Microsoft Azure Guest Proxy Agent - Allow List Tool

Microsoft·Microsoft.Azure.GuestProxyAgent.AllowListTool

This project introduces the Guest Proxy Agent (GPA) to enhance the security of the Azure Instance Metadata Service and Azure Wireserver endpoints (available in Azure IaaS VM/VMSS).

winget install --id Microsoft.Azure.GuestProxyAgent.AllowListTool --exact --source winget

Latest 1.0.48·July 28, 2026

Release Notes

Release notes

Public Cloud Stage Availability Date Regions
Canary 1 7/30/2026 East US 2EUAP
Canary 2 8/4/2026 East US 2 EUAP, Central US EUAP
Pilot 8/24/2026 East US 2 EUAP, Central US EUAP, West Central US
Medium 9/9/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US
Large 9/14/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US, West US
Batch 1 A 9/16/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US, West US, East Asia, Australia East, Australia Central, Canada Central, North Europe, France Central, West India, Japan East, Korea Central, East US 2
Batch 1 B 9/21/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US, West US, East Asia, Australia East, Australia Central, Canada Central, North Europe, France Central, West India, Japan East, Korea Central, East US 2, Brazil South, South Africa North, Switzerland North, UK West, UAE North, East US, Norway East, Central India, West US 2
Batch 2 A 9/23/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US, West US, East Asia, Australia East, Australia Central, Canada Central, North Europe, France Central, West India, Japan East, Korea Central, East US 2, Brazil South, South Africa North, Switzerland North, UK West, UAE North, East US, Norway East, Central India, West US 2, Southeast Asia, Australia Southeast, South Central US, Canada East, Japan West, Korea South, Switzerland West, UAE Central
Batch 2 B 9/28/2026 East US 2 EUAP, Central US EUAP, West Central US, North Central US, West US, East Asia, Australia East, Australia Central, Canada Central, North Europe, France Central, West India, Japan East, Korea Central, East US 2, Brazil South, South Africa North, Switzerland North, UK West, UAE North, East US, Norway East, Central India, West US 2, Southeast Asia, Australia Southeast, South Central US, Canada East, Japan West, Korea South, Switzerland West, UAE Central, Australia Central 2, France South, South India, West Europe, Central US, Norway West, South Africa West, UK South
Public Cloud 9/30/2026 All
Mooncake Cloud Stage Availability Date Regions
MC 1 10/5/2026 China North
MC 2 10/7/2026 China North, China North 2
MC 3 10/12/2026 China North, China North 2, China East
MC 4 10/14/2026 China North, China North 2, China East, China East 2
MC All 10/19/2026 All
Fairfax Cloud Stage Availability Date Regions
FF 1 10/5/2026 USDoD Central
FF 2 10/7/2026 USDoD Central, USDoD East
FF 3 10/12/2026 USDoD Central, USDoD East, USGov Texas
FF 4 10/14/2026 USDoD Central, USDoD East, USGov Texas, USGov Virginia, USGov Arizona
FF All 10/19/2026 All

What's Changed

• Update rust toolchain version to 1.95.0 by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/364 • Add get_proxy_agent_aggregate_status to remove the disk write-permission dependency by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/363 • E2E Tests:Configure PublicIPAddress for Service Tag. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/365 • Add azure-proxy-agent manpage. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/367 • Optimize telemetry event flow to by-pass local disk dependency by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/366 • CanonicalRequest:Updates from Shadow-Mode Rollout by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/368 • Append failing eBPF dependency status to GPA service start failure error message by @srikrishnaveturi in https://github.com/Azure/GuestProxyAgent/pull/370 • Fix stale formattedMessage.message when StatusState transitions to Error by @srikrishnaveturi in https://github.com/Azure/GuestProxyAgent/pull/371 • Fix TCPPortScalabilityScenario Test by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/374 • core unify ebpf for linux & windows by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/373 • Fix the rust-clippy and bloat issues for rust-1.97 by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/376 • Fix Linux extension exits 0 without writing status file on enable by @srikrishnaveturi in https://github.com/Azure/GuestProxyAgent/pull/372 • Add evt_listener into windows_events module. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/375 • Update the doc only for Innovation-7.2-zero-copy-splice.md by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/377 • Add etw_listener to help capture ebpf-for-windows tracing events. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/378 • Add unknown words. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/380 • Prepare release 1.0.47 by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/379 • Add tdh.dll as expected for etw_listener thread. by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/381 • Fork to main:Add tdh.dll as expected for etw_listener thread by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/382 • KD-3 · Trailing carriage return (%0D) on a client_id query value (CANON_CTRL) by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/369 • Add mintdh.dll to cover the loaded modules test in WS2019 by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/383 • Prepare build for release 1.0.48 by @ZhidongPeng in https://github.com/Azure/GuestProxyAgent/pull/384

Full Changelog:https://github.com/Azure/GuestProxyAgent/compare/1.0.46...1.0.48

Installer type: portable

x64—CB412EE4E5D33D1F67FBF52F8C49B9B6A565DB3275A67785958FEC309EB004AB

Details

Homepage
https://github.com/Azure/GuestProxyAgent
License
MIT

Tags

allow-list-toolmicrosoftazureguestproxyagentmicrosoft-azure-guest-proxy-agentallowlistgeneratorallow-list-generatorazuregpaazureinstancemetadataserviceazure-instance-metadata-serviceazureiaasvmssazure-iaas-vmssproxyagent.connection.logroleassignmentsrole-assignmentsazurewireserverazure-wireserver

Older versions (5)

1.0.48
x64—CB412EE4E5D33D1F67FBF52F8C49B9B6A565DB3275A67785958FEC309EB004AB
1.0.46
x64—ADBAC1E2255F404CA23F0594F8AC0A455D5F8C27CE5B24E347706E1CEA2A8A7D
1.0.46
x64—ADBAC1E2255F404CA23F0594F8AC0A455D5F8C27CE5B24E347706E1CEA2A8A7D
1.0.39
x64—2b02ccf71a660ca201a064730f2c294cfd6c470a9db678cf2cd9a7f8c85f4cbd
1.0.39
x64—2b02ccf71a660ca201a064730f2c294cfd6c470a9db678cf2cd9a7f8c85f4cbd