Released on July 7th, 2025
Keeper Gateway 1.6.0 provides significant performance improvements in connections and sessions in Docker installations.
Changes are required to use Keeper Gateway 1.6 as documented below. There are a few known issues with version 1.6 that are outlined in the troubleshooting section. For any connectivity issues in Japan (JP), Canada (CA), and Australia (AU) regions, upgrade your gateway to Keeper Gateway 1.6.1
Performance Enhancements: Major performance improvements for session handling, delivering a smoother, faster experience across RDP, SSH, and Remote Browser Isolation protocols.
After upgrading to Keeper Gateway 1.6.0, and deploying via Docker, you must update your Dockerfile-compose.yaml and docker-seccomp.json file:
The following needs to be adding to the security_opt section of docker-compose.yaml:
The keeper-gateway service section in your docker-compose.yaml now looks like the following:
The docker-seccomp.json file needs to be replaced. Please use the below file:
Alternatively, you can use the following curl command:
For instructions on installing or updating your Keeper Gateway, visit this page:
We are aware of certain environments causing connection errors in the CA/JP/AU regions. We have identified the issue and we will be publishing an update with version 1.6.1. If you are experiencing an issue, revert to the gateway 1.5.6 image.
When upgrading Windows servers, if you receive any errors during install, please perform a reboot prior to installing the new version. This ensures that all running processes are stopped.
Docker running on Ubuntu Linux has a known issue with RBI. We are planning a 1.6.1 release to address this. A temporary fix is running the below command on the Ubuntu host in addition to the above Docker changes
Only the Docker version of the Keeper Gateway 1.6 contains major speed improvements. The Windows gateway and Linux binary version will be updated in the next release.
If you need to revert your Keeper Gateway version, update your docker-compose.yml file to use the keeper/gateway:1.5.6 image instead of keeper/gateway:latest.
The web vault and desktop app provide the previous docker-seccomp.json and docker-compose.yml files when creating a new gateway. We are pushing a new vault version 17.3 which provides the updated versions. In the meantime, please follow the on installing the Docker version.
apparmor=unconfinedkeeper-gateway:
platform: linux/amd64
image: keeper/gateway:latest
shm_size: 2g
security_opt:
- seccomp:./docker-seccomp.json
- apparmor=unconfinedcurl -O https://raw.githubusercontent.com/Keeper-Security/KeeperPAM/refs/heads/main/gateway/docker-seccomp.jsonecho 0 | sudo tee /proc/sys/kernel/apparmor_restrict_unprivileged_userns