https://cybertoolchain.io/tools/firezone New releases and features in Firezone, tracked by The Cyber Toolchain. en Thu, 29 Oct 2026 00:00:00 GMT https://www.firezone.dev/changelog https://www.firezone.dev/changelog Thu, 29 Oct 2026 00:00:00 GMT Firezone Gateway now parallelizes WireGuard encryption and decryption across worker threads for greater tunnel throughput⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Firezone Gateway now parallelizes WireGuard encryption and decryption across worker threads, greatly increasing tunnel throughput.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Thu, 29 Oct 2026 00:00:00 GMT Firezone Linux GUI 1.5.20 adds a redesigned Settings screen to select between US and EU control planes, and now parallelizes WireGuard encryption across worker threads for hi⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Switch between the Firezone US or EU control plane from a redesigned Settings screen.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Packet-routing performance now benefits from caching of route resolution for established flows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Fri, 23 Oct 2026 08:08:05 GMT API surface changed: +19 endpoints, 8 modified⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /defender_posture_providers/{id}⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint DELETE /intune_posture_providers/{id} • New endpoint DELETE /iru_posture_providers/{id} • New endpoint DELETE /santa_posture_providers/{id} • New endpoint DELETE /sentinelone_posture_providers/{id} • New endpoint DELETE /sophos_posture_providers/{id} • New endpoint GET /posture_fields • New endpoint PATCH /defender_posture_providers/{id} • New endpoint PATCH /intune_posture_providers/{id} • New endpoint PATCH /iru_posture_providers/{id} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Tue, 20 Oct 2026 07:55:14 GMT Firezone: Improves Apple client tunnel throughput by coalescing consecutive TCP segments before writing them to the system tunnel.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 19 Oct 2026 00:00:00 GMT Android 1.5.16 brings a unified Compose-based settings UI, device pool grouping in the resource list, and multiple packet-processing performance improvements.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Shows device pools in the resource list instead of a flat view of all connected devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Improves packet-processing performance when flow logging is enabled. • Improves packet-processing performance by speeding up peer and route lookups. • Improves packet processing performance by reducing allocations and packet moves during network writes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Wed, 14 Oct 2026 00:00:00 GMT Firezone macOS/iOS 1.5.22 adds device pool grouping in the resource list and improves packet-processing performance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Sends a notification instead of displaying an alert when the session ends. • Improves packet-processing performance when flow logging is enabled. • Improves packet-processing performance by speeding up peer and route lookups. • Improves Apple client tunnel throughput by coalescing consecutive TCP segments before writing them to the system tunnel. • Improves packet processing performance by reducing allocations and packet moves during network writes. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Wed, 14 Oct 2026 00:00:00 GMT Linux GUI 1.5.19 replaces the disconnection alert with a notification and shows device pools in the resource list.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Replaces the 'Firezone disconnected' alert with a notification.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Shows device pools in the resource list instead of all connected devices in one view. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Sat, 03 Oct 2026 13:03:02 GMT API surface changed: +6 endpoints⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /github_auth_providers⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New endpoint GET /github_auth_providers/{id} • New endpoint GET /sophos_devices • New endpoint GET /sophos_devices/{id} • New endpoint GET /sophos_posture_providers • New endpoint GET /sophos_posture_providers/{id} Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Sat, 26 Sep 2026 07:48:48 GMT Breaking changes: • The `authenticate`, `enable-service`, and `disable-service` commands have moved from the `firezone` CLI to `firezone-gateway`; any scripts or service configs invoking them via `firezone` must be updated to use `firezone-gateway` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Fri, 25 Sep 2026 13:13:40 GMT Firezone: Recognizes `iru-id` SAN claims in device attestation certificates as an alias for `kandji-id`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Thu, 24 Sep 2026 13:08:01 GMT Firezone: Recognizes `iru-id` SAN claims in device attestation certificates as an alias for `kandji-id`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Thu, 24 Sep 2026 00:00:00 GMT Firezone Android 1.5.15 adds `iru-id` SAN claim support in device attestation and improves resume-from-sleep connectivity restoration.