Firezone Devlog

A monthly, technical account of what shipped across Firezone's clients, gateways, networking infrastructure, and admin portal.

Latest devlog

July 2026

Log sinks for popular SIEMs, certificate-backed device trust, more resilient roaming, faster Windows networking, and secretless Entra authentication.

2026

June 2026

Faster packet handling, structured incremental flow logs, first-party Nix packages, connected-device visibility on Apple, and more resilient telemetry.

May 2026

Secure Client-to-Client traffic, connected-device visibility, hardened local IPC on Windows and Linux, and audit logs through the REST API.

April 2026

Filter-aware routing on clients fixes a long-standing overlapping-resource bug, the macOS menu bar app stays running under memory pressure, smarter RTT-aware relay selection, and improved Linux network-change detection.

March 2026

A 25% reduction in client and gateway CPU usage from connlib performance optimizations, Google Workspace group filtering for directory sync, and smaller fixes for DNS forwarding and relay reliability.

February 2026

Faster sign-ins from distant regions via regional read replicas, automatic tunnel-service recovery on Windows and Linux, OS-native connection-failure notifications on clients, and browser-based authentication for headless clients.

January 2026

Multi-region infrastructure with database read replicas and Postgres clustering. Portal performance improvements with Bandit HTTP server and WebSocket rate limiting. Enhanced partition tolerance for gateways and relays.

2025

December 2025

Major portal architecture refactor collapsing umbrella apps, authentication system restructuring, relay connection reliability improvements, and database performance optimizations.

November 2025

DNS over HTTPS support, Swift 6.2 upgrade for Apple clients, Wayland support for the Linux GUI client, and various Gateway reliability improvements.

October 2025

October delivered substantial improvements to Gateway observability, Linux networking stack refinements, and new deployment mechanisms. This month's work focused on implementing comprehensive flow logging, addressing routing conflicts through tiered routing tables, and introducing native Debian packages for easier deployments.

September 2025

September brought significant improvements to Firezone's networking stack, administrative tooling, and cross-platform reliability. This month's work focused on optimizing relay performance through eBPF, improving DNS resolution behavior, and enhancing the admin portal's visibility into client and Gateway states.