Jump to content
ndm

Changelog 3.5

Recommended Posts

3.5 is a stable branch based on Linux 4.9, see also changelog 3.4.

Supported models:

  • Giga (KN-1010)
  • Start (KN-1110, KN-1111)
  • 4G (KN-1210, KN-1211)
  • Lite (KN-1310, KN-1311)
  • Omni (KN-1410)
  • City (KN-1510)
  • Air (KN-1610, KN-1611)
  • Extra (KN-1710, KN-1711)
  • Ultra (KN-1810)
  • Viva (KN-1910)
  • Omni DSL (KN-2011)
  • Extra DSL (KN-2111)
  • Runner 4G (KN-2210)
  • Hero 4G (KN-2310)
  • Speedster (KN-3010)
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 1:

  • IPsec: imlemented IKEv2 client (@diam requested) as a separate component
    Image 15.png
  • IPsec: implemented IKEv2 VirtualIP server based on a Let's Encrypt certificate
     
    • crypto virtual-ip-server-ikev2
       
  • IPsec: implemented Virtual-IP VPN client traffic accounting
  • IPsec: added an ESP ALG component
    image.png
     
    • ip esp alg enable
       
  • Wi-Fi: implemented WPA3-PSK Fast Transition (FT-SAE)
  • Wi-Fi: implemented a separate PMK cache for FT and WPA3
  • Wi-Fi: fixed GTK rekey for FT transitioned clients (for mt7615/mt7613 chipsets)
  • Wi-Fi: fixed Fast Transition PMK-R1 key storage overflow
  • Wi-Fi: implemented binding to 2.4/5 GHz band:
    • interface {Bridge} mac band {mac} (0|1) — allow {mac} associations to 2.4GHz (0) or 5GHz (1) only, and ignore any request on the other band
  • DNS: added CloudFlare internet filter (@mega1volt requested)
    image.png
     
    • cloudflare-dns check-availability
    • cloudflare-dns assign {mac} (standard | malware | family)
    • cloudflare-dns enable
    • show cloudflare-dns availability
    • show cloudflare-dns profiles
       
  • HTTP: implemented randomized session cookie names
  • SSTP: improved compatibility with AnyVPN SSTP Connector
  • USB: added Quectel EP06 (QMI) modem support
  • Web: redesigned the Private Cloud tile
  • Web: fixed the "Delete schedule" button (@Alexander reported)
  • Web: fixed validation of the segment IP subnet settings
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 2:

  • fixed mobile app connectivity (@Mamay reported)
  • MWS: added "ip http security-level" synchronization
  • USB: fixed storage mounting with UTF-8 labeled partitions
  • Web: added CloudFlare internet filter support
  • Web: fixed "Cancel" button on the device list (@enterfaza reported)
  • Web: fixed dashboard appearance on extenders
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 3:

  • USB: fixed storage free space calculation
  • USB: fixed HiLink H3372 signal quality meter
  • IPsec: fixed registered device traffic accounting
  • Web: fixed drag-drop function in "Connection priorities" (@AndyFM reported)
  • Web: fixed host selection in the "Traffic monitor" (@r777ay reported
  • Web: fixed port configuration blocking on extenders (@enterfaza reported)
  • Web: fixed selected timezone option style (@enterfaza reported)
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 4:

  • USB: increased descriptor read tolerance for storage devices
  • USB: fixed "3G/4G QMI" compatibility with E392 modems
  • USB: fixed storage mounting failures
  • Wi-Fi: fixed WPS operation for WPA2+WPA3 PSK security
  • Web: fixed host schedule retention after denying access to the internet
  • Web: fixed tooltip formatting for VPN connections (@AndreBA reported)
  • Web: fixed "undefined" in the Wi-Fi system extender status (@AlexUnder2010 reported)
  • Web: fixed traffic-shape settings for unregistered devices
  • Web: fixed DHCP pool calculation for newly created segments
  • Web: fixed NAT configuration saving for segments
  • Web: added remote access configuration for extenders
    image.png
     
  • Web: added wireless band binding for registered devices
    image.png

 

