Release history
OpenZiti releases
Fully-featured, zero trust, full mesh overlay network. Includes a 2FA support out of the box, clients for all major desktop/mobile OS'es.
All releases
19 shown
Routine maintenance and dependency updates.
Minor fixes and improvements.
Changelog
Release 1.5.14
What's New
Update libraries and build with the latest Go version.
Fixed rate limiter, token validation, and OIDC revocation buildup.
Full changelog
Release 1.6.15
What's New
- Bug fixes and dependency updates
Component Updates and Bug Fixes
- github.com/openziti/ziti: v1.6.14 -> v1.6.15
- Issue #3771 - [Backport-1.6] Adaptive rate limiter should use success rate rather than queue position
- Issue #3770 - Update Token Requests Should Close Channel Connections If Invalid
- Issue #3764 - [Backport-1.6] coalesce OIDC JWT revocations to reduce controller write pressure
- Issue #3760 - [Backport-1.6] revocation build-up in db and rdm
Minor fixes and improvements.
Changelog
Release 1.5.13
What's New
Update libraries and build with the latest Go version.
Updated to Go 1.26 and fixed xgress capabilities exchange.
Full changelog
Release 1.6.14
What's New
- Bug fixes and dependency updates
- Update to Golang v1.26
Component Updates and Bug Fixes
-
github.com/openziti/sdk-golang: v1.2.4 -> v1.2.4-patch1
- Issue #892 - Backport-1.2.4: Handle differences in xgress eof/end-of-circuit handling by adding a capabilities exchange
-
github.com/openziti/ziti: v1.6.13 -> v1.6.14
- Issue #3646 - Backport-1.6: Use xgress_common.Connection type for xgress_transport and xgress_proxy
Fixed reference counted meter resource cleanup in metrics library.
Full changelog
Release 1.6.13
What's New
- Bug fixes and dependency updates
Component Updates and Bug Fixes
-
github.com/openziti/metrics: v1.4.2 -> v1.4.3
- Issue #56 - underlying resources of reference counted meters are not cleaned up when reference count hits zero
-
github.com/openziti/ziti: v1.6.12 -> v1.6.13
Minor fixes and improvements.
Changelog
Release 1.5.12
What's New
Update libraries and build with the latest Go version.
Minor fixes and improvements.
Changelog
Release 1.5.11
What's New
Update libraries and build with the latest Go version.
- Heap dump generation support
- -pre version support
Full changelog
Release 1.5.10
What's New
Update libraries and build with the latest Go version.
Component Updates and Bug Fixes
-
github.com/openziti/agent: v1.0.26 -> v1.0.33
- Issue #27 - Add support for generating heap dumps
-
github.com/openziti/channel/v3: v3.0.39 -> v3.0.40
-
github.com/openziti/foundation/v2: v2.0.77 -> v2.0.81
- Issue #464 - Add support for -pre in versions
-
github.com/openziti/identity: v1.0.100 -> v1.0.120
-
github.com/openziti/metrics: v1.3.0 -> v1.4.3
-
github.com/openziti/runzmd: v1.0.83 -> v1.0.84
-
github.com/openziti/secretstream: v0.1.32 -> v0.1.42
-
github.com/openziti/transport/v2: v2.0.167 -> v2.0.200
-
github.com/openziti/ziti: v1.5.9 -> v1.5.10
Minor fixes and improvements.
Changelog
Release 1.6.12
What's New
Sync docker CI code with main
Minor fixes and improvements.
Full changelog
Release 1.5.9
What's New
This release syncs the packaging and docker code with the latest from main
Minor fixes and improvements.
Full changelog
Release 1.1.20
What's New
This release sync the 1.1 branch with the package and docker build code from main
Minor fixes and improvements.
Full changelog
Release 1.5.5
What's New
The build has been updated so this release will be created with the latest Go 1.24 release.
No other changes have been made
Fixed goroutine pool race condition and ER/T circuit connection cleanup.
Full changelog
Release 1.6.9
What's New
This release contains a fix for the goroutine pooling functionality, which prevents a
race-condition where the pool can drop to 0 workers, when configured with 1 minimum worker. Unlike
when the pool is configured for 0 minimum workers, the pool does not recover from this state.
It also contains a fix for ER/T connections which may not fully close, causing circuits to build up.
Component Updates and Bug Fixes
-
github.com/openziti/agent: v1.0.31 -> v1.0.32
-
github.com/openziti/channel/v4: v4.2.28 -> v4.2.35
-
github.com/openziti/foundation/v2: v2.0.72 -> v2.0.77
- Issue #455 - Correctly close goroutine pool when external close is signaled
- Issue #452 - Goroutine pool with a min worker count of 1 can drop to 0 workers due to race condition
-
github.com/openziti/identity: v1.0.111 -> v1.0.116
- Issue #68 - Shutdown file watcher when stopping identity watcher
-
github.com/openziti/runzmd: v1.0.80 -> v1.0.82
-
github.com/openziti/sdk-golang: v1.2.3 -> v1.2.4
- Issue #800 - Tidy create service session logging
-
github.com/openziti/storage: v0.4.26 -> v0.4.28
-
github.com/openziti/transport/v2: v2.0.188 -> v2.0.193
-
github.com/openziti/ziti: v1.6.8 -> v1.6.9
- Issue #3261 - ER/T dialed xgress connections may only half-close when peer is fully closed
- Session events for JWT sessions with provider field
- OIDC authentication fix for separate API certificates
Full changelog
Release 1.6.8
What's New
- Bug fixes and library updates
- Session Events for JWT Sessions
- OIDC Fix when using a separate certificate for the API
Session Events for JWT sessions
When using JWT sessions, instead of legacy sessions, session events will now be created.
There is a new provider field in session events, whose value will either be legacy or jwt.
OIDC Fix
There was an issue where OIDC authentication would fail if the API was configured with a different
certificate than the controller's root identity certificate.
The v1.2.3 release of the Go SDK made OIDC the default, if the controller supported it. Since the
quickstart uses separate certs certs, this was quickly noticed. If using the v1.2.3 release of
the Go SDK, and affected by this issue, updating to OpenZiti controller v1.6.8 should resolve the
problem.
Component Updates and Bug Fixes
-
github.com/openziti/agent: v1.0.30 -> v1.0.31
-
github.com/openziti/channel/v4: v4.2.21 -> v4.2.28
-
github.com/openziti/foundation/v2: v2.0.70 -> v2.0.72
-
github.com/openziti/identity: v1.0.109 -> v1.0.111
-
github.com/openziti/runzmd: v1.0.77 -> v1.0.80
-
github.com/openziti/sdk-golang: v1.2.2 -> v1.2.3
- Issue #779 - Remove need to EnableHA flag in Go SDK
-
github.com/openziti/secretstream: v0.1.38 -> v0.1.39
-
github.com/openziti/storage: v0.4.22 -> v0.4.26
-
github.com/openziti/transport/v2: v2.0.183 -> v2.0.188
-
github.com/openziti/ziti: v1.6.7 -> v1.6.8
- Issue #3207 - Allow router embedders to customize config before start
- Issue #3241 - Disconnecting Routers May Have Nil Fingerprint, causes panic
- Issue #3248 - let cluster agent also support unix domain sockets
- Issue #3219 - AuthenticatorManager ReadByFingerprint/Username should use indexes
- Issue #3225 - JWT edge sessions should generate events
- Issue #3245 - Revocation time check is checking wrong entity
- Issue #3231 - OIDC authentication fails if the client api has a separate cert chain
- Issue #3239 - Router JWTs use Identity expiration configuration value
- Issue #3226 - Only report router network interfaces if controller supports receiving those events
- Issue #3164 - Router data model doesn't work correctly if the edge listener isn't enabled
Fixed dial timing, router address changes, and multi-interface support.
Full changelog
Release 1.6.7
What's New
- Bug fixes and library updates
Component Updates and Bug Fixes
-
github.com/openziti/channel/v4: v4.2.18 -> v4.2.21
- Issue #203 - Track last dial time in UnderlayConstraints
-
github.com/openziti/edge-api: v0.26.46 -> v0.26.47
-
github.com/openziti/sdk-golang: v1.2.1 -> v1.2.2
- Issue #786 - Slow down dials to an ER if they happen too quickly
- Issue #784 - Drop retransmit error to debug
-
github.com/openziti/secretstream: v0.1.37 -> v0.1.38
-
github.com/openziti/transport/v2: v2.0.182 -> v2.0.183
-
github.com/openziti/ziti: v1.6.6 -> v1.6.7
- Issue #3199 - Other routers don't react to link listener address changes
- Issue #3178 - Controller List Edge APIs Missing
- Issue #3193 - Add flag to TOTP auth query with enrollment state
- Issue #3162 - Update go tunnel implementation to support multiple interfaces