v2.1.1

What's Changed

• fix(packaging): declare libcap dependency for setcap by @vcwild in #24
• chore(release): bump to 2.1.1 (libcap packaging dependency) by @vcwild in #25

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• fix(dns): no password prompts on vpn on — ship polkit rule (spec 009) by @vcwild in #22
• fix(vpn-status): reconcile against live TUN interface; replace PID-as-truth (spec 007) by @vcwild in #20
• feat(vpn-on): background mode + production log levels (spec 008) by @vcwild in #21
• Release 2.1.0: stable tunnels (server DPD reply), event-driven reconnection, DNS polkit, UX by @vcwild in #23

Full Changelog: v2.0.0...v2.1.0

v2.0.0

🚀 akon 2.0.0 — a fully native, rootless F5 VPN client

akon is now a native, in-process F5 BIG-IP SSL VPN client written in pure Rust. It does everything itself — authentication, the tunnel, routing, and DNS — with no external dependencies and no sudo at runtime. This is a major step up in reliability, security, and simplicity.

What's new

• Self-contained. No more openconnect (or procps) — akon speaks the F5 protocol directly: framing, PPP, auth, XML config, and TLS, all in-process behind a clean, well-tested boundary.
• Runs as you, no sudo. akon keeps your keyring and your shell; the only privilege it needs is CAP_NET_ADMIN, granted once as a file capability. Packaging and make install set this up for you automatically:

  sudo setcap cap_net_admin+ep "$(command -v akon)"

• Rootless tunnel setup via in-process netlink — the TUN device, addresses, and routes are configured without shelling out.
• Always leaves your host clean. akon vpn off restores routes, rp_filter, and DNS from a persisted plan — idempotent, and reliable even after an unexpected exit.
• In-process health checks and reconnection. Production-proven across both the control plane and the data plane (real traffic to internal hosts, then a clean restore).

Upgrading from 1.x — a quick, one-time setup

1. Update akon (or run make install).
2. Confirm the capability is in place: getcap "$(command -v akon)" should show cap_net_admin=ep. If not, run the setcap command above (needs libcap: apt install libcap2-bin or dnf install libcap).
3. You can remove openconnect and drop any native_backend = … line from ~/.config/akon/config.toml (it's no longer needed).
4. Connect as usual — now without sudo:

   akon vpn on

Everything else (your config, credentials, and the akon vpn on/off/status and get-password commands) works exactly as before.

See CHANGELOG.md for the complete list.

---

What's Changed

• feat!: native F5 VPN backend; remove openconnect (v2.0.0) by @vcwild in #19

Full Changelog: v1.2.3...v2.0.0

v1.2.3

What's Changed

• chore(release): bump version to 1.2.3 by @vcwild in #18

Full Changelog: v1.2.2...v1.2.3

v1.2.2

What's Changed

• fix: update PIN collection and storage method by @vcwild and @jhklarcher in #16
• feat: isolate mock keyring by @vcwild in #17

Full Changelog: v1.2.1...v1.2.2

v1.2.1

What's Changed

• docs(README): update project description and add badges by @vcwild in #14
• chore(release): bump version to 1.2.1 by @vcwild in #15

Full Changelog: v1.2.0...v1.2.1

v1.2.0

What's Changed

• refactor: fix VPN integration tests, remove unused IPC module, and en… by @vcwild in #9
• refactor: improve prompt messages and formatting by @vcwild in #10
• refactor(cli_connector): enhance error handling and monitoring by @vcwild in #11
• feat: add CI pipeline by @vcwild in #12
• feat(debian, rpm): add package management scripts and metadata by @vcwild in #13

Full Changelog: v1.1.0...v1.2.0

Version 1.1.0

What's Changed

• feat: network interruption detection by @vcwild in #5
• Add MIT License to the project by @vcwild in #6
• refactor: removal of vpn cleanup and vpn reset commands by @vcwild in #7

Full Changelog: v1.0.1...v1.1.0

Version 1.0.0

What's Changed

• feat: implement cli tool by @vcwild in #1
• refactor: use openconnect delegation mechanism by @vcwild in #3

Full Changelog: https://github.com/vcwild/akon/commits/v1.0.0