Changelog 4.3

[MuKu]

4.3 is an experimental branch, see also changelog 4.2.

Supported models:

• Giga (KN-1010)
• Hero (KN-1011)
• Start/Starter (KN-1110, KN-1111, KN-1112)
• Lite (KN-1310)
• Omni (KN-1410)
• City (KN-1510)
• Air/Explorer (KN-1610, KN-1613)
• Extra/Carrier (KN-1710, KN-1711, KN-1713)
• Ultra/Titan (KN-1810, KN-1811)
• Viva/Skipper (KN-1910, KN-1913)
• Omni DSL (KN-2011, KN-2012)
• Extra DSL/Carrier DSL/Skipper DSL (KN-2111, KN-2112)
• Runner 4G (KN-2210, KN-2211, KN-2212)
• Hero 4G (KN-2310, KN-2311)
• Hero DSL (KN-2410)
• Peak DSL (KN-2510)
• Giant (KN-2610)
• Peak (KN-2710)
• Orbiter Pro (KN-2810)
• Skipper 4G (KN-2910)
• Speedster (KN-3010, KN-3012)
• Buddy 4 (KN-3210, KN-3211)
• Buddy 5 (KN-3311)
• Buddy 6 (KN-3411)
• Voyager Pro (KN-3510)
• Hopper DSL (KN-3610)
• Sprinter (KN-3710)
• Hopper (KN-3810)
• Explorer 4G (KN-4910)

[MuKu]

Release 4.3 Alpha 1:

• DHCP: implemented configuration of interface-specific relay agents [NDM-3401]:
  • interface {name} ip dhcp relay enable — enable DHCP relay on an interface
  • interface {name} ip dhcp relay upstream server {address} — specify an upstream DHCP server
  • interface {name} ip dhcp relay upstream interface {interface} — bind DHCP upstream to a specific interface (optional)
• HTTP: implemented "connect" method to allow for OpenVPN proxying [NDM-3497]:
  • ip http proxy {name} upstream (http | https | connect) {upstream} [port]
• IP: added settings for policy-specific routes [NDM-3435]:
  • ip policy {name} ip route ( {network} {mask} | {host} ) ( {gateway} [interface] | {interface}) [auto] [metric] [reject]
  • ip policy {name} ipv6 route {prefix} ( {interface} [gateway] | {gateway} ) [auto] [metric] [reject]
• IP: implemented protection against connection table overflow [NDM-3362]:
  • ip conntrack max-entries {max-entries} — set conntrack table size
  • ip conntrack lockout disable — disable conntrack table protection (enabled by default)
  • ip conntrack lockout threshold public {public} — set maximum number of connections from public interfaces (percentage of the conntrack table size, from 50 to 99, default value: 80)
  • ip conntrack lockout duration {duration} — set lockout duration in seconds (from 60 to 3600, default value: 600)
  • ip conntrack sweep threshold {threshold} — set threshold to start cleaning up waiting sessions (percentage of the conntrack table size, from 50 to 99, default value: 70)
  • show ip conntrack lockout — view lockout status
• IPsec: fixed KeenDNS access to device via IKEv2 connection [NDM-3439]
• MWS: fixed host uptime reset when roaming between access points (reported by @Radyohead) [NDM-3498]
• Opkg: disabled restarting of initrc when changing "dns-override" configuration (reported by @Zeleza) [NDM-3496]
• Proxy: increased maximum identity length from 64 to 128 characters [NDM-3512]
• SFP: added quirks for GPON modules on KN-1012 [SYS-1209]:
  • ODI DFP-34G-2C2
  • ODI DFP-34X-2C2
  • ODI DFP-34X-2C3
• Torrent: implemented setting for background priority of disk I/O (reported by @Andrey812) [NDM-3436]:
  • torrent io-priority low
• USB: added support for ZTE MU5001 5G modem [NDM-3500]
• VPN: added ability to preempt VPN sessions when multilogin option is disabled (reported by @krasnoperovrv) [NDM-3450]:
  • crypto map {name} l2tp-server session-preempt
• VPN: fixed dropping of active connections to the server when user account settings are changed [NDM-234]
• Web: added IPv6 settings for VPN Connections [NWI-3428]
• Web: added display of extra access points included in segments (reported by @Leshiyart) [NWI-3743]
• Web: added timer for on-demand mode in WISP settings [NWI-3570]
• Web: changed colors on traffic monitor charts (reported by @KYTECHNGAMING) [NWI-3699]
• Web: fixed USB Devices display when unmounting all partitions (reported by @spatiumstas) [NWI-3762]
• Web: fixed color of "System mode" radiobuttons (reported by @dimon27254) [NWI-3714]
• Web: fixed header of policy configuration at Connection Policies page (reported by @Gonzik) [NWI-3781]

[MuKu]

Release 4.3 Alpha 2:

