MuKu

Release 4.2.2 (preview): Core: fixed "Bridge: wrong port index" error when displaying the list of connected devices (reported by @Robespierre) [NDM-3514] DDNS: added retry 30 seconds after failed address update (reported by @AnteC) [NDM-3513] DNS: fixed "https-dns-proxy: curl needed more event, than max connections" error [NDM-3523] DNS: fixed deletion of name servers with the default port (reported by @Rbuha) [NDM-3493] IP: fixed incompatibility of software packet engine with incoming traffic having TTL=1 [NDM-3490] IPoE: fixed listing of Ethernet connections (reported by @otets-grigoriy) [NDM-3504] HTTP: fixed "sent too big header while reading response header from upstream" error [NDM-3480] LLDP: enabled broadcast in addition to multicast announcements for better detection on Ethernet switches [SYS-1214] NTP: fixed communication with time server via IP alias [NDM-3417] Proxy: increased maximum identity length from 64 to 128 characters [NDM-3512] SFP: added quirks for GPON modules on KN-1012 [SYS-1209]: ODI DFP-34G-2C2 ODI DFP-34X-2C2 ODI DFP-34X-2C3 SSTP: fixed saving of "camouflage" peer suffix in client settings [NDM-3521] USB: added support for ZTE MU5001 5G modem [NDM-3500] Web: added a Reset button to return the dashboard to the original tile layout [NWI-3702] Web: added display of extra access points included in segments (reported by @Leshiyart) [NWI-3743] Web: changed colors on traffic monitor charts (reported by @KYTECHNGAMING) [NWI-3699] Web: fixed "Other management options" link position on mobile devices (reported by @dimon27254) [NDM-3722] Web: fixed DHCP pool size calculation (reported by @avn) [NWI-3720] Web: fixed DNS servers deletion for WireGuard (reported by @spatiumstas) [NWI-3800] Web: fixed USB Devices display when unmounting all partitions (reported by @spatiumstas) [NWI-3762] Web: fixed USB modem status display (reported by @spatiumstas) [NWI-3707] Web: fixed Wi-Fi channel configuration (reported by @Andrew Voronkov) [NWI-3698] Web: fixed application availability conditions (reported by @keenet07) [NWI-3770] Web: fixed border color of ports and VLAN settings (reported by @spatiumstas) [NWI-3789] Web: fixed color of "System mode" radio buttons (reported by @dimon27254) [NWI-3714] Web: fixed display of 802.1x authentication settings (reported by (@dimon27254) [NWI-3822] Web: fixed display of search results (reported by @dimon27254) [NWI-3830] Web: fixed errors when the segments page is open (reported by @spatiumstas) [NWI-3779] Web: fixed header of policy configuration at Connection Policies page (reported by @Gonzik) [NWI-3781] Web: fixed line wraps when expanding the menu (reported by @dimon27254) [NWI-3780] Web: fixed scrollbar color in the dark theme (reported by @dimon27254) [NWI-3764] Web: fixed scrolling on mobile devices (reported by @dimon27254) [NWI-3768] Web: fixed tooltips of Wi-Fi toggles on MWS Extenders (reported by @spatiumstas) [NWI-3763] Web: improved the Active Connections table (reported by @dimon27254) [NWI-3703] Wi-Fi: fixed Extender's wireless backhaul connection to a controller running a WPA2 access point without PMF [SYS-1213] Wi-Fi: fixed mt7916 being unable to connect as a client on 160 MHz bandwidth when ZeroWait DFS is enabled [SYS-1215]