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Recognizes `iru-id` SAN claims in device attestation certificates as an alias for `kandji-id`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Thu, 24 Sep 2026 00:00:00 GMT Firezone Gateway 1.6.2 moves `authenticate`, `enable-service`, and `disable-service` commands into `firezone-gateway` itself.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Moves the `authenticate`, `enable-service`, and `disable-service` subcommands from the separate `firezone` CLI into `firezone-gateway` itself, consolidating gateway management into a single binary.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • The `authenticate`, `enable-service`, and `disable-service` commands have moved from the `firezone` CLI binary into `firezone-gateway` — any scripts or service definitions calling `firezone authenticate`, `firezone enable-service`, or `firezone disable-service` must be updated to use `firezone-gateway authenticate`, `firezone-gateway enable-service`, and `firezone-gateway disable-service` instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Tue, 22 Sep 2026 07:47:35 GMT API surface changed: 27 modified, 3 deprecated⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • Deprecated endpoint GET /resources/{resource_id}/pool_members (still works) • Deprecated endpoint PATCH /resources/{resource_id}/pool_members (still works) • Deprecated endpoint PUT /resources/{resource_id}/pool_members (still works) Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Tue, 15 Sep 2026 13:01:45 GMT Firezone adds a native ARM64 installer for Windows on ARM devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a native ARM64 installer for Windows on ARM devices.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Tue, 15 Sep 2026 00:00:00 GMT Firezone macOS/iOS 1.5.20 adds X.509 certificate-backed device trust⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for device trust backed by X.509 certificates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Fri, 11 Sep 2026 00:00:00 GMT Firezone Android 1.5.14 adds device trust via X.509 certificates and a refreshed app icon.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for device trust backed by X.509 certificates.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Updates the app icon and other in-app logos to the new 'F' mark. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Tue, 08 Sep 2026 12:21:35 GMT Firezone adds X.509 certificate-backed device trust and removes the `FIREZONE_NAME`/`-n` Gateway option in favour of Admin Portal configuration. • Improves update notifications to appear once per Client launch instead of only once per new version; on Linux, update notifications now also trigger the download of the new package right away. Breaking changes: • The `FIREZONE_NAME` flag (`-n`) has been removed from the Gateway; Gateways that set their name via this option must now set the name in the Admin Portal instead. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Mon, 07 Sep 2026 13:48:36 GMT API surface changed: 101 modified • DELETE /actors/{actor_id}/client_tokens: response schema changed • DELETE /actors/{actor_id}/client_tokens/{id}: response schema changed • DELETE /actors/{actor_id}/external_identities/{id}: response schema changed • DELETE /actors/{id}: response schema changed • DELETE /clients/{id}: response schema changed • DELETE /groups/{id}: response schema changed • DELETE /policies/{id}: response schema changed • DELETE /resources/{id}: response schema changed • DELETE /sites/{site_id}/gateway_tokens: response schema changed • DELETE /sites/{site_id}/gateway_tokens/{id}: response schema changed • DELETE /sites/{site_id}/gateways/{id}: response schema changed • GET /account: response schema changed • GET /actors: response schema changed • GET /actors/{actor_id}/client_tokens: response schema changed • GET /actors/{actor_id}/client_tokens/{id}: response schema changed • GET /actors/{actor_id}/external_identities: response schema changed • GET /actors/{actor_id}/external_identities/{id}: response schema changed • GET /actors/{id}: response schema changed • GET /clients: response schema changed • GET /clients/{id}: response schema changed • GET /defender_devices: response