Firezone Devlog

Faster packet handling, structured incremental flow logs, first-party Nix packages, connected-device visibility on Apple, and more resilient telemetry.

Secure Client-to-Client traffic, connected-device visibility, hardened local IPC on Windows and Linux, and audit logs through the REST API.

Filter-aware routing on clients fixes a long-standing overlapping-resource bug, the macOS menu bar app stays running under memory pressure, smarter RTT-aware relay selection, and improved Linux network-change detection.

A 25% reduction in client and gateway CPU usage from connlib performance optimizations, Google Workspace group filtering for directory sync, and smaller fixes for DNS forwarding and relay reliability.

Faster sign-ins from distant regions via regional read replicas, automatic tunnel-service recovery on Windows and Linux, OS-native connection-failure notifications on clients, and browser-based authentication for headless clients.

Multi-region infrastructure with database read replicas and Postgres clustering. Portal performance improvements with Bandit HTTP server and WebSocket rate limiting. Enhanced partition tolerance for gateways and relays.

Major portal architecture refactor collapsing umbrella apps, authentication system restructuring, relay connection reliability improvements, and database performance optimizations.

DNS over HTTPS support, Swift 6.2 upgrade for Apple clients, Wayland support for the Linux GUI client, and various Gateway reliability improvements.

October delivered substantial improvements to Gateway observability, Linux networking stack refinements, and new deployment mechanisms. This month's work focused on implementing comprehensive flow logging, addressing routing conflicts through tiered routing tables, and introducing native Debian packages for easier deployments.

September brought significant improvements to Firezone's networking stack, administrative tooling, and cross-platform reliability. This month's work focused on optimizing relay performance through eBPF, improving DNS resolution behavior, and enhancing the admin portal's visibility into client and Gateway states.