# Apoxy v0.17.0

> Introduced BFD-lite liveness detection for tunnel connections, API server audit logging, graceful connection draining, and significant tunnel performance optimizations. macOS binaries are now Apple code-signed and notarized.

This release introduces BFD-lite liveness detection for tunnel connections and comprehensive audit logging for the API server, alongside significant performance optimizations and Apple code signing for macOS binaries.

## Features

- **BFD-lite liveness detection**: Add BFD-lite protocol for connection liveness monitoring between agent and tunnelproxy ([1ad0b30](https://github.com/apoxy-dev/apoxy/commit/1ad0b30))
- **Graceful connection draining**: Add support for graceful drain with BFD AdminDown and TCP connection tracking ([e8283f8](https://github.com/apoxy-dev/apoxy/commit/e8283f8))
- **Audit logging**: Add audit logging options with policy file and log rotation support ([c63e7d5](https://github.com/apoxy-dev/apoxy/commit/c63e7d5))
- **UID-scoped connection management**: Add CloseConnectionsByUID method for tunnel connections ([5b524ad](https://github.com/apoxy-dev/apoxy/commit/5b524ad))

## Bug Fixes

- **Echo amplification loop**: Fix echo amplification loop between BFDL client and server ([0da1bed](https://github.com/apoxy-dev/apoxy/commit/0da1bed))
- **Audit log identity**: Fix audit log identity headers and add version to user-agent ([03c5ee8](https://github.com/apoxy-dev/apoxy/commit/03c5ee8))
- **Tunnel address reconciliation**: Remove tunnel address writing from server reconciler ([384f712](https://github.com/apoxy-dev/apoxy/commit/384f712))

## Improvements

- **Tunnel performance optimizations**: Reduce hot-path allocations in packet processing pipeline and BFDL implementation ([0f86e0f](https://github.com/apoxy-dev/apoxy/commit/0f86e0f), [e98a2b9](https://github.com/apoxy-dev/apoxy/commit/e98a2b9), [0187328](https://github.com/apoxy-dev/apoxy/commit/0187328), [2bab37c](https://github.com/apoxy-dev/apoxy/commit/2bab37c))
- **Endpoint probing efficiency**: Cache endpoint selection to avoid re-probing on every reconcile and cancel remaining probes after first success ([443068e](https://github.com/apoxy-dev/apoxy/commit/443068e), [e456ea2](https://github.com/apoxy-dev/apoxy/commit/e456ea2))
- **TUI traffic filtering**: Filter out ping packets from TUI traffic view by default ([6dd4b43](https://github.com/apoxy-dev/apoxy/commit/6dd4b43))
- **Documentation**: Update CLI descriptions and regenerate command reference ([eb7733d](https://github.com/apoxy-dev/apoxy/commit/eb7733d))

## Infrastructure

- **Apple code signing**: Add Apple code signing and notarization to release pipeline for macOS binaries ([a5e7d79](https://github.com/apoxy-dev/apoxy/commit/a5e7d79), [e93bb05](https://github.com/apoxy-dev/apoxy/commit/e93bb05), [964105a](https://github.com/apoxy-dev/apoxy/commit/964105a), [2a8f0f4](https://github.com/apoxy-dev/apoxy/commit/2a8f0f4), [d128d38](https://github.com/apoxy-dev/apoxy/commit/d128d38), [33a5dc1](https://github.com/apoxy-dev/apoxy/commit/33a5dc1))
- **CI improvements**: Decouple GitHub release from image publish and pin edge-runtime to stable version ([cbeac26](https://github.com/apoxy-dev/apoxy/commit/cbeac26), [2344672](https://github.com/apoxy-dev/apoxy/commit/2344672), [d4f3dc7](https://github.com/apoxy-dev/apoxy/commit/d4f3dc7))

**Full Changelog**: [v0.16.1...v0.17.0](https://github.com/apoxy-dev/apoxy/compare/v0.16.1...v0.17.0)