ndm Posted May 19, 2020 Share Posted May 19, 2020 3.5 is a stable branch based on Linux 4.9, see also changelog 3.4. Supported models: Giga (KN-1010) Start (KN-1110, KN-1111) 4G (KN-1210, KN-1211) Lite (KN-1310, KN-1311) Omni (KN-1410) City (KN-1510) Air (KN-1610, KN-1611) Extra (KN-1710, KN-1711) Ultra (KN-1810) Viva (KN-1910) Omni DSL (KN-2011) Extra DSL (KN-2111) Runner 4G (KN-2210) Hero 4G (KN-2310) Speedster (KN-3010) 1 Link to comment Share on other sites More sharing options...
ndm Posted May 19, 2020 Author Share Posted May 19, 2020 Release 3.5 Alpha 1: IPsec: imlemented IKEv2 client (@diam requested) as a separate component IPsec: implemented IKEv2 VirtualIP server based on a Let's Encrypt certificate crypto virtual-ip-server-ikev2 IPsec: implemented Virtual-IP VPN client traffic accounting IPsec: added an ESP ALG component ip esp alg enable Wi-Fi: implemented WPA3-PSK Fast Transition (FT-SAE) Wi-Fi: implemented a separate PMK cache for FT and WPA3 Wi-Fi: fixed GTK rekey for FT transitioned clients (for mt7615/mt7613 chipsets) Wi-Fi: fixed Fast Transition PMK-R1 key storage overflow Wi-Fi: implemented binding to 2.4/5 GHz band: interface {Bridge} mac band {mac} (0|1) — allow {mac} associations to 2.4GHz (0) or 5GHz (1) only, and ignore any request on the other band DNS: added CloudFlare internet filter (@mega1volt requested) cloudflare-dns check-availability cloudflare-dns assign {mac} (standard | malware | family) cloudflare-dns enable show cloudflare-dns availability show cloudflare-dns profiles HTTP: implemented randomized session cookie names SSTP: improved compatibility with AnyVPN SSTP Connector USB: added Quectel EP06 (QMI) modem support Web: redesigned the Private Cloud tile Web: fixed the "Delete schedule" button (@Alexander reported) Web: fixed validation of the segment IP subnet settings 1 Link to comment Share on other sites More sharing options...
ndm Posted May 22, 2020 Author Share Posted May 22, 2020 Release 3.5 Alpha 2: fixed mobile app connectivity (@Mamay reported) MWS: added "ip http security-level" synchronization USB: fixed storage mounting with UTF-8 labeled partitions Web: added CloudFlare internet filter support Web: fixed "Cancel" button on the device list (@enterfaza reported) Web: fixed dashboard appearance on extenders 1 Link to comment Share on other sites More sharing options...
ndm Posted May 27, 2020 Author Share Posted May 27, 2020 Release 3.5 Alpha 3: USB: fixed storage free space calculation USB: fixed HiLink H3372 signal quality meter IPsec: fixed registered device traffic accounting Web: fixed drag-drop function in "Connection priorities" (@AndyFM reported) Web: fixed host selection in the "Traffic monitor" (@r777ay reported) Web: fixed port configuration blocking on extenders (@enterfaza reported) Web: fixed selected timezone option style (@enterfaza reported) 1 Link to comment Share on other sites More sharing options...
ndm Posted May 30, 2020 Author Share Posted May 30, 2020 Release 3.5 Alpha 4: USB: increased descriptor read tolerance for storage devices USB: fixed "3G/4G QMI" compatibility with E392 modems USB: fixed storage mounting failures Wi-Fi: fixed WPS operation for WPA2+WPA3 PSK security Web: fixed host schedule retention after denying access to the internet Web: fixed tooltip formatting for VPN connections (@AndreBA reported) Web: fixed "undefined" in the Wi-Fi system extender status (@AlexUnder2010 reported) Web: fixed traffic-shape settings for unregistered devices Web: fixed DHCP pool calculation for newly created segments Web: fixed NAT configuration saving for segments Web: added remote access configuration for extenders Web: added wireless band binding for registered devices 2 Link to comment Share on other sites More sharing options...
ndm Posted June 2, 2020 Author Share Posted June 2, 2020 Release 3.5 Alpha 5: fixed dependency calculation of bridged interfaces (@Кинетиковод reported) 1 Link to comment Share on other sites More sharing options...
ndm Posted June 4, 2020 Author Share Posted June 4, 2020 Release 3.5 Alpha 6: USB: added E3131 modem support HTTP: added colon support in Cookie headers SIP: added "application" media type to SIP ALG Web: added language packages Web: fixed WebDAV password status Web: fixed extender list appearance (@AndreBA reported) 2 Link to comment Share on other sites More sharing options...
ndm Posted June 10, 2020 Author Share Posted June 10, 2020 Release 3.5 Alpha 7: DSL: severely reworked PTM/SAR driver Wi-Fi: fixed KeyRSC field in EAPoL packets on mt7615/13 MWS: disabled STP if no member devices acquired MWS: fixed WISP connection vs. backhaul access point startup (@r13 reported) Web: added IKEv1 VPN connection support Web: fixed client VPN connections list in the multiple sign-in mode Web: fixed WebDAV service status (@AndreBA reported) Web: fixed device list tooltips (@AndreBA reported) Web: fixed Wireguard connection tooltips (@AndreBA reported) Web: fixed "Domain name" help sign formatting (@bigpu reported) Web: fixed select box value squeezing (@AndreBA reported) 3 Link to comment Share on other sites More sharing options...
ndm Posted June 10, 2020 Author Share Posted June 10, 2020 Release 3.5 Alpha 8: MWS: fixed Wi-Fi extender connection (@panda74 reported) 2 1 Link to comment Share on other sites More sharing options...
ndm Posted June 15, 2020 Author Share Posted June 15, 2020 Release 3.5 Alpha 9: USB: added exFAT filesystem support USB: added Sierra EM7455 modem support Web: fixed minor formatting issues 3 Link to comment Share on other sites More sharing options...
ndm Posted June 20, 2020 Author Share Posted June 20, 2020 Release 3.5 Alpha 10: implemented active packet queue management for DSL and LTE connections implemented isolation of service class-based packet flows implemented assignment of service classes to registered hosts: ip hotspot host {mac} service-class {1-6} TSMB: implemented LsarQueryInformationPolicy RPC support TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported) 3 Link to comment Share on other sites More sharing options...
ndm Posted June 27, 2020 Author Share Posted June 27, 2020 Release 3.5 Alpha 11: SoC: optimized reading of ethernet MAC tables Acme: improved SSL certificate revocation and renewal task queue Web: fixed Beamforming and MU-MIMO configuration (сообщил @petya) Web: disabled automatic Wi-Fi blacklisting of newly registered devices Web: limiting the number of selected language packages 2 Link to comment Share on other sites More sharing options...
ndm Posted July 4, 2020 Author Share Posted July 4, 2020 Release 3.5 Alpha 12: Wi-Fi: fixed LED indication of hardware-accelerated traffic MWS: enabled 2.4 GHz backhaul for all extenders in a single-band controller network TSMB: fixed tsmb_vfs_dirname crash (@r777ay reported) TSMB: fixed unauthorized NetShareEnum response Web: fixed language packet selection (@iggo reported) 2 Link to comment Share on other sites More sharing options...
ndm Posted July 10, 2020 Author Share Posted July 10, 2020 Release 3.5 Alpha 13: enabled active packet queue management in the trafficcontrol module SoC: fixed MAC address entry lookup exFAT: fixed big-endian specific errors USB: supported modems: E3372h-320 Anydata W150 HTTP: implemented X-Frame-Options header configuration: ip http x-frame-options {x-frame-options} Wireguard: updated to 1.0.20200623 Attention: deployed the new firmware signing certificate to the cloud infrastructure. Previously saved firmware files can be uploaded using the TFTP recovery only. 1 1 Link to comment Share on other sites More sharing options...
ndm Posted July 18, 2020 Author Share Posted July 18, 2020 Release 3.5 Alpha 14: fixed unregistered traffic accounting fixed WoL packet forwarding to blocked devices fixed duplicated entries in the device list Wi-Fi: fixed WPA2 client connection to WPA2+WPA3 access points HTTP: implemented insertion of X-Real-IP and X-Forwarded-For headers: ip http proxy {name} x-real-ip USB: backported CDC-NCM updates from the kernel upstream Web: fixed redirection to the Initial setup wizard Web: fixed "not found: show/media" errors 1 1 Link to comment Share on other sites More sharing options...
ndm Posted July 25, 2020 Author Share Posted July 25, 2020 Release 3.5 Alpha 15: reduced traffic-shape configuration delay Wi-Fi: fixed WISP traffic accounting DSL: fixed QDMA lockdown on unstable connections IPsec: fixed ESP tunnel throughput degradation IPsec: added AES-CTR mode to IKE and ESP (EIP93 hardware accelerated) IPsec: added DH groups to IKE and ESP: x25519 x448 ECP 192/256/384/521 IPsec: added AEAD ciphers to IKE and ESP: AES-CCM and AES-GCM (EIP93 partially accelerated) CHACHA20-POLY1305 HTTP: added HTTPS upstream support: ip http proxy {name} upstream (http | https) ({mac} | {ip} | {fqdn}) [{port}] USB: added E8372h-320 modem support Web: added IKEv2 server configuration page transmission: updated to 3.00 1 1 Link to comment Share on other sites More sharing options...
ndm Posted August 1, 2020 Author Share Posted August 1, 2020 Release 3.5 Alpha 16: IPsec: enabled partial hardware acceleration of AES CTR/CCM/GCM on mt7628 HTTP: implemented a separate security-level setting for HTTP proxies: ip http proxy {name} security-level (public | private) NTFS: implemented sparse file support TSMB: added "hidden" and "system" attributes to dotfiles USB: added Quectel EG12/EM12 modem support Netflow: implemented protocol version setting: ip flow-export version {version} Web: added "File system" column to the USB storage table Web: added HTTPS option to HTTP proxy settings Web: added a description field to static routes Web: fixed alignment of question marks (@enterfaza reported) transmission: fixed the "Enable download sequential" checkbox (@engelsit reported) 1 1 Link to comment Share on other sites More sharing options...
ndm Posted August 8, 2020 Author Share Posted August 8, 2020 Release 3.5 Alpha 17: SSTP: fixed "do_page_fault() SIGSEGV" error (reported by @3-50) Web: fixed a fatal error on the dashboard if the 'cloudcontrol' component is not installed (reported by @KorDen) Web: added 3G/4G mode selector for UsbLte interfaces Web: added "TCP/UDP" protocol option for NAT rules transmission: implemented NTFS sparse file support transmission: updated the web interface 1 1 1 Link to comment Share on other sites More sharing options...
ndm Posted August 10, 2020 Author Share Posted August 10, 2020 Release 3.5 Alpha 18: fixed a memory leak in the I/O subsystem (reported by @Serghey) Web: fixed displaying USB modems with an embedded SD card (reported by @drdic) SoC: fixed IGMP snooping on the mt7621 integrated switch 1 1 Link to comment Share on other sites More sharing options...
ndm Posted August 15, 2020 Author Share Posted August 15, 2020 Release 3.5 Beta 0 (pre-beta): Wi-Fi: fixed WPA Enterprise authentication for hidden SSIDs Web: added a combined security mode "WPA2 + WPA3 Enterprise" Web: added a description field to firewall rules (requested by @cocojambo) Web: fixed the Opkg configuration form (reported by @DennoN) created a separate component for Ext filesystems 3 Link to comment Share on other sites More sharing options...
ndm Posted August 27, 2020 Author Share Posted August 27, 2020 Release 3.5 Beta 1 (official beta): TSMB: fixed a spontaneous shutdown of the network service (reported by @Andrex) 2 1 Link to comment Share on other sites More sharing options...
ndm Posted September 6, 2020 Author Share Posted September 6, 2020 Release 3.5 Beta 2 (official beta): USB: added support for ZTE MF79 modem IGMP: fixed handling multiple subscriptions to a multicast group on extender devices IGMP: improved IGMP snooping algorithm for the scenario when clients are connected via external switch Release 3.5 Beta 3 (official beta): IPsec: fixed IKEv1/XAUTH connectivity SoC: fixed untagged Ethernet packet filtering on mt7628 MWS: fixed removal of Wi-Fi band binding rules 2 Link to comment Share on other sites More sharing options...
ndm Posted September 13, 2020 Author Share Posted September 13, 2020 Release 3.5 Beta 4 (draft → official beta): USB: added Alcatel IK40V v.01008 modem support USB: fixed Anydata W140 network scanning procedure Web: removed the "No IP address" option from the "Other connections" (reported by @m__a__l) Web: removed confusing Connection options from the "DNS servers" list (reported by @r13) 2 Link to comment Share on other sites More sharing options...
ndm Posted September 29, 2020 Author Share Posted September 29, 2020 Release 3.5 Beta 6 (draft → official beta): USB: added support for modems: ALTEL 4G Wingle Model W02 HP lt4220 Foxconn T77W676 IPsec: fixed internet access via IKEv2 server 1 Link to comment Share on other sites More sharing options...
ndm Posted October 4, 2020 Author Share Posted October 4, 2020 Release 3.5 Beta 7 (official beta): USB: added support for Telit ln940 Web: fixed rearrangement of firewall rules (reported by @MDP) Web: fixed network interface drop-down list in the internet safety settings (reported by @rustrict and @r13) OpenSSL updated to 1.1.1h 1 Link to comment Share on other sites More sharing options...
ndm Posted October 15, 2020 Author Share Posted October 15, 2020 Release 3.5.1 (official stable): USB: added support for modems: Huawei E392u-12 Huawei E3372h-320 (A1 ISP) Web: added VLAN-over-PVC support To keep track of the experimental branch, subscribe to the Changelog 3.6 Link to comment Share on other sites More sharing options...
ndm Posted October 21, 2020 Author Share Posted October 21, 2020 Release 3.5.2 (official stable): fixed forwarding of rate-limited traffic through the software PPE engine MWS: fixed extender Wi-Fi connection shutdown HTTP: improved WebDAV compatibility with Far manager and netbox Web: fixed configuration of TCP+UDP port forwarding rules (reported by @valeramalko) NTFS: fixed support for cluster size greater than 4kB (reported by @zorro888) NTFS: fixed write speed regression (reported by @Space Alex) Link to comment Share on other sites More sharing options...
ndm Posted November 20, 2020 Author Share Posted November 20, 2020 Release 3.5.3 (preview): MWS: fixed extender Wi-Fi connection shutdown MWS: fixed displaying the extender connection parameters (reported by @AndreBA) Wi-Fi: rolled back the mt7615 microcode to 20190612110649 (release 3.4) due to complaints about the 40/80 MHz bandwidth selection algorithm Wi-Fi: fixed interval of periodic auto channel selection for 5 GHz (KN-1611/1711/3010) Wi-Fi: fixed hardware-accelerated traffic accounting (reported by @Zeliboba) NTFS: fixed hiding of files with "hidden" and "system" attributes Web: fixed display of UPnP rules (reported by @r777ay) disabled device reboot by short pressing of the RESET button Link to comment Share on other sites More sharing options...
ndm Posted November 26, 2020 Author Share Posted November 26, 2020 Release 3.5.4 (official stable): Web: fixed display of MAC address for PPP connections on the Dashboard Link to comment Share on other sites More sharing options...
ndm Posted December 9, 2020 Author Share Posted December 9, 2020 Release 3.5.5 (preview): DNS: fixed KeenDNS name resolution from the local network (reported by @Vladimir Dobromyslov) Link to comment Share on other sites More sharing options...
Recommended Posts