More DNS audit improvements and a fix for missing monitoring data and intermittent errors. See v1.17.0 release notes for what's new in v1.17.0+
Security Audit
- NextDNS CLI detection - The audit now recognizes NextDNS CLI as a known DNS provider alongside Pi-hole and AdGuard Home. If your LAN DNS points to a local NextDNS CLI instance, the audit identifies it automatically and treats it as a trusted provider (no score penalty). Thanks to @jedis00 for the contribution (#655).
- IP-based DoH/DoH3 blocking detection - Firewall rules that block DoH by destination IP (via IP groups or inline IP lists) are now recognized. This is a common deployment pattern on UniFi gateways, especially for users who prefer IP-based rules over domain or DPI-app targeting. Thanks to @jedis00 (#656).
- Stricter DoH provider matching - DoH block rules now require coverage of all four major providers (Cloudflare, Google, Quad9, OpenDNS) to receive credit. Previously, a rule blocking just one or two providers could satisfy the check. This eliminates false positives from partial blocks and better reflects what a comprehensive DoH-bypass prevention setup looks like.
Fixes
- Database reliability after config import - Importing a configuration backup could leave the database in DELETE journal mode instead of WAL, which could cause missing monitoring data, intermittent errors, or other seemingly random issues. The app now enforces WAL mode on every startup.
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dmacOS (native, recommended for accurate speed tests vs Docker Desktop):
git clone https://github.com/Ozark-Connect/NetworkOptimizer.git && cd NetworkOptimizer && ./scripts/install-macos-native.sh
# or if you already have it cloned
cd NetworkOptimizer && git pull && ./scripts/install-macos-native.shProxmox:
bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ozark-Connect/NetworkOptimizer/main/scripts/proxmox/install.sh)"For other platforms (Synology, QNAP, Unraid, native Linux), see the Deployment Guide.