v0.8.0

New features:

⭐ Desktop Clients 💻 ⭐

We have released the official (and beautiful ❤️) macOS and Linux desktop clients supporting multiple defguard instances and automatically configuring all Locations in the instance.

You can download them from client release page and read here how easy it is to configure the desktop client.

Windows desktop client is in development and will be released soon

Desktop client user enrollment and onboarding

When Remote enrollment is enabled while adding a new user, the user can now choose enrollment via Web Browser or Desktop client.

All instructions are sent to the newly created user via email.

Multi-Factor Authentication via Email codes

A new MFA method has been added, utilizing codes sent via email.

Email notifications about important changes

Defguard now sends email notifications informing about important actions that took place:

Each email has information about the date, IP address, browser, and device that was used to act.

SSH authorized keys endpoint

Please read the documentation on how to easily configure your SSH server to access SSH keys, that are stored in Defguard (privision via YubiKey provisioning).

In the next release, the user will be able to manage any SSH keys, not only the ones provisioned via YK provisioning.

LDAP configuration via Settings

In defguard settings, a new tab is dedicated to configure and test LDAP server configuration.

wireguard-rs library and crate

Our gateway and desktop client now use a unified Rust library - wireguard-rs providing unified WireGuard interface to native/kernel and userspace implementations.
The crate (besides Wireguard) also supports:

• Peer routing - see WGApi docs.
• Configuring DNS resolver - see WGApi docs.
  ** On FreeBSD network interfaces are managed using ioctl.
  ** On Linux, handle network routing using netlink.
  ** fwmark handling

Fixes

A lot! of fixes

New Contributors

• @blazej-teonite made their first contribution in #402

Full Changelog: v0.7.1...v0.8.0