Voor de UniFi Consoles (Dream Router, Machine Pro/SE, Wall) is versie 3.2.7 nu beschikbaar. Deze update voegt oa ondersteuning voor DNS Shield (DNS-over-HTTPS), UniFi Identity en Innerspace (voor het maken van een plattegrond) toe aan het systeem. Verder krijgt de Dream Router (UDR) nu de optie om maximaal 3 UniFi applicaties te gebruiken.
De update wordt de komende dagen automatisch geinstalleerd.
DNS Shield
Wanneer je een webadres of domeinnaam in de adresbalk intypt (bijvoorbeeld: nu.nl), stuurt de browser een verzoek via het internet om het IP-adres voor die website op te zoeken. Traditioneel wordt dit verzoek naar servers verzonden via een plattetekstverbinding. Deze verbinding is niet versleuteld, waardoor het eenvoudig is voor derden om te zien welke website je gaat bezoeken.
DNS-over-HTTPS (DoH) werkt net anders. Het verstuurt de ingetypte domeinnaam naar een DoH-compatibele DNS-server via een versleutelde https-verbinding, in plaats van als platte tekst. Hierdoor kunnen derden niet zien welke websites je wilt bezoeken.
Dit verbetert deprivacy door zoekopdrachten naar domeinen te verbergen voor iedereen die meekijkt op openbare wifi, de internetprovider of anderen op het lokale netwerk. DoH zorgt ervoor dat, wanneer ingeschakeld, de internetprovider persoonlijke gegevens in relatie tot het surfgedrag niet kan verzamelen en verkopen.
De volledige changelog:
Improvements
- Added Subscription Free UniFi Identity.
- Set up UniFi Identity via the Admins & Users > Users section.
- Added DNS Shield (Settings > Security > DNS Shield)
- Added support hostname support for IPsec Site-to-Site VPNs.
- Added support for the InnerSpace application, this replaces the MAP option in the Console Settings.
- Added fallbacks to default timezones if unsupported ones are provided during setup.
- Added DNS warnings for consoles that cannot resolve the ui.com domain.
- Added max login attempts for SSH.
- Entering incorrect credentials 5 times will block for 3 minutes.
- Added support for night mode for the LED.
- Allow the UDR to run 3 applications simultaneously.
- Allow disabling Remote Access where there are connection issues.
- Improved IPsec connection resiliency.
- Improved system stability.
- Improved RADIUS stability.
- Improved WireGuard VPN Disconnection detection for mobile devices.
- Improved meshing stability when the consoles are restarting or upgrading.
- Consoles will no longer erase external storage during a factory reset.
- Updated Suricata to 6.0.12.
- Updated the console reset button count down from 10 seconds to 5 seconds.
- Updated integrated Access Point firmware to 6.6.54.
- Prevent super admins from deleting their own account.
- Reduced memory usage of Suspicious Acticity/Content Filtering/Ad Blocking.
Backup and Upgrades
- Added DNS resiliency for firmware updates.
- Improved UniFi OS backup resiliency.
- Improved meshing stability when consoles are restarting or upgrading.
- Consoles will now always store backups locally before upgrading the firmware.
- Auto recovery is in place in case there is file system corruption after a power outage.
- Reduced network downtime for firmware upgrades.
Bugfixes
- Fixed an issue where the IPv6 address is lost after interface changes until the next RA.
- Fixed inaccurate throughput (jumping) on the display when using Smart Queues.
- Fixed an issue where the display didn’t show the No Internet when there was no Internet.
- Fixed an issue where the display didn’t show the setup screen during backup restore.
- Fixed unable to complete setup when using Android 14.
- Fixed unable to complete setup in rare cases.
- Fixed an issue where information wouldn’t be shown in the Dashboard when using IPsec in rare cases.
- Fixed an issue where servers are not reachable for VPN Clients due to incