4 Thu, 16 Oct 2025 00:00:00 GMT

#10533 Improves reliability by caching DNS responses as per their TTL.

#10553 Adds a CLI switch --activate-internet-resource. By default, the Internet Resource is now off.

#10554 Fixes an issue where local LAN traffic was dropped when the Internet Resource was active.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.4 Thu, 18 Sep 2025 00:00:00 GMT

#10371 Fixes a bug that could prevent sign-ins from completing successfully if Firefox is set as the default browser.

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.16 Wed, 10 Sep 2025 00:00:00 GMT

#10231 Remove the FIREZONE_NUM_TUN_THREADS env variable. The Gateway will now always default to a single TUN thread. Using multiple threads can cause packet reordering which hurts TCP throughput performance.

#10076 Introduces graceful shutdown, allowing Clients to immediately switch over a new Gateway instead of waiting for the ICE timeout (~15s).

#10310 Fixes an issue where packets for DNS resources could get routed to the wrong address.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.8 Wed, 10 Sep 2025 00:00:00 GMT

#10313 Fixes an issue where multiple concurrent Firezone macOS clients could run simultaneously. We now enforce a single instance of the client.

#10224 Fixes a minor DNS cache bug where newly-added DNS resources may not resolve for a few seconds after showing up in the Resource List.

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows GUI:1.5.7 Wed, 10 Sep 2025 00:00:00 GMT

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux GUI:1.5.7 Wed, 10 Sep 2025 00:00:00 GMT

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:Windows Headless:1.5.3 Wed, 10 Sep 2025 00:00:00 GMT

#10126 Sets FIREZONE_DNS_CONTROL=etc-resolv-conf by default in the headless client Docker image.

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:Linux Headless:1.5.3 Wed, 10 Sep 2025 00:00:00 GMT

#10126 Sets FIREZONE_DNS_CONTROL=etc-resolv-conf by default in the headless client Docker image.

#10104 Fixes an issue where DNS resources would resolve to a different IP after signing out and back into Firezone. This would break connectivity for long-running services that don't re-resolve DNS, like SSH sessions or mongoose.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.7 Thu, 07 Aug 2025 00:00:00 GMT

#10143 Fixes an issue on iOS 17 and below that caused the tunnel to crash after signing in. This was due to a change in how newer versions of Xcode handle linking against referenced libraries. iOS 18 and higher is unaffected.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.15 Tue, 05 Aug 2025 00:00:00 GMT

#10109 Fixes an issue where connections would fail to establish in environments with a limited number of ports on the NAT.

]]> https://www.firezone.dev/changelog firezone-changelog:Android:1.5.3 Tue, 05 Aug 2025 00:00:00 GMT

#9985 Fixes an issue where control plane messages could be stuck forever on flaky connections, requiring signing out and back in to recover.

#9725 Fixes an issue where Firezone failed to sign-in on systems with non-ASCII characters in their kernel build name.

#9891 Fixes an issue where connections would sometimes take up to 90s to establish.

#9979 Fixes an issue where connections in low-latency networks (between Client and Gateway) would fail to establish reliably.

#9999 Decreases connection setup time on flaky Internet connections in certain edge cases.

]]> https://www.firezone.dev/changelog firezone-changelog:macOS / iOS:1.5.6 Sat, 02 Aug 2025 00:00:00 GMT

#10075 Fixes an issue on iOS where the tunnel may never fully come up after signing in due to a network connectivity reset loop.

#10056 Fixes an issue where connectivity could be lost for up to 20 seconds after waking from sleep.

]]> https://www.firezone.dev/changelog firezone-changelog:Gateway:1.4.14 Mon, 28 Jul 2025 00:00:00 GMT

#9986 Fixes an issue where a Client could not establish a connection unless their first attempt succeeded.

#9979 Fixes an issue where connections in low-latency networks (between Client and Gateway) would fail to establish reliably.

]]>