Jump to content

Changelog 3.8


admin
 Share

Recommended Posts

3.8 is an experimental branch based on Linux 4.9, see also changelog 3.7.

Supported models:

  • Giga (KN-1010)
  • Start (KN-1110, KN-1111)
  • Lite (KN-1310, KN-1311)
  • Omni (KN-1410)
  • City (KN-1510)
  • Air/Explorer (KN-1610, KN-1611)
  • Extra/Carrier (KN-1710, KN-1711)
  • Ultra/Titan (KN-1810)
  • Viva/Skipper (KN-1910)
  • Omni DSL (KN-2011)
  • Extra DSL/Carrier DSL (KN-2111)
  • Runner 4G (KN-2210)
  • Hero 4G (KN-2310)
  • Hero DSL (KN-2410)
  • Giant (KN-2610)
  • Speedster (KN-3010)
  • Thanks 3
  • Upvote 2
Link to comment
Share on other sites

Release 3.8 Alpha 1:

  • DNS: added more content filtering and ad blocking choices. AdGuard DNS, CleanBrowsing, Cloudflare DNS, Neustar UltraDNS Public, OpenDNS, Quad9, Yandex.DNS are now available at once with the redesigned "Internet safety" page. Warning: configuration commands are backwards incompatible with 3.7 and earlier versions. The "ydns", "adguard-dns", and "cloudflare-dns" components are merged in a single "dns-filter" component. [NDM-1820, SYS-361, NWI-784]
    • dns-proxy filter assign host preset {host} {preset} — assign a preconfigured profile (preset) to a registered host
    • dns-proxy filter assign host profile {host} {profile} — assign a user-defined profile to a registered host
    • dns-proxy filter assign interface preset {interface} {preset} — assign a preconfigured profile (preset) to a network segment
    • dns-proxy filter assign interface profile {interface} {profile} — assign a user-defined profile to a network segment
    • dns-proxy filter profile {name} — create a user-defined profile
    • dns-proxy filter profile {name} description — set profile description
    • dns-proxy filter profile {name} dns53 upstream {address[:port]} — add a DNS server
    • dns-proxy filter profile {name} tls upstream {address} [port] [sni {fqdn}] [spki {hash}] — add a DNS-over-TLS server
    • dns-proxy filter profile {name} https upstream {url} [spki {hash}] — add a DNS-over-HTTPS server
    • dns-proxy filter engine public — enable the profile-based content filtering engine
    • show dns-proxy filter presets — list available presets
    • show dns-proxy filter profiles — list available profiles
  • DNS: implemented the NextDNS service support [NDM-1870]
    • nextdns authenticate {login} {password} [{pin}] — configure NextDNS authentication, you have to sign up first
    • nextdns assign ( ({host} {token}) | (interface {iface} {token}) | {token} ) — assign a NextDNS profile to a registered host or a network segment
    • nextdns check-availability — check availability
    • dns-proxy filter engine nextdns — enable the NextDNS filtering engine
    • show nextdns profiles — list available profiles
  • Fixed operation of the inbound and outbound Speed limits of the custom Internet connection policy [NDM-1889]
  • Fixed concurrent operation of the Speed limit for a Registered device and a custom Internet connection policy [NDM-1751]
  • Fixed the display of Connection statistics for port 0 when it operates as a part of the LAN network [NDM-779]
  • NTCE: added a CLI command to disable the memory "pressure watcher" mechanism [NDM-1995]
    • no ntce memory-watcher
  • USB: added support for 4G modems: Sierra EM7511/EM7565 4G LTE Cat 12 [NDM-1926]
  • USB: added more details for mobile connection, added 3G DC-HSPA+ connection mode indication [NDM-1983]
  • MWS: added a CLI command to reboot Wi-Fi system extenders from the controller [NDM-1946]
    • mws member {member} reboot
  • Thanks 4
  • Upvote 1
Link to comment
Share on other sites

  • 4 weeks later...