Release 4.3 Alpha 3: DNS: fixed "https-dns-proxy: curl needed more event, than max connections" error [NDM-3523] IP: fixed incompatibility of software packet engine with incoming traffic having TTL=1 [NDM-3490] MWS: fixed quick access to the Extender web interface (reported by @dimon27254) [NDM-3522] SSTP: fixed saving of "camouflage" peer suffix in client settings [NDM-3521] Web: fixed USB modem status display (reported by @spatiumstas) [NWI-3707] Web: fixed border color of ports and VLAN settings (reported by @spatiumstas) [NWI-3789] Web: fixed display of 802.1x authentication settings (reported by @dimon27254( [NWI-3822] Web: fixed display of search results (reported by @dimon27254) [NWI-3830] Web: fixed DNS servers deletion for WireGuard (reported by @spatiumstas) [NWI-3800] Web: fixed Wi-Fi channel configuration (reported by @Andrew Voronkov) [NWI-3698] Wi-Fi: fixed mt7916 being unable to connect as client on 160 MHz bandwidth when ZeroWait DFS is enabled [SYS-1215]

Release 4.3 Alpha 2: Core: fixed "Bridge: wrong port index" error when displaying the list of connected devices (reported by @Robespierre) [NDM-3514] DNS: fixed deletion of name servers with the default port (reported by @Rbuha) [NDM-3493] DDNS: added retry 30 seconds after failed address update (reported by @AnteC) [NDM-3513] IPoE: fixed listing of Ethernet connections (reported by @otets-grigoriy) [NDM-3504] LLDP: enabled broadcast in addition to multicast announcements for better detection on Ethernet switches [SYS-1214] NTCE: increased maximum rate limit up to 2500 MBit/s [SYS-1208] NTP: fixed communication with time server via IP alias [NDM-3417] OpenConnect: added support for Fortinet protocol (reported by @avn) [NDM-3520]: interface {name} openconnect protocol fortinet Web: added a Reset button to return the dashboard to the original tile layout [NWI-3702] Web: fixed "Other management options" link position on mobile devices (reported by @dimon27254) [NDM-3722] Web: fixed DHCP pool size calculation (reported by @avn) [NWI-3720] Web: fixed application availability conditions (reported by @keenet07) [NWI-3770] Web: fixed errors when the segments page is open (reported by @spatiumstas) [NWI-3779] Web: fixed line wraps when expanding the menu (reported by @dimon27254) [NWI-3780] Web: fixed scrollbar color in the dark theme (reported by @dimon27254) [NWI-3764] Web: fixed scrolling on mobile devices (reported by @dimon27254) [NWI-3768] Web: fixed tooltips of Wi-Fi toggles on MWS Extenders (reported by @spatiumstas) [NWI-3763] Web: improved the Active Connections table (reported by @dimon27254) [NWI-3703] Wi-Fi: fixed Extender's wireless backhaul connection to a controller running a WPA2 access point without PMF [SYS-1213]

Release 4.3 Alpha 1: DHCP: implemented configuration of interface-specific relay agents [NDM-3401]: interface {name} ip dhcp relay enable — enable DHCP relay on an interface interface {name} ip dhcp relay upstream server {address} — specify an upstream DHCP server interface {name} ip dhcp relay upstream interface {interface} — bind DHCP upstream to a specific interface (optional) HTTP: implemented "connect" method to allow for OpenVPN proxying [NDM-3497]: ip http proxy {name} upstream (http | https | connect) {upstream} [port] IP: added settings for policy-specific routes [NDM-3435]: ip policy {name} ip route ( {network} {mask} | {host} ) ( {gateway} [interface] | {interface}) [auto] [metric] [reject] ip policy {name} ipv6 route {prefix} ( {interface} [gateway] | {gateway} ) [auto] [metric] [reject] IP: implemented protection against connection table overflow [NDM-3362]: ip conntrack max-entries {max-entries} — set conntrack table size ip conntrack lockout disable — disable conntrack table protection (enabled by default) ip conntrack lockout threshold public {public} — set maximum number of connections from public interfaces (percentage of the conntrack table size, from 50 to 99, default value: 80) ip conntrack lockout duration {duration} — set lockout duration in seconds (from 60 to 3600, default value: 600) ip conntrack sweep threshold {threshold} — set threshold to start cleaning up waiting sessions (percentage of the conntrack table size, from 50 to 99, default value: 70) show ip conntrack lockout — view lockout status IPsec: fixed KeenDNS access to device via IKEv2 connection [NDM-3439] MWS: fixed host uptime reset when roaming between access points (reported by @Radyohead) [NDM-3498] Opkg: disabled restarting of initrc when changing "dns-override" configuration (reported by @Zeleza) [NDM-3496] Proxy: increased maximum identity length from 64 to 128 characters [NDM-3512] SFP: added quirks for GPON modules on KN-1012 [SYS-1209]: ODI DFP-34G-2C2 ODI DFP-34X-2C2 ODI DFP-34X-2C3 Torrent: implemented setting for background priority of disk I/O (reported by @Andrey812) [NDM-3436]: torrent io-priority low USB: added support for ZTE MU5001 5G modem [NDM-3500] VPN: added ability to preempt VPN sessions when multilogin option is disabled (reported by @krasnoperovrv) [NDM-3450]: crypto map {name} l2tp-server session-preempt VPN: fixed dropping of active connections to the server when user account settings are changed [NDM-234] Web: added IPv6 settings for VPN Connections [NWI-3428] Web: added display of extra access points included in segments (reported by @Leshiyart) [NWI-3743] Web: added timer for on-demand mode in WISP settings [NWI-3570] Web: changed colors on traffic monitor charts (reported by @KYTECHNGAMING) [NWI-3699] Web: fixed USB Devices display when unmounting all partitions (reported by @spatiumstas) [NWI-3762] Web: fixed color of "System mode" radiobuttons (reported by @dimon27254) [NWI-3714] Web: fixed header of policy configuration at Connection Policies page (reported by @Gonzik) [NWI-3781]

To keep track of the experimental branch, subscribe to the Changelog 4.3

4.3 is an experimental branch, see also changelog 4.2. Supported models: Giga (KN-1010) Hero (KN-1011) Start/Starter (KN-1110, KN-1111, KN-1112) Lite (KN-1310) Omni (KN-1410) City (KN-1510) Air/Explorer (KN-1610, KN-1613) Extra/Carrier (KN-1710, KN-1711, KN-1713) Ultra/Titan (KN-1810, KN-1811) Viva/Skipper (KN-1910, KN-1913) Omni DSL (KN-2011, KN-2012) Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112) Runner 4G (KN-2210, KN-2211, KN-2212) Hero 4G (KN-2310, KN-2311) Hero DSL (KN-2410) Peak DSL (KN-2510) Giant (KN-2610) Peak (KN-2710) Orbiter Pro (KN-2810) Skipper 4G (KN-2910) Speedster (KN-3010, KN-3012) Buddy 4 (KN-3210, KN-3211) Buddy 5 (KN-3311) Buddy 6 (KN-3411) Voyager Pro (KN-3510) Hopper DSL (KN-3610) Sprinter (KN-3710) Hopper (KN-3810) Explorer 4G (KN-4910)

Release 4.2.1 (preview → stable): IPv6: fixed "unable resolve NAT64 domain" error on a CLAT interface (reported by @wigeance) [NDM-3484] Mws: fix compatibility with Extenders on versions up to 3.7 [NDM-3491] Mws: implemented configuration of update channel for Extenders [NDM-3419]: mws member {member} update channel {channel} SNMP: fixed community check for SNMPv1 [SYS-1203] USB: added support for MF79N modem [NDM-3451] USB: added support for Vodafone K4606 modem [NDM-3483] Web (beta): added descriptions of LTE modem signal metrics (reported by @Alexander) [NWI-3750] Web (beta): fixed "Allow WPS" configuration on Extenders (reported by @dimon27254) [NWI-3697] Web (beta): fixed "Use syslog" checkbox state (reported by @Andrei Biruk) [NWI-3689] Web (beta): fixed autocompletion in the Command line (reported by @dimon27254) [NWI-3715] Web (beta): fixed blinking segment description on the dashboard (reported by @bigpu) [NWI-3716] Web (beta): fixed Ethernet port tooltips on the dashboard (reported by @dimon27254) [NWI-3727] Web (beta): fixed layout issues on wide screens (reported by @spatiumstas) [NWI-3731] Web (beta): fixed overscrolling in MWS transition log (reported by @dimon27254) [NWI-3694] Web (beta): fixed SMS tab switching and status for multiple modems (reported by @S.Andrey) [NWI-3749] Web (beta): fixed warning about disabled Wi-Fi interfaces on the Wi-Fi Monitor (reported by @dimon27254) [NWI-3717] Web (beta): fixed Wi-Fi channel width display (reported by @keenet07) [NWI-3730] Wi-Fi: fixed automatic activation of default security on an open network after device restart (reported by @svo2) [NDM-3485] Wireguard: fixed connection via another Wireguard tunnel [NDM-3467]

