What's new in Kimox

Monitor subnet routers from the admin console with live peer counts, last-seen timestamps, and failover status indicators.

Large tailnets with 500+ rules now compile in under two seconds, down from eight. Incremental updates skip unchanged policy blocks.

Resolved an issue where the Windows agent failed to re-establish tunnels after laptop sleep on certain Wi-Fi drivers.

Automatically map IdP groups to Kimox tags. New hires inherit mesh access on their first login without manual provisioning.

Scheduled exports now support Parquet format and custom S3 prefixes for easier ingestion into your SIEM.

Assign preferred exit node regions per device group. Traffic routes through the nearest healthy exit automatically.

Custom DNS records with wildcard subdomains now resolve correctly across all mesh peers.

The provider no longer reports false drift when ACL rules are reordered but semantically identical.

Users can request time-bound access to tagged resources. Approvers receive Slack notifications with one-click grant or deny.

Background keepalive intervals adapt to network conditions, reducing battery drain by up to 40% on mobile devices.

Global search now indexes devices, users, ACL rules, and DNS records. Results appear as you type with fuzzy matching.

Fixed a race condition on Ubuntu 24.04 where rapid network changes caused the agent to enter a restart loop.

Subscribe to connection, ACL change, and device enrollment events via HTTPS webhooks with automatic retry and signing.

Device posture policies can now require full-disk encryption before granting access to sensitive tags.

Added shell autocomplete for bash, zsh, and fish. Install with `kimox completion`.

Resolved an edge case where credentials were not persisted after a macOS major version upgrade.

Split DNS routes now respect per-app VPN exclusions configured in the Android client settings.

Expose local services to the internet through Kimox Funnel without configuring port forwarding or dynamic DNS.

The admin console now charts latency, packet loss, and throughput per peer pair over the last 24 hours.

Passwordless login via Okta FastPass is now supported on Windows and macOS clients.

The community k8s-operator is now officially maintained by Kimox with Helm chart support and CRD versioning.

Peers on IPv6-only networks can now reach dual-stack and IPv4-only nodes via subnet routing.

RESTful API with cursor-based pagination, granular API keys, and OpenAPI 3.1 spec. v1 remains supported until December 2026.

New teams are guided through installing their first agent, creating an ACL, and inviting a colleague in under five minutes.

Require admin approval before new devices join the mesh. Notifications sent via email and Slack.

Fixed a 12-second window during control plane failover where ACL pushes could be delayed.

The browser extension no longer conflicts with password managers when filling the admin console login form.