KeeneticOS 3.5 Beta 1 is released on 2020-08-26 to the preview channel.
To install the preview version, update the Keenetic from the web control panel.
Improvements
- Implemented active packet queue management for DSL and LTE connections
- Implemented isolation of service class-based packet flows
- Implemented assignment of service classes to registered
- Enabled active packet queue management in the trafficcontrol module
- MWS: added "ip http security-level" synchronization
- MWS: enabled 2.4 GHz backhaul for all extenders in a single-band controller network
- Wi-Fi: implemented WPA3-PSK Fast Transition (FT-SAE)
- Wi-Fi: implemented binding to 2.4/5 GHz band
- DNS: added CloudFlare internet filter
- HTTP: implemented randomized session cookie names
- USB: added MTS 8810FT, Quectel EG12/EM12, Anydata W150, E8372h-320 modems support
- USB: added exFAT filesystem support
- TSMB: implemented LsarQueryInformationPolicy RPC support
- TSMB: added "hidden" and "system" attributes to dotfiles
- IPsec: imlemented IKEv2 client
- IPsec: implemented IKEv2 VirtualIP server based on an SSL certificate
- IPsec: implemented Virtual-IP VPN client traffic accounting
- IPsec: added an ESP ALG component
- IPsec: added AES-CTR mode to IKE and ESP (EIP93 hardware accelerated)
- IPsec: added DH groups to IKE and ESP: x25519, x448, ECP 192/256/384/521
- IPsec: added AEAD ciphers to IKE and ESP: AES-CCM and AES-GCM (EIP93 partially accelerated), CHACHA20-POLY1305
- HTTP: implemented a separate security-level setting for HTTP proxies
- HTTP: added HTTPS upstream support
- Web: added 3G/4G mode selector for UsbLte interfaces
- Web: added "TCP/UDP" protocol option for NAT rules
- Web: added language packages
- Web: added "File system" column to the USB storage table
- Web: added HTTPS option to HTTP proxy settings
- Web: added a description field to static routes
- Web: added a combined security mode "WPA2 + WPA3 Enterprise"
- Web: added a description field to firewall rules
- Web: added remote access configuration for extenders
- Web: added IKEv2 server configuration page
- Acme: improved SSL certificate revocation and renewal task queue
- Wireguard: updated to 1.0.20200623
- DSL: updated PTM/SAR driver
- Transmission: updated to 3.00
- Transmission: updated the web interface
- SSTP: improved compatibility with AnyVPN SSTP Connector
- USB: increased descriptor read tolerance for storage devices
Resolved Issues:
- Fixed unregistered traffic accounting
- Wi-Fi: fixed WPA Enterprise authentication for hidden SSIDs
- Wi-Fi: fixed WISP traffic accounting
- TSMB: fixed unauthorized NetShareEnum response
- SoC: fixed IGMP snooping on the mt7621 integrated switch