Roxy-WI
Cabinet Get started

Good news everyone

v9.0.2 (15.11.2026)

  1. A new setting "RabbitMQ enabled" has been added
  2. The possibility to upload SSL cert to haproxy dynamically

v9.1.0 (in development, planned for 15.10.2026)

  1. Prepared Roxy-WI to run with the same application architecture from Linux packages, Docker Compose or Kubernetes.
  2. Added environment-variable overrides while preserving fallback to the existing /etc/roxy-wi/roxy-wi.cfg file and database settings.
  3. Split the Roxy-WI runtime into independently managed Web, Scheduler, Service Events and Operations processes.
  4. Added a production Gunicorn launcher and separate commands for database migration, database readiness checks and every Roxy-WI process.
  5. Added liveness and readiness endpoints for container health checks and Kubernetes probes.
  6. Added a non-root production Docker image and Docker Compose configurations for SQLite and MariaDB installations.
  7. Added a Helm chart with separate Deployments, a migration Job, Secrets, persistent storage, Ingress and configurable replica counts.
  8. Added safe defaults for read-only container filesystems and persistent Ansible data, configuration backups and runtime state under /var/lib/roxy-wi.
  9. Added support for reverse-proxy headers and a configurable public URL for Compose and Kubernetes installations.
  10. Moved service installation and other long-running Ansible work to durable database-backed operations delivered through RabbitMQ.
  11. Added operation leases, retry-safe execution, encrypted operation payloads, dead-letter handling and recovery of interrupted operations.
  12. Moved Ansible temporary files, SSH control sockets, inventories, downloaded Galaxy roles and collections to writable persistent paths.
  13. Improved installation failures so the actual Ansible error is stored and shown to the user instead of a generic web-server log message.
  14. Reworked Checker 5, Metrics 4, Port Scanner 2 and Socket 2 as independent long-running services connected through RabbitMQ.
  15. Added desired-state reconciliation, durable assignments, leases and worker heartbeats so distributed services recover their state after a restart.
  16. Added runtime version reporting by the new services without relying on the installed package version.
  17. Updated Overview and Admin Tools to show current process and worker status, replica counts, runtime versions, assignments and stale heartbeats without the old master-worker terminology.
  18. Kept systemd lifecycle controls for package-managed Roxy-WI processes and made container-managed processes explicitly controlled by Compose or Kubernetes.

v9.0.0 (05.09.2026)

  1. Added OpenID Connect authentication.
  2. Added a centralized workflow for managing HAProxy, NGINX, Apache and Keepalived configuration changes.
  3. Review syntax-highlighted configuration differences before deployment.
  4. Validate, approve, deploy, retry, cancel, and roll back changes from one place.
  5. Track every change with its author, target server, service, status, and timestamp.
  6. Added clear status indicators and improved deployment error messages.
  7. Added recovery controls for interrupted validation, deployment, and rollback operations.
  8. Canary deployment to selected nodes
  9. Configurable deployment batches and concurrency limits
  10. Manual promotion to the next node or batch
  11. Pause and resume controls
  12. Per-node retry and rollback actions
  13. Configurable health checks between deployment stages
  14. Ability to temporarily exclude unavailable nodes
  15. Scheduled deployments and maintenance windows
  16. Real-time deployment timeline
  17. Notifications through supported integrations
  18. Webhooks for external automation systems
  19. Continuous configuration drift detection
  20. Deployment duration and success-rate statistics
  21. Searchable audit history with detailed per-node results
  22. Exportable deployment reports
  23. Added confirmation dialogs for critical actions.
  24. Reworked local and remote command execution to prevent shell command injection.
  25. HAProxy Runtime API commands now use a direct TCP client instead of shell and netcat.
  26. Added input validation, timeouts and response-size limits for Runtime API operations.
  27. Hardened Nettools, Port Scanner, NGINX map generation and HAProxy configuration operations.
  28. Ansible inventory files now use unique names, restricted permissions and are always removed after deployment.
  29. Service deployment requests now verify access to every selected server.
  30. Credentials are no longer passed through shell commands when checking Apache status.
  31. Configuration comparison and HAProxy configuration editing no longer invoke shell utilities with user-controlled values.
  32. Port scans now run once with an explicit timeout and return a clear timeout error instead of causing a reverse-proxy 504.
  33. Services are marked as installed only after a successful Ansible deployment.
  34. Failed installation tasks are no longer overwritten with a completed status.
  35. Improved HAProxy Runtime API operations for servers, stick tables, ACLs and maxconn.
  36. Improved handling of JSON errors for AJAX requests.
  37. Authentication errors from background requests no longer redirect unexpectedly to the login page.
  38. Improved frontend error reporting when the backend response does not contain JSON.
  39. Fixed false 403 responses when a super administrator accesses servers from another group. Group administrators remain restricted to their active group.
  40. Fixed the HAProxy configuration versions page requiring an unnecessary server address.
  41. Fixed UDP listeners referencing a deleted HA cluster or server. The interface now shows a clear configuration warning instead of logging a traceback.
  42. Fixed layout and polling for UDP listeners with broken references.
  43. Fixed Apache status parsing and connection handling.
  44. Fixed nested task IDs returned after HA cluster deployment.
  45. Deleting users or groups now also removes related OIDC identities and mappings.

v8.3.0 (15.08.2026)

  1. A new map for HAProxy workflow
  2. Add a map for NGINX workflow
  3. A lot of security issues have been fixed
  4. A lot of bugs have been fixed

v8.2.6.5 (15.05.2026)

  1. A lot of security issues have been fixed

v8.2.6.3 (15.02.2026)

  1. A vulnerability in working with config comparing has been fixed

v8.2.6.2 (15.01.2026)

  1. A vulnerability in working with server syslogs has been fixed
  2. Improved error output when working with logs

v8.2.6 (15.12.2025)

  1. A new version of HAProxy has been added to the installation
  2. A new version of Node exporter has been added to the installation
  3. A new version of Apache exporter has been added to the installation

v8.2.5 (15.11.2025)

  1. A new version of NGINX exporter has been added to the installation
  2. The possibility to add NGINX cache

v8.2.4 (15.10.2025)

  1. The possibility to enable/disable websocket options for NGINX

v8.2.3 (15.09.2025)

  1. The possibility to hide/show NGINX backend server headers
  2. New UDP listeners are automatically added to the UDP listeners page

v8.2.2 (15.08.2025)

  1. The possibility to enable/disable HSTS for NGINX configs
  2. The possibility to hide/show server tokens for NGINX config
  3. The possibility to enable/disable security headers for NGINX config
  4. The possibility to add HTTP/2 in HAProxy bind option

v8.2.1 (15.07.2025)

  1. Asynchronous installation of services. Now it is not necessary to wait on the page for installation, a notification will come as soon as the service is installed
  2. New HA clusters are automatically added to the HA cluster page
  3. Showing the status of an HA cluster service has been added on the HA cluster page
  4. The possibility to add HTTP/2 in NGINX bind option
  5. The possibility to add name alias on the Add Nginx page
  6. Spanish language has been added
  7. AI assistance in editing configuration

v8.2.0 (15.06.2025)

  1. The possibility to create a server (Frontend) for NGINX vi the Add page
  2. Refactoring upstream creating for NGINX
  3. Roxy-WI refactored. Logs in JSON format now
  4. Database migrations have been added
  5. Error handling has been refactored
  6. Chinese language has been added

v8.1.8 (15.05.2025)

  1. HA Cluster status is updated automatically now
  2. Refactoring SSL page
  3. The possibility to download key and crt files
  4. Fixed and improve syntax highlights for WAF

v8.1.7 (15.04.2025)

  1. A new "log-forward" section and "mode log" for HAProxy have been added
  2. A new version of Node exporter has been added to installation
  3. Refactoring Roxy-WI log

v8.1.6 (15.03.2025)

  1. Checker services start to check the status of UDP listeners
  2. SSH fingerprint is deleted automatically now

v8.1.5 (15.02.2025)

  1. Roxy-WI shows backend server status for UDP listeners on the UDP balancer page
  2. Become master is updated automatically on the Keepalived overview page
  3. Status for HA cluster has been added

v8.1.4 (02.01.2024)

  1. Haproxy v3.1 has been added to installation on EL
  2. SSH keys are stored in the database
  3. A new version NGINX exporter has been added to installation

v8.1.3 (15.12.2024)

  1. Current connections are updated automatically on the NGINX overview page
  2. API endpoints and Terraform resource has been added for managing White and Black lists
  3. Dark them has been added

v8.1.2 (02.12.2024)

  1. The IP calculator has been added to the Nettools
  2. Requests per second are updated automatically on the Apache overview page
  3. Optimized working of Metrics and Checker tools

v8.1.1 (15.11.2024)

  1. Refactoring Let's Encrypt installation
  2. The possibility to use DNS API for issue Let's Encrypt certificates
  3. New way to manage Let's Encrypt certificates

v8.1.0.1 (21.10.2024)

  1. Bugs fix

v8.1 (16.10.2024)

  1. A new way to work with HAProxy config: now, when you add HAProxy section via the Add page, Roxy-WI keeps it. And you can edit your sections afterward via wizard.

v8.0.2 (02.10.2024)

  1. The possibility to mark SSH credentials as Shared to share them between groups
  2. Haproxy v3 has been added to installation on EL

v8.0.1 (15.09.2024)

  1. The possibility to enable/disable backend servers checks for UDP listeners
  2. The possibility to set parameters for backend server checks on UDP listeners
  3. New versions of NGINX and Node exporters have been added

v8 (02.09.2024)

  1. New API
  2. Transition to a new authorization system. Now JWT token is used instead of sessions
  3. Moving from Python 3.6 to Python 3.11
  4. Removing "/app" from URLs
  5. Information about UDP listeners automatically updated
  6. Servers on the Server page update their status and information automatically
  7. Action history for UDP listeners
  8. The possibility to set load balancing algorithm for UDP listeners

v7.3.2 (15.07.2024)

  1. Refactoring Filesystem backup installation
  2. Refactoring working with Git
  3. The possibility to view UDP balancer status

v7.3.1 (02.07.2024)

  1. The possibility to use VIP address as outgoing instead of server's IP
  2. Incoming and outgoing connections are updated automatically on the HAProxy overview page
  3. Refactoring S3 backup installation

v7.3.0 (15.06.2024)

  1. The possibility to create UDP load balancer

v7.2.6 (02.06.2024)

  1. Refactoring Geo installation
  2. Refactoring Grafana installation
  3. Refactoring Prometheus server installation

v7.2.5 (15.05.2024)

  1. The Settings page is AJAX page now
  2. Metrics began to be updated in real time
  3. The Server page has gone, only the Admin area left

v7.2.4 (02.05.2024)

  1. The possibility to reconfigure SMON Agent
  2. The possibility to send alerts via MatterMost
  3. The port is taken directly from settings for SMON service now. Without editing service config

v7.2.3 (15.04.2024)

  1. The Whois tool has been added to the Nettools
  2. The possibility to clone settings for S3 backup
  3. Refactoring WAF installation

v7.2.2 (02.04.2024)

  1. The Backup page is AJAX page now
  2. Network status has been added to the System Info
  3. The channels for alerting have separated page
  4. A new version of HAProxy has been added for installation

v7.2.1 (15.03.2024)

  1. Roxy-WI checks if actions (start, stop, reload, restart) with services was done properly
  2. Roxy-WI has started to return error after service actions (start, stop, reload, restart)
  3. The possibility to check config for Keepalived service
  4. Actions history for HA clusters has been added

v7.2.0 (02.03.2024)

  1. SMON now has agents. You can create multiple agents in different DCs, regions, etc. and control your endpoints from there.
  2. SMON Admin page has been deleted. Now all actions with checks on SMON Dashboard page
  3. The possibility to set check interval for every check
  4. Full SMON refactoring: it works faster and consumes less resources

v7.1.2 (15.02.2024)

  1. Refactoring HAProxy, NGINX, Apache, Keepalived and Node exporters installation
  2. The possibility to add SSH keys with passphrase
  3. SSH passwords and SSH passphrases are crypted now. Do not forget change a new option "secret_phrase" in the config

v7.1.1 (02.02.2024)

  1. The possibility to install Apache via HA cluster
  2. New way to show Master-Slave relationship and HA cluster on the Overview pages
  3. New versions of Prometheus exporters have been added

v7.1.0 (15.01.2024)

  1. A new entity like HA cluster has been added
  2. A new way to work with Keepalived service - HA cluster
  3. Refactoring HAProxy, NGINX, Apache and Keepalived installation
  4. The bugs with Port scanner and SMON in Docker has been fixed

Show changelog for 2023

Show changelog for 2022

Show changelog for 2021

Show changelog for 2020

Show changelog for 2019