Jump to content
ndm

Changelog 3.5

Recommended Posts

3.5 is a stable branch based on Linux 4.9, see also changelog 3.4.

Supported models:

  • Giga (KN-1010)
  • Start (KN-1110, KN-1111)
  • 4G (KN-1210, KN-1211)
  • Lite (KN-1310, KN-1311)
  • Omni (KN-1410)
  • City (KN-1510)
  • Air (KN-1610, KN-1611)
  • Extra (KN-1710, KN-1711)
  • Ultra (KN-1810)
  • Viva (KN-1910)
  • Omni DSL (KN-2011)
  • Extra DSL (KN-2111)
  • Runner 4G (KN-2210)
  • Hero 4G (KN-2310)
  • Speedster (KN-3010)
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 1:

  • IPsec: imlemented IKEv2 client (@diam requested) as a separate component
    Image 15.png
  • IPsec: implemented IKEv2 VirtualIP server based on a Let's Encrypt certificate
     
    • crypto virtual-ip-server-ikev2
       
  • IPsec: implemented Virtual-IP VPN client traffic accounting
  • IPsec: added an ESP ALG component
    image.png
     
    • ip esp alg enable
       
  • Wi-Fi: implemented WPA3-PSK Fast Transition (FT-SAE)
  • Wi-Fi: implemented a separate PMK cache for FT and WPA3
  • Wi-Fi: fixed GTK rekey for FT transitioned clients (for mt7615/mt7613 chipsets)
  • Wi-Fi: fixed Fast Transition PMK-R1 key storage overflow
  • Wi-Fi: implemented binding to 2.4/5 GHz band:
    • interface {Bridge} mac band {mac} (0|1) — allow {mac} associations to 2.4GHz (0) or 5GHz (1) only, and ignore any request on the other band
  • DNS: added CloudFlare internet filter (@mega1volt requested)
    image.png
     
    • cloudflare-dns check-availability
    • cloudflare-dns assign {mac} (standard | malware | family)
    • cloudflare-dns enable
    • show cloudflare-dns availability
    • show cloudflare-dns profiles
       
  • HTTP: implemented randomized session cookie names
  • SSTP: improved compatibility with AnyVPN SSTP Connector
  • USB: added Quectel EP06 (QMI) modem support
  • Web: redesigned the Private Cloud tile
  • Web: fixed the "Delete schedule" button (@Alexander reported)
  • Web: fixed validation of the segment IP subnet settings
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 2:

  • fixed mobile app connectivity (@Mamay reported)
  • MWS: added "ip http security-level" synchronization
  • USB: fixed storage mounting with UTF-8 labeled partitions
  • Web: added CloudFlare internet filter support
  • Web: fixed "Cancel" button on the device list (@enterfaza reported)
  • Web: fixed dashboard appearance on extenders
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 3:

  • USB: fixed storage free space calculation
  • USB: fixed HiLink H3372 signal quality meter
  • IPsec: fixed registered device traffic accounting
  • Web: fixed drag-drop function in "Connection priorities" (@AndyFM reported)
  • Web: fixed host selection in the "Traffic monitor" (@r777ay reported
  • Web: fixed port configuration blocking on extenders (@enterfaza reported)
  • Web: fixed selected timezone option style (@enterfaza reported)
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 4:

  • USB: increased descriptor read tolerance for storage devices
  • USB: fixed "3G/4G QMI" compatibility with E392 modems
  • USB: fixed storage mounting failures
  • Wi-Fi: fixed WPS operation for WPA2+WPA3 PSK security
  • Web: fixed host schedule retention after denying access to the internet
  • Web: fixed tooltip formatting for VPN connections (@AndreBA reported)
  • Web: fixed "undefined" in the Wi-Fi system extender status (@AlexUnder2010 reported)
  • Web: fixed traffic-shape settings for unregistered devices
  • Web: fixed DHCP pool calculation for newly created segments
  • Web: fixed NAT configuration saving for segments
  • Web: added remote access configuration for extenders
    image.png
     
  • Web: added wireless band binding for registered devices
    image.png

 

  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 6:

  • USB: added E3131 modem support
  • HTTP: added colon support in Cookie headers
  • SIP: added "application" media type to SIP ALG
  • Web: added language packages
  • Web: fixed WebDAV password status
  • Web: fixed extender list appearance (@AndreBA reported)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 7:

  • DSL: severely reworked PTM/SAR driver
  • Wi-Fi: fixed KeyRSC field in EAPoL packets on mt7615/13
  • MWS: disabled STP if no member devices acquired
  • MWS: fixed WISP connection vs. backhaul access point startup (@r13 reported)
  • Web: added IKEv1 VPN connection support
  • Web: fixed client VPN connections list in the multiple sign-in mode
  • Web: fixed WebDAV service status (@AndreBA reported)
  • Web: fixed device list tooltips (@AndreBA reported)
  • Web: fixed Wireguard connection tooltips (@AndreBA reported)
  • Web: fixed "Domain name" help sign formatting (@bigpu reported)
  • Web: fixed select box value squeezing (@AndreBA reported)
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 9:

  • USB: added exFAT filesystem support
  • USB: added Sierra EM7455 modem support
  • Web: fixed minor formatting issues
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 10:

  • implemented active packet queue management for DSL and LTE connections
  • implemented isolation of service class-based packet flows
  • implemented assignment of service classes to registered hosts:
    • ip hotspot host {mac} service-class {1-6}
  • TSMB: implemented LsarQueryInformationPolicy RPC support
  • TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported)
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 11:

  • SoC: optimized reading of ethernet MAC tables
  • Acme: improved SSL certificate revocation and renewal task queue
  • Web: fixed Beamforming and MU-MIMO configuration (сообщил @petya)
  • Web: disabled automatic Wi-Fi blacklisting of newly registered devices
  • Web: limiting the number of selected language packages
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 12:

  • Wi-Fi: fixed LED indication of hardware-accelerated traffic
  • MWS: enabled 2.4 GHz backhaul for all extenders in a single-band controller network
  • TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported)
  • TSMB: fixed unauthorized NetShareEnum response
  • Web: fixed language packet selection (@iggo reported)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 13:

  • enabled active packet queue management in the trafficcontrol module
  • SoC: fixed MAC address entry lookup
  • exFAT: fixed big-endian specific errors
  • USB: supported modems:
    • E3372h-320
    • Anydata W150
  • HTTP: implemented X-Frame-Options header configuration:
    • ip http x-frame-options {x-frame-options}
  • Wireguard: updated to 1.0.20200623

Attention: deployed the new firmware signing certificate to the cloud infrastructure. Previously saved firmware files can be uploaded using the TFTP recovery only.

  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 14:

  • fixed unregistered traffic accounting
  • fixed WoL packet forwarding to blocked devices
  • fixed duplicated entries in the device list
  • Wi-Fi: fixed WPA2 client connection to WPA2+WPA3 access points
  • HTTP: implemented insertion of X-Real-IP and X-Forwarded-For headers:
    • ip http proxy {name} x-real-ip
  • USB: backported CDC-NCM updates from the kernel upstream
  • Web: fixed redirection to the Initial setup wizard
  • Web: fixed "not found: show/media" errors
  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 15:

  • reduced traffic-shape configuration delay
  • Wi-Fi: fixed WISP traffic accounting
  • DSL: fixed QDMA lockdown on unstable connections
  • IPsec: fixed ESP tunnel throughput degradation
  • IPsec: added AES-CTR mode to IKE and ESP (EIP93 hardware accelerated)
  • IPsec: added DH groups to IKE and ESP:
    • x25519
    • x448
    • ECP 192/256/384/521
  • IPsec: added AEAD ciphers to IKE and ESP:
    •  AES-CCM and AES-GCM (EIP93 partially accelerated)
    • CHACHA20-POLY1305
  • HTTP: added HTTPS upstream support:
    • ip http proxy {name} upstream (http | https) ({mac} | {ip} | {fqdn}) [{port}]
  • USB: added E8372h-320 modem support
  • Web: added IKEv2 server configuration page
  • transmission: updated to 3.00
  • Thanks 1
  • Need more info 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 16:

  • IPsec: enabled partial hardware acceleration of AES CTR/CCM/GCM on mt7628
  • HTTP: implemented a separate security-level setting for HTTP proxies:
    • ip http proxy {name} security-level (public | private)
  • NTFS: implemented sparse file support
  • TSMB: added "hidden" and "system" attributes to dotfiles
  • USB: added Quectel EG12/EM12 modem support
  • Netflow: implemented protocol version setting:
    • ip flow-export version {version}
  • Web: added "File system" column to the USB storage table
  • Web: added HTTPS option to HTTP proxy settings
  • Web: added a description field to static routes
  • Web: fixed alignment of question marks (@enterfaza reported)
  • transmission: fixed the "Enable download sequential" checkbox (@engelsit reported)
  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 17:

  • SSTP: fixed "do_page_fault() SIGSEGV" error (reported by @3-50)
  • Web: fixed a fatal error on the dashboard if the 'cloudcontrol' component is not installed (reported by @KorDen)
  • Web: added 3G/4G mode selector for UsbLte interfaces
  • Web: added "TCP/UDP" protocol option for NAT rules
  • transmission: implemented NTFS sparse file support
  • transmission: updated the web interface
  • Thanks 1
  • Upvote 1
  • Need more info 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 18:

  • fixed a memory leak in the I/O subsystem (reported by @Serghey)
  • Web: fixed displaying USB modems with an embedded SD card (reported by @drdic)
  • SoC: fixed IGMP snooping on the mt7621 integrated switch
  • Thanks 1
  • Confused 1

Share this post


Link to post
Share on other sites

Release 3.5 Beta 0 (pre-beta):

  • Wi-Fi: fixed WPA Enterprise authentication for hidden SSIDs
  • Web: added a combined security mode "WPA2 + WPA3 Enterprise"
  • Web: added a description field to firewall rules (requested by @cocojambo)
    firewall_description.png
     
  • Web: fixed the Opkg configuration form (reported by @DennoN)
  • created a separate component for Ext filesystems
    image.png
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Beta 2 (official beta):

  • USB: added support for ZTE MF79 modem
  • IGMP: fixed handling multiple subscriptions to a multicast group on extender devices
  • IGMP: improved IGMP snooping algorithm for the scenario when clients are connected via external switch

Release 3.5 Beta 3 (official beta):

  • IPsec: fixed IKEv1/XAUTH connectivity
  • SoC: fixed untagged Ethernet packet filtering on mt7628
  • MWS: fixed removal of Wi-Fi band binding rules
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Beta 4 (draft → official beta):

  • USB: added Alcatel IK40V v.01008 modem support
  • USB: fixed Anydata W140 network scanning procedure
  • Web: removed the "No IP address" option from the "Other connections" (reported by @m__a__l)
  • Web: removed confusing Connection options from the "DNS servers" list (reported by @r13)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Beta 6 (draft → official beta):

  • USB: added support for modems:
    • ALTEL 4G Wingle Model W02
    • HP lt4220
    • Foxconn T77W676
  • IPsec: fixed internet access via IKEv2 server
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Beta 7 (official beta):

  • USB: added support for Telit ln940
  • Web: fixed rearrangement of firewall rules (reported by @MDP)
  • Web: fixed network interface drop-down list in the internet safety settings (reported by @rustrict and @r13)
  • OpenSSL updated to 1.1.1h
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5.1 (official stable):

  • USB: added support for modems:
    • Huawei E392u-12
    • Huawei E3372h-320 (A1 ISP)
  • Web: added VLAN-over-PVC support

To keep track of the experimental branch, subscribe to the Changelog 3.6

Share this post


Link to post
Share on other sites

Release 3.5.2 (official release):

  • fixed forwarding of rate-limited traffic through the software PPE engine
  • MWS: fixed extender Wi-Fi connection shutdown
  • HTTP: improved WebDAV compatibility with Far manager and netbox
  • Web: fixed configuration of TCP+UDP port forwarding rules (reported by @valeramalko)
  • NTFS: fixed support for cluster size greater than 4kB (reported by @zorro888)
  • NTFS: fixed write speed regression (reported by @Space Alex)

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...