Gately v0.5.4 released

October 21, 2026

This release is about installing and upgrading. Linux binary installs (systemd, PVE LXC containers, manual OpenWrt installs and so on) can now upgrade right from the admin UI, and OpenWrt and iStoreOS users can install Gately with the system package manager.

Download v0.5.4 · GitHub Release

Online upgrade

Click "Check for Updates" on the About page and a dialog shows the new version, its release date and the release notes. Click "Upgrade now" and Gately will:

1. download the release package for this platform from GitHub;
2. verify its SHA-256 against checksums.txt of the same release;
3. test-run the new binary to make sure it runs on this machine;
4. replace the executable and restart in place, keeping the previous version as gately.old next to it so you can roll back.

The dialog shows the current step, download progress and speed, and you can cancel any time before the binary is replaced. Reloading the page picks up an upgrade that is still running, and failures show the reason with a retry button.

• PVE LXC containers: LXC containers created from the OCI image can upgrade online too, with no need to delete and recreate them;
• Update proxy: if GitHub is unreliable from your network, set an http, https or socks5 proxy on the About page or under Settings → Network & Runtime; both the update check and the download use it;
• Offline upgrade and rollback: "Upload upgrade package" accepts a release tar.gz or the bare binary of any version, so it also works for rolling back;
• Admin-triggered only: Gately never downloads or installs a version on its own. Docker, fnOS and OpenWrt package installs point you to their own upgrade path.

See Installation · Online upgrade.

OpenWrt packages

Every release now ships OpenWrt packages for amd64 / arm64 / arm / mipsle / mips / riscv64:

• OpenWrt 24.10 and earlier (including iStoreOS): opkg install ./gately_v0.5.4_openwrt_<arch>.ipk
• OpenWrt 25.12 and later: apk add --allow-untrusted ./gately_v0.5.4_openwrt_<arch>.apk

The service is enabled at boot and started right after install, with the admin UI at http://<router address>:16680. Config lives in /etc/gately and is kept across upgrades, uninstalls and firmware upgrades; to upgrade, install the newer package. The device architecture is checked before install, so pick the package by DISTRIB_ARCH in /etc/openwrt_release. The binary is about 35 MB, which suits x86 soft routers, ARM64 boxes and other devices with ample storage.

See Installation · OpenWrt.

Fixes

• Saving settings no longer cuts off an admin UI that is reached through Gately itself: editing a port forwarding rule swaps targets and SNI routes in place and keeps existing connections when the listen ports, protocols, mode and limits are unchanged, and saving port forwarding or Web Services settings no longer restarts every listener.
• The WAF no longer flags JSON field names such as credentials or forwardAuth as OS file access, which returned 403 when saving DDNS tasks or adding Web Services listeners.
• List inputs such as domains, IP lists, headers and STUN servers no longer swallow Enter, commas and spaces as you type.
• mips / mipsle binaries are now built with soft float, so they run on routers without a hardware FPU.
• Version comparison now follows semver, so newer builds are no longer offered an "upgrade" to an older version.

Upgrading

• Online upgrade starts with v0.5.4, so this one upgrade is still manual: replace the binary and restart, pull the new Docker image and recreate the container, or install the new .fpk from the fnOS App Center. From then on you can upgrade from the About page.
• If you set up Gately on OpenWrt by hand, install the .ipk / .apk over it; the config in /etc/gately keeps working.

Questions or suggestions are welcome in GitHub Issues or the Telegram group.