Release 3.8 Alpha 2:

  • HTTP: fixed a failure of the device's web server after a few days of operation [NDM-2046]
  • Wi-Fi: fixed sporadic blocking of TX data on a wireless interface after rebuilding an MWS segment [SYS-436]
  • Wi-Fi: added a setting for TKIP "countermeasure" hold-down timer [SYS-434]:
    • interface {name} encryption tkip hold-down {hold-down} — set the hold-down timer in seconds (from 0 to 60)
  • Wi-Fi: improved compatibility of mt7615 2.4 GHz Wireless ISP (WISP) with Realme 3 access point [SYS-383]
  • Wi-Fi: fixed Wireless ISP (WISP) connection issues with ZTE F680 [SYS-424]
  • USB: added support for MTS 8213FT (Huawei E5785Lh-22c) modem with a custom login and password [NDM-289]:
    • interface {name} web-api login {login} — set login
    • interface {name} web-api password (password} — set password
  • USB: added an option to configure a static IP address of a modem web interface [NDM-1749]:
    • interface {name} web-api address {address}
  • USB: added support for Huawei E5377Ts-32 [NDM-2027]
  • Core: fixed LED shutdown control for single-LED devices [SYS-442]
  • DHCP: restored the DHCP-client startup when a device is connected via Wi-Fi in "client" mode [NDM-2028]
  • NTCE: fixed the "unknown protocol" error in the system log triggered by IPv6/Teredo packets [NDM-2044]
  • Web: fixed error display on the login page (reported by @r777ay) [NWI-805]
  • Web: fixed an SMS notification icon for mobile screens [NWI-809]
  • Web: fixed display of the default IPv6 gateway on the dashboard (reported by @r13) [NWI-823]
  • Web: fixed hint layout on dashboard tiles for mobile screens [NWI-832]
  • Web: added DDNS update status on the configuration page [NWI-818]
  • Web: added the ability to open the port settings from the dashboard [NWI-822]
  • Web: added a link to the schedule configuration when a Wi-Fi network is disabled by schedule [NWI-840]
  • Web: fixed the APN settings display for the UsbModem interfaces [NWI-817]
  • Web: fixed "Network access" setting for VPN servers (reported by @PriSonerS61) [NWI-838]
  • Web: added the status of DFS scanning and detected radars on the Wi-Fi spectrum analyzer [NWI-845]
  • Thanks 4
  • Upvote 1
Link to comment
Share on other sites

Release 3.8 Alpha 3:

  • Core: fixed disabling ARP discovery on segments with mask 255.255.240.0 [NDM-1940]
  • USB: added a command for SIM slot selection for QMI modems [NDM-2015]:
    • interface {name} sim slot ( 1 | 2 )
  • DNS: added an optional domain specifier to DNS-over-TLS and DNS-over-HTTPS configuration [NDM-2040]:
    • dns-proxy tls upstream {address} [port] [sni {sni}] [spki {spki}] [on {interface}] [domain {domain}]
      dns-proxy https upstream {url} {json | dnsm} [spki {spki}] [on {interface}] [domain {domain}]
  • Thanks 2
  • Upvote 1
Link to comment
Share on other sites

Release 3.8 Alpha 4:

  • Core: fixed display of active connections in the Diagnostics menu (reported by @r13) [NDM-2061]
  • Core: suppressed "Hotspot::Account: data is absent for host" error caused by the Keenetic RMM service [NDM-2057]
  • Wi-Fi: fixed premature sending of Beacon frames before auto-channel selection is finished [SYS-473]
  • Wi-Fi: fixed LED indication of packet transmission over the 5 GHz radio interface (reported by @DVall) [SYS-475]
  • Wi-Fi: fixed ZeroWait DFS operation on a statically configured radio channel [SYS-469]
  • IPsec: fixed L2TP connection hangup under heavy load [SYS-39]
  • Web: added a reminder to backup KeeneticOS firmware image and configuration file before manual system update [NWI-871]
  • Web: moved buttons for manipulating user-defined routes (requested by @Дмитрий Кулик) [NWI-862]
  • Web: added session count per host [NWI-844]
  • Web: fixed "resource not found" error when loading the "Internet safety" page [NWI-866]
  • Web: fixed links to WISP connections on the Dashboard [NWI-872]
  • Web: added a cautionary note for negotiation mode selector in IKEv1 IPsec rules [NWI-877]
  • Thanks 4
Link to comment
Share on other sites

