zorven
EN
TürkçeEnglish日本語
Sign in Start free
Release 0.2.16 - 0.2.28

Zorven 0.2.16 - 0.2.28: Zero Trust access, full network layer, direct connections and faster screen sharing

A summary of releases 0.2.16 through 0.2.28. Your client updates automatically; to update by hand run zorven update. The desktop app and the CLI now ship together with the same version number.

Zero Trust access (ZTNA)

  • Device posture: clients report the device's security state; policies can allow or deny based on it.
  • Mid-session re-evaluation: if a condition stops holding (for example an allowed time window ends), open sessions are closed too. You can preview policies before saving them.
  • Tunnel WAF and country rules: block attack patterns and countries, or require a challenge, from each tunnel's Security tab. Country data comes from DB-IP Lite and updates automatically every month.
  • Enterprise identity (Enterprise): sign-in with OIDC and SAML, group mapping, and SSO enforcement for your domain.
  • Device certificates (Enterprise): mTLS certificates for devices from a CA dedicated to your tenant.
  • ZTNA over the private network: policies become private network access rules, with DNS and an access log for private resources.

Zorven Net: full network layer and direct connections

  • Full network layer: zorven net up adds a virtual network interface; reach authorized peers by IP or <device>.zorven.internal from any application. Works on Linux, Windows and macOS; the Windows driver (wintun) is downloaded automatically and signed.
  • One click on desktop: turn it on and off from the Full Network Layer card in the desktop app (requires administrator rights; the app offers to restart as administrator when needed).
  • Direct connections: devices connect directly through NAT whenever possible and fall back to relaying through the server. The panel shows direct/relay status and latency for each peer.

Screen sharing

  • Faster: parallel encoding, fast scaling and a two-stage pipeline; up to 30 fps.
  • Adaptive: the client adjusts quality and frame rate to what the viewer actually receives, so slow links stutter less.
  • Performance overlay: see stage timings, real quality and a bottleneck hint while viewing.
  • Note: on Windows, a client running as a system service cannot capture the screen (a Windows restriction). For screen sharing use the desktop app or zorven --enable-screen in your session.

Claude and AI tools (MCP)

  • Tunnel MCP mode: publish your own MCP server through a tunnel, with OAuth or API key authentication, a tool allow/deny list, JSON-RPC logging and analytics.
  • Full access: after a re-login confirmation you can grant the Claude connector everything you can do in the panel. Deletion needs a separate permission.
  • Docs: API and MCP documentation updated, now also in Japanese.

Client

  • zorven settings (or zorven set): an interactive settings screen driven by the arrow keys, Enter and Esc. Server, key, remote terminal and screen permissions in one place.
  • Desktop updates: when the app folder is not writable, the updater asks for administrator approval instead of sending you to the download page.
  • Clearer errors: the reason a connection fails (for example another client connected with the same device key) now stays on screen.
  • A log file for the Windows service and a zorven debug stacks diagnostic command.

Security

  • Session cookies now use the __Host- prefix, so subdomains cannot plant cookies. Everyone had to sign in again once during the switch.
  • Security audit fixes: IPv6 rate limiting, raw TCP connection limits, the IP allow list failing closed, and grant revocation on OAuth code replay.
  • Fixed a bug where cancelling a visitor request could drop the whole client connection.

Panel and site

  • The updates page now lives at /updates (the old address redirects).
  • New 404 pages on the site and the panel.
  • Two-step tunnel picker when adding a domain: first the client, then that client's tunnel.

← All updates