Release 4.2.0 (preview)*: Torrent: fixed sudden crash and restart of “transmission” service [NDM-3477] * released for devices with USB storage support.

Release 4.2 Beta 4 (preview): DNS: added new public filtering profiles by Control D (reported by @lighting) [NDM-3452] IP: fixed filtering of transit DNS queries when using routing policies (reported by @Veltik) [NDM-3468] IP: implemented standalone mode for policies [NDM-3445]: ip policy {name} standalone — enable “standalone” mode, i.e. do not copy static routes from the main settings IPsec: fixed memory leak when using VirtualIP [NDM-3460] IPsec: fixed saving of "crypto ipsec transform-set cypher" configuration (reported by @CrPO4) [NDM-3470] Opkg: added optional URL to the "opkg disk" command [NDM-3453]: opkg disk {disk} [url] — set disk partition and download an installer package from the specified location (optional) Web (beta): allowed to specify custom port for Proxy upstream (reported by @dimon27254) [NWI-3713] Web (beta): changed link of the "Current user has no password" notification (reported by @spatiumstas) [NWI-3719] Web (beta): disabled on/off toggles for Access Points on Extenders (reported by @dimon27254) [NWI-3634] Web (beta): fixed column titles of the "UPnP Port Forwarding Table" (reported by @mrGhotius) [NWI-3688] Web (beta): fixed display of USB disk label as zeros (reported by @Gim12) [NWI-3672] Web (beta): fixed horizontal scrolling of tables on mobile screens (reported by @dimon27254) [NWI-3683] Web (beta): fixed overlapping of drop-down lists with buttons (reported by @dimon27254) [NWI-3721] Web (beta): fixed visual issues in "Transition Log" (reported by @spatiumstas) [NWI-3658] Web (beta): improved contrast of notification colors (reported by @spatiumstas) [NWI-3667] Wireguard: fixed dynamic source port selection for outgoing connections (reported by @Леонид Харламов) [NDM-3469]

Release 4.2 Beta 3 (preview): DynDNS: implemented a command to disable binding of a request to the corresponding connection [NDM-3420]: interface {name} dyndns nobind IP: fixed access restriction to my.keenetic.net from "protected" segments [NDM-3346] IPsec: implemented adherence to the policy of the bound segment for VPN servers (reported by @nstddd) [NDM-3431] Kernel: fixed socket leak in nf_queue (reported by @s_keenetic) [NDM-3428] Mws: fix display of transitions between bands in the Transition Log (reported by @Alexander) [NDM-3412] OpenConnect: fixed selection of the interface through which to connect [NDM-3434] OpenConnect: implemented authgroup setting (reported by @machogar) [NDM-3430]: interface {name} openconnect authgroup {authgroup} OpenVPN: fixed adding routes received from the remote node [NDM-3415] Web (beta): added IP address display for OpenConnect connections (reported by @FLK) [NWI-3656] Web (beta): disabled auto-capitalization in input fields (reported by @spatiumstas) [NWI-3655] Web (beta): fixed "DNS servers" link on the "Internet" tile (reported by @spatiumstas) [NWI-3660] Web (beta): fixed "No new routes found" error when importing routes from file (reported by @efremych) [NWI-3670] Web (beta): fixed "Validate SIP proxy" checkbox (reported by @Gim12) [NWI-3638] Web (beta): fixed "Wireless ACL" page on extenders (reported by @AndreBA) [NWI-3640] Web (beta): fixed contents of the "Segments" tile for extenders (reported by @dimon27254) [NWI-3636] Web (beta): fixed copying of WireGuard public keys from the input form (reported by @spatiumstas) [NWI-3666] Web (beta): fixed display of tabs to fit the available free space (reported by @spatiumstas) [NWI-3393] Web (beta): fixed importing of WireGuard configuration to ignore PersistentKeepalive (reported by @spatiumstas) [NWI-3659] Web (beta): fixed menu scroll bar position on mobile screens (reported by @spatiumstas) [NWI-3654] Web (beta): fixed notification width (reported by @spatiumstas) [NWI-3662] Web (beta): fixed packet size setting for the Ping utility (reported by @spatiumstas) [NWI-3661] Web (beta): fixed unnecessary saving of user-defined tiles layout when opening the dashboard (reported by @And74) [NWI-3635] Web (beta): fixed validation of Proxy IP address to allow 127.0.0.1 (reported by @dimon27254) [NWI-3642] Web (beta): implemented alphabetical name sorting in the file manager (reported by @spatiumstas) [NWI-3663] Web (beta): implemeted display of 5G signal levels [NWI-3035] Web (beta): remove the “5G only” option for modems without 5G support (reported by @dimon27254) [NWI-3629] Web (beta): unified the behaviour of link to uninstalled application (reported by @bigpu) [NWI-3664] Web: fixed data in "Destination IP" column in "Active connections" tables (reported by @dimon27254) [NWI-3633] Wi-Fi: fixed enabling of VHT40 mode on mt7981 based devices [SYS-1189] Wireguard: implemented sending of a client ID in message headers (reported by @avn) [NDM-3427]: interface {name} wireguard peer {peer} client-id send {value}

