Note

This time, the acl rule table structure has been modified to support multi-port and multi-range settings. Please back up the data before upgrading. After the upgrade is completed, please reconfigure and save the acl rules.
This time, private self-signed certificates are supported, and certificate independence is achieved. You can use IP to access directly. It is recommended to use a formal and trusted certificate for online environments.
This time, domain name dns segmentation is supported, and a specific domain name can be configured to use the backend configured dns

What's changed

• Set docker non-privileged mode
• Fix the character limit bug of database password field after upgrade
• Add CallingStationID to radius
• Add front-end manual unlocking function for explosion-proof
• Add mssql support
• Optimize code and enable OTP explosion-proof
• Encrypt password using existing encryption scheme
• Add password encryption storage function, which does not affect old users, but automatically encrypts storage after update
• Fixed the bug that changing the custom homepage status code does not work
• Add the LimitTime expiration time field in the email template
• Upgrade the go version and add acl protocol support
• Add drag and drop function to permissions
• Add nasip that supports radius
• Fix the problem of incomplete display of ipv6 records
• Fix the number conversion problem
• Fix the online user problem
• ACL supports comma-separated multi-port number configuration
• Support private self-signed certificates
• Repair acl table structure
• Support split DNS function

What's changed

• Add custom homepage status code
• Fix the email image display logic and make it compatible with google gmail
• Globally enable server forwarding
• Added online user search and one-click offline functions
• Add AnyLink client macOS type judgment
• DTLS is turned off by default
• iptables add comment
• Fix mail STARTTLS protocol
• Add footer copyright
• Fix the problem of reconnection of mac mobile client
• Modify atomic reference
• Add profile name (used to distinguish configurations of different websites)
• Exclude export ip routing (export ip is not encrypted for transmission)
• Fix heartbeat time

What's changed

• Fix the problem that iptables does not take effect under alpine:3.19
• Add white export ip by default
• Add appBuildDate
• Modify certificate name
• Fix openconnect reconnection problem
• Add otp description
• Update golang and go.mod

A lot of optimizations and feature additions have been made this time. If you have any problems during use, please contact me.

• Add multi-architecture compilation, including linux/amd64, linux/arm64
• Add username, name, email fuzzy search support
• Added automatic disconnection of idle link timeout
• Add deploy deployment script, including systemd, docker-compose, k8s
• Add docker to start for the first time and automatically initialize the configuration file
• Update certificate information

What's changed

• Fix OpenConnect DTLS MTU detection following DPD-REQ protocol
• Update go.mod 7day
• Add github action compilation