https://cybertoolchain.io/tools/cohesive-vns3-controller New releases and features in Cohesive VNS3 Controller, tracked by The Cyber Toolchain. en Tue, 06 Oct 2026 07:36:20 GMT https://docs.cohesive.net/docs/vns3/release-notes/ https://docs.cohesive.net/docs/vns3/release-notes/ Tue, 06 Oct 2026 07:36:20 GMT VNS3 7.2.2 adds ARM Plugin Catalog support, enriches tunnel alerts with endpoint IDs, and enables IAM role auth for SNS alerts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Tunnel down/up alerts now include the endpoint ID, enabling direct use in follow-up API calls without additional lookups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • SNS Alert type can now authenticate via AWS IAM role, in addition to the existing Access Key/Secret Key credential method. • Plugin Catalog now supports ARM plugins when the VNS3 instance is ARM-based. Breaking changes: • OpenVPN Server upgraded to 2.6+ (since 7.0.2): OpenVPN clientpacks on hosts may require manual configuration changes — test connectivity before any production upgrade; clients running OpenVPN earlier than 2.5 may not reconnect after upgrade. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://cohesive.net/support/vns3-controller-release-notes/ https://cohesive.net/support/vns3-controller-release-notes/ Mon, 07 Sep 2026 07:33:19 GMT VNS3 snapshot-20260907 adds idempotent tunnel bounces, strict CIDR parsing, licensed EdgeGRE/VXLAN/Geneve and firewall objects, and optional plugin recovery on snapshot restore. • Adds `recover_plugins` argument to the snapshot-restore API, defaulting to `true`, with a corresponding UI tick box (defaulting to `false`) to make plugin recovery from configuration snapshots optional. • Adds EdgeGRE, VXLAN, and Geneve connection types to the VNS3 licensing system. • Adds firewall object count to the licensing system, covering rules in main and sub-tables, sub-tables themselves, and firewall sets (`fwsets`). • Enables strict CIDR parsing when entering routes — any route whose CIDR notation resolves to a different network than intended is now rejected outright. • Makes tunnel bounce (IPsec reset) calls idempotent: if a bounce command for a tunnel is already queued, no additional bounce commands for that tunnel are enqueued until the existing one is processed. • Adds a UI edit panel for user-managed route entries, replacing the previous delete-and-re-enter workflow. • Adds a fixed-size logging partition so log overflow cannot impede Web UI or API operation. • Uploads of HTTPS certificates via the UI are now allowed before the controller is licensed. • Sets the Status Dashboard as the default status view (replacing the Status Table) on systems with 2 vCPUs and 1 GB or more of memory. • Improves Wireguard background-process efficiency so CPU usage scales more efficiently beyond 1,000 clientpacks. Breaking changes: • Upgrading to VNS3 7.0.1 upgrades the OpenVPN server to version 2.6+; significant configuration differences between OpenVPN 2.5 and 2.6 may require manual modifications to existing OpenVPN clientpack hosts for proper reconnection — testing before production upgrade is recommended. Wireguard clientpacks are unaffected. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://cohesive.net/support/vns3-controller-release-notes/ https://cohesive.net/support/vns3-controller-release-notes/ Sat, 08 Aug 2026 04:43:54 GMT VNS3 7.2.1 upgrades to Linux 7.0 kernel; Plugin Catalog gains ARM/Intel differentiation and multi-version management. • Plugin Catalog now differentiates between ARM and Intel capable plugins, reflecting potential release timeline differences between platforms. • Plugin Catalog supports more intelligent version management, with listings enhanced to provide multiple versions and platform compatibility information. • Upgraded from Linux 6.17.x kernel line to 7.0.0 in response to reported local privilege escalation findings against the 6.17 line. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://cohesive.net/support/vns3-controller-release-notes/ https://cohesive.net/support/vns3-controller-release-notes/ Mon, 13 Jul 2026 10:07:16 GMT VNS3 7.1.1 adds AI-assisted IPsec diagnostics and live plugin instance upgrades without disrupting running configurations. • Introduces Connection Advisor with AI Diagnostics (Beta): an 'Advice' option on VNS3 Controllers lets administrators ask for help configuring the controller or troubleshooting site-to-site IPsec connections (requires Cohesive auth token and active support contract). • Enables in-place plugin instance upgrades: a running plugin's full configuration can now be migrated to a new instance/version on the same VNS3 controller, starting at the same network address once the old instance is stopped. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#711-release---june-21st-2026 https://docs.cohesive.net/docs/vns3/release-notes/#711-release---june-21st-2026 Sun, 21 Jun 2026 00:00:00 GMT VNS3 7.1.1 adds AI-powered Connection Advisor beta and supports in-place plugin upgrades. • Adds an 'Advice' option to VNS3 Controllers for AI-assisted configuration and IPsec troubleshooting • Enables in-place upgrades by allowing plugin instances to be migrated and upgraded on the same controller Breaking changes: • Cannot import configurations based on releases before 3.5.0.5; OpenVPN server will fail to start if the snapshot contains an 'OpenVPN static key' entry without a full new deployment. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#701-release---feb-11th-2026 https://docs.cohesive.net/docs/vns3/release-notes/#701-release---feb-11th-2026 Wed, 11 Feb 2026 00:00:00 GMT VNS3 7.0.1 adds in-place route editing, pre-license HTTPS cert upload via UI, and container address binding • Adds ability to edit user-managed route entries directly via a new UI panel without requiring delete-and-recreate • Allows uploading HTTPS certificates through the controller's UI before the product is licensed • Enables plugins or containers to bind to a network address even when no corresponding interface exists on the host Breaking changes: • OpenVPN clientpack connectivity may break after upgrading to OpenVPN Server 2.6+; some host modifications might be needed for proper reconnection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#678-release---nov-21st-2025 https://docs.cohesive.net/docs/vns3/release-notes/#678-release---nov-21st-2025 Fri, 21 Nov 2025 00:00:00 GMT VNS3 6.7.8 adds optional plugin recovery control via new 'recover_plugins' API argument and UI toggle • Adds `recover_plugins` argument to the configuration snapshot API, allowing users to skip plugin image/instance recovery during restore operations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#677-non-public-release---sept-9th-2025 https://docs.cohesive.net/docs/vns3/release-notes/#677-non-public-release---sept-9th-2025 Tue, 09 Sep 2025 00:00:00 GMT Cohesive VNS3 6.7.7 adds Host Header Poisoning protection, API plugin network editing, and expanded firewall/overlay warnings • Adds a section in the Settings page to restrict control plane (port 8000) access to specific internal interface addresses, preventing Host Header Poisoning attacks. • Enables editing plugin network configuration via API, mirroring the existing UI capability. • Increases overlay certificate authority expiration warning from six months to twelve months, displaying a banner on every UI page when near expiry. • Extends GET firewall rules API response to include packet count information for each rule. • Restores support for IPsec "%any" peer setting in the 6.x line after an IPv6 migration regression. Breaking changes: • Host Header Poisoning Protection is DISABLED by default in version 6.7.7+; enabling it requires manual configuration and may irrecoverably block control plane access if misconfigured. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#674-release---may-15th-2025 https://docs.cohesive.net/docs/vns3/release-notes/#674-release---may-15th-2025 Thu, 15 May 2025 00:00:00 GMT VNS3 6.7.4 adds API for clientpack Extra Config, system variables in firewall rules, and session auth for downloads • Adds `clientpack_extra_config` to the Cohesive API and terraform provider to get/edit clientpack "Extra Config" data • Adds new system variables for the controller's overlay IP and the topology's VIP address in Firewall Sets and Firewall Rules • Supports abbreviated format `-j TTL` and `-j TCPMSS` firewall rule targets without requiring `-m module` information • Allows snapshot and Plugin Image downloads to use current session credentials via API and Web UI Breaking changes: • The word "custom" is now a reserved word and cannot be used in the name of custom