Release 4.2 Beta 2 (preview): DNS: fixed reset of static IPv6 settings after device reboot [NDM-3390] IPsec: fixed site-to-site tunnel configuration with multiple remote subnets [NDM-3381] MWS: implemented configuration of segments without access points [NDM-3210] OpenConnect: disabled DTLS in cloud mode (reported by @Кинетиковод) [NDM-3394] Web: enabled caching of the saved configuration to optimize response time and CPU load [NWI-3643] Web: fixed Transition Log on mobile displays (reported by @dimon27254) [NWI-3579]

Release 4.2 Beta 1 (preview): IPv6: fixed DNS query filtering rule for link-local addresses (reported by @Thesaurus) [NDM-3379] Web (beta): added client names for IPv6 connections (reported by @r13) [NWI-3546] Web (beta): added connection type to duplicate interfaces names (reported by @SoNick) [NWI-3581] Web (beta): fixed bugs on the "Diagnostics" page (reported by @AndreBA) [NWI-3523] Web (beta): fixed display of "Transition log" content (reported by @dimon27254) [NWI-3604] Web (beta): fixed display of current operating mode and selected country (reported by @dimon27254) [NWI-3606] Web (beta): fixed duplicate "Applications" header (reported by @dimon27254) [NWI-3599] Web (beta): fixed minor issues in displaying the list of handsets on the dashboard (reported by @iggo) [NWI-3574] Web (beta): fixed saving the order of interfaces in the default policy (reported by @FLK) [NWI-3607] Web (beta): fixed search results considering installed components (reported by @dimon27254) [NWI-3568] Web (beta): fixed settings dialog for registered devices that use UPnP (reported by @Grapie) [NWI-3624] Web (beta): fixed unintentional disabling of DHCP Relay when saving segment settings (reported by @CrPO4) [NWI-3583] Web (beta): removed unnecessary link to Wi-Fi settings (reported by @dimon27254) [NWI-3556]

Release 4.2 Beta 0: PPE: implemented dynamic table size alignment with nf_conntrack_max [NDM-3344] VPN: fixed PPP interface stalling on the backup connection after the primary connection is restored [NDM-3376] Web (beta): enabled the next-generation interface as the default [NDM-3378] Web (beta): fixed some minor issues related to application tiles (reported by @dimon27254) [NWI-3549] Web (beta): fixed unwanted visual effects when clicking on a pie chart (reported by @dimon27254) [NWI-3562] Wi-Fi: fixed display of zero channel number when WISP is connected [SYS-1171] Wi-Fi: fixed uninitialized variable causing errors in status polling and channel selection when DFS is active [SYS-1172]

