# Firezone Devlog

A monthly, technical account of what shipped across Firezone's clients, gateways, networking infrastructure, and admin portal.

## Latest devlog

### July 2026
Log sinks for popular SIEMs, certificate-backed device trust, more resilient roaming, faster Windows networking, and secretless Entra authentication.

### 2026

#### June 2026
Faster packet handling, structured incremental flow logs, first-party Nix packages, connected-device visibility on Apple, and more resilient telemetry.

#### May 2026
Secure Client-to-Client traffic, connected-device visibility, hardened local IPC on Windows and Linux, and audit logs through the REST API.

#### April 2026
Filter-aware routing on clients fixes a long-standing overlapping-resource bug, the macOS menu bar app stays running under memory pressure, smarter RTT-aware relay selection, and improved Linux network-change detection.

#### March 2026
A 25% reduction in client and gateway CPU usage from connlib performance optimizations, Google Workspace group filtering for directory sync, and smaller fixes for DNS forwarding and relay reliability.

#### February 2026
Faster sign-ins from distant regions via regional read replicas, automatic tunnel-service recovery on Windows and Linux, OS-native connection-failure notifications on clients, and browser-based authentication for headless clients.

#### January 2026
Multi-region infrastructure with database read replicas and Postgres clustering. Portal performance improvements with Bandit HTTP server and WebSocket rate limiting. Enhanced partition tolerance for gateways and relays.

## 2025

#### December 2025
Major portal architecture refactor collapsing umbrella apps, authentication system restructuring, relay connection reliability improvements, and database performance optimizations.

#### November 2025
DNS over HTTPS support, Swift 6.2 upgrade for Apple clients, Wayland support for the Linux GUI client, and various Gateway reliability improvements.

#### October 2025
October delivered substantial improvements to Gateway observability, Linux networking stack refinements, and new deployment mechanisms. This month's work focused on implementing comprehensive flow logging, addressing routing conflicts through tiered routing tables, and introducing native Debian packages for easier deployments.

#### September 2025
September brought significant improvements to Firezone's networking stack, administrative tooling, and cross-platform reliability. This month's work focused on optimizing relay performance through eBPF, improving DNS resolution behavior, and enhancing the admin portal's visibility into client and Gateway states.