On prem agent

Agent download

Download links

The latest version of the agent can be downloaded from the following links:

• Linux 64-bit (AMD / Intel) | SHA256: f0370b87c0f6550dba74ec8f6552a4d30c6dee6520b7838999fcd5269b527188
• Linux 64-bit (ARM) | SHA256: daeb6da792e8b3b8b7a0f148303424e0a17e36f089ddcdb7df312adbf538f2b2
• Windows 64-bit (AMD / Intel) | SHA256: c5affedcad32d531a5be6b96b32862e778a3df66ce4daed70e49baf4c6ae4a6b
• Windows 64-bit (ARM) | SHA256: 9c4e3d12882dff40161387ac0490d8854234ea77bc0c138834c5a320223c0aa4 You can use the SHA256 hash to verify the integrity of the downloaded file.

Release Notes:

Oct 30, 2026

Version: 1.5.2

• Security update: the agent now rejects TLS certificates that chain to eight compromised eMudhra intermediate certificate authorities (CVE-2026-111943). We recommend that all customers upgrade.
• The agent now refuses TLS 1.2 connections signed with SHA-1. If the agent cannot connect after upgrading because an older TLS-inspecting proxy on your network still uses SHA-1, start the agent with the environment variable GODEBUG=tlssha1=1.
• Minor bugfixes.

Jun 16, 2025

Version: 1.5.1

• The agent binary is now slightly smaller.

Jun 13, 2025

Version: 1.5.0

• The agent now supports a configurable log level using the --log-level option.
• The agent now logs information about DNS queries proxied through it.

Dec 2, 2024

Version: 1.4.0

• The agent now supports an optional proxy url with the --proxy-url option for outbound connections.

Nov 26, 2024

Version: 1.3.1

• Minor bugfixes and performance improvements.

Oct 7, 2024

Version: 1.3.0

• The agent now accepts an explicit DNS nameserver through the --DNS-nameserver option. If provided, this will override any automatic DNS server discovery done by the agent.

Oct 3, 2024

Version: 1.2.0

• The agent now supports proxying DNS requests. This allows connectors to use private DNS servers accessible by the agent. The agent will use the first DNS server configured on the host it is run on, more advanced DNS config such as multiple DNS servers will not be respected. This feature can be disabled using the --disable-dns flag.

Aug 30, 2024

Version: 1.1.0

• The agent run command will now re-register itself and replace the stored credentials if the token provided with --registration-token is different to the token used to retrieve the currently stored credentials.

Aug 12, 2024

Version: 1.0.0

• Initial release