variables Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#672-release---020325 https://docs.cohesive.net/docs/vns3/release-notes/#672-release---020325 Wed, 01 Jan 2025 00:00:00 GMT VNS3 6.7.2 adds custom branding framework for partners and new route update notifications for clientpacks. • `ENHANCEMENT Custom branding framework for reseller partners and ISPs` allows standardized builds with partner logo, CSS, and color scheme. • `ENHANCEMENT New route update process for clientpack notification` sends multicast (openvpn) or unicast (wireguard) packets to connected clients upon routing changes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#6611-release---112624 https://docs.cohesive.net/docs/vns3/release-notes/#6611-release---112624 Tue, 26 Nov 2024 00:00:00 GMT New verbose parameter for get cloud data API; APIv1 plugin network and firewall rule fixes • `get cloud data` API endpoint gains `verbose` parameter (default false) to return full metadata tree excluding IAMs Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#6610-release---101024 https://docs.cohesive.net/docs/vns3/release-notes/#6610-release---101024 Thu, 10 Oct 2024 00:00:00 GMT Adds Settings UI/API for Topology, NTP, CORS, and syslog hostname configuration. • The `Settings` menu replaces `Topology Name` and adds controls for NTP hosts, CORS embedding allowed hosts, and the syslog hostname. • Tagging API now supports generalized queries to find object types by tag, enabling the new Clientpack capability. • Self-tuning on boot or reboot adjusts concurrency based on available cores to improve performance on small instances such as AWS t3.nano. Breaking changes: • The `Topology Name` menu item is removed; Topology and Controller name are now accessed via the new `Settings` section. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#626-release---62824-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#626-release---62824-upgrade-to-628-or-667 Fri, 28 Jun 2024 00:00:00 GMT VNS3 6.2.6 adds unauthenticated plugin webhooks and internal hosts file POST endpoint • Additions/deletions from the VNS3 internal hosts file via POST operation with total replacement of host entries • New `plugin` alert type for plugins to make unauthenticated webhook calls Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#664-release---62824-upgrade-to-667 https://docs.cohesive.net/docs/vns3/release-notes/#664-release---62824-upgrade-to-667 Fri, 28 Jun 2024 00:00:00 GMT Adds unauthenticated webhook alerts for plugins and allows VNS3 hosts file edits via POST. • Adds 'plugin' alert type enabling unauthenticated webhook calls from inside a VNS3 host plugin • Allows additions/deletions to the VNS3 internal hosts file via a total-replacement POST operation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#662-release---6624-upgrade-to-667 https://docs.cohesive.net/docs/vns3/release-notes/#662-release---6624-upgrade-to-667 Thu, 06 Jun 2024 00:00:00 GMT VNS3 Controller 6.6.2 expands IPv6 support across IPsec, firewall, routing, BGP, and mesh traffic. • Configures VNS3 as an IPv6 NAT Gateway Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#618-release---122023-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#618-release---122023-upgrade-to-628-or-667 Wed, 20 Dec 2023 00:00:00 GMT VNS3 6.1.8 adds initial AWS Metadata v2 support via optional flag and improves BGP config management • Adds initial, incomplete AWS Metadata v2 support, allowing use of the optional setting. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#623-release---41724-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#623-release---41724-upgrade-to-628-or-667 Thu, 24 Aug 2023 00:00:00 GMT VNS3 6.2.8 adds dynamic DNS and tag-based Firewall Sets, mesh sync for vars/FWsets, AWS Metadata v2, and Telegram/Google Chat webhook templates. • Adds `DNS` type to Firewall Sets for dynamic population via domain resolution every 30 seconds • Adds `Clientpack Tag` type to Firewall Sets to auto-populate based on team member tags like `department:itoperations` • Enables mesh synchronization for both Firewall Sets and Custom Variables across the overlay network • Supports AWS Metadata Service Version 2 (`metadata_v2`) in clientpack configurations • Adds support for recovering VNS3 plugin instances via 'Import Snapshot' using `statedir` stanzas Breaking changes: • Network address range of the plugin network backbone can no longer be changed while plugins are running; plugin instances must be stopped first Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#6014-release---6123-limited-release-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#6014-release---6123-limited-release-upgrade-to-628-or-667 Thu, 01 Jun 2023 00:00:00 GMT Cohesive VNS3 Controller 6.0.14 adds Azure password/reset via user data and firewall rule deletion warnings • Extends the reset command set for API password, UI password, UI admin username, and disabling all firewall rules to Azure VNS3 instances via cloud 'user data' • Adds a UI warning when attempting to delete a firewall rule, as it was previously too easy to select 'delete' instead of 'disable' • Returns a '503' API Not Available error during configuration snapshot import to signal the controller is rebooting and not yet available for further configuration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#6012-release---52523-limited-release-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#6012-release---52523-limited-release-upgrade-to-628-or-667 Thu, 25 May 2023 00:00:00 GMT VNS3ms plugin recovery during upgrades • Initial attempts at recovery of running plugins when using the VNS3ms or Terraform Provider for version upgrades. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#6011-release---42823-limited-release-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#6011-release---42823-limited-release-upgrade-to-628-or-667 Fri, 28 Apr 2023 00:00:00 GMT VNS3 6.0.11 allows BGP advertisement of default routes (0.0.0.0/0) with UI warnings. • Allows VNS3 to advertise 0.0.0.0/0 and receive 0.0.0.0/0 with BGP Peers via the UI • UI displays a warning when configuring default route advertisement (0.0.0.0/0) in BGP peers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#605-release---120522-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#605-release---120522-upgrade-to-628-or-667 Mon, 05 Dec 2022 00:00:00 GMT VNS3 6.0.5 adds HTTP redirect for port confusion, improves LNKe default firewall rules and snapshot import reliability • Adds UI redirect page for users accessing `http://` or `https://` without specifying port 8000 to guide them to the correct URL. • Updates default internal firewall rules for LNKe enterprise offering to allow outbound TCP port 8000 traffic for Wireguard VPN clients. • Improves configuration snapshot import reliability by reducing database busy failures for clientpacks, firewall rules, and fwsets. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#604-release---111722-upgrade-to-628-or-667 https://docs.cohesive.net/docs/vns3/release-notes/#604-release---111722-upgrade-to-628-or-667 Thu, 17 Nov 2022 00:00:00 GMT Adds Wireguard support for LNKe client side connections and fixes missing PSK config issue • Enables `wireguard` as the client protocol for LNKe (VNS3 network platform), previously limited to `openvpn`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#525---60422-upgrade-to-5210 https://docs.cohesive.net/docs/vns3/release-notes/#525---60422-upgrade-to-5210 Sat, 04 Jun 2022 00:00:00 GMT VNS3 5.2.5 adds interface-specific route tables with iptables LOOKUP target and Azure Standard IP auto-discovery • Adds interface-specific routing capabilities via the `ROUTING_CUST` virtual firewall table designator and `-j LOOKUP` iptables target for complex packet flow selection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller https://docs.cohesive.net/docs/vns3/release-notes/#521---111621-upgrade-to-5210 https://docs.cohesive.net/docs/vns3/release-notes/#521---111621-upgrade-to-5210 Tue, 16 Nov 2021 00:00:00 GMT VNS3 5.2.1 adds Traffic Pairs for VPNs, Plugin Catalog/Dashboard, and BGP logs • Adds `Traffic Pairs` UI/API feature to define local/remote subnet pairs for route-based VPNs without manual state management • Adds `Plugin Catalog` under Main Menu > Plugins to allow in-place installation of monitoring and security plugins via the web UI • Adds `Plugin Dashboard` under Main Menu > Plugins for simplified plugin management access • Adds BGP event logs available via Logging Plugin at `/mnt/logs/vns3_connection_logs/bgpd.log` • Adds alerts for BGP session up/down states for BGP peers Full history on Cyber Toolchain: https://cybertoolchain.io/tools/cohesive-vns3-controller