Wayk Bastion

Wayk Bastion was a self-hosted remote access server from Devolutions that let IT teams run their own broker and relay for Wayk Now remote desktop sessions instead of relying on a public cloud. It has been discontinued: Devolutions stopped selling Wayk Bastion in July 2021, ended support at the end of 2021 and moved its ideas into Devolutions Server and Devolutions Gateway. If you searched for Wayk Bastion because an old deployment is still running, or you need a replacement, this page explains both.

Wayk Bastion was the 2020 name of Wayk Den. Together with the Wayk Now client and the Wayk Agent, it handled user and machine management, session brokering and relaying for unattended and attended remote support on Windows, macOS and Linux. Today the closest successor is Devolutions Gateway, which is actively developed, open source and has a free standalone mode.

Wayk Bastion at a glance

What it does

What Wayk Bastion did while it was supported:

• Ran a private broker so Wayk clients found each other through your own server rather than a vendor cloud.
• Relayed sessions between technicians and machines behind NAT or firewalls.
• Managed users, groups and registered machines centrally, with enrollment tokens for adding Wayk Agent installs (2021.1).
• Supported unattended access through Wayk Agent, including remote reboot, shutdown and, on Windows, reboot into safe mode with networking (2021.1).
• Added initial PowerShell remoting through Wayk Agent on macOS and Linux and initial RDP remoting on Windows (2021.1).
• Was configured and managed with the WaykBastion PowerShell module (cmdlets such as New-WaykBastionConfig and Set-WaykBastionConfig).

What replaces it: Devolutions Gateway, a relay server that proxies RDP, SSH, Telnet, VNC and ARD sessions, records sessions and works with Devolutions Server or Remote Desktop Manager. Its latest release is 2026.3.0 (September 15, 2026), with packages for Windows and Linux.

How IT teams use it

Retire a leftover Wayk Bastion server

1. List the machines that still have Wayk Agent or Wayk Now installed, using your RMM or inventory tool.
2. Decide on the replacement for each use case (help-desk sessions, unattended server access, contractor access) before you switch anything off.
3. Uninstall Wayk Agent and Wayk Now from endpoints through Apps and Features, your software deployment tool or the package manager on Linux.
4. Close the firewall rules and DNS records that pointed to the Bastion server, then shut it down and archive its configuration.

Stand up Devolutions Gateway on Linux as the replacement

1. Install the .deb or .rpm package; the service is devolutions-gateway.service and the configuration lives in /etc/devolutions-gateway/gateway.json.
2. Install the PowerShell module to manage it:

   Install-Module -Name DevolutionsGateway
   Import-Module -Name DevolutionsGateway

3. Give it a real TLS certificate and keep the default listeners: HTTPS on 7171 for web sessions and registration, TCP on 8181 for native client sessions.
4. Open only what you need, for example:

   sudo ufw allow 7171
   sudo ufw allow 8181
   sudo systemctl restart devolutions-gateway.service

   If users connect only from the browser, 8181 does not need to be reachable from the Internet.

Use the free standalone web client

1. Enable the standalone web application in gateway.json and require a login:

   "WebApp": {
     "Enabled": true,
     "Authentication": "Custom",
     "UsersFile": "users.txt"
   }

   The ProvisionerPrivateKeyFile option must also be set when the web app is enabled.

2. Add users to users.txt as name:hash lines, where the hash is an Argon2 password hash.
3. Restart the service and open the gateway’s HTTPS listener in a browser to start RDP, SSH, Telnet, VNC or ARD sessions to internal hosts.

Install and first run

Wayk Bastion. Do not install it for new work. It receives no security fixes, its cloud services were shut down and Devolutions no longer supports it.

Devolutions Gateway on Windows. Install the MSI as administrator; the configuration file is stored under %ProgramData%DevolutionsGateway. Allow TCP 7171 (and 8181 if native clients connect) in Windows Defender Firewall.

Devolutions Gateway on Linux. Packages are provided for x64 and ARM64. The service runs as its own account, so give it read access to certificate files, for example with setfacl on Let’s Encrypt certificates.

Gotchas. Certificates without the correct subject alternative name cause browser and client errors. For full features such as role-based access and central logging, Gateway is managed from Devolutions Server or Devolutions Cloud rather than run standalone.

Limitations

• Wayk Bastion is discontinued: no updates, no support, no sales.
• Old Wayk clients and agents should be treated as unpatched software and removed.
• No official download of the last Wayk builds is maintained, and the last exact server build number is not documented on a current official page.
• Devolutions Gateway is a relay and access gateway, not a drop-in clone: it does not reuse Wayk Bastion’s data or Wayk Now clients.

Wayk Bastion vs alternatives

For a self-hosted replacement focused on remote support, RustDesk Server runs your own ID and relay servers for RustDesk clients, which is closest to how Wayk Now and Wayk Bastion worked together. MeshCentral is a free, self-hosted web console with agents for unattended access. For browser access to RDP, SSH and VNC hosts, Devolutions Gateway or Apache Guacamole are the natural choices.

FAQ

Is Wayk Bastion still available?

No. Devolutions stopped selling it in July 2021 and ended support at the end of 2021.

What replaced Wayk Bastion?

Its functions moved into Devolutions Server and Devolutions Gateway, and Wayk Agent became the Devolutions Agent.

What is the difference between Wayk Bastion and Wayk Den?

None in purpose: Wayk Den was renamed Wayk Bastion in 2020.

Is Devolutions Gateway free?

Its standalone mode with a built-in web client is free, and the source code is on GitHub. Advanced logging, role-based access and other managed features come with Devolutions Server or Devolutions Cloud.

Which ports does Devolutions Gateway use?

By default TCP 7171 for the HTTPS listener (web sessions and registration) and TCP 8181 for native client sessions.

Can I still download Wayk Now or Wayk Bastion?

Devolutions no longer offers them as current products. Use a supported alternative instead of old installers.

Last checked against official sources: 1 October 2026 (developer website: devolutions.net). Versions and licence terms change — confirm on the developer's site before deploying in production.