Release 3.8 Alpha 5:

  • Wi-Fi: fixed 160M/80M+80M bandwidth adjustment on an mt7915 WISP interface [SYS-461]
  • Wi-Fi: fixed immediate band steering action after a client is connected to 5 GHz [SYS-379]
  • Wi-Fi: fixed data transmission through a WISP interface when connected to a BSS declaring backhaul support [SYS-479]
  • QoS: fixed KN-1011 system crash when a traffic shaper is enabled for a specific host [SYS-375]
  • Web: fixed sorting of static routes (reported by @4e.Guevara) [NWI-873]
  • Web: added an ability to configure a segment with no IP address in the extender mode (requested by @AndreyUA) [NWI-847]
  • Thanks 3
Link to comment
Share on other sites

Release 3.8 Alpha 6:

  • Wi-Fi: fixed accidental shutdown of beacon frames on additional BSS [SYS-489]
  • USB: fixed critical error "did not claim interface 1 before use" when connecting Huawei modems [NDM-2063]
  • TSMB: fixed system crash under heavy use of IPC$ and spoolss [SYS-487]
  • Web: fixed displaying the "Port Forwarding" page on mobile devices (reported by @PriSonerS61) [NWI-883]
  • Thanks 3
Link to comment
Share on other sites

  • 3 weeks later...

Release 3.8 Alpha 7:

  • Core: fixed loading of the startup-config file size of more than 64 Kbytes [NDM-2090]
  • IPv6: implemented RFC7599 MAP-T support for accessing the IPv4 network via IPv6-only connection [NWI-906]
    image.png
  • MWS: added a feature that allows Extender access points to switch off automatically when communication with the controller is lost [NWI-895]
    image.png
  • MWS: enabled bridging of Realtek USB-LAN adapters on acquired extenders [NDM-2108]
  • MWS: fixed selection of an optimal backhaul access point based on RSSI and distance metrics [SYS-486]
  • Wi-Fi: fixed RADIUS authentication for multiple SSIDs [NDM-2081]
  • DHCP: fixed "invalid domain name" error when "update-dns" is enabled on a DHCP pool [NDM-2085]
  • QoS: applied application attributes to classify traffic more accurately [NDM-2021]
  • QoS: enabled offloading of the highest-priority traffic to the hardware PPE [SYS-506]
  • QoS: implemented adaptive upstream traffic shaper [NDM-2109]:
    • ip policy rate-limit output ({rate} | auto)
  • QoS: changed the default RTP classification category to Voice over IP [NDM-2110]
  • Web: unified priority numbers for registered hosts and IntelliQoS categories [NWI-939]
    image.png
  • Web: added links to user properties menu from VPN server configuration tiles [NWI-893]
  • Web: updated the metadata to comply with the Progressive Web App (PWA) specification (requested by @User624) [NWI-904]
  • Web: fixed height of the main menu on mobile screens (reported by @enterfaza) [NWI-914]
  • Web: added a warning about 5 GHz Wi-Fi suspension when attempting to select a channel from 36 to 48 at 160 MHz width (for DFS-enabled devices only) [NWI-949]
  • Web: added a 3G/4G band selection drop-down for UsbLte interfaces [NWI-919]

IMPORTANT NOTICE. For those who managed to update to 3.8 Alpha 7 before 12:00 on March 4, 2022 and changed settings, DO NOT RESTART YOUR DEVICE. You need to go to the command line interface and execute:

  • copy running-config startup-config
  • components list draft
  • components commit

We thank @_sk_ for reporting a critical bug.

  • Thanks 3
Link to comment
Share on other sites

  • 2 weeks later...

