Skip to content

TunnelYard v1.1.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 31 Aug 20:25
· 18 commits to master since this release
v1.1.3
0577e88

Windows tunnel reliability

  • Apply and verify the MTU negotiated for each session before installing tunnel IP/routes.
  • Validate adapter, IP, routes and effective MTU before showing connected; optionally check an internal TCP service configured in the profile editor.
  • Recheck isolated service-probe failures without reauthenticating; show verification in progress and disconnect after three consecutive failures. Topology loss remains immediate.
  • Detect tunnel loss and stale supervisor status; stop retrying rejected cookies or sessions where the gateway forbids reconnect-after-drop.
  • Apply Fortinet split-DNS with scoped Windows NRPT policies and remove owned settings on disconnect.
  • Retain secure CA/fingerprint verification and distinguish an unknown-CA warning from a verified certificate pin.

Packages

  • .deb — Debian / Ubuntu / Mint
  • .rpm — Fedora / RHEL / Rocky / Alma / openSUSE
  • .dmg / .zip — macOS, Intel and Apple Silicon (requires openfortivpn via Homebrew)
  • .exe — Windows x64 (setup installs OpenConnect 9.21 on first use)

All platforms import openfortivpn .conf profiles. See the README for
Windows option compatibility and signing / notarization notes.

New platforms: validation limits

Windows and macOS support is new. Automated checks cover profile
translation, local TLS/authentication and network cleanup logic.
Windows MTU, service reachability and split-DNS were also checked on a
real FortiGate session; other gateways and macOS still require native validation.
Windows currently supports IPv4 SSL VPN. SAML and all MFA variants
are not verified. The packages may trigger SmartScreen/Gatekeeper
warnings when signing credentials are not configured.

Install / upgrade (Debian & Ubuntu)

After installing once, updates come with sudo apt upgrade:

sudo apt install ./tunnel-yard_*_amd64.deb
# postinst installs the archive key and APT source automatically
sudo apt update && sudo apt upgrade

Or add the repo manually:

curl -fsSL https://lucascavalheri.github.io/tunnel-yard/apt/tunnel-yard-archive-keyring.asc \
  | sudo tee /usr/share/keyrings/tunnel-yard-archive-keyring.asc >/dev/null
echo 'deb [arch=amd64 signed-by=/usr/share/keyrings/tunnel-yard-archive-keyring.asc] https://lucascavalheri.github.io/tunnel-yard/apt ./' \
  | sudo tee /etc/apt/sources.list.d/tunnel-yard.list
sudo apt update && sudo apt install tunnel-yard

Fedora / RPM

sudo dnf install ./tunnel-yard-*.x86_64.rpm
Assets 9
Loading