ZLEX VPN / UPDATE HISTORY

Client release notes.

Changes for the Windows and Linux consumer clients.

2026-10-17

Version 1.4.8

Show your Device Link public key and copy peer IPv4, IPv6 or public key from the context menu.
Add a No time limit option for port forwarding; check live forwarding availability.
Support website Device Link requests by explicit public key across accounts, with device consent.
Restore UDP Bypass catalog availability and add verified DE, HK and US TCP Bypass endpoints.

Download the current release ↓

2026-10-17

Version 1.4.7

Correct SmartRoute DIRECT carrier detection when the original network has IPv6 only through an unmanaged transition tunnel such as Teredo or SIT. Preserve native IPv6 support.
Matched China and Steam DIRECT domains continue to use the pre-VPN system DNS and original network. An unavailable original IPv6 family no longer creates unusable DIRECT IPv6 mappings.
Restore upload and download totals for UDP multihop in the consumer client's Used This Session display. These client estimates are separate from server billing records.
Retain the consumer runtime-directory preparation repair and update client/helper integrity pins for the current source build.
Domain routing requires ordinary system DNS. Independent application DoH/DoT, cached addresses and hardcoded IPs may bypass domain recognition; disable the application's independent secure-DNS override when using these rules.

2026-10-16

Version 1.4.5

Keep account sign-in and active VPN sessions during temporary API failures, with protected recovery of interrupted token refreshes.
Refresh account HTTP connections after VPN route changes and reuse valid device proof to reduce repeated authorization work.
Correct SmartRoute DNS family selection on IPv4-only physical networks and Linux same-source multipath routing.
Restore Linux profile handoff and ordinary-client CN mode, improve portable runtime loading and dual-stack status handling.
Improve forwarding failure diagnostics and retain existing authentication, revocation and fail-closed network protections.
Known node issues remain: authorization changes can interrupt TCP multihop, HK1 blocks the tested TCP relay port, and HK2 IPv6 egress failed current tests. This client release does not update native servers.
Windows three-hop sessions stayed connected but showed loss of loaded speedtest probes; the component responsible remains unconfirmed. Direct DE UDP also showed intermittent upload subconnection timeouts, including retries in a completed test. This release does not claim that every tested node path is fault-free.

2026-10-16

Version 1.4.1

Fix malformed TCP DNS requests and DNS queue pressure disconnecting the entire VPN on Windows and Linux.
Correct delayed capability-response handling during session changes and improve Windows disconnect diagnostics.
Retain the Linux local control-pipe fix and update client/helper integrity pins.

2026-10-16

Version 1.4.0

Restore IPv6 exit requests for consumer UDP Normal connections while preserving IPv4 compatibility and existing server address pools.
Reduce Linux SmartRoute startup delays and repeated DNS route processing, including China bypass rules.
Show disconnect progress immediately while routes, DNS and account connections are released.
Add controlled maintenance switching: authenticate a replacement before moving the tunnel; prefer eligible same-country servers, then the lowest measured available alternative. Multihop maintenance moves to a direct route.

2026-10-15

Version 1.3.4

Enable fixed IPv6 exit requests on supported exits for updated Windows and Linux consumer clients.
Keep IPv4 connectivity and existing IPv6 address allocation unchanged.
Preserve compatibility with older clients and avoid immutable profile identity conflicts.

2026-10-14

Version 1.3.2

When connecting, SmartRoute compares available direct and relay routes using recent client and node latency measurements; active sessions are not switched automatically.
Replaces the fixed Hong Kong recommendation with measured route selection; missing measurements retain direct connections.
Adds an optional IPv6 node connection setting. IPv4 remains the default.
Displays IPv6 unavailability and falls back to IPv4 after safely ending the initial attempt.
Preserves explicit IPv4 traffic and existing manual route and Over WARP choices; IPv4 destinations are not translated into IPv6.

2026-10-14

Version 1.3.0

Added Over WARP to consumer Settings on Windows and Linux.
Additional Zlex encryption is enabled by default for Over WARP.
Unsupported protocol and SmartRoute combinations are rejected with guidance.
Added durable Linux recovery for Over WARP routes and owned firewall allowances.
Improved cancellation and retry handling during Windows WARP enrollment.

2026-10-14

Version 1.2.0

Automatic or manual selection of direct and supported multihop routes.
Route recommendations apply only when you choose them; active connections stay fixed.
Offline IP whitelist and forwarding-encryption preferences stored on this device.
Exact native confirmation before connected preference changes are saved.
SmartRoute category menu, Settings encryption controls and visible failure feedback.
UDP / Normal defaults and Ask for approval request controls remain unchanged.

