t-aleksander
Aleksander
🎉 Welcome to Defguard 2.1 🎉
2.1 makes the device itself part of the access decision - admins define the security criteria a machine must meet, and non-compliant endpoints simply can't establish a connection - and it ships a rebuilt Desktop Client whose tray mode gets your users onto the VPN in two clicks.
🛡️ Device Posture verification - client and OS version, security updates, AD membership, antivirus, disk encryption,
🖥️ a redesigned Desktop Client with tray mode,
⌨️ defguard-client - drive the client from a terminal, MFA included,
🔒 Allowed IPs generated from Firewall Rules - least-privilege configs, no network recon,
🐧 service locations on Linux - Always-on VPN from system boot,
🧩 official support for running Defguard Gateway on VyOS as a container.
More details with videos in this blogpost.
🔐 As always, this release was pentested by ISEC, together with Striga.AI - all major findings were fixed before release. The full report will be published on our pentesting page.
📖 Documentation for the new features:
- Device Posture verification
- CLI client
- Generate Allowed IPs from Firewall Rules
- Service locations
- Running Gateway on VyOS
🚅 If you would like to test Defguard, we offer a quick and easy One-line install script.
Business features require free registration.
👉 https://defguard.net/get-free-business/
Once registered, simply apply your license to your instance.
We want to get as much feedback as possible, so we encourage you to:
💬 open a GitHub discussion
🪲 report any missing features or bugs as issues
What's Changed
- Expand example-config.toml by @moubctez in #326
- chore(CI): update CI workflows for new branching setup by @wojcik91 in #327
- Build debs for debian 12/ubuntu 22.04 by @jakub-tldr in #328
- chore: bump version to 2.1.0 & merge upstream changes from stable/2.x… by @wojcik91 in #330
- Updated README by @kchudy in #334
- Fix config file in FreeBSD package by @moubctez in #336
- merge stable/2.x -> dev by @wojcik91 in #338
- Clean on quit by @moubctez in #331
- Stable to dev by @moubctez in #340
- Purge on disconnect by @moubctez in #343
- Fix peer removal by @t-aleksander in #345
- Update wireguard-rs by @moubctez in #348
- Dev -> release/2.1 merge by @t-aleksander in #356
- chore: port disconnect recovery fix from stable by @wojcik91 in #358
- port CI updates from stable branch by @wojcik91 in #363
- bump protos to stable/2.x by @j-chmielewski in #364
- bump core dependencies by @j-chmielewski in #365
- port OPNsense plugin fix from stable by @wojcik91 in #366
- DG2608-21: WireGuard private key and peer preshared keys are written to logs in cleartext at debug level by @moubctez in #370
- Migrate sbom ignore, bump deps by @t-aleksander in #371
- Bump core dependency by @t-aleksander in #372
- Remove major docker tag from being automatically added by @t-aleksander in #374
Full Changelog: v2.0.1...v2.1.0