Release 4.2 Alpha 17: IGMP: added a component to enable IGMP snooping on Buddy devices [NDM-3338] OpenVPN: fixed "Connection reset, restarting" error [NDM-3355] SNTP: filled in "Reference Identifier" and "Reference Timestamp" values in responses according to RFC4330 [NDM-3368] Web (beta): fixed behavior of toggles in tables (reported by @keenet07) [NWI-3524]

Release 4.2 Alpha 16: Web (beta): fixed display of "File browser" pop-up on mobile screens (reported by @dimon27254) [NWI-3534] Web (beta): fixed issues with the built-in search (reported by @dimon27254) [NWI-3547] Web (beta): fixed issues with Wi-Fi System Extender settings pop-up (reported by @dimon27254) [NWI-3536] Web (beta): fixed labeling of uninstalled applications (reported by @T@rkus) [NWI-3537] Web (beta): fixed links to knowledge base articles (reported by @dimon27254) [NWI-3265] Web (beta): fixed missing tiles on the dashboard (reported by @iggo) [NWI-3514]

Release 4.2 Alpha 15: IPsec: fixed random source port assignment for L2TP/IPsec client [NDM-3349] IPv6: fixed ULA prefix announcements (reported by @pppppppo_98) [NDM-3350] Web (beta): added frequency band selector for 5G on Mobile page (reported by @sanila82) [NWI-3426] Web (beta): fixed "Persistent keepalive" value in WireGuard settings (reported by @Denis P) [NWI-3518] Web (beta): fixed "Show only installed apps" button on mobile screens (reported by @T@rkus) [NWI-3535] Web (beta): fixed behavior of "Test" button on "Cable Diagnostics" page (reported by @dimon27254) [NWI-3533] Web (beta): fixed display of traffic monitor for selected device (reported by @dimon27254) [NWI-3522] Web (beta): fixed mask changing for IP-encapsulated tunnels (reported by @D1abl093) [NWI-3511] Web (beta): fixed reset of speed limit for unregistered devices (reported by @dimon27254) [NWI-3521] Web (beta): fixed saving of “Access to Web applications” settings (reported by @AndyFM) [NWI-3519] Web (beta): fixed validation of IP addresses to disallow addresses occupied by Extenders (reported by @dimon27254) [NWI-3520]

Release 4.2 Alpha 14: MWS: fixed selection of the best node for wireless backhaul connection [SYS-1161] Web (beta): implemented telephony settings; completed all pages of the new Web interface [NWI-3356]

Release 4.1.7 (stable): IPv6: fixed support for multiple IP policies [NDM-3289] MWS: fixed "Network::Interface::Mtk::BandSteering: failed to lookup service for segment" error occurring on extenders [NDM-3325] OpenVPN: fixed spurious reconnects of OpenVPN client [NDM-3301] SSH: fixed SFTP connections blocking by lockout-policy [NDM-3263] Wi-Fi: fixed 5 GHz channel width degradation on Buddy 6 [SYS-1151]

Release 4.2 Alpha 13: SSH: fixed SFTP connections blocking by lockout-policy [NDM-3263] Web (beta): fixed display of "Long pressing" Wi-Fi button handler (reported by @dimon27254) [NWI-3500] Web (beta): fixed display of Internet safety on the Internet tile (reported by @bigpu) [NWI-3467] Web (beta): fixed PSK key validation for IPsec connection [NWI-3504] Web (beta): fixed reloading of "USB Devices and Printers" tile after moving it (reported by @dimon27254) [NWI-3476] Web (beta): fixed saving configuration of "Network Ports" (reported by @101) [NWI-3488]

