23 July 2026
Release Notes for Wanguard 9.0
July 23rd, 2026 - https://www.andrisoft.com - Andrisoft, a world leader in traffic monitoring and DDoS mitigation solutions, announces a new release of the award-winning Wanguard software platform.
Wanguard 9.0 introduces significant new features and enhancements, including:
- The backend for Profiling Thresholds has been migrated from RRD to ClickHouse, enabling support for decoders, baseline profiles, per-rule sensitivity, and minimum floors
- Flow data can now be stored in ClickHouse, enabling rich Stacked Area, 100% Stacked Area, Line, Grid, Sankey, and Heatmap charts across most dimensions available in flow data
- Graph data can now also be stored in ClickHouse, avoiding the cardinality-related scaling issues of InfluxDB
- DPDK ports configured for IP Forwarding now respond to ping requests and can forward cleaned traffic through GRE tunnels. Concurrent packet dumps are now supported when using DPDK
- Hardware-based, line-rate inline packet forwarding and filtering is now supported with DPDK and Mellanox/NVIDIA NICs, even at speeds exceeding 100 Gbps. Distributors can now perform RX and TX
- Threshold rule domains can now be any included subnet from /20 through /30 for IPv4, and from /36 through /64 for IPv6
- Added support for IPFIX 315 (Juniper inline monitoring) in Flow Sensor and Nokia SHIM decapsulation in Packet Sensor
- Sensor Cluster now supports interface threads, improving performance when monitoring a large number of Sensor Interfaces
- Introduced a new graph rendering engine that uses the browser to render graphs and charts, enabling click-to-zoom, animations, and rich tooltips
- Added a new Grafana-like grid layout for Dashboards and redesigned the built-in Dashboards. Widget title bars can now be hidden
- Tabs and sub-tabs can now be rearranged using drag and drop. Thresholds can be grouped by unit and reordered using drag and drop
- Updated the REST API interface with new calls for managing bookmarks and custom decoders
- Added support for SSO with SAML 2.0, along with new LDAP and RADIUS testers
- Introduced a new expression evaluator for Preconditions and Deduplication
- Improved the BGP Connector with faster performance, support for large communities, and support for redirect-to-nexthop-ietf in ExaBGP
- Packet Filter now detects and applies filtering rules in under one second
- The Hardware Key is now more complex and changes less often. License keys can now be updated automatically (opt-in)
- New decoders: TCP0, UDP0, TCP+ACK+PSH, TCP+RST+FIN, TCP+FIN, ARMS, COAP, MSSQLRS, STUN, WSDD, RIPV1, MDNS, RPCBIND, NBNS
- New login themes: Flat Blue and Flat Gray
- Support for Ubuntu 26.04, PF_RING 9.2 and DPDK 25.11
- Dropped support for Debian 10 (EOL), RHEL 8, and Ubuntu 18
- Updated the AS Number database and GeoIP data
- Added other minor enhancements and bug fixes
- Updated User Guide
To upgrade from any previous version, please follow the instructions listed here.
For more information on Andrisoft Wanguard and its features, please visit https://www.andrisoft.com/software/wanguard.
About Andrisoft
Andrisoft, established in 2006, specializes in advanced software solutions designed for Network Operations Centers. Its flagship platform, Wanguard, leverages high-throughput flow and packet processing, along with robust policy enforcement, to deliver real-time traffic monitoring, accounting, and multi-layer DDoS defense. Built for scalability and efficiency, Wanguard empowers organizations worldwide to proactively secure complex network environments and maintain optimal performance.

