Adaptive SQM improvements and new device support. See v1.10.0 release notes for what's new in v1.10.0+
Adaptive SQM
- Cap rates at WAN link speed - MaxSpeed, MinSpeed, and AbsoluteMax are now capped at the physical WAN port's link rate (e.g., 1 Gbps for 1GbE), so SQM never shapes above what the link can actually carry. GRE tunnels and unknown link speeds are left uncapped.
- Editable baseline latency - You can now override the auto-calculated baseline latency directly in the calculated params grid. Your custom value persists across page loads.
- Ratio-based latency coloring - Ping latency color is now based on ratio to baseline (>1.5x warning, >3x danger) instead of a hardcoded 50ms threshold.
- 7-day cellular congestion profile - Replaced the uniform daily pattern with a research-based 7x24 matrix that reflects real cellular tower load: weekday commute ramps, Friday evening out, Saturday worst evening (people on cellular at restaurants/events, not home on Wi-Fi), Sunday lightest day.
- Auto-detect connection type - Automatically selects the right connection profile when the WAN name contains Starlink, LTE, 5G, Cellular, Fiber, FTTH, FTTP, or DSL.
- Reset fields on WAN change - Switching WAN interface now resets connection type, nominal speeds, speedtest server, and ping host to appropriate defaults.
Device Support
- U7-Mesh and UCG-Industrial - Added Wi-Fi 7 mesh AP (U7-Mesh) and Cloud Gateway Industrial (UCG-Industrial) to the product database with device icons.
macOS Installation
- Root-owned remnant cleanup - The install script now detects files left behind by a previous
sudoinstallation and fixes ownership automatically. It also refuses to run as root/sudo with a clear error message.
What's New in v1.10
For users upgrading from an older version, here's what's been added since v1.10.0:
- Threat Intelligence (v1.10.0) - IPS event analysis with exposure reports, attack sequence detection, geographic breakdowns, CrowdSec CTI integration, and MITRE ATT&CK technique mapping. Recent updates added service names for 60+ commonly targeted ports (v1.10.7), proper ICMP/GRE protocol handling (v1.10.7), noise filters that suppress alert notifications (v1.10.6), and tighter port range grouping for scan patterns (v1.10.6).
- Alerts & Scheduling (v1.10.0) - Automated speed tests and security audits on a schedule, with email/webhook notifications for audit score drops, speed degradation, and attack chain detection. Attack pattern detections (brute force, DDoS, exploit campaigns) now trigger alerts (v1.10.6), incident status derives automatically from constituent alerts (v1.10.6), and stable dedup prevents repeat notifications for ongoing attacks (v1.10.6).
- HTTPS Reverse Proxy (v1.10.5) - Automatic HTTPS with Let's Encrypt via Traefik. The Windows MSI includes an opt-in feature; Docker users can use the companion NetworkOptimizer-Proxy repo. Per-hostname TLS options force HTTP/1.1 for speed tests while keeping HTTP/2 for the app.
- Threat search (v1.10.4) - Search the full threat database by IP, CIDR, country, ASN, or org name
- RADIUS/802.1X port security (v1.10.4) - Audit recognizes RADIUS MAC Authentication and 802.1X port profiles, eliminating false "No MAC" warnings
- LAG aggregate speed (v1.10.4) - Path visualization shows combined LAG bandwidth (e.g., 2x10G = 20G)
- Zone-based firewall isolation (v1.10.3) - Audit recognizes custom firewall zones with block rules as proper network isolation
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dmacOS (native, recommended for accurate speed tests vs Docker Desktop):
git clone https://github.com/Ozark-Connect/NetworkOptimizer.git && cd NetworkOptimizer && ./scripts/install-macos-native.sh
# or if you already have it cloned
cd NetworkOptimizer && git pull && ./scripts/install-macos-native.shProxmox:
bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ozark-Connect/NetworkOptimizer/main/scripts/proxmox/install.sh)"For other platforms (Synology, QNAP, Unraid, native Linux), see the Deployment Guide.