KeeneticOS 4.3
KeeneticOS release notes for Keenetic Hero (KN-1011) in the Development Channel
KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.
Keenetic Hero (KN-1011) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
KeeneticOS 4.3 Alpha 9
10/12/2024
Improved
Added the IPv4 subnet mask "
/" character notation support when importing static routes from a Windows® batch file. [NDM-3471]For example:
route add 8.8.8.8/21 10.0.0.1or route to the single hostroute add 8.8.8.8 10.0.0.1Added the UTF-8 BOM encoding support when importing IPv4 static routes from a Windows® batch file. [NDM-3593]
Fixed
Fixed an issue with incorrect Tx/Rx counter readings on Ethernet switch ports. [NDM-3592]
KeeneticOS 4.3 Alpha 8
30/11/2024
Fixed
An issue that caused the error message
failed to remove PCP mappingto appear in the System log has been fixed. [NDM-3588]Fixed tooltips display on the Traffic Monitor page in the Web interface. [NWI-3894]
KeeneticOS 4.3 Alpha 7
23/11/2024
Fixed
The following fixes have been applied to the Web interface.
Fixed selection of networks with WPA3 protection from the list of available networks on the Wireless ISP page. [NWI-3937]
Fixed the incorrect Applications not installed status on the System Dashboard page. [NWI-3798]
Fixed the display of certain usernames in the User Accounts configuration popup. [NWI-3898]
Removed DNS server settings for IKEv1/IPsec VPN and IKEv2/IPsec VPN servers. [NWI-3899]
Fixed menu section headings. [NWI-3824]
Fixed the display of long strings in the built-in search results. [NWI-3866]
Fixed issue with activating a 5 GHz access point after adding an Extender to the Mesh Wi-Fi System. [NDM-3565]
KeeneticOS 4.3 Alpha 6
18/11/2024
New
Implemented a new Wireless ISP option that allows the MAC address to be changed via the command line interface. [NDM-3547]
interface WifiMaster0/WifiStation0 mac address {mac}— set{mac}address for Wireless ISP in 2.4GHz band
Improved
Adjusted the IPv4 network mask on
QMImodems to avoid IP network overlap with other interfaces. [NDM-3552]Disabled
EAP identitychecking for the IKEv2/IPsec VPN server to improve compatibility with VPN clients. [NDM-3558]
Fixed
The following fixes have been applied to the Web interface.
Fixed the sorting of the Uptime column in the Mesh Wi-Fi System nodes table. [NWI-3815]
Fixed the flickering when loading the Home segment page. [NWI-3820]
Fixed tooltips on the Traffic Monitor page in mobile view. [NWI-3825]
Fixed the auto-completion on the
/webclicommand line interface page. [NWI-3791]Fixed synchronisation of Wi-Fi access point settings when using multiple SSIDs on a LAN segment. [NWI-3858]
Fixed visual issues with tooltips on the System Dashboard page. [NWI-3876]
Fixed the
security-levelmapping for Web applications when using HTTP/2 protocol. [NDM-3557]Fixed issue with incorrect Wi-Fi state after a system restart with the radio off by pressing a button. [SYS-1239]
Fixed an incorrect operation timeout in the DNS proxy service when waiting for the upstream DNS server to respond under certain conditions. [SYS-1245]
Fixed a bug with the display of Ethernet port numbers. [NDM-3550]
An issue that caused the error message
unsupported method OPTIONS for /in the System log has been fixed. [NDM-3559]Fixed a bug where WireGuard VPN would attempt to reconnect after the underlying interface was shut down. [NDM-3560]
The VPN Server's clients (PPTP, SSTP and OpenConnect) will now access the Internet according to the connection policy of the local network to which the server is connected. [NDM-3563]
KeeneticOS 4.3 Alpha 5
09/11/2024
New
The option to select the OS update channel for Wi-Fi System Extenders is now available in the Wi-Fi System Controller Web interface. [NWI-3823]
Improved
Software traffic acceleration is enabled to improve FTP server performance. [SYS-1234]
Replaced
OpkgLedControlwithOpkgLedControl1andOpkgLedControl2variables for devices with two FN LEDs in the OPKG system component. [NDM-3549]
Fixed
The following fixes have been applied to the Web interface.
