Release notes

Version 2024.3.6.0 (December 6, 2024)

• Service - Crash resistance has been enhanced using a persistent job queue stored in a SQLite database file

• Service - Support for recording mass deletions

• Service - Disallow SCOPE tokens missing the jti claim (effectively dropping support for DVLS v2022.1.9 and prior)

• Service - Various log records were improved to help with diagnosing issues

• Service - Improved support for .cast files containing two slices with the same timestamp

• Service - Proper detection of remaining disk space for custom recording paths on Windows

• Service - The recording policy was not properly set for RDP via the web

Version 2024.3.3.0 (October 4, 2024)

• Service - In the recording player, start the recording immediately when the tab is opened

• Service - Prevent recording files from being deleted or modified while the recording is running

• Service - Add backpressure to the Devolutions Gateway Tunnels, ensuring there is no unbounded memory consumption

Version 2024.3.2.0 (August 27, 2024)

• Service - Accept with a warning subject name for system-provided certificates even if it does not match the configured hostname

• Service - Print more details in the error when the requested KDC domain does not match the authorized domain

• Service - Signficant enhancement in throughput for Devolutions Gateway Tunnel (requires updated RDM version for optimal performance)

Version 2024.3.1.0 (August 9, 2024)

• Service - Remux WebM files when video recording ends. This fixes video playback stopping a few seconds before the actual end of the recording

• Standalone Web Application - Add tooltip ellipsis for long netscan service names

• Service - Fix a bug preventing a session from running when the recording enforcing option is set. This option is not enabled by Devolutions Server for previous versions of Devolutions Gateway, so the bug does not actually manifest, but the recording policy is not enforced up until this version

• Service - Fix a recording loading bug in recording player page

Version 2024.3.0.0 (July 26, 2024)

• Service - Support for .cast terminal recording files

• Service - Support for enforcing recording policy by automatically killing non-recorded sessions

• Service - Preserve Devolutions Gateway access URI base in recording player

• Service - Properly scale recording player with the size of the window

Version 2024.2.3.0 (June 19, 2024)

• Service - Recording web player

• Installer - Improved configuration checks at installation in order to help troubleshooting common problems immediately

• Service - Automatically disable IP restriction rules for ngrok TCP listeners when the subscription plan does not support them

Version 2024.2.1.0 (May 23, 2024)

• Installer - use Win32 to set file permissions

Version 2024.2.0.0 (May 22, 2024)

• Standalone Web Application - support for ssh encrypted keys

• Service - consolidate JRL file update by writing new JRL into a temporary file, and swap on success

• Service - do not show error traces caused by browser behavior

• Service - keep HTTP connections open for 10 minutes to improve performance of the web application

• Standalone Web Application - add tooltip to menu warning icon when session is closed

• PowerShell - fix reading .pem files from PowerShell runspace

• Standalone Web Application - connect session button stays grayed out intermittently

• Standalone Web Application - fix force network rescan button

• Standalone Web Application - fix misaligned "Fill form" buttons when the hostname is too long

• Standalone Web Application - fix netscan result duplicates

• Standalone Web Application - format the error backtrace to show line breaks

• Standalone Web Application - menu icon does not update on error for RDP, ARD, VNC

• Standalone Web Application - tooltip for the selected protocol is always set to RDP

Version 2024.1.6.0 (May 7, 2024)

• Analytics to better understand how the Standalone Web Application is used (only applies to the Web Application)

• Network scanning in Standalone Web Application

• Recording management and diagnostics API (used via DVLS or Hub)

• Support for SSH key authentication in Standalone Web Application

• WebM player for remote desktop recordings

• Greatly improve performance for ARD protocol in Standalone Web Application

• Gracefully return an error status when the service fails on startup

• Install the Devolutions Gateway service as NetworkService (breaking)

Version 2024.1.5.0 (April 8, 2024)

• Prevent possible prompt for firewall access in Windows installer

Version 2024.1.3.0 (March 14, 2024)

• Check if a new version is available in the standalone web application

• Support for client-side rendered hardware-accelerated cursors in VNC web client

• Improve the error catching for VNC and ARD web clients

• Show error backtrace for VNC, ARD and RDP web clients

• Version number at the bottom of the standalone web application menu

• Fix connection not shut down properly in VNC web client

• Properly write ARP InstallLocation on fresh installs

Version 2024.1.2.0 (March 5, 2024)

• Network scanning capabilities

• Standalone mode with web application

• Better support for ngrok free plan

• Improve logs (better status code for unreachable KDC server, upgrade Windows store resolve error log, etc)

• New Windows installer with more configuration options (ngrok, etc)

• Support for non-PEM, binary certificate and key files

• Spurious warning when using a wildcard certificate

Version 2023.3.0.0 (October 31, 2023)

• Support for PFX files natively (as opposed to extracting the certificate chain and private key using the PowerShell module)

• Support for Windows Certificate Store

• Add (Get|Set|Reset)-DGatewayConfigPath cmdlets in PowerShell module

• Support for configuring ngrok tunnel configuration in PowerShell module

• Support for configuring verbosity profile in PowerShell module

Version 2023.2.4.0 (October 24, 2023)

• New VerbosityProfile option to control log verbosity

• Add support for more X.509 cert PEM labels ("X509 CERTIFICATE" and "TRUSTED CERTIFICATE")

• Improve logs quality

• Proper timeout for HTTP listeners

• Shutdown streams gracefully at the end of the forwarding

Version 2023.2.3.0 (August 17, 2023)

• RecordingPath and Ngrok options are now stable and officially supported

• Returning error 500 when listing recordings but recording folder is missing

• TLS forward route (notably required for LDAPS)

Version 2023.2.2.0 (June 28, 2023)

• Minor adjustments in built-in ngrok agent configuration. Notably, durations in configuration file are now specified in seconds using a JSON integer instead of a string in the humanized duration format. This only affect ngrok configuration (still in preview)

• Fixes occasional payload truncation. In some cases, the payload sent by the client is truncated. This can cause the target server to reset the connection due to a protocol error. This bug is known to be triggered by the RDM built-in SSH client

Version 2023.2.1.0 (June 12, 2023)

• Properly ignore case for hostnames and schemes (e.g.: DEVOLUTIONS.LOC and devolutions.loc are considered the same for all intents and purpose)

• Properly use token from request path when authenticating KDC proxy requests

Version 2023.2.0.0 (May 31, 2023)

• Built-in Ngrok tunnelling (preview)

• Recording capablities

• Support for "Devolutions Gateway Tunnel" sessions

• Support for LDAP / LDAPS sessions

• Support for load balancing via DVLS (heartbeat route)

• Support for sessions via Remote PowerShell Web Client

• Gracefully handle service shutdown

Version 2023.1.3.0 (March 20, 2023)

• WebSocket to TCP endpoint

• WebSocket to TLS endpoint

• Log rotation is now size-based

• When setting up a TLS-enabled listener, certification chain is sorted from leaf to root regardless of the actual order in the provided file

• When Windows installer fails, rollback config folder to its initial state

Version 2023.1.1.0 (February 25, 2023)

• Better TLS leaf certificate public key extracting

Version 2023.1.0.0 (February 15, 2023)

• Support for clean path PDU extension for RDP. Required in order to use RDP web client

• Show *.cer files when browsing for certificate files in installer

Version 2022.3.4.0 (January 18, 2023)

• Telnet protocol default port detection

• Ensure default config on install before applying "Configure now"

• Properly display password placeholder characters in install summary

• Properly set access URI host when using "Configure now" option

Version 2022.3.3.0 (December 13, 2022)

• Better defaults on fresh installation (TCP port to 8181, file extensions…)

• Fix /jet/health route when poking from a web browser

• Start the Gateway service at install time if the service startup type is "Automatic"

Version 2022.3.2.0 (November 28, 2022)

• Enable configuration of Devolutions Gateway via installer UI on Windows

• Install service as "Local Service" again (fewer permissions)

• Listen for IPv6 requests by default

• Support for full TLS certificate chain

Version 2022.3.1.0 (October 17, 2022)

• Subscriber API

• Support for configuration pushing using a new HTTP endpoint

• Support for forced session termination using a new HTTP endpoint

• Support for KDC proxy

• Support for maximum session lifetime enforcing

• Tighter token restrictions (improved security)

• Revert MSI service installation as "Local Service" introduced in v2022.1.1.0

Version 2022.2.2.0 (June 20, 2022)

• Official support for ARD, VNC, SCP, SFTP, PowerShell via WinRM, PowerShell via SSH

• Health route logs have been downgraded to debug level

• Log files are now rotated on a daily basis

Version 2022.1.1.0 (March 10, 2022)

• Initial KDC proxy implementation

• Diagnostics/configuration endpoint now also returns Gateway's version

• New diagnostics/clock endpoint to troubleshoot clock drift

• Windows installer (MSI) now installs Gateway service as "Local Service" (fewer permissions)