• Core: fixed "Bridge: wrong port index" error when displaying the list of connected devices (reported by @Robespierre) [NDM-3514]
• DNS: fixed deletion of name servers with the default port (reported by @Rbuha) [NDM-3493]
• DDNS: added retry 30 seconds after failed address update (reported by @AnteC) [NDM-3513]
• IPoE: fixed listing of Ethernet connections (reported by @otets-grigoriy) [NDM-3504]
• LLDP: enabled broadcast in addition to multicast announcements for better detection on Ethernet switches [SYS-1214]
• NTCE: increased maximum rate limit up to 2500 MBit/s [SYS-1208]
• NTP: fixed communication with time server via IP alias [NDM-3417]
• OpenConnect: added support for Fortinet protocol (requested by @avn) [NDM-3520]:
  • interface {name} openconnect protocol fortinet
• Web: added a Reset button to return the dashboard to the original tile layout [NWI-3702]
• Web: fixed "Other management options" link position on mobile devices (reported by @dimon27254) [NDM-3722]
• Web: fixed DHCP pool size calculation (reported by @avn) [NWI-3720]
• Web: fixed application availability conditions (reported by @keenet07) [NWI-3770]
• Web: fixed errors when the segments page is open (reported by @spatiumstas) [NWI-3779]
• Web: fixed line wraps when expanding the menu (reported by @dimon27254) [NWI-3780]
• Web: fixed scrollbar color in the dark theme (reported by @dimon27254) [NWI-3764]
• Web: fixed scrolling on mobile devices (reported by @dimon27254) [NWI-3768]
• Web: fixed tooltips of Wi-Fi toggles on MWS Extenders (reported by @spatiumstas) [NWI-3763]
• Web: improved the Active Connections table (reported by @dimon27254) [NWI-3703]
• Wi-Fi: fixed Extender's wireless backhaul connection to a controller running a WPA2 access point without PMF [SYS-1213]

[MuKu]

Release 4.3 Alpha 3:

• DNS: fixed "https-dns-proxy: curl needed more event, than max connections" error [NDM-3523]
• IP: fixed incompatibility of software packet engine with incoming traffic having TTL=1 [NDM-3490]
• MWS: fixed quick access to the Extender web interface (reported by @dimon27254) [NDM-3522]
• SSTP: fixed saving of "camouflage" peer suffix in client settings [NDM-3521]
• Web: fixed USB modem status display (reported by @spatiumstas) [NWI-3707]
• Web: fixed border color of ports and VLAN settings (reported by @spatiumstas) [NWI-3789]
• Web: fixed display of 802.1x authentication settings (reported by @dimon27254( [NWI-3822]
• Web: fixed display of search results (reported by @dimon27254) [NWI-3830]
• Web: fixed DNS servers deletion for WireGuard (reported by @spatiumstas) [NWI-3800]
• Web: fixed Wi-Fi channel configuration (reported by @Andrew Voronkov) [NWI-3698]
• Wi-Fi: fixed mt7916 being unable to connect as client on 160 MHz bandwidth when ZeroWait DFS is enabled [SYS-1215]
   

[admin]

Release 4.3 Alpha 3.1:

• NTC: fixed crash in the traffic shaper (reported by @dmroot) [SYS-1226]

[MuKu]

Release 4.3 Alpha 4:

• HTTP: fixed assignment of “security-level private” for proxies [NDM-3479]
• LED: fixed inability to turn off WAN LED on KN-1012 [SYS-1222]
• OpenConnect: fixed client reconnection after server restart (reported by @abelar) [NDM-3532]
• OpenConnect: implemented a command to turn off DTLS (reported by @avn) [NDM-3541]:
  • interface {name} openconnect no dtls
• OpenConnect: implemented configuration of server routes (reported by @Fedro) [NDM-3540]:
  • oc-server route {address} {mask}
• OpenConnect: implemented support for IPv6 and server routes by the client (reported by @avn) [NDM-3539]:
  • interface {name} openconnect accept-routes
• SFP: fixed setting “auto” mode for SFP/MDI combo ports [NDM-3537]
• Web: fixed downloading of packet capture files (reported by @lighting) [NWI-3790]
• Web: fixed DSL page display in certain configurations (reported by @Peganeo) [NWI-3838]
• Web: removed domain-specific DNS from "Signal levels" dialog (reported by @dimon27254) [NWI-3784]

[MuKu]

Release 4.3 Alpha 5:

• FTP: enabled fastpath to optimize performance [SYS-1234]
• OPKG: replaced OpkgLedControl with OpkgLedControl1 and OpkgLedControl2 for devices with two FN LEDs (reported by @Roman M) [NDM-3549]
• SSH: enabled OpenSSL AES-GCM on aarch64 [SYS-1237]
• SSH: fixed SFTP connection stall after transferring 476 MB [SYS-1240]
• Web: changed the behavior of update channels for MWS Extenders (reported by @project_fcc) [NWI-3823]
• Web: fixed display of data units (reported by @dimon27254) [NWI-3893]
• Web: fixed display of long names in traffic monitor (reported by @dimon27254) [NWI-3860]
• Web: fixed errors on "General System Settings" page (reported by @spatiumstas) [NWI-3840]
• Web: fixed malfunction of dashboard tiles on mobile screens (reported by @dimon27254) [NWI-3865]
• Web: fixed media server working folder paths [NWI-3852]
• Web: fixed picker display in applications (reported by @spatiumstas) [NWI-3827]
• Web: fixed system log function (reported by @dimon27254) [NWI-3813]
• Web: fixed the display of tooltip for the Static IP address field (reported by @dimon27254) [NWI-3818]