  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 6:

  • USB: added E3131 modem support
  • HTTP: added colon support in Cookie headers
  • SIP: added "application" media type to SIP ALG
  • Web: added language packages
  • Web: fixed WebDAV password status
  • Web: fixed extender list appearance (@AndreBA reported)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 7:

  • DSL: severely reworked PTM/SAR driver
  • Wi-Fi: fixed KeyRSC field in EAPoL packets on mt7615/13
  • MWS: disabled STP if no member devices acquired
  • MWS: fixed WISP connection vs. backhaul access point startup (@r13 reported)
  • Web: added IKEv1 VPN connection support
  • Web: fixed client VPN connections list in the multiple sign-in mode
  • Web: fixed WebDAV service status (@AndreBA reported)
  • Web: fixed device list tooltips (@AndreBA reported)
  • Web: fixed Wireguard connection tooltips (@AndreBA reported)
  • Web: fixed "Domain name" help sign formatting (@bigpu reported)
  • Web: fixed select box value squeezing (@AndreBA reported)
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 9:

  • USB: added exFAT filesystem support
  • USB: added Sierra EM7455 modem support
  • Web: fixed minor formatting issues
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 10:

  • implemented active packet queue management for DSL and LTE connections
  • implemented isolation of service class-based packet flows
  • implemented assignment of service classes to registered hosts:
    • ip hotspot host {mac} service-class {1-6}
  • TSMB: implemented LsarQueryInformationPolicy RPC support
  • TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported)
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 11:

  • SoC: optimized reading of ethernet MAC tables
  • Acme: improved SSL certificate revocation and renewal task queue
  • Web: fixed Beamforming and MU-MIMO configuration (сообщил @petya)
  • Web: disabled automatic Wi-Fi blacklisting of newly registered devices
  • Web: limiting the number of selected language packages
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 12:

  • Wi-Fi: fixed LED indication of hardware-accelerated traffic
  • MWS: enabled 2.4 GHz backhaul for all extenders in a single-band controller network
  • TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported)
  • TSMB: fixed unauthorized NetShareEnum response
  • Web: fixed language packet selection (@iggo reported)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 13:

  • enabled active packet queue management in the trafficcontrol module
  • SoC: fixed MAC address entry lookup
  • exFAT: fixed big-endian specific errors
  • USB: supported modems:
    • E3372h-320
    • Anydata W150
  • HTTP: implemented X-Frame-Options header configuration:
    • ip http x-frame-options {x-frame-options}
  • Wireguard: updated to 1.0.20200623

Attention: deployed the new firmware signing certificate to the cloud infrastructure. Previously saved firmware files can be uploaded using the TFTP recovery only.

  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 14:

  • fixed unregistered traffic accounting
  • fixed WoL packet forwarding to blocked devices
  • fixed duplicated entries in the device list
  • Wi-Fi: fixed WPA2 client connection to WPA2+WPA3 access points
  • HTTP: implemented insertion of X-Real-IP and X-Forwarded-For headers:
    • ip http proxy {name} x-real-ip
  • USB: backported CDC-NCM updates from the kernel upstream
  • Web: fixed redirection to the Initial setup wizard
  • Web: fixed "not found: show/media" errors
  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 15:

  • reduced traffic-shape configuration delay
  • Wi-Fi: fixed WISP traffic accounting
  • DSL: fixed QDMA lockdown on unstable connections
  • IPsec: fixed ESP tunnel throughput degradation
  • IPsec: added AES-CTR mode to IKE and ESP (EIP93 hardware accelerated)
  • IPsec: added DH groups to IKE and ESP:
    • x25519
    • x448
    • ECP 192/256/384/521
  • IPsec: added AEAD ciphers to IKE and ESP:
    •  AES-CCM and AES-GCM (EIP93 partially accelerated)
    • CHACHA20-POLY1305
  • HTTP: added HTTPS upstream support:
    • ip http proxy {name} upstream (http | https) ({mac} | {ip} | {fqdn}) [{port}]
  • USB: added E8372h-320 modem support
  • Web: added IKEv2 server configuration page
  • transmission: updated to 3.00
  • Thanks 1
  • Need more info 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 16:

