Overview

This bulletin covers announcements from NetFoundry, with details on features released between March 2026 and August 2026. Highlights include the general availability of Customer Connect, the launch of the NetFoundry Data Connector, FIPS 140-3 support, and continued expansion of the NetFoundry AI portfolio — LLM Gateway and MCP Gateway.

LLM Gateway

Take control of your AI infrastructure with NetFoundry's new LLM Gateway, an OpenAI-compatible API proxy that routes every request across multiple LLM providers over Zero Trust networking. It load-balances traffic intelligently to any OpenAI-compatible backend, applies semantic routing, and tracks costs with per-identity budgets, giving you full visibility into who is spending what and where.

LLM Gateway dashboard — usage, cost, latency, and policy enforcement at a glance.

MCP Gateway

NetFoundry's new MCP Gateway delivers secure, isolated access to Model Context Protocol (MCP) tools across distributed systems, with no public endpoints, no open ports, and no VPN required. Spin up any MCP server with a single command, filter tools by policy straight from the registry, and isolate every client session behind identity-based access.

MCP Gateway instance management — structural isolation per gateway, no shared state.

Hosted sandbox and staging environments are now available for hands-on evaluation of both gateways.

Customer Connect UI

A new Customer Connect front end, purpose-built for service providers who bundle network access into their own offering. It introduces dedicated views for every persona in your delivery chain, each scoped to exactly what that role needs. Onboarding, day-to-day operations, and end-customer access are all simplified and automated, cutting the time between a signed deal and a paying, active customer. It includes new end-customer-centric and operational insights that give your team visibility into usage and performance.

• New customers, locations, connectors, and access policies can be deployed in minutes using reusable templates — no firewall tickets, no manual DNS or IP changes
• A single dashboard shows every customer, active alerts, and month-to-date usage across the whole book of business
• Live Audit gives a real-time map of every customer's connectivity, so a provider can spot and drill into a problem before the customer calls
• Compliance support built in: FIPS 140, HIPAA, NIST, and FedRAMP

Customer Connect documentation preview — Dashboard and Live Audit.

IPSec Support

NetFoundry now supports IPSec, complete with fast provisioning, a refreshed user interface, and auto-generated customer configuration documentation, everything you need to get connections up and running with less manual work.

IPSec documentation — creating a tunneler and publishing a service.

Quality Improvements

The latest release reflects NetFoundry's ongoing investment in product quality and security: our team found and fixed more than 25 issues, delivering a more stable, more secure platform with every update.

Data Connector

Stream enriched event and telemetry data directly into the operations stack you already use, including Splunk, Datadog, S3, and OpenTelemetry, and trigger PagerDuty-style alerting with webhooks the moment something needs your attention.

• Run it in a container, as a single binary, or under systemd
• Opt-in event subscriptions with filtering, so you only pay for (and store) the data you actually want
• Fan-out to multiple subscribers at once — for example, everything to S3 but only fabric-circuit failures to Datadog
• Works with both NetFoundry Cloud V8 and Self-Hosted networks
• TUI (terminal) live-view mode, useful for demos and quick troubleshooting

Data Connector configuration and TUI live-view mode.

Data Connector output piped into Splunk.

→ Learn more in our documentation

NetFoundry Self-Hosted GA Release

NetFoundry Self-Hosted has officially reached general availability, giving you full control over deployment while keeping the Zero Trust networking capabilities you rely on.

• Real-time metrics enrichment — resource names and attributes attached to telemetry data, making dashboards far more readable
• Hardened installer and upgrade process, with per-run upgrade logs for faster support troubleshooting

Per-identity usage metrics, part of the real-time metrics enrichment shipped in this release.

Terraform Provider 2.0

NetFoundry shipped Terraform Provider 2.0, making it easier than ever to automate and manage your NetFoundry fabric as code.

Read-Only User Role

NetFoundry now offers RBAC support with a new read-only role that you can scope to a single network or an entire network group, giving auditors and stakeholders visibility without write access.

User Interface Improvements

The network visualizer now shows clearer, color-coded connection states at a glance. NetFoundry also tucked raw API call details behind a new "Power User" toggle instead of displaying them by default, simplifying the console for everyday use.

FIPS 140-3 Support

NetFoundry now offers FIPS 140-3 support as an option, giving regulated and security-conscious organizations another way to meet compliance requirements.

