Fifth preview of v2.9.0. See the v2.9.0-preview4 notes for what came before.
Security Audit judges each firewall rule by its IP version now, and reports the gaps on networks with IPv6 enabled. Plus Performance Tweaks on UniFi OS 6.0.10 EA for the UCG line, a Client Performance fix for devices it couldn't find, and one SNMP poller per site with two On-Site Agents.
Security Audit
- Fix: IPv4-only and IPv6-only rules were judged as covering both - they flagged each other as Firewall: Rule Order Issue or Firewall: Ineffective Allow Rule, and an IPv6-only block could make a network read as isolated, internet-blocked, or DNS-protected while IPv4 still got through (#1231, thanks @Sub-lime-time for the report).
- IPv6 gaps are reported - on networks with IPv6 enabled, isolation, internet blocking, and DNS, DoT, DoQ, or DoH blocking that hold over IPv4 but not IPv6 show up as the same finding "over IPv6". Blocking DoH by address needs the providers' IPv6 addresses too once any network has IPv6.
- Also fixed: a network with a delegated IPv6 prefix made every other network read as isolated.
Performance Tweaks
- UniFi OS 6.0.10 EA on the UCG line - supported, verified against the UCG-Fiber 6.0.10 firmware image.
Client Performance
- Fix: Device Not Found for a device UniFi Network knows - it checks UniFi Network's active clients too now, and with gateway SSH set up it finds a device you're browsing from over IPv6 (#1094, thanks @Jason-Morcos).
Fixes
- Fix: duplicate SNMP polling with two On-Site Agents - a site with one agent on the gateway and another on a separate box polled its devices from both. Now only one does, preferring the one off the gateway, so make sure it can reach your devices over SNMP.
Installation
Preview builds use a rolling :preview tag. Set it once and future builds - previews and releases - arrive on pull. You no longer need to switch back to :latest when a release ships: :preview gets every release too, so you're always on the newest build.
Docker (assuming you've installed already through the normal procedures listed in v2.8.6 or other releases):
image: ghcr.io/ozark-connect/network-optimizer:preview
image: ghcr.io/ozark-connect/speedtest:previewdocker compose pull && docker compose up -dWindows: download the MSI installer below
macOS (native, recommended for accurate speed tests vs Docker Desktop). Same command for every preview build. release/2.9 is rebuilt when a release ships, so the reset is what keeps a later update from stopping on a diverged branch - it discards local changes to the checkout:
cd NetworkOptimizer && git fetch origin && git checkout release/2.9 && git reset --hard origin/release/2.9 && ./scripts/install-macos-native.shProxmox (assuming you've already installed via the LXC script listed in v2.8.6 or other releases):
pct exec <CT_ID> -- bash -c 'cd /opt/network-optimizer && sed -i -e "s#network-optimizer:latest#network-optimizer:preview#" -e "s#speedtest:latest#speedtest:preview#" docker-compose.yml && docker compose pull && docker compose up -d && docker image prune -a -f'For other platforms (Synology, QNAP, Unraid, native Linux) or new installations, see the Deployment Guide.