Devolutions/devolutions-gateway v2025.3.0

on GitHub

Security

• dgw: emit syslogs and Windows events for important events (#1491) (15321b89bb) (DGW-63)

  Easier auditability of Devolutions Gateway service by emitting system-wide logs.

Features

• webapp: implement MVP for self-contained session URLs (#1433) (9f5d4d190f)

  Introduced support for launching sessions directly from specially crafted URLs.
  These URLs include all necessary information to immediately initialize and
  (optionally) auto-connect a session upon opening.

  New query parameters:

  • config: Encoded session configuration data
  • autoconnect: If set to true, the session starts automatically
  • protocol: Specifies the protocol to use (currently only rdp is supported)

• webapp: support clipboard for SSH and Telnet clients (#1437) (5a5c065d1e) (ARC-266)

• dgw: (Unstable) basic network monitoring (#1446) (d135342682) (DGW-302)

  Introduces an endpoint monitor that checks the uptime of a list of hosts
  provided through a remotely-submitted configuration file. The monitor
  results are saved to a temporary in-memory buffer and can be fetched by
  means of a REST endpoint.

  The monitor system is structured as an agent, meant to be driven by a
  third party (for example our DVLS), so the configuration is ephemeral, and
  monitor results are deleted from the buffer after being fetched.
  Gateway is not itself the source of truth for the monitor configuration,
  and it does not persist the log entries.

  Two authenticated endpoints are introduced:

  • POST /jet/net/monitor/config
  • POST /jet/net/monitor/log/drain

• webapp: add fallback screen for unsupported browsers (#1461) (61ac8a2003)

• dgw: keep records of traffic transferred via JMUX tunnels (#1466) (d23c29c9fa) (DGW-270)

• dgw: implement traffic audit claim/ack HTTP endpoints (#1468) (2328ba5fea) (DGW-271)

  Add two new endpoints for external traffic audit integration:

  • POST /jet/traffic/claim - Claim events with lease-based locking
  • POST /jet/traffic/ack - Acknowledge processed events

• agent-installer: rename the session feature and make it available by default (127dd773c6)

• agent: minimalist "About" window for tray icon (#1471) (a43bd6609e)

• jetsocat: MCP proxy (#1478) (3eadd1ddfb)

  Example usage:

  echo '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | jetsocat mcp-proxy - https://learn.microsoft.com/api/mcp

• jetsocat: add "jmux" alias for jmux-proxy command (#1486) (76c9cde1c9)

• jetsocat: expand simple pipe names (#1485) (abe9972186)

  Add automatic path expansion for np:// and np-listen:// schemes:

  • Windows: simple names expand to ./pipe/<NAME>
  • Unix: simple names expand to /tmp/<NAME>

• webapp: granular JPEG Quality option instead of explicit TightLow and TightHigh pseudo-encodings (#1488) (7cb9fd2a8d)

• webapp: add color format selector for VNC session (#1475) (9ddf10c24f)

  Allow the user to tune the session quality more deeply
  (e.g, lower image quality if the network is slow).

• agent: in RDP extension, add PowerShell server mode support (b626323386) (#1498) (ARC-383)

Improvements

• Improve container image for Azure Web App usage (ba8c4c218d)

• webapp: improved error handling in remote desktop clients (#1456) (c6dcb1666d)

• webapp: [breaking] add manual clipboard mode for RDP, VNC and ARD (#1459) (b4e231f853)

  The original auto clipboard mode, can now be enabled/disabled in the connection form.
  It's available only for browsers based on Blink engine (e.g.: Chrome).

  For others, auto clipboard mode is always disabled.

  When disabled, two new buttons are showed in the toolbar: Save Clipboard and Send Clipboard.
  These buttons allow the user to manually send the content of the client host clipboard, or receive from
  the server clipboard.

  Note that Firefox used to have a partially working autoclipboard mode, but it was
  completely removed because the cases where it failed were confusing more than helpful.
  The auto clipboard mode is the most convenient, but the manual clipboard mode
  has a predictable behavior on all platforms.

• webapp: improve clipboard interaction for outdated versions of the Firefox browser (#1464) (0c547d4596)

• webapp: disable clipboard in non-secure context (#1467) (9111ff85a1)

Bug Fixes

• webapp: incorrect user domain parsing for UPN format (#1431) (0638e665c9) (DGW-297)

  Fix username parsing logic to correctly handle UPN and down-level
  formats.
  Only splits DOMAIN\user format; preserves user@domain.com as-is.

• agent: change PowerShell exec session run params (#1474) (ef0465d1fa)

• agent: remove command echo for batch(cmd) execution (f461a6ddf1)

• agent: hide console window for exec sessions with IO redirection (bb50b6ab05)

• agent: suppress ANSI escape codes in pwsh output (fa67ff1e27)

• player: add autoplay attribute to WebM video player (#1487) (0fac6ddc81)

  Fixes issue where recordings were not auto-starting when embedded in
  iframes

  DGW-296

Build

• agent-installer: add tun2socks.exe and wintun.dll to Devolutions Agent package (#1457) (e6f335c970)

• jetsocat,dgw: optimize binary size (#1489) (8ad7ea0e96)