SamWaf v1.3.18

Release date: 2025-12-16

✨ Features

CC protection now supports startup rule conditions. Thanks to @blue991989
One-click configuration changes now support rollback file generation. Thanks to @SONGjiemo
Added Query Analyzer for request and log analysis
Added HTTPS certificate configuration for the WAF management console, enabling HTTPS access to SamWaf
Added one-click IP blacklist action from risk and access log lists
Tunnel logs now display visitor IP, visitor port, and server port mapping. Thanks to 一只喵鱼
Migrated main database and log database management to gormigrate
Added IP banning based on error count within a specified time window. Thanks to @SONGjiemo
Added IP blacklist export feature. Thanks to @tuokang
Added Feishu and DingTalk notifications with per-message-type subscription
Added option to enable or disable beta version update checks. Thanks to @netcns
Added CLI support for executing SQL via execsql
Added HTTP/3 support. Thanks to @qiulaidongfeng
Enhanced custom response code configuration UI
Added system firewall IP management
Added ability to manually remove risk tags. Thanks to @Sky-Sparkle
Added log-related configuration panel
Added search engine crawler bot detection in rule engine. Thanks to Lucky
Tunnel feature now supports time-based access control

Fixed runtime errors on Debian systems. Thanks to @apibits
Fixed firewall IP blocking not taking effect on Linux
Fixed issue where updated certificates in the certificate folder were not applied to bound hosts. Thanks to @netcns
Fixed wildcard domain renewal changes not being synchronized correctly. Thanks to @Think-Me
Fixed AI assistant returning “non-JSON response from remote server” after arbitrary input. Thanks to @Sky-Sparkle
Fixed backend IP and port changes not taking effect immediately. Thanks to 10828**
Fixed HTTP certificate application failure when backend responses were gzip-compressed. Thanks to 10828**
Fixed AI assistant text visibility issue in dark mode. Thanks to @scavin
Fixed potential index loss in the stat database after service restart

Improved database merge operations with clearer error feedback. Thanks to @wangpenga999
Reduced heap allocations when concatenating request headers. Thanks to @qiulaidongfeng
Optimized IP failure-based banning logic. Thanks to @SONGjiemo

📌 More details: Please follow the SamWaf official WeChat account for additional information.