Changelog
What was added and changed in the current development version of ToutWAF, in short. No stable version exists yet.
Version 0.3.0-dev
The development version is always named 0.3.0-dev, with no counter, and each publication replaces the previous one; a build identifier (12 characters) tells two publications apart. The stable version 0.3.0 is published only when everything has been tested, and none has met that bar yet.
- The development channel is the test version: it may carry experimental functions, off by default. The stable channel has no version.
- The installers, the console and the agents compare the build as well as the version: a new build of 0.3.0-dev is detected as “same version, new build”.
Added
A summary: the full list is in the documentation.
- Organisations and managed-service providers: per-organisation quotas, suspension, moving a site, invitations, a policy floor and one report per client. A licensed function.
- Cluster: supervised servers (one is free), host security checks, availability probes, a standby console promoted by hand, an encrypted backup server.
- IP and geo: degrees by country, an explained reputation score, trusted addresses, personal lists with import and export.
- API security: route profiles with an assistant, schema validation, object-level authorisation checks, WebSocket limits. Load balancing: route pools, drain, canary roll-outs.
- Certificates: several ACME authorities with automatic failover, and a DNS check that looks at every A and AAAA record before the order.
- Automatic rules and definitions: exceptions from your own traffic, a self-test of a new site, a measured precision of each list. Licence-required functions (Pro and up).
- Doctor: one diagnostic from the machine to the origin of each site, with cause and action. Scheduled tasks: built-in actions on a cron schedule.
- Extended audit log (CEF and Syslog) and 45 integration modules, 6 of them free.
- Optional Firewall and VPN modules, off by default and never proven on a real server; a mail gateway under licence, experimental.
- Dynamic address (DNS) and origins with a dynamic address, off by default; an online licence server and a signed revocation list, optional and never blocking.
- Dashboard history up to one year.
Changed
What may surprise you when you upgrade.
- The free editions (Free and Free +) may be used professionally. Licensed functions stay visible and locked (“Licence required”).
- When a paid licence ends: 48 hours of grace, 48 hours of read-only, then WAF protection off until renewal; traffic keeps flowing, unprotected.
- The antivirus is a module, off by default, and withdrawn from the default deliverables; the collective defence network is no longer offered; HTTP/3 is not offered.
- Requests ToutWAF makes to third parties no longer name the product or its version (neutral User-Agents).
- Texts across the ten languages follow one term and one register per concept.
Put a shield in front of your applications today
Install it on your own server, or get in touch to talk about licences.