Release 3.8 Alpha 8:

  • Core: fixed applying a schedule when a host connection policy is changed [NDM-1716]
  • Wi-Fi: enabled the Wi-Fi on/off button in the Extender mode [NDM-2124]
  • UPnP: added support for routing policies when selecting a public interface for port forwarding [NDM-1382]
  • NTCE: separated display of traffic flows of the same application if they fall into different priority queues [NWI-951]
  • Wireguard: fixed looping of outgoing packets when the underlying WAN connection is turned off [NDM-852]
  • Wireguard: fixed accessing private DNS servers via the tunnel [NDM-2122]
  • OpenVpn: fixed support for multiple remote peers [NDM-2115]
  • MWS: implemented multi-threaded configuration of extenders [NDM-2003]
  • IPv6: fixed automatic default route configuration for MAP-T [NDM-2125]
  • IPv6: fixed support for MAP-T 1:1 IPv4 sharing ratio [NDM-2127]
  • Web: added MAP-T connection information to the dashboard [NWI-960]
  • Web: enabled Captive portal setup for multiple segments [NWI-916]
  • Web: fixed display of segment port settings on mobile devices (reported by @enterfaza) [NWI-924]
  • OpenSSL: 1.1.1n [CVE-2022-0778]
  • Thanks 3
  • Upvote 1
Link to comment
Share on other sites

  • 1 month later...

Release 3.8 Beta 1:

  • Core: fixed swapping WAN and LAN ports of Orbiter Pro [SYS-529]
  • Wi-Fi: fixed radio turned off by the Wi-Fi button to keep this state after a system reboot [SYS-78]
  • DNS: muted excessive debug messages from https-dns-proxy [SYS-516]
  • Transmission: fixed the error message — "RPC error: end of stream" when using the mobile application [NDM-2133]
  • IpSec: increased the maximum PSK key size up to 196 characters for IPsec VPN and IPsec/L2TP connections [NDM-2128]
  • USB: added support for the 4G LTE Cat4 Quectel EC200T modem [NDM-2164]
  • USB: added support for the 3G Huawei K4201 modem [NDM-2186]
  • Web: added MTU control to IKEv2 VPN client configuration in the advanced settings [NWI-974]
  • Web: added a warning message while setting up a Port forwarding rule for the HTTPS or 443/TCP protocol [NWI-977]
  • Web: added the display of the regional code next to the Model name field on the dashboard [NWI-1027]
  • Web: improved IPv4 availability criteria for MAP-T-enabled connections for the proper display on the dashboard [NWI-1025]
  • Web: added support for two-factor authentication (2FA) for the NextDNS service [NWI-1021]
  • Web: added links to the NextDNS account configurations on the Internet safety page (requested by @KYTECHNGAMING) [NWI-1020]
  • Thanks 3
  • Upvote 1
Link to comment
Share on other sites

  • 1 month later...

Release 3.8 Beta 2:

  • Restored Internet Checker behaviour to support default routes through a gateway in the local network using topologies with a non-Keenetic device as the primary router [NDM-2220]
  • PPE: fixed skb_headroom assignment in fastvpn (reported by @Peredovic) [SYS-557]
  • DNS: disabled serving DNS requests when not in the Router mode [NDM-2205]
  • DNS: fixed misconfiguration of filters when adding new segments [NDM-2230]
  • NTP: added the new default setting Auto that selects NTP servers from Keenetic cloud infrastructure [NWI-1107]
  • IPSec: the L2TP reception window is increased to 1024 packets to fine-tune performance [NDM-2138]
  • USB: added support for the 4G Cat4 8330FT USB (MTS) [NDM-2210]
  • Web: added the new Bandwidth control mode selector (Auto / Manual / Disabled) for inbound and outbound traffic for configuring connections in the Internet Connections policies [NWI-1070]
  • Web: fixed activation of the Guest segment if its wireless networks are disabled [NWI-1029]
  • Web: fixed erroneous Connection priority selector behaviour under certain conditions [NWI-1068]
  • Web: fixed the misbehaviour of tabs across the Web Interface while changing orientation from portrait (vertical) to landscape (horizontal) and vice versa in mobile browsers [NWI-1026]
  • Web: updated and unified toggle behaviour for the Application section [NWI-1037]
  • Web: corrected hint descriptions and wrongly allowed zero Off-hook and Dial digit timers in the Phone station settings [NWI-1090]
  • Web: added hint with allowed values for Registration timeout in Phone Lines setting [NWI-1091]
  • OpenSSL: 1.1.1o [CVE-2022-1292, CVE-2022-1473] [SYS-551]
  • Thanks 2
  • Upvote 1
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...