Version History
9.3 built on October 12, 2024 (Develop)
Important
Please note this build is in the development stage and may contain not-yet-implemented or wrongly working parts. Please submit issues on GitHub for anything that does not work right.
- Added support for Squid 6.10 just as in Debian Testing.
- Added application control module, it is now possible to block and exclude by detected application.
- Exclusion Lists module is removed in favor of application control module.
- Proxy access control ACLs are now managed in Admin UI easier.
- Format of adult text detected module is now simple JSON.
- Added
image/webp
to the list of real file type detection module, also changed the detection module format to simple JSON too. - Blocking rule by real file type in Admin UI is now easier to configure (just select the check boxes as required).
- Upstream proxy settings are adjusted, it is now possible to set the upstream proxy to None, Targeted and All mode when either none, selected or all domains are sent to the upstream proxy.
- Improved network management settings in Admin UI, it is now possible to configure additional routes in the generated
netplan
file. - Updated ugly internals of Admin UI allowing for nicer password change experience.
- All links in the Admin UI now point to newly updated Admin Guide written using
mkdocs
.
9.2 built on June 3, 2024 (Stable)
- Added support for Squid 6.9.
- The SafeBrowsing integration is updated, it is now possible to configure SafeBrowsing per policy.
9.1 built on April 10, 2024
- Added support for Squid 6.8.
- Traffic Reporting module is once again completely rewritten in golang. Added back the YouTube videos and Search Terms custom reporters together with small improvements in historical Traffic Reports.
- Added support for IMDSv2 for Amazon PAYG instances.
- Access from Admin UI to Squid statistics HTML pages bypasses web filtering now.
9.0 built on January 4, 2024
- Added support for Ubuntu 22.04 LTS. This version is used in virtual appliance and is recommended for production use.
- Added support for Squid 6.6.
- Discontinued support for Ubuntu 20.04 LTS, RHEL and Docker.
- Rewritten definition files updater module.
- Traffic Reporting module is completely rewritten in C#. Daily database storage is moved from CSV files to SQLite databases. Several custom reporters are removed.
- Removed most broken functionality for YouTube channel and video filtering. YouTube header restriction module is still working as expected.
- Small changes in ICAP web filtering module.
- Optimization in squid logging daemon, access log storage scheme is moved to 'YYYY-MM-DD.access.log' custom storage format instead of default flat access log file (required for new Traffic Monitoring module).
8.7 built on November 10, 2023 (Old Stable)
- Added support for management of SNMP configuration, it is now quite easy to monitor the Squid SNMP values using, for example, Zabbix.
- Added Advanced ACLs filtering rule, it is now possible to use various acls to create complex combined web filtering expressions.
- Added support for enforcing Microsoft Tenant Restrictions V1 and V2.
- Improved matching of Active Directory security groups as members of web filtering policies. It is now possible to select groups by primaryGroupID user attribute, thus selecting, for example, Domain Users in the web filtering policies will now work as expected.
- Performance improvements in Web Filtering and Traffic Reporting modules.
8.6 built on August 16, 2023
- Added support for Debian 12
- Dropped support for Debian 11
- Dropped support for network management in Debian 12, you now have to use usual manual commands to setup IP address configuration on that platform. Network management in Ubuntu 20.04 continues to work as usual.
- Internal deployment scheme of the application is switched to
venv
in preparation of switching to Ubuntu 22.04 LTS in the next version. - Fixed errors in reporting module which led to rarely failing generation of a daily report.
- Added ability to exclude domain names from filtering using regular expressions.
- It is now possible to configure the max size of reporting CSV files to render in the Admin UI.
- Django framework switched to version 4.2.4, Python pandas to 2.0.3, some reports are re-implemented on the new Pandas version.
- Fixed rendering issues in Advanced Exclusion Lists.
- SSLDB is now stored in /var/spool/squid/ssldb (needed for later use in Kubernetes in Cloud Proxy)
- Cache folder for Squid proxy is moved to /var/spool/squid/cache (also needed for later use in Kubernetes in Cloud Proxy)
8.5 built on April 23, 2023
- Captive Portal module is redesigned and reimplemented.
- Added ability to authenticate by Google OAuth in Captive Portal.
- Improved handling of authenticated users in Captive Portal with Azure Active Directory backend.
