|
bgp
|
fixed setting of "default-prepend" parameter; |
|
bridge
|
fixed PVID warning typo; |
|
bridge
|
improved HW offloading logic; |
|
certificate
|
improved certificate management, signing and storing processes; |
|
conntrack
|
improved system stability when changing connection tracking state; |
|
container
|
added authentication option for registry (CLI only); |
|
container
|
fixed ".type" file ownership; |
|
container
|
fixed file ownership after system upgrade for containers running on internal disk; |
|
container
|
fixed multiple container automatic startup on boot; |
|
disk
|
limit maximum TMPFS size; |
|
dns
|
added configurable DoH concurrent query limitation parameters (CLI only); |
|
dns
|
do not cache results from ":resolve" command with specific server; |
|
dns
|
limited "DoH max concurrent queries reached" logging messages to once per minute; |
|
firewall
|
fixed bridge priority target; |
|
firewall
|
fixed DSCP priority target for IPv6 Mangle; |
|
firewall
|
fixed netmap range maximum address calculation for IPv6 NAT; |
|
graphing
|
fixed hiding of target queues when "allow-target" is disabled; |
|
graphing
|
fixed sorting of interface and queue graphs; |
|
graphing
|
properly handle disabled and static-binding interface graphs; |
|
graphing
|
removed "move" command for graphing rules; |
|
hotspot
|
fixed setting of "address" parameter for IP binding; |
|
hotspot
|
restore cookie timeout on reboot; |
|
ike2
|
added support for "address", "key-id" and "dn" for Remote ID matching (CLI only); |
|
ipsec
|
added support for "Framed-Route" RADIUS attribute support; |
|
ipsec
|
do not match incoming IKE requests by unresolved DNS name peers; |
|
ipv6
|
added "pref64" option configuration for RA; |
|
ipv6
|
limited "hop-limit" parameter value range to 255; |
|
ipv6
|
made distributed DNS lifetime RFC8106 compliant; |
|
l3hw
|
added destination MAC address check for offloaded FastTrack connections; |
|
lte
|
added AT support for Telit LE910C4 in MBIM mode; |
|
lte
|
fixed APN setting usage on initial connection attempt for AT based Quectel and Neoway modems; |
|
lte
|
fixed automatic antenna selection on Chateau LTE12/LTE18; |
|
lte
|
fixed dialing for Fibocom L850-GL module; |
|
lte
|
fixed displaying of "subscriber-number"; |
|
lte
|
improved AT port matching for SIMCom, Huawei, WeLink, Cinterion, BandLuxe and Sierra modems; |
|
lte
|
improved modem detection speed in lower mini-PCIe slot on LtAP; |
|
lte
|
parse USSD even if encoding is unsupported; |
|
mpls
|
fixed handling of more than 9 VRF's; |
|
mpls
|
fixed LDP listen socket creation before IPv6 address is ready for use; |
|
mpls
|
improved stability when neighboring router reboots; |
|
ospf
|
fixed "ospf-type" parameter for OSPFv3 routes; |
|
ospf
|
fixed simple auth for OSPFv3; |
|
ovpn
|
added AES-GCM and multicore encryption support (CLI only); |
|
poe
|
properly turn off power when link not detected on hAP ax2 and hAP ax3; |
|
port
|
fixed modem channel number on KNOT; |
|
resource
|
show filesystem related statistics on CCR2004; |
|
route
|
fixed IPv6 default route presence when received from RA; |
|
route
|
fixed printing of routing table's "count-only" parameter; |
|
sfp
|
fixed false link detection with S+RJ10 on RB5009; |
|
sfp
|
fixed reading of SFP EEPROM on single SFP port devices; |
|
sms
|
improved reporting of SMS sending errors; |
|
sms
|
log USSD response when USSD is sent over MBIM; |
|
sniffer
|
added additional filtering parameters (CLI only); |
|
snmp
|
do not show identity in LLDP when branding is used with hide SNMP data; |
|
snmp
|
fixed handling of disabled routes; |
|
snmp
|
fixed reporting of total number of routes counter; |
|
ssh
|
hard-coded "localhost" address for forwarding requests; |
|
sstp
|
fixed TLS session establishment when "connect-to" is DNS name; |
|
switch
|
fixed SFP rate select for CRS354 devices; |
|
switch
|
improved system stability for 98DXxxxx switch chips; |
|
torch
|
allow "without-paging" parameter for Torch; |
|
traffic-generator
|
increased maximum allowed stream count; |
|
upgrade
|
show error message when license prohibits upgrade; |
|
vxlan
|
added "dont-fragment" setting that allows managing fragmentation; |
|
webfig
|
allow setting numeric values in time interval fields; |
|
webfig
|
fixed accessing of WebFig when "Interface" menu is disabled by skin; |
|
webfig
|
fixed editing of multi-field parameters with "not" checkbox; |
|
webfig
|
fixed handling of empty skin files; |
|
webfig
|
improved navigation responsiveness; |
|
webfig
|
improved skin file parsing; |
|
webfig
|
properly escape all reserved URI characters; |
|
webfig
|
updated WebFig and graph web pages to HTML5; |
|
wifiwave2
|
added wireless sniffer tool to capture wireless transmissions (CLI only); |
|
wifiwave2
|
enabled additional channels in UNII-3 and UNII-4 bands for Europe and USA on hAP ax^2, hAP ax^3 and Chateau ax; |
|
wifiwave2
|
implement 802.11w management protection SA Query procedures; |
|
wifiwave2
|
improve protections from denial-of-service attacks on WPA3; |
|
winbox
|
added "Match Subdomain" parameter under "IP/DNS/Static" menu; |
|
winbox
|
added missing WifiWave2 related parameters under "WifiWave2" menu; |
|
winbox
|
fixed displaying of "Default Prepend" value under "Routing/BGP/Sessions" menu; |
|
winbox
|
fixed displaying of "Tx/Rx CCQ" values under "Wireless/Registration" menu; |
|
winbox
|
fixed displaying of flags under "System/Console" menu; |
|
winbox
|
fixed displaying of multiple character flags; |
|
winbox
|
fixed usage of IPv6 family addresses under "IP/Web Proxy/Access" menu; |
|
winbox
|
improved mouseover hint for "local" policy under "System/Users/Groups" menu; |
|
winbox
|
show "Gateway" column by default under "IPv6/Routes" menu; |
|
x86
|
added support for TP-Link TG-3468; |
|
x86
|
fixed SR-IOV support for Intel X710 series NIC; |
|
x86
|
improved Intel 500 series 10G SFP module support; |
|
x86
|
improved stability for Intel X550 series NIC with SR-IOV; |