Release 0.11¶
11 October 2026 · Full changelog
Release 0.11 is about network devices and their consoles. gNMI and NETCONF hosts open a
workbench for a device's management API next to its CLI. Login sequences answer prompts on
their own, the password vault holds secrets that buttons and sequences type without
recording them, pastes can be paced for slow consoles, and serial, Telnet and SSH sessions
can send a BREAK. SSH logins work with FIDO2 security keys, ssh:// and telnet:// links
open in Muxus, files dropped onto an SSH terminal are uploaded, and Settings open in a
window of their own.
NETCONF and gNMI workbench¶
Add host offers gNMI and NETCONF hosts, and opening one starts a workbench tab:
browse the device's live configuration and state, run Get, Set and Subscribe over gNMI,
send NETCONF RPCs, and review every change as a diff before it is sent or committed. Path
fields complete from the device's own data, subscriptions feed a live table with rates and
sparklines, and requests can be saved or copied as a gnmic command or an ncclient
script.
gNMI hosts also carry the device's gNOI operations, such as ping, traceroute, files, health and reboot, and its gNSI security services: authorization policies, certificates, SSH keys and accounting. A gNSI change stays provisional until it is finalized, and rolling back, closing the tab or losing the connection restores the previous policy, certificate or keys.
Muxus speaks the protocols itself, so there is nothing to install, and the workbench shares the host list, folders, panes and workspaces with SSH sessions. A device can be reached through an SSH gateway, and Add gNMI host for it… or Add NETCONF host for it… on an SSH host fills in its address, user and folder.
See NETCONF & gNMI.
Login sequences¶
Hosts and folders can have a login sequence: steps that run each time an SSH, Telnet or
serial session connects, and again after every reconnect. A step waits for text or a regular
expression, sends text with or without Enter, or types a secret from the password vault, so
banners, enable passwords, terminal length 0 and console server menus no longer have to
be answered by hand.
A folder's sequence applies to every host inside it unless a host sets its own or turns it off, and the bulk editor sets one for many hosts at once. While a sequence runs, the terminal shows its progress with Cancel; a step that times out is named in the terminal and the session stays open.
See login sequence and shared login sequence.
Secrets from the password vault¶
Settings → Passwords now keeps named secrets, such as an enable, sudo or
configure-mode password or a PIN. A command button can send a secret instead of a command,
and Ctrl+Shift+P opens Send secret… beside the cursor to pick one. The backend types
the secret straight into the session, so it never reaches the window, session history, log
files or backups; only what the remote side echoes is recorded. Deleting a secret that
buttons or login sequences still use warns first and names them.
See buttons that send a secret and Send secret….
Pasting into slow consoles¶
Pastes can be typed in at a set pace, with a delay after each line and, optionally, after each character, so a long configuration pasted into a serial console or an older device loses nothing. The defaults are under Settings → Terminal → Paste pacing, and each SSH, Telnet and serial host can set its own under Terminal appearance. Both delays are 0 by default, so pastes are still sent at once until pacing is turned on.
The multiline paste preview shows how long the paste will take, and a running paste shows its progress over the terminal and as a ring on the tab, with Cancel. Pacing runs in the backend, so it keeps its rate while the window is minimized.
See pasting into slow consoles.
Send BREAK¶
Serial, Telnet and SSH tabs can send a BREAK, for Cisco ROMMON and password recovery, the
OpenBoot ok prompt, magic SysRq on a Linux serial console, and console servers that pass
it through. Send BREAK is in the terminal-actions menu, the tab's right-click menu and the
quick launcher, and a shortcut can be recorded for it. Serial hosts have a new Break
duration line setting, 250 ms by default.
See Send BREAK.
Security keys¶
SSH keys on a FIDO2 authenticator such as a YubiKey or SoloKey (ed25519-sk and ecdsa-sk)
log in to the target and to every jump host, from the SSH agent or as an IdentityFile.
While a signature waits, the terminal asks you to touch the key and shows its fingerprint;
the wait does not count against ConnectTimeout. A key file's passphrase and the PIN of a
verify-required key are asked for in the usual prompt.
See security keys.
Opening ssh:// and telnet:// links¶
Links such as ssh://admin@10.0.0.1:2222 in a browser, wiki, ticket or dashboard can open
in the desktop app. Turn it on with Use Muxus for ssh:// links and Use Muxus for
telnet:// links in Settings → Behavior → Links. A link opens a tab in the Muxus window
used last, or starts Muxus, and uses a saved host when one matches. Links are checked before
anything is dialed, links with passwords are refused, and an ssh:// link can name the host
key it expects.
See opening ssh:// and telnet:// links.
Dropping files onto the terminal¶
Files and folders dropped onto an SSH terminal are uploaded into the shell's current directory over the session's own connection, without opening the file browser. While you drag, the terminal names the target directory. In the desktop app, hold Shift to type the local paths at the prompt instead, and dropping onto a local terminal types the paths quoted for its shell.
See dropping files onto the terminal.
Settings in their own window¶
In the desktop app, Settings open in a window of their own instead of a dialog. Keep it beside the main window or drag it onto another display: it reopens where it was left, at the size it was left. Opening Settings again brings the window to the front, and changes apply to every Muxus window as they are made. The browser keeps the dialog.
See settings.
Smaller improvements and fixes¶
- The desktop app connects to devices that only offer
diffie-hellman-group1-sha1, such as Cisco IOS 12.x, instead of failing with Unknown DH group. The Legacy device algorithms button now adds it after the stronger legacy groups; hosts that used the old preset show it as partly applied until the button is pressed again. - The desktop app cannot verify
ssh-dsshost keys, so its host editor flagsHostKeyAlgorithms ssh-dssand the connection skips it with a notice instead of failing. - The desktop app no longer stays blank for several seconds at startup when the system detects its proxy automatically or uses a PAC script, as many VPN clients set while connected. Update checks still follow the system proxy.
- A mistyped master password no longer shows the Session is no longer valid banner.
- Cancelling an upload while Muxus asks whether to replace a file stops before the next file, and declining every replacement says that nothing was uploaded.
This release also refreshes Electron, MUI, the web server packages and development tools.
Patches¶
0.11.1¶
12 October 2026 · Changes
- The gNMI explorer shows the whole tree on Nokia SR OS, which it opened empty, and the branches other devices left out, such as an SR Linux network instance's protocols. It looks deeper in the background and loads a branch whole when it is small enough.
- Get, Watch, Set value… and Copy path in the gNMI explorer work on SR OS, which rejects module names in paths.
- Ctrl+Enter in a request's path field runs it once instead of twice.
- gNOI Files opens SR OS at
cf3:\, shows its folders and file names, and uploads with permissions SR OS accepts.