v1.8.0

Update:

• Dashboard and Access Lists now support SSO.
• Added a Top Referrers report to help you track your most valuable traffic sources.
• Tables are now customizable (you can toggle columns on and off).

v1.7.0

Update:

• Implement optional TOTP two-factor authentication to Access List accounts
• Implement per-user API tokens to Access List accounts
• Show authenticated users in Sessions and Recent Traffic tables

v1.6.0

Update:

• Implement multi-user admin accounts with TOTP-based two-factor auth
• Implement per-site/per-stream Viewer/Manager permissions
• Implement a tamper-evident audit log of every admin change

v1.5.0

Update:

• Add IP and country allow/block rules for streams
• Add per-IP connection limits for streams
• Add per-IP new-connection rate limiting for streams
• Add a UDP amplification guard for streams
• Add automatic temporary bans for abusive connection patterns, with built-in generic and Minecraft Java rulesets
• Redesign the streams traffic log and bandwidth tables to match the web proxy dashboard

v1.4.1

Update:

• Add X-BurrowGate-Request-Id tracking header across client, origin, and traffic search
• Improve search performance in all tables

v1.4.0

Update:

• Managed WAF blocks now automatically temp-ban the source IP, with the ban duration configurable per severity (low/medium/high/critical) at the site level, with per-route-policy overrides.
• IP rules created this way record the triggering rule ID, so a misconfigured rule can be spotted and its bans undone quickly.
• The IP rules admin table gains row/select-all checkboxes and a bulk "Unban selected" action, plus a Rule ID column. The existing search box now also matches rule IDs.
• Report ban expiry to clients via reason text and Retry-After header

v1.3.1

Update:

• Add a distinct country code (XX) for private and loopback addresses

v1.3.0

Update:

• Improve design of Routes page

v1.2.0

Update:

• Implement managed request protection
• Implement safe static-asset caching with metrics and purge support
• Implement per-site and per-route header policies and request limits
• Implement per-site and per-route WebSocket transport controls
• Preserve fixed-length request bodies for upstream services
• Hide origin from Recent Traffic table when the site only has a single origin
• Improve site editor
• Improve table views

v1.1.1

Update:

• Implement per-site client IP extraction
• Preserve public host and forwarded headers for upstream services
• Correct redirected URLs to remove internal origin ports