Changelog
v1.3.4 (02.01.2026)
- Checker service for Agents. Checker sends an alert if an Agents is down
- Webhook has been added as a new way to send alerts
v1.3.3 (02.12.2026)
- The possibility to check DNAME type for DNS check
v1.3.2 (02.11.2026)
- The possibility to get a banner for TCP check
- The possibility to send data for TCP check
- The possibility to check got banner with expected for TCP check
v1.3.1 (02.10.2026)
- The possibility to check SSL policy for HTTP check
v1.3.0 (02.09.2026)
Highlights
- Added OpenID Connect authentication with support for multiple identity providers.
- Strengthened tenant isolation and role-based access control.
- Improved application secret, credential encryption, and JWT security.
- Added automated functional, security, RBAC, and startup testing.
OpenID Connect
- Added configurable OIDC providers in Admin Area → OIDC.
- Added provider discovery metadata support.
- Added signed ID token validation using JWKS.
- Added state, nonce, issuer, audience, expiration, and signing-algorithm validation.
- Added optional UserInfo endpoint integration.
- Added verified-email and allowed-domain policies.
- Added automatic user provisioning and optional linking to existing users by email.
- Added external OIDC group mappings to RMON groups and roles.
- Added encrypted storage and rotation support for OIDC client secrets.
- Added OIDC login buttons to the login page.
Access Control
- Other administrators remain restricted to their active group and assigned memberships.
- Enforced the role hierarchy during user creation, modification, and deletion.
- Prevented administrators from assigning roles above their own access level.
- Added group ownership validation for:
- Servers
- Agents
- Monitoring checks
- Regions and countries
- SSH credentials
- Installation tasks
- User and group management
- Removed agent UUIDs from regular API responses.
- Prevented cross-group access through mismatched server IDs, IP addresses, or agent IDs.
Security
- Removed reusable built-in application secrets.
- Added secure Flask secret generation and file-based storage.
- Added configurable JWT signing using RS256 or HS256.
- Reduced the default JWT lifetime to one hour.
- Enabled secure, HTTP-only, SameSite cookies and JWT CSRF protection.
- Disabled the unauthenticated scheduler REST API by default.
- Added configurable request and form-size limits.
- Improved protection against command injection in SSH and server-management operations.
- Added path validation and secure permissions for stored SSH private keys.
- Added safer validation of network destinations to reduce SSRF risks.
- Added transactional credential-key rotation, including OIDC client secrets.
Monitoring and Management
- Improved validation when creating, updating, running, and deleting checks.
- Improved server and agent ownership checks before management operations.
- Fixed access validation for agent status, uptime, version, scheduler, and check endpoints.
- Improved credential selection so users only see shared credentials or credentials available to their group.
- Added safer handling of invalid or inaccessible resources.
Operations
- Added a dedicated scheduler process entry point.
- The embedded scheduler can be disabled with
RMON_SCHEDULER_ENABLED=0. - Added configurable public URL support for deployments behind a reverse proxy:
RMON_PUBLIC_URL=https://rmon.example.com. - Added configurable paths for Flask and JWT keys.
- Added secure automatic generation of the Flask session secret when no explicit secret is provided.
RMON Server 6.33 / Agent 1.20
Added
- Added configurable transport between RMON Agent and RMON Server:
- HTTP remains the default for backward compatibility.
- HTTPS is now supported.
- TLS certificate verification can be enabled.
- Custom CA bundles can be configured.
Improvements
- Improved result delivery reliability:
- Automatic retries for temporary server errors.
- Correct failover between multiple RMON servers.
- Reliable cleanup of delayed-result queue locks.
- Manual executions of the same check can now run independently without scheduler conflicts.
- Server and agent APIs now validate incoming payloads and return clear errors for invalid requests.
- Alert events remain queued until they are processed successfully.
- Failed alert deliveries are retried instead of being silently discarded.
- Improved server stability when multiple processes start simultaneously.
- Watchdog and alert aggregator failures no longer stop subsequent processing.
Check Fixes
- Fixed DNS response-time units.
- Fixed SMTP result processing and delivery.
- HTTP checks now:
- Apply HTTPS policies to the final URL after redirects.
- Correctly process proxy authentication schemes.
- Support substring matching for expected response headers.
- Safely parse custom request headers as JSON objects.
- Fixed duplicate result delivery in several failure scenarios.
- Improved resource cleanup after failed checks.
Installation and Operations
- RMON Server now runs under a dedicated
rmonsystem account. - Python dependencies are installed into an isolated virtual environment.
- Server logs have moved to
/var/log/rmon-server/rmon-server.log. - Updated log rotation and filesystem permissions.
- Increased the service shutdown timeout to 30 seconds.
v1.2.27 (02.07.2026)
- Enhanced IncidentRelay send mess
- Bug fix
v1.2.26 (02.06.2026)
- The possibility to send alerts to the IncidentRelay
v1.2.25 (02.05.2026)
- The possibility to resolve a DNS name to a specific IP address for HTTP check
- The possibility to use kernel receive timestamps for Ping check
v1.2.24 (02.04.2026)
- HTTP check shows the HTTP version now
- The possibility to check the HTTP version
- The possibility to accept or not HTTP cookies
v1.2.23.1 (02.02.2026)
- Bugs fix
v1.2.23 (02.11.2025)
- The possibility to check the required headers in HTTP check
- The possibility to check the required headers value in HTTP check
- The possibility to check the forbidden headers in HTTP check
v1.2.22 (02.10.2025)
- HTTP check accepts all compress responses
v1.2.21 (16.09.2025)
- The possibility to set a proxy for HTTP check
v1.2.20 (02.09.2025)
- The possibility to check JSON path in response for HTTP check
- Name lookup and connect time for TCP check
v1.2.19 (16.08.2025)
- Refactoring Ping check
- IPv6 supporting for Ping check
- IPv6 supporting for TCP check
- TCP check goes through addresses by dns name, until the first one responds
v1.2.18 (02.08.2025)
- The possibility to set a list of acceptable status codes for HTTP check
- The possibility to set a threshold timeout. A warning message will be sent if the response is slower than this value
v1.2.17 (16.07.2025)
- Basic and mTLS auths for HTTP check
- Show routing to check from a region
v1.2.16 (01.07.2025)
- Refactoring the Status-page and its API
- Alert grouping
- Refactoring Ping check. It has more metrics now
v1.2.15 (16.06.2025)
- Asynchronous Agent installation. Now it is not necessary to wait on the page for installation, a notification will come as soon as an Agent is installed
- Database migrations have been added
v1.2.14 (01.06.2025)
- Refactoring SSL check
v1.2.13 (16.05.2025)
- Refactoring the history page and its API
- Refactoring RMON-server. The load on the database has been significantly reduced
v1.2.12 (01.05.2025)
- The possibility to set expiration for Checks
v1.2.11 (16.04.2025)
- The possibility to set priority for Checks
v1.2.10 (01.04.2025)
- The possibility to add a new type of channels: Email list
v1.2.9 (16.03.2025)
- The possibility to keep Server and Agent logs in JSON format
v1.2.8 (01.03.2025)
- Bugs fix
- A new setting "RabbitMQ enabled" has been added
v1.2.7 (16.02.2025)
- The possibility to add link to a runbook in checks
- The possibility to add maximum redirects to HTTP checks
v1.2.6 (01.02.2025)
- The possibility to set number of retries for Checks before service is marked down
v1.2.5 (16.01.2025)
- Count of checks for Region is shown now
- Count of checks for Country is shown now
v1.2.4 (01.01.2025)
- The possibility to keep Checks metrics in VictoriaMetrics
- New API endpoint to reconfigure agents
v1.2.3 (16.12.2024)
- Supporting PostgresSQL has been added
- Now SSH private keys keeps encrypted in DB
v1.2.2 (01.12.2024)
- Overview page for Countries
- Overview page for Regions
v1.2.1 (16.11.2024)
- The possibility to edit and delete check groups
- API Improvements
v1.2.0 (01.11.2024)
- The possibility to create one check on all regions
- The possibility to create one check on some regions
- A new entity Country. The Country consists of regions
- The possibility to create one check on some countries
v1.1.5 (16.10.2024)
- Exporting metrics from RMON app has been added to the /metrics path
- The possibility to mask SSH credentials as "shared" to share them between groups
v1.1.4 (01.10.2024)
- The possibility to combine few Agents into Region
- Balancing checks inside Region
v1.1.3 (16.09.2024)
- The IP calculator has been added to the Nettools
- RabbitMQ service check has been added
v1.1.2 (01.09.2024)
- The possibility to set ignoring the wrong SSL certificate for HTTP checks
- Custom styles for Status page
v1.1.1 (16.08.2024)
- SMTP service check has been added
- The possibility to edit check from the Check history page and from the Agent Overview page
v1.1 (01.08.2024)
- API is here!
- Servers on the server page update their status and information automatically
- Transition to a new authorization system. Now JWT token is used instead of sessions
v1.0.7 (16.07.2024)
- The possibility to move checks from one Agent to another
- Agents have their own port settings
- The possibility to combine Agents into Regions
v1.0.6 (01.07.2024)
- The possibility to set PATH, DELETE and OPTION methods for HTTP check
- The possibility to save the result of checks locally on Agent server if RMON servers are unavailable
v1.0.5 (16.06.2024)
- The possibility to add headers for HTTP check
- The possibility to select accepted status codes for HTTP check
v1.0.4 (01.06.2024)
- The possibility to use a list of RMON servers for Agents
- The mark an Agent as shared. It provides the possibility to share Agents between groups
- The possibility to set timeout for Checks
v1.0.3 (16.05.2024)
- The History page for checks is dynamically update now
- The possibility to add body request to the HTTP check
- Advanced response metrics have been added to HTTP checks
- Checks on the Dashboard page are dynamically updated now
v1.0.2 (01.05.2024)
- The possibility to save a group for check and use it after as tip
- The possibility to reconfigure Agent
- The port is taken directly from settings for RMON server now. Without editing server config
- The possibility to send alerts via MatterMost
v1.0.1 (16.04.2024)
- Overview page for an Agent has been added
- The Whois tool has been added to the Nettools
- A more detailed response chart has been added to the Status page
v1.0 (01.04.2024)
- The first release!