This patch release makes key logins to a device faster, fixes SSH sessions that stayed open on the device, and smooths the device map that came in v0.30.0.
Faster logins to devices
Logging in to a device with a public key no longer waits on a 4096-bit RSA key. The gateway now mints that one-minute login key at 2048 bits, which takes 45 ms at the median instead of 400 to 730 ms, and at most 120 ms instead of 2.3 s (#7879). Agents accept any RSA size, so they need no update.
The gateway also acknowledges the client's packets right away during the SSH handshake. Before, Linux could hold an acknowledgement for up to 40 ms several times per connection while OpenSSH waited for it (#7882).
Sessions close on the device
- If a client left while the gateway was still connecting to the device, the device kept the session open. The gateway now closes it (#7892)
- The agent now drops a session once its stream ends, so streams the gateway never got to close don't pile up while the agent runs (#7883)
Device map
- A device that registered before GeoIP was on stayed at 0,0 and never showed on the map. It now moves to its real position the next time it connects (#7876)
- Picking an area on the Dashboard map opens the full map on that area (#7890), and picking a point with a single device opens that device's summary straight away (#7885)
- The map's side panels fold away so they stop covering the map (#7894). The area panel closes when you click outside it or press Escape (#7891, #7895)
- Every map style now draws the world once instead of repeating it sideways (#7873)
- The map's shadows and zoom buttons follow the light and dark themes (#7888)
Also in this release
Fixes
- Two parallel requests that create an API key or a provisioning key, or rename a tag, under the same name now get a 409 conflict on the second request (#7880)
- Switching between two namespaces on the same page now reloads it with the new namespace's data (#7893)
Performance
- The reverse tunnel no longer builds trace-log fields when trace logging is off, which cuts a 128-byte request and reply from 40 allocations to 4 (#7881)
Full Changelog: v0.30.0...v0.30.1