  • IPsec: enabled partial hardware acceleration of AES CTR/CCM/GCM on mt7628
  • HTTP: implemented a separate security-level setting for HTTP proxies:
    • ip http proxy {name} security-level (public | private)
  • NTFS: implemented sparse file support
  • TSMB: added "hidden" and "system" attributes to dotfiles
  • USB: added Quectel EG12/EM12 modem support
  • Netflow: implemented protocol version setting:
    • ip flow-export version {version}
  • Web: added "File system" column to the USB storage table
  • Web: added HTTPS option to HTTP proxy settings
  • Web: added a description field to static routes
  • Web: fixed alignment of question marks (@enterfaza reported)
  • transmission: fixed the "Enable download sequential" checkbox (@engelsit reported)
  • Thanks 1
  • Upvote 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 17:

  • SSTP: fixed "do_page_fault() SIGSEGV" error (reported by @3-50)
  • Web: fixed a fatal error on the dashboard if the 'cloudcontrol' component is not installed (reported by @KorDen)
  • Web: added 3G/4G mode selector for UsbLte interfaces
  • Web: added "TCP/UDP" protocol option for NAT rules
  • transmission: implemented NTFS sparse file support
  • transmission: updated the web interface
  • Thanks 1
  • Upvote 1
  • Need more info 1

Share this post


Link to post
Share on other sites

Release 3.5 Alpha 18:

  • fixed a memory leak in the I/O subsystem (reported by @Serghey)
  • Web: fixed displaying USB modems with an embedded SD card (reported by @drdic)
  • SoC: fixed IGMP snooping on the mt7621 integrated switch
  • Thanks 1
  • Confused 1

Share this post


Link to post
Share on other sites

Release 3.5 Beta 0 (pre-beta):

  • Wi-Fi: fixed WPA Enterprise authentication for hidden SSIDs
  • Web: added a combined security mode "WPA2 + WPA3 Enterprise"
  • Web: added a description field to firewall rules (requested by @cocojambo)
    firewall_description.png
     
  • Web: fixed the Opkg configuration form (reported by @DennoN)
  • created a separate component for Ext filesystems
    image.png
  • Thanks 3

Share this post


Link to post
Share on other sites

Release 3.5 Beta 2 (official beta):

  • USB: added support for ZTE MF79 modem
  • IGMP: fixed handling multiple subscriptions to a multicast group on extender devices
  • IGMP: improved IGMP snooping algorithm for the scenario when clients are connected via external switch

Release 3.5 Beta 3 (official beta):

  • IPsec: fixed IKEv1/XAUTH connectivity
  • SoC: fixed untagged Ethernet packet filtering on mt7628
  • MWS: fixed removal of Wi-Fi band binding rules
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Beta 4 (draft → official beta):

  • USB: added Alcatel IK40V v.01008 modem support
  • USB: fixed Anydata W140 network scanning procedure
  • Web: removed the "No IP address" option from the "Other connections" (reported by @m__a__l)
  • Web: removed confusing Connection options from the "DNS servers" list (reported by @r13)
  • Thanks 2

Share this post


Link to post
Share on other sites

Release 3.5 Beta 6 (draft → official beta):

  • USB: added support for modems:
    • ALTEL 4G Wingle Model W02
    • HP lt4220
    • Foxconn T77W676
  • IPsec: fixed internet access via IKEv2 server
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5 Beta 7 (official beta):

  • USB: added support for Telit ln940
  • Web: fixed rearrangement of firewall rules (reported by @MDP)
  • Web: fixed network interface drop-down list in the internet safety settings (reported by @rustrict and @r13)
  • OpenSSL updated to 1.1.1h
  • Thanks 1

Share this post


Link to post
Share on other sites

Release 3.5.1 (official stable):

  • USB: added support for modems:
    • Huawei E392u-12
    • Huawei E3372h-320 (A1 ISP)
  • Web: added VLAN-over-PVC support

To keep track of the experimental branch, subscribe to the Changelog 3.6

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...