Release 4.2 Alpha 12: IPsec: fixed remote access via IPsec/IKE VPN connection to a host directly mapped to a WAN IP alias [NDM-3310] MWS: fixed "Network::Interface::Mtk::BandSteering: failed to lookup service for segment" error occurring on Extenders [NDM-3325] MWS: fixed regression in detecting Extender's backhaul connection status when access points are turned off [NDM-3333] MWS: implemented assignment of Extender ports to additional segments [NDM-3162]: mws member {member} port {port} [no] access {interface} — configure {port} as an access port for a segment; mws member {member} port {port} [no] disable — disable port. PPE: fixed IPv6 traffic accounting using the hardware packet engine [NDM-3234] PPE: implemented traffic acceleration when TTL is adjusted manually (reported by @r13) [SYS-1157] Web (beta): fixed bug in "Roaming for wireless devices" settings (reported by @zzaal) [NWI-3462] Web (beta): fixed color of selected application tile in dark theme (reported by @dimon27254) [NWI-3452] Web (beta): fixed deletion of a segment with enabled Captive portal after system restart (reported by @agentOleg) [NWI-3479]

Release 4.2 Alpha 11: Core: fixed "ppe" settings format (reported by @keenet07) [NDM-3311] DNS: fixed reset of static IP settings after device reboot [NDM-3303] DNS: improved robustness of the DoT/DoH cache [NDM-3320] DynDNS: fixed validation of domain names (reported by @Михаил Касванд) [NDM-3309] Mobile: fixed "interface mobile pdp" setting (reported by @k19olegh68) [NDM-3312] OpenSSL: switched to 3.0.13 [SYS-1152] VLAN: implemented mapping of NTCE priority to 802.1p PCP for egress packets (reported by @Gim12) [NDM-3318]: interface {name} vlan qos egress map {priority} {pcp} priority — NTCE priority queue number. If the value is 0, all outgoing packets will receive the given PCP; pcp — 802.1p PCP value. Web (beta): improved behavior of toggles in tables (reported by @keenet07) [NWI-3465] Wi-Fi: fixed 5 GHz channel width degradation on Buddy 6 [SYS-1151] ZeroTier: added support for DNS and global routes (reported by @drno88) [NDM-3319]

Release 4.2 Alpha 10: Core: fixed inversion of certain boolean settings (reported by @dimon27254) [NDM-3297] Core: fixed returning "null" for undefined boolean settings (reported by @agentOleg) [NDM-3298] OpenVPN: fixed spurious reconnects of OpenVPN client [NDM-3301] SNMP: fixed ifAdminStatus monitoring for Ethernet ports [NDM-3296] USB: fixed "interface usb apn" setting (reported by @Grigoriy) [NDM-3307] VPN: implemented adherence to the policy of the bound interface [NDM-3295] Web (beta): added OpenConnect to the Applications page [NWI-3407] Web (beta): fixed "Server address" input validation for OpenConnect (reported by @snark) [NWI-3463] Web (beta): fixed display of connections that use IPv4 over IPv6 [NWI-3472] Web (beta): fixed display of the backup peer address for IPsec connections (reported by @feoser) [NWI-3464]

Release 4.1.6 (stable): HTTP: implemented support for direct access to KeenDNS from browsers with TLS 1.3 hybridized Kyber enabled (reported by @dimon27254) [NDM-3284]

Release 4.2 Alpha 9: Core: fixed password argument parser (reported by @ant76) [NDM-3293]

Release 4.2 Alpha 8: HTTP: implemented support for direct access to KeenDNS from browsers with TLS 1.3 hybridized Kyber enabled (reported by @dimon27254) [NDM-3284] VPN: implemented IP address assignment coordinated with the DHCP pool of the bound home network [NDM-3250] Web (beta): added line break for long modem firmware version in the signal levels pop-up (reported by @dimon27254) [NWI-3422] Web (beta): added new "Segment default" policy to host policies [NWI-3415] Web (beta): fixed color of the "Status LED" symbol on the login page (reported by @dimon27254) [NWI-3435] Web (beta): fixed password reset when changing user account settings (reported by @r13) [NWI-3438] Web (beta): fixed sorting in the "Mesh Wi-Fi system" table (reported by @agentOleg) [NWI-3473] Web (beta): removed the "USB Devices" section for models without USB ports (reported by @dimon27254) [NWI-3436]