KeeneticOS 3.5 Beta 1 Preview

KeeneticOS 3.5 Beta 1 is released on 2020-08-26 to the preview channel.

To install the preview version, update the Keenetic from the web control panel.


  • Implemented active packet queue management for DSL and LTE connections
  • Implemented isolation of service class-based packet flows
  • Implemented assignment of service classes to registered
  • Enabled active packet queue management in the trafficcontrol module
  • MWS: added "ip http security-level" synchronization
  • MWS: enabled 2.4 GHz backhaul for all extenders in a single-band controller network
  • Wi-Fi: implemented WPA3-PSK Fast Transition (FT-SAE)
  • Wi-Fi: implemented binding to 2.4/5 GHz band
  • DNS: added CloudFlare internet filter
  • HTTP: implemented randomized session cookie names
  • USB: added MTS 8810FT, Quectel EG12/EM12, Anydata W150, E8372h-320 modems support
  • USB: added exFAT filesystem support
  • TSMB: implemented LsarQueryInformationPolicy RPC support
  • TSMB: added "hidden" and "system" attributes to dotfiles
  • IPsec: imlemented IKEv2 client
  • IPsec: implemented IKEv2 VirtualIP server based on a Let's Encrypt certificate
  • IPsec: implemented Virtual-IP VPN client traffic accounting
  • IPsec: added an ESP ALG component
  • IPsec: added AES-CTR mode to IKE and ESP (EIP93 hardware accelerated)
  • IPsec: added DH groups to IKE and ESP: x25519, x448, ECP 192/256/384/521
  • IPsec: added AEAD ciphers to IKE and ESP: AES-CCM and AES-GCM (EIP93 partially accelerated), CHACHA20-POLY1305
  • HTTP: implemented a separate security-level setting for HTTP proxies
  • HTTP: added HTTPS upstream support
  • Web: added 3G/4G mode selector for UsbLte interfaces
  • Web: added "TCP/UDP" protocol option for NAT rules
  • Web: added language packages
  • Web: added "File system" column to the USB storage table
  • Web: added HTTPS option to HTTP proxy settings
  • Web: added a description field to static routes
  • Web: added a combined security mode "WPA2 + WPA3 Enterprise"
  • Web: added a description field to firewall rules
  • Web: added remote access configuration for extenders
  • Web: added IKEv2 server configuration page
  • Acme: improved SSL certificate revocation and renewal task queue
  • Wireguard: updated to 1.0.20200623
  • DSL: updated PTM/SAR driver
  • Transmission: updated to 3.00
  • Transmission: updated the web interface
  • SSTP: improved compatibility with AnyVPN SSTP Connector
  • USB: increased descriptor read tolerance for storage devices

Resolved Issues:

  • Fixed unregistered traffic accounting
  • Wi-Fi: fixed WPA Enterprise authentication for hidden SSIDs
  • Wi-Fi: fixed WISP traffic accounting
  • TSMB: fixed unauthorized NetShareEnum response
  • SoC: fixed IGMP snooping on the mt7621 integrated switch


Was this article helpful?

25 out of 26 found this helpful