Gately v0.6.4 released

November 3, 2026

Download v0.6.4 · GitHub Release · Custom build online

Custom builds

Apart from the three core modules (Port Forwarding, Web Services and SSL Certificates), the other 22 modules can be left out at compile time, and the UI languages can be limited to Simplified Chinese, or to Simplified Chinese, Traditional Chinese and English:

• Open build.gately.cn, tick the modules and languages (or start from the "Core only", "Router" or "NAS" preset), and the page estimates the size as you go and generates Linux / Windows / macOS / FreeBSD binaries, OpenWrt and fnOS packages, or a multi-arch Docker image for amd64, arm64 and arm/v7 online; artifacts for the same options are reused instead of being built again;
• On linux/arm64, for example: the full edition is 33.6 MB, core only is about 19.9 MB, and the Router preset with Simplified Chinese is about 21.2 MB; the Docker image for the Router preset with Simplified Chinese is about 18.7 MB to pull (full image 51.9 MB), and an image without Docker management leaves out docker-cli and compose, and one without Intrusion Prevention and STUN leaves out nftables;
• For modules not compiled in, configuration files stay untouched, their switches in Settings and API token scopes remain valid, their APIs return 404 saying the module is not included in this build, and the UI hides their pages and options; switching back to the full edition restores them;
• The About page lists the modules left out of this build, with a link that opens the builder with the same options. Custom builds do not offer online upgrade (online upgrade downloads the full edition); when a new version is released, generate it again with the same options and use "Upload upgrade package";
• When compiling yourself, use the no_<module> and lang_zh / lang_cjken build tags, GATELY_LOCALES for the frontend, or Dockerfile build arguments such as GATELY_TAGS; tools/custombuild turns a selection into these parameters.

See Modules Overview · Custom builds and Build from source.

Hiding the admin port

"Settings → Access Control" adds "Unauthorized response", which applies to banned sources, public access while LAN-only access is on, and requests that did not go through the secure entry path:

• Choose the default notice page, a plain 404, a blank page, close connection, no response until timeout, or a custom HTML page (with a status code of your choice);
• Close connection and no response decide by source when the connection is established, so HTTPS sends no certificate; requests forwarded by a trusted proxy automatically get a plain 404 instead, so the front proxy does not show its own error page; held connections are limited in duration and number;
• In the hiding modes, responses no longer carry the security headers specific to the admin console, and custom pages are shown in a sandbox that blocks scripts and external resources.

The port itself can still be found by scanning; hiding it completely requires a firewall. See Hardening Guide.

Site error pages

• The "Error pages" tab of a Web Services site can choose, for the 404 and 5xx pages Gately generates, the default style, one of 10 built-in styles (Minimal, Terminal, Neon, Starry sky, Newspaper, Brutalist, Aurora, Pixel, Blueprint, Status chain), or a custom page from the page library; every style has a thumbnail and desktop / mobile preview;
• The page library accepts uploaded or pasted HTML or a reference to an .html file on the server; saving checks and removes scripts, event attributes, forms and similar content, placeholders such as {code}, {title}, {host} and {path} are supported, and pages are served with a CSP that blocks scripts and external resources;
• Reverse proxy sites can intercept specific backend status codes (such as 404, 500-599) and replace only requests from browsers opening a page, leaving API requests as they are;
• The default site's settings also apply to requests that match no site, and "Sort & batch" can set the error page style for many sites at once.

See Web Services · Error pages.

Other improvements

• Dynamic DNS search filters by record: when a task's name, group, remark or provider matches, all its records are shown, otherwise only the matching records are listed, and collapsed tasks and groups expand during the search; Web Services search expands collapsed listeners automatically;
• Long labels on the Settings page wrap automatically and no longer overlap the input boxes in languages such as German and Russian;
• When an admin console request gets a non-JSON response (for example, blocked by the secure entry path after the session expired), the console asks you to refresh or reopen the secure entry path;
• "Refresh" on the default error page is now a plain link, so it also works under a CSP that blocks scripts;
• Diagnostic bundles, GET /api/status and GET /api/system/info include build information (whether it is a custom build, and the included modules and languages);
• CI checks the build tag combinations of the presets.

Upgrade notes

• Docker: pull the new image and recreate the container; when the Docker socket is mounted, Gately can also upgrade itself from its Docker page. OpenWrt: install the new .apk / .ipk over the old one. fnOS: install the new .fpk manually in the App Center. Other deployments can upgrade online on the About page.
• Users of the full edition need to do nothing; the configuration format is unchanged.