schema changed • GET /defender_devices/{id}: response schema changed • GET /defender_posture_providers: response schema changed • GET /defender_posture_providers/{id}: response schema changed • GET /email_otp_auth_providers: response schema changed • GET /email_otp_auth_providers/{id}: response schema changed • GET /entra_auth_providers: response schema changed • GET /entra_auth_providers/{id}: response schema changed • GET /entra_directories: response schema changed • GET /entra_directories/{id}: response schema changed • GET /google_auth_providers: response schema changed • GET /google_auth_providers/{id}: response schema changed • GET /google_directories: response schema changed • GET /google_directories/{id}: response schema changed • GET /groups: response schema changed • GET /groups/{group_id}/memberships: response schema changed • GET /groups/{id}: response schema changed • GET /intune_devices: response schema changed • GET /intune_devices/{id}: response schema changed • GET /intune_posture_providers: response schema changed • GET /intune_posture_providers/{id}: response schema changed • GET /iru_devices: response schema changed • GET /iru_devices/{id}: response schema changed • GET /iru_posture_providers: response schema changed • GET /iru_posture_providers/{id}: response schema changed • GET /logs: response schema changed • GET /logs/{log_id}: response schema changed • GET /oidc_auth_providers: response schema changed • GET /oidc_auth_providers/{id}: response schema changed • GET /okta_auth_providers: response schema changed • GET /okta_auth_providers/{id}: response schema changed • GET /okta_directories: response schema changed • GET /okta_directories/{id}: response schema changed • GET /policies: response schema changed • GET /policies/{id}: response schema changed • GET /resources: response schema changed • GET /resources/{id}: response schema changed • GET /resources/{resource_id}/pool_members: response schema changed • GET /santa_devices: response schema changed • GET /santa_devices/{id}: response schema changed • GET /santa_posture_providers: response schema changed • GET /santa_posture_providers/{id}: response schema changed • GET /sentinelone_devices: response schema changed • GET /sentinelone_devices/{sentinelone_agent}: response schema changed • GET /sentinelone_posture_providers: response schema changed • GET /sentinelone_posture_providers/{id}: response schema changed • GET /sites: response schema changed • GET /sites/{id}: response schema changed • GET /sites/{site_id}/gateways: response schema changed • GET /sites/{site_id}/gateways/{id}: response schema changed • GET /x509_auth_provider: response schema changed • PATCH /actors/{id}: response schema changed • PATCH /clients/{id}: response schema changed • PATCH /groups/{group_id}/memberships: response schema changed • PATCH /groups/{id}: response schema changed • PATCH /policies/{id}: response schema changed • PATCH /resources/{id}: request body changed; response schema changed • PATCH /resources/{resource_id}/pool_members: response schema changed • PATCH /sites/{id}: response schema changed • PATCH /sites/{site_id}/gateways/{id}: response schema changed • POST /actors: response schema changed • POST /actors/{actor_id}/client_tokens: response schema changed • POST /groups: response schema changed • POST /policies: response schema changed • POST /resources: request body changed; response schema changed • POST /sites: response schema changed • POST /sites/{site_id}/gateway_tokens: response schema changed • POST /sites/{site_id}/gateways: response schema changed • POST /sites/{site_id}/gateways/{gateway_id}/token: response schema changed • POST /sites/{site_id}/gateways/{gateway_id}/token/rotate: response schema changed • PUT /actors/{id}: response schema changed • PUT /clients/{id}: response schema changed • PUT /clients/{id}/unverify: response schema changed • PUT /clients/{id}/verify: response schema changed • PUT /groups/{group_id}/memberships: response schema changed • PUT /groups/{id}: response schema changed • PUT /policies/{id}: response schema changed • PUT /resources/{id}: request body changed; response schema changed • PUT /resources/{resource_id}/pool_members: response schema changed • PUT /sites/{id}: response schema changed • PUT /sites/{site_id}/gateways/{id}: response schema changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 07 Sep 2026 00:00:00 GMT Gateway 1.6.1 auto-creates flow-log storage, reports device serial/UUID, and moves Gateway naming to the Admin Portal. • Removes the `FIREZONE_NAME` / `-n` Gateway option; the Gateway's name is now configured in the Admin Portal instead. • Auto-creates the `/var/lib/firezone` directory to ensure that flow logs can be persisted. • Now reports the device serial and UUID. Breaking changes: • The `FIREZONE_NAME` environment variable and `-n` CLI flag have been removed from the Gateway; any deployment scripts or container configs that set `FIREZONE_NAME` or pass `-n` will break — the Gateway name must now be configured in the Admin Portal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 07 Sep 2026 00:00:00 GMT Firezone Linux GUI 1.5.17 adds X.509 certificate-backed device trust and auto-download of updates on Linux. • Adds support for device trust backed by X.509 certificates. • Improves update notifications on Linux to also trigger the download of the new package immediately upon notification. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 07 Sep 2026 00:00:00 GMT Firezone: Improves update notifications to appear once per Client launch instead of only once per new version, and on Linux now also triggers download of the new package immediately. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 07 Sep 2026 00:00:00 GMT Firezone Windows Headless 1.5.12 adds device trust backed by X.509 certificates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Mon, 31 Aug 2026 20:49:48 GMT API surface changed: +13 endpoints • New endpoint GET /defender_devices • New endpoint GET /defender_devices/{id} • New endpoint GET /defender_posture_providers • New endpoint GET /defender_posture_providers/{id} • New endpoint GET /santa_devices • New endpoint GET /santa_devices/{id} • New endpoint GET /santa_posture_providers • New endpoint GET /santa_posture_providers/{id} • New endpoint GET /sentinelone_devices • New endpoint GET /sentinelone_devices/{sentinelone_agent} • New endpoint GET /sentinelone_posture_providers • New endpoint GET /sentinelone_posture_providers/{id} • New endpoint GET /x509_auth_provider Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Sun, 23 Aug 2026 09:28:44 GMT API surface changed: +6 endpoints, −1 endpoint, 2 modified • New endpoint GET /intune_posture_providers • New endpoint GET /intune_posture_providers/{id} • New endpoint GET /iru_devices • New endpoint GET /iru_devices/{id} • New endpoint GET /iru_posture_providers • New endpoint GET /iru_posture_providers/{id} • GET /intune_devices: response schema changed • GET /intune_devices/{id}: response schema changed Breaking changes: • Removed endpoint GET /intune_integration Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Sun, 16 Aug 2026 09:23:08 GMT API surface changed: +9 endpoints, 27 modified • New endpoint GET /intune_devices • New endpoint GET /intune_devices/{id} • New endpoint GET /intune_integration • New endpoint GET /resources/{resource_id}/pool_members • New endpoint PATCH /resources/{resource_id}/pool_members • New endpoint PATCH /sites/{site_id}/gateways/{id} • New endpoint POST /sites/{site_id}/gateways • New endpoint PUT /resources/{resource_id}/pool_members • New endpoint PUT /sites/{site_id}/gateways/{id} • DELETE /policies/{id}: response schema changed • DELETE /sites/{site_id}/gateways/{id}: response schema changed • GET /actors: param email (query) added; param name (query) added; param type (query) added • GET /clients: param firezone_id (query) added; param name (query) added • GET /email_otp_auth_providers: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /entra_auth_providers: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /entra_directories: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /google_auth_providers: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /google_directories: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /groups: param directory_id (query) added; param entity_type (query) added; param name (query) added • GET /oidc_auth_providers: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /okta_auth_providers: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /okta_directories: param limit (query) added; param name (query) added; param page_cursor (query) added; response schema changed • GET /policies: param group_id (query) added; param resource_id (query) added; response schema changed • GET /policies/{id}: response schema changed • GET /resources: param address (query) added; param ip_stack (query) added; param name (query) added; param site_id (query) added; param type (query) added • GET /sites: param name (query) added • GET /sites/{site_id}/gateways: param ipv4 (query) added; param ipv6 (query) added; param name (query) added; response schema changed • GET /sites/{site_id}/gateways/{id}: response schema changed • PATCH /actors/{id}: request body changed • PATCH /policies/{id}: request body changed; response schema changed • PATCH /resources/{id}: request body changed • POST /policies: response schema changed • POST /resources: request body changed • PUT /actors/{id}: request body changed • PUT /policies/{id}: request body changed; response schema changed • PUT /resources/{id}: request body changed Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Sun, 16 Aug 2026 08:54:18 GMT Firezone 1.5.19 adds `firezone-cli` for headless macOS management; 1.6.0 doubles Linux tunnel throughput with GRO/GSO. • Enables GRO and GSO on the TUN device on Linux kernels 6.2 and later, roughly doubling single-stream TCP throughput through the tunnel (1.6.0, #14011). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Sat, 15 Aug 2026 00:00:00 GMT Firezone macOS/iOS 1.5.19 adds `firezone-cli`, a command-line interface for unattended and remotely managed Macs. • Adds `firezone-cli`, a command-line interface to the macOS Client for Macs that run unattended or are managed remotely. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://rest-api.firezone.dev/openapi.json https://rest-api.firezone.dev/openapi.json Wed, 12 Aug 2026 10:16:14 GMT Firezone now publishes an API — 75 endpoints across 21 areas: Clients, Actors, Groups, … • Clients (7 endpoints) — read, update, delete • Actors (6 endpoints) — create, read, update, delete • Groups (6 endpoints) — create, read, update, delete • Policies (6 endpoints) — create, read, update, delete • Resources (6 endpoints) — create, read, update, delete • Sites (6 endpoints) — create, read, update, delete • Client Tokens (5 endpoints) — create, read, delete • Gateway Tokens (5 endpoints) — create, delete • 13 more areas: Externalidentities, Gateways, Memberships, Email Otp Auth Providers, Entra Auth Providers, Entra Directories, Google Auth Providers, Google Directories, Logs, Oidc Auth Providers, Okta Auth Providers, Okta Directories, Account Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 10 Aug 2026 00:00:00 GMT Gateway 1.6.0 enables GRO/GSO on Linux 6.2+ TUN devices, roughly doubling single-stream TCP throughput through the tunnel. • Enables GRO and GSO on the TUN device on Linux kernels 6.2 and later, roughly doubling single-stream TCP throughput through the tunnel. • Lowers the system-wide `net.core.wmem_max` to 2 MB and `net.core.rmem_max` to 16 MB on the Gateway, reducing UDP send and receive socket buffer sizes. • Speeds up recovery after all relays are lost by immediately requesting a fresh relay set from the portal. • Improves reconnection speed after a network change. Breaking changes: • The Gateway now sets `net.core.wmem_max` to 2 MB (down from a previously higher value) and `net.core.rmem_max` to 16 MB system-wide, which reduces UDP socket buffer sizes and may affect other processes sharing those kernel parameters on the same host. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 10 Aug 2026 00:00:00 GMT Linux GUI 1.5.16 enables GRO/GSO on the TUN device for Linux 6.2+, roughly doubling single-stream TCP tunnel throughput. • Enables GRO and GSO on the TUN device on Linux kernels 6.2 and later, roughly doubling single-stream TCP throughput through the tunnel. • Speeds up recovery after all relays are lost by immediately requesting a fresh set from the portal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Mon, 10 Aug 2026 00:00:00 GMT Firezone Linux Headless 1.5.11 enables GRO/GSO on TUN devices for Linux 6.2+, roughly doubling single-stream TCP tunnel throughput. • Enables GRO and GSO on the TUN device on Linux kernels 6.2 and later, roughly doubling single-stream TCP throughput through the tunnel. • Speeds up recovery after all relays are lost by immediately requesting a fresh set from the portal. • Improves reconnection speed after a network change. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone https://www.firezone.dev/changelog https://www.firezone.dev/changelog Wed, 24 Jun 2026 00:00:00 GMT Firezone macOS/iOS 1.5.18 brings major UDP and TUN throughput upgrades, cutting CPU usage and packet loss on high-traffic connections. • Adds client-side evaluation of resource traffic filters, dropping disallowed packets locally to prevent repeated flow-creation request loops. • Batches TUN device reads and writes into a single syscall per batch on macOS and iOS, improving throughput and reducing CPU on high-traffic connections. • Introduces a per-destination UDP socket pool on macOS and iOS that unlocks Darwin's UDP fast path, enabling send batching and kernel congestion (flow advisory) signals. • Increases the macOS and iOS TUN read buffer size so the kernel can queue more outbound packets between reads, improving upload throughput. • Retries writes to the TUN device when its queue is momentarily full instead of dropping packets, reducing packet loss under bursty load on macOS and iOS. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/firezone