Two targeted improvements to the security audit - smarter network classification, tighter isolation rules - and more accurate WiFi recommendations.
Security Audit
- Server network classification - Networks used for servers, hypervisors, and compute workloads now classify as "Server" instead of "Unclassified." Server networks are treated as trusted destinations, so IoT and Guest traffic is properly flagged when not blocked from reaching them.
- Corporate-Home isolation enforced - Corporate and Home networks are now treated as separate trust domains. The audit flags missing firewall rules between them and detects allow rules that bypass the isolation, just like it does for IoT-to-Corporate or Guest-to-Corporate traffic.
- Internet Block Bypassed scoped to Management/Security - The "Internet Block Bypassed" finding now only fires on Management and Security networks, where internet restrictions are a deliberate security choice. Previously it flagged any network with internet disabled, which was noisy for networks like IoT where internet access isn't security-sensitive.
- Better bypass recommendations - When an internet bypass rule is found, the recommendation now suggests narrowing access to specific IPs, MACs, or devices instead of just "remove the rule."
Wi-Fi Optimizer
- No more 'Auto' TX power recommendation - UniFi's "Auto" TX power is just "High" under the hood with no real auto-power-leveling. WiFi recommendations now suggest "Medium" instead of "Auto" for power adjustments. A feature flag is ready to flip when UniFi eventually adds real auto-power management.
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dmacOS (native, recommended for accurate speed tests vs Docker Desktop):
git clone https://github.com/Ozark-Connect/NetworkOptimizer.git && cd NetworkOptimizer && ./scripts/install-macos-native.sh
# or if you already have it cloned
cd NetworkOptimizer && git pull && ./scripts/install-macos-native.shProxmox:
bash -c "$(curl -fsSL https://raw.githubusercontent.com/Ozark-Connect/NetworkOptimizer/main/scripts/proxmox/install.sh)"For other platforms (Synology, QNAP, Unraid, native Linux), see the Deployment Guide.