Fixed problem where System Dashboard cards were not editable on mobile screens. [NWI-3865]
Optimized the internal logic of the System log popup window. [NWI-3813]
Fixed tooltip display for Static IP fields. [NWI-3818]
Fixed the view mode selector behaviour on the Applications page. [NWI-3827]
Fixed JS errors on the General System Settings page. [NWI-3840]
Fixed the display of the Media library folder path for the Media server application. [NWI-3852]
Fixed the display of long names on the Traffic monitor page. [NWI-3860]
Fixed the display of data units. [NWI-3893]
Fixed an issue where the SFTP connection to the SFTP Server would hang after transferring 476 megabytes. [SYS-1240]
KeeneticOS 4.3 Alpha 4
02/11/2024
New
The new
accept-routesoption allows the OpenConnect VPN client to obtain route and IPv6 address configuration from the remote OpenConnect VPN server. [NDM-3539]interface {name} openconnect accept-routes— enable obtaining IP routes for OpenConnect interface{name}
The new OpenConnect VPN server option enables static route forwarding to be sent to the connected VPN clients. [NDM-3540]
oc-server route {address} {mask}— set a static route with{address} {mask}for OpenConnect VPN server
The new OpenConnect VPN client option allows turning off the DTLS (Datagram Transport Layer Security) feature via the command line interface. [NDM-3541]
interface {name} openconnect no dtls— disable DTLS for OpenConnect interface{name}
Fixed
Fixed a KeenDNS issue with Internet access to web applications with the No access (
security-level private) setting enabled. [NDM-3479]The following fixes have been applied to the Web interface.
Removed domain-specific DNS entries from the Signal levels dialog. [NWI-3784]
Fixed an issue with downloading of packet capture files when using a USB drive as a storage location. [NWI-3790]
Fixed an issue with the OpenConnect VPN client reconnecting when the remote OpenConnect VPN server is restarted. [NDM-3532]
Fixed an issue with setting
speed automode for SFP/MDI combo port. [NDM-3537]
KeeneticOS 4.3 Alpha 3.1
29/10/2024
Fixed
Fixed an issue with the IntelliQoS service that could cause a system restart. [SYS-1226]
KeeneticOS 4.3 Alpha 3
26/10/2024
Fixed
The following fixes have been applied to the Web interface.
Fixed the Wi-Fi Channel number configuration and notifications when using Wireless ISP (WISP). [NWI-3698]
Fixed the USB modem status display. [NWI-3707]
Fixed the highlighting in the Ports and VLANs Settings section when editing settings. [NWI-3789]
Fixed removal of the DNS server for the WireGuard VPN connection. [NWI-3800]
Fixed incorrect display of 802.1x Authentication settings without component installed. [NWI-3822]
Fixed the display of search results. [NWI-3830]
Fixed saving of Server address field with "camouflage" suffix in SSTP VPN client settings. [NDM-3521]
Resolved a software packet engine (
ppe software) incompatibility with incoming traffic having TTL 1. [NDM-3490]An issue that caused the
https-dns-proxy: curl needed more event than max connectionserror message to appear in the System log has been fixed. [NDM-3523]Fixed an issue with quick access to the Extender's web interface from the Mesh Wi-Fi System page. [NDM-3522]
KeeneticOS 4.3 Alpha 2
19/10/2024
New
Added an option to support the Fortinet protocol in the OpenConnect VPN client, which is selectable via the command line interface (CLI). [NDM-3520]
interface {name} openconnect protocol fortinet— enable Fortinet support for OpenConnect interface{name}
The DDNS service now re-attempts to update the Domain name resolution 30 seconds after a failed attempt. [NDM-3513]
Improved
The improvement has been applied to the Web interface.
Improved the Active Connections table. [NWI-3703]
Enabled LLDP multicast in addition to broadcast announcements to improve compatibility with managed Ethernet switches. [SYS-1214]
Fixed
The following fixes have been applied to the Web interface.