• Opt-in and gated per network group — reach out to your NetFoundry contact to enable it
• Currently available on AWS only
• Note: migrating a network to FIPS is a one-way move today; there's no automated path back

Enabling FIPS on a NetFoundry network.

Closing Thoughts

Refer to our docs at netfoundry.io/docs and videos at our YouTube channel for updates, demos, and everything else happening with NetFoundry. Questions or feedback? Reach out at customer.success@netfoundry.io.

MCP Gateway

NetFoundry's new MCP Gateway delivers secure, isolated access to Model Context Protocol (MCP) tools across distributed systems, with no public endpoints, no open ports, and no VPN required. Spin up any MCP server with a single command, filter tools by policy straight from the registry, and isolate every client session behind identity-based access.

MCP Gateway instance management — structural isolation per gateway, no shared state.

Hosted sandbox and staging environments are now available for hands-on evaluation of both gateways.

Customer Connect UI

A new Customer Connect front end, purpose-built for service providers who bundle network access into their own offering. It introduces dedicated views for every persona in your delivery chain, each scoped to exactly what that role needs. Onboarding, day-to-day operations, and end-customer access are all simplified and automated, cutting the time between a signed deal and a paying, active customer. It includes new end-customer-centric and operational insights that give your team visibility into usage and performance.

• New customers, locations, connectors, and access policies can be deployed in minutes using reusable templates — no firewall tickets, no manual DNS or IP changes
• A single dashboard shows every customer, active alerts, and month-to-date usage across the whole book of business
• Live Audit gives a real-time map of every customer's connectivity, so a provider can spot and drill into a problem before the customer calls
• Compliance support built in: FIPS 140, HIPAA, NIST, and FedRAMP

Customer Connect documentation preview — Dashboard and Live Audit.

IPSec Support

NetFoundry now supports IPSec, complete with fast provisioning, a refreshed user interface, and auto-generated customer configuration documentation, everything you need to get connections up and running with less manual work.

IPSec documentation — creating a tunneler and publishing a service.

Quality Improvements

The latest release reflects NetFoundry's ongoing investment in product quality and security: our team found and fixed more than 25 issues, delivering a more stable, more secure platform with every update.

Data Connector

Stream enriched event and telemetry data directly into the operations stack you already use, including Splunk, Datadog, S3, and OpenTelemetry, and trigger PagerDuty-style alerting with webhooks the moment something needs your attention.

• Run it in a container, as a single binary, or under systemd
• Opt-in event subscriptions with filtering, so you only pay for (and store) the data you actually want
• Fan-out to multiple subscribers at once — for example, everything to S3 but only fabric-circuit failures to Datadog
• Works with both NetFoundry Cloud V8 and Self-Hosted networks
• TUI (terminal) live-view mode, useful for demos and quick troubleshooting

Data Connector configuration and TUI live-view mode.

Data Connector output piped into Splunk.

→ Learn more in our documentation

NetFoundry Self-Hosted GA Release

NetFoundry Self-Hosted has officially reached general availability, giving you full control over deployment while keeping the Zero Trust networking capabilities you rely on.

• Real-time metrics enrichment — resource names and attributes attached to telemetry data, making dashboards far more readable
• Hardened installer and upgrade process, with per-run upgrade logs for faster support troubleshooting

Per-identity usage metrics, part of the real-time metrics enrichment shipped in this release.

Terraform Provider 2.0

NetFoundry shipped Terraform Provider 2.0, making it easier than ever to automate and manage your NetFoundry fabric as code.

Read-Only User Role

NetFoundry now offers RBAC support with a new read-only role that you can scope to a single network or an entire network group, giving auditors and stakeholders visibility without write access.

User Interface Improvements

The network visualizer now shows clearer, color-coded connection states at a glance. NetFoundry also tucked raw API call details behind a new "Power User" toggle instead of displaying them by default, simplifying the console for everyday use.

FIPS 140-3 Support

NetFoundry now offers FIPS 140-3 support as an option, giving regulated and security-conscious organizations another way to meet compliance requirements.

• Opt-in and gated per network group — reach out to your NetFoundry contact to enable it
• Currently available on AWS only
• Note: migrating a network to FIPS is a one-way move today; there's no automated path back

Enabling FIPS on a NetFoundry network.

Closing Thoughts

Refer to our docs at netfoundry.io/docs and videos at our YouTube channel for updates, demos, and everything else happening with NetFoundry. Questions or feedback? Reach out at customer.success@netfoundry.io.