8.4 built on February 10, 2023
- Added the notion of Exclusion Lists. It is now possible to enable pre-configured and automatically updated exclusion lists for Microsoft Office sites, Python development sites and Apple related sites. The list of exclusions will be expanded as required.
- Administrator can also configure custom exclusion lists.
- Application is now able to notify administrator of the upcoming expiration of Trusted Root CA certificate.
8.3 built on November 30, 2022
- Fixed small issue in custom report generation module of the Traffic Reporter.
- Active Directory Inspector pseudo proxy authentication is now completely discontinued. It is recommended to use Captive Portal Authentication instead.
- Added Microsoft Azure Tenant Restrictions, proxy is now able to ensure that only tenants of your Azure Active Directory can sign in into Microsoft Office apps.
- Added module to send license expiry notifications 10, 5 and 3 days prior to actual license expiration to minimize downtime.
- HTTPS decryption can now contain admin specified list of Always Decrypted Targets.
- Added ability to configure Upstream Proxy in Admin UI.
- Added ability to configure the list of domains which will be skipped from the Traffic Reports.
- Added support for Squid 5.7 in latest virtual appliance.
- Virtual Appliance for VMware vSphere/ESXi is now created on ESXi 7.
8.2 built on September 22, 2022
- C++ core moved to boost 1.80, added support for OpenSSL 3.0
- Added ability to override various api keys and port settings to ease deployments in Docker and Kubernetes.
- Added GEO IP blocking module to limit connections to IP addresses by country name.
- Updated Kerberos integration guide, it is now recommended to use the AES256-SHA1 crypto settings when generating keytab for proxy authentication.
- Fixed errors in reporting module that sometimes resulted into the high CPU usage on large proxy deployments.
- Added protection from parallel runs on reporting module on large proxy deployments where next day instance of reporting was started before the previous was fully completed.
- Admin UI now requires at least Django 4.
- Admin UI upgraded to run on latest version of jQuery.
- Fixed error with wpad/proxy pac file not available via plain HTTP.
- Missing certificates for HTTPS intermediates are now downloaded automatically.
- Breaking change - added support for RHEL 9.
8.1 built on May 22, 2022
- Breaking Change - by default Admin UI is now running on HTTPS. Default certificate is self-signed so you might need to click through the Self Signed Warning at the first connection. On HTTP port there is now a placeholder that explains this change and also contains the automatic redirect script and button to switch to continue through HTTPS.
- Added new proxy authentication scheme - Captive Portal. It can be used to authenticate users to modern Microsoft Azure Active Directory (cloud directory) as well as normal on-premises Active Directory and Local Users Database.
- Added support for Squid 5.5 on Ubuntu 20. The virtual appliance and Microsoft Azure and Amazon AWS images are now based on this version too.
8.0 built on February 27, 2022
- Added support for Squid 5.2 on Ubuntu 20. The virtual appliance and Microsoft Azure and Amazon AWS images are now based on this version too.
- Updates of definition files are performed using new updates.diladele.com server. Updates should be faster now.
- Technical Change - internal ICAP web filtering modules are moved to boost 1.77. More standard C++ libraries are used now.
- Removed some decommissioned and non-working functionality in YouTube guard module.
- Removed some old settings from Admin UI that are not supported by Squid 5 (for example, no more dns_v4_first setting present).
- Breaking Change - default user in the Admin UI is now named admin instead of root as before. This is to strictly separate the operating system level users and application users.
- Breaking Change in virtual appliance - default operating system user root is now only able to login using console; remote login using ssh is disabled. This is to prevent security issues in default deployments when administrator forgets to change the default credentials.
- Improved drill downs in custom reports; reports module is faster (rewritten in golang); Admin UI of Traffic Manager is improved.
- Dropped Raspberry PI compilation/support; the system is too underpowered for a full scale web filtering solution.
7.6 built on June 15, 2021
- The base OS for the virtual appliance is now Ubuntu Linux 20.04 LTS. A lot of small fixes in the Admin UI because of base OS upgrade.
- Admin UI is based on Django 3.1.7 now.
- The application runs using Python 3.8 now (standard on Ubuntu 20.04 LTS).
- Due to CentOS operating system shutdown we have moved to RedHat RHEL 8.
- Required Debian OS version is now Debian 11.
- Fixed YouTube filtering errors in Google Chrome and Microsoft Edge.
Older Versions
- Changes for the older versions of the product are removed for clarity.