Fixed tooltips for Wi-Fi toggles on Extenders in the Mesh Wi-Fi system. [NWI-3763]
Fixed the scrollbar colour for the Dark theme. [NWI-3764]
Fixed the scrolling on mobile devices. [NWI-3768]
Fixed Applications availability conditions. [NWI-3770]
Fixed JS errors when a segment's configuration page is open. [NWI-3779]
Fixed the DHCP Address pool size calculation. [NWI-3720]
Fixed removing the DNS (
ip name-server) record with the default port. [NDM-3493]Fixed listing of Ethernet connections. [NDM-3504]
Fixed an issue that caused the
Bridge: wrong port indexerror message to appear in the System log when displaying the Client lists page. [NDM-3514]
KeeneticOS 4.3 Alpha 1
11/10/2024
New
The new option for interface-specific DHCP relay agents is now accessible from the command line interface (CLI). [NDM-3401]
interface {name} ip dhcp relay enable— enable DHCP relay on an interface.interface {name} ip dhcp relay upstream server {address}— specify an upstream DHCP server.interface {name} ip dhcp relay upstream interface {interface}— bind DHCP upstream to a specific interface (optional).
Implemented a new
connectmethod of the KeenDNS proxy service for web applications, allowing remote access to the OpenVPN server using a KeenDNS name. [NDM-3497]ip http proxy {name} upstream (http | https | connect) {upstream} [port]— setconnectmethod for KeenDNS proxy{name}
The new IPv4 and IPv6 static route settings for binding to specified connection policies have been implemented. [NDM-3435]
ip policy {name} ip route ( {network} {mask} | {host} ) ( {gateway} [interface] | {interface}) [auto] [metric] [reject]ip policy {name} ipv6 route {prefix} ( {interface} [gateway] | {gateway} ) [auto] [metric] [reject]
Enhanced security: Implementation of DDoS protection against connection table overflow. [NDM-3362]
ip conntrack max-entries {max-entries}— set conntrack table size.ip conntrack lockout disable— disable conntrack table protection (enabled by default).ip conntrack lockout threshold public {public}— set maximum number of connections from public interfaces (percentage of the conntrack table size, from 50 to 99, default value: 80).ip conntrack lockout duration {duration}— set lockout duration in seconds (from 60 to 3600, default value: 600).ip conntrack sweep threshold {threshold}— set threshold to start cleaning up waiting sessions (percentage of the conntrack table size, from 50 to 99, default value: 70).show ip conntrack lockout— view lockout status.
The Download Station component now supports the setting of background priority for disk I/O operations via the command line interface (CLI). [NDM-3436]
torrent io-priority low— enable low priority for disk I/O operations.
The ZTE MU5001 5G NR, LTE Cat 22 5G mobile USB router (
CdcEthernet-type) is now supported. [NDM-3500]The new options have been implemented in the Web interface.
The new IPv6 settings option is now available for the VPN Connections section of the Other Connections page. [NWI-3428]
Added a Retry timeout field for On-demand mode in the Wireless ISP settings. [NWI-3570]
Improved
Disabled automatic restart of the
initrcscript when changing the configuration for theopkg dns-overrideCLI command. [NDM-3496]Added the ability to preempt VPN sessions when the multiple sign-in option is disabled. [NDM-3450]
crypto map {name} l2tp-server session-preempt— enablesession-preemptoption for crypto map{name}.
The VPN Server apps in KeeneticOS no longer drop active connections when account settings are changed. [NDM-234]
Fixed
Fixed an issue with KeenDNS accessing web applications over the IKEv2 connection to the IKEv2/IPsec VPN server. [NDM-3439]
Fixed an issue that reset the Wi-Fi session uptime when the Wi-Fi client roams between extenders in the Wi-Fi system. [NDM-3498] [Forum topic]
The following fixes have been applied to the Web interface.
Changed colours on the Traffic monitor charts for better visibility and contrast. [NWI-3699]
Fixed an issue where the USB disk would disappear from the USB Devices section when unmounting all partitions. [NWI-3762]
The placement of the Bandwidth control header on the Connection Policies page has been corrected. [NWI-3781]