2026-10-14

Version 1.1.2

Choose VPN or DIRECT for four supported Steam service groups: Store/account/support, Community/Workshop web/chat, Web and Cloud APIs, and known Steam network endpoints. Steam downloads and shared content remain DIRECT while the module is enabled.
The optional China route module now includes a larger curated domain catalog and 13 category switches, including video, news, Tencent services, shopping and wallets. It remains off by default; categories start enabled.
Unchecked China categories keep their identified domains on VPN. Unidentified China IP traffic also stays on VPN when any category is unchecked; shared hostnames follow the applicable group policy.
Move extra port-forwarding encryption to Settings and label the default incoming request policy Ask for approval. Encryption controls reflect forwarding eligibility immediately.
SmartRoute changes continue to save only after an exact native acknowledgement. Existing saved domain rules are retained when adding the new category defaults, including nearly full whitelists.
Linux reconnects now accept saved Steam and China category choices through the protected consumer launch helper.
Category switches cover known domains and supported Steam endpoints, not every application, game server or P2P connection. Existing connections may need to reconnect after routing changes.

2026-10-13

Version 1.1.0

SmartRoute is enabled by default; IP exclusions are now a SmartRoute feature.
Steam game downloads, updates and Workshop content use DIRECT while Steam login, web controls and game connections use VPN.
Shared Valve community/Cloud content follows DIRECT; control and API connections remain VPN.
Add domain exclusions with optional original-network System DNS.
Optional China route module includes 10,000 curated domain rules; the module is off by default.
Plan-specific confirmation explains the traffic or performance effect of disabling SmartRoute.
Policy changes save after exact native confirmation, with safe handling of rejected or late replies.
Preserve TCP DNS reply data through graceful connection close.
Use bounded authentication and local initialization phases, with the Windows startup guard covering both phases.
On Windows, applications that bind UDP connections to a network address (physical or VPN) may need to reconnect after the VPN connection or routing rules change. Old connections do not migrate transparently and are blocked when they cannot follow the selected route.
Respect the selected interface’s directly connected subnet when connecting from a Windows virtual LAN.

2026-10-12

Version 1.0.6

Move protocol/connection-mode controls into Settings; existing preferences retained.

2026-10-12

Version 1.0.5

Change your device nickname in client Settings and the account workspace. Existing device identities and names are retained; new devices receive a ZV_ name.
Port forwarding and Device Link have Ask, Open and Closed request policies. Ask is the default; website requests respect device consent.
Requests made on this device use their exact authenticated native receipt for approval. Missing, outdated or restarted-server receipts fall back to manual confirmation.
The account workspace separates devices and nicknames, connections, Device Link, port forwarding and authorized applications into clear tabs.
Port forwarding can use Until disconnected with the existing finite protocol maximum. Plan expiry, permission changes, disconnect and Stop still end it; stopped ports are not automatically reopened.

2026-10-12

Version 1.0.2

The client checks for available updates and displays release notes with Skip and Update choices.
Update opens the official download; release metadata includes the archive size and SHA-256. Disconnect and quit the client before replacing its files.
A configured minimum supported version prevents new connections on outdated clients while retaining disconnect and account cleanup. The minimum currently remains 1.0.0.

2026-10-12

Version 1.0.1

Connections default to UDP in Normal mode; protocol and mode can be selected in Connection Settings.
Successful latency probes are shown separately from connection eligibility, and session data usage appears on the home page.
IPv6 is configured on routes with verified public IPv6 egress; other routes retain IPv4.
Device Link, IP whitelist and port forwarding controls now match the protocol client.
Until disconnected removes the usual port-forward timer using the existing finite protocol maximum (about 136 years); plan expiry, permission changes, disconnect and Stop can end it earlier.
Repeated management state no longer fills the connection log.
Public IP and country detection use verified server-side lookup with a fixed 90-day IPv4 /24 cache.
Existing Finland and Estonia TCP Bypass entrances are available when their original runtime is verified ready.
The retired Hong Kong node is excluded from new consumer connections.

2026-10-11

Version 1.0.0

First public release of the Windows and Linux consumer clients.
Account sign-in, country selection, connection settings and subscription features.
The initial release is retained unchanged; fixes reported after this release are delivered in later versions.