← Back to all sparks
R

RaspAP

DEVOPS
Velocity2.5

Web interface for managing wireless access points

RaspAP folded its Insiders-only features into the open release, then rebuilt its VPN handling.

raspberry-piwifiaccess-pointvpnself-hostedopen-source
◆Current state
RaspAP 3.5.6 in late September merged the Insiders-exclusive features into the public release. 3.5.8 followed with a command-injection fix in SSID and OpenVPN handling, and 3.5.9 on 1 November is the largest release in the feed: dozens of pull requests, most from one contributor, fixing the WireGuard kill switch, adding an uplink watchdog, NetworkManager support for Wi-Fi client networks, captive-portal access for AP clients while the kill switch is on, and login protection for the QR code pages.
◆Where it's heading
Two changes stand out. The sponsor-only Insiders tier no longer holds features back from the open release, which changes what the free version is. And the work has moved from the dashboard refactor of 3.5.4 into networking correctness: VPN routing, kill-switch rules and interface detection, the parts that break in real deployments with VPNs and Wi-Fi 7 access points.
◆Prediction
Expect more VPN and routing fixes in 3.5.x as the kill-switch and NetworkManager changes meet more setups. The entries don't say how the Insiders program works now that its features are public.

◆Recent moves

  1. 8d ago

    3.5.9: VPN kill-switch fixes, uplink watchdog, NetworkManager support

    Dozens of pull requests: WireGuard kill-switch fixes, an uplink watchdog, NetworkManager for Wi-Fi client networks, captive-portal access while the kill switch is on, and login required for QR code pages. It moves the project's effort from the dashboard into VPN and routing correctness.

    View source ↗
  2. 1mo ago

    3.5.8 fixes command injection in SSID and OpenVPN handling

    Fixes command injection in SSID and OpenVPN configuration handling. A security fix that matters for any RaspAP install reachable by untrusted users.

    View source ↗
  3. 1mo ago

    3.5.7 removes repository checks from the plugin handler

    Removes repository checks from the plugin handler and updates README images. Cleanup after the Insiders merge.

    View source ↗
  4. 1mo ago

    3.5.6 merges Insiders-only features into the open release

    Merges the Insiders-exclusive features into the public release and extends user theme customisation. It changes what the free version includes, though the notes don't list which features moved.

    View source ↗
  5. 4mo ago

    Dynamic IP bridged mode toggle and non-ASCII SSID fix

    Adds a dynamic IP toggle for bridged mode and fixes handling of non-ASCII SSIDs that previously raised a TypeError, plus compiled translation files. Small, practical fixes of the kind that dominate this feed between the larger interface drops.

    View source ↗
  6. 5mo ago

    Client interface selector, SSL download and DHCP overview

    The largest release in this window, and the clearest evidence of the second contributor's impact — client interface selector, SSL download interface, DHCP config overview and reconnect dialog, on top of JavaScript and CSS refactors. This is where the interface rework became the project's main line of work.

    View source ↗