Devolutions/devolutions-gateway v2024.1.1 on GitHub

webapp: bump IronVNC and IronRDP packages (#730) (dd46b48559)
- RDP: enable performance flags
- VNC: disable MVS codec for ARD
- VNC: clipboard support

installer: layout tweaks for better HiDPI support (#724) (dd864ba80e)
webapp: disable debug logging by default (#726) (27d70c9af4)
Remove console.logs and turn off debugwasm for IronRDP and IronVNC.
dgw: UI issues in sidebar menu and web form (#727) (6b605780c3)
dgw: fix Linux issues with network scanner (#715) (0c6f644724)
webapp: update SSH and Telnet packages (#728) (5bc14ec9c7)
Fixes a bug when the hostname is incorrect where the connection to the Gateway was being lost, and close session elegantly.

This build also includes the changes from 2024.1.0 (2024-02-26)

dgw: standalone web application V1 🎉
installer: new Windows installer built using WixSharp
pwsh: add powershell user management with argon2 password hashing (#658) (7157ad6082)
installer: add ngrok configuration support (#669) (2caeabab2e)
dgw: debug option to set the webapp path (#663) (7da20760f1)
The DGATEWAY_WEBAPP_PATH env variable is conserved.
A new stable and documented configuration key is added: WebApp.StaticRootPath.
The environment variable will be checked first, then the key in the config file,
and if nothing is specified, we fall back to a webapp folder along the executable.
dgw: network scan HTTP API (#689) (846f21d660)

dgw: use all resolved addresses when connecting (#601) (fe4dc63e40) (DGW-125)
This patch ensures Devolutions Gateway does not immediately discard
resolved addresses which are not emitted first by Tokio’s lookup_host.
Typically, the first address is enough and there is no need to try
subsequent ones. Therefore, it is not expected for this change to
cause any additional latence in the the vast majority of the cases.
However, just to be on the safe side and enable easier troubleshooting,
a WARN-level log is emitted when failing at connecting to a resolved
address. If latence were to be introduced by this patch, we can
easily be made aware of the problem and investigate further (network
configuration, etc).
If this proves to be a problem in the future, we can add filtering
options. For instance, on a network where IPv4 is not supported or
disabled, we may want to filter out all the IPv4 addresses which may
be resolved by the Devolutions Gateway.
dgw: improve logs quality for JMUX proxy (abaa7b23bb)
Notably, status codes like ECONNRESET or ECONNABORTED are not
considered anymore as actual errors, and will be logged accordingly.
dgw: improve JMUX proxy error display in logs (#666) (a42b9d6395)

dgw: upgrade Windows store resolve error log (#617) (4c4df605d0)
This can help with troubleshooting configuration problems with
Windows system certificate store.
dgw: better status code for unreachable KDC server (#618) (d0cbd7f6db)
dgw: spurious warning when using a wildcard certificate (#647) (b2244a9ab4)
dgw: ensure the hostname matches TLS certificate (#648) (6ebee46634)
Warning logs are ignored at this point (logger not yet initialized),
so it doesn’t really help. Since specifying a hostname not matching the
TLS subject name is a configuration error, we now return an error upon
loading the configuration.Log warnings are ignored at this point, so it
doesn’t really help.
dgw: better support for ngrok free plan (#718) (dc58835e20) (DGW-134)
Our installer is allowing the 0.0.0.0/0 CIDR by default because
premium plans need the IP restrictions to be configured or just
all external traffic. However this doesn’t play well with the free
plan. This patch is using a dirty trick to detect the free plan
and ignores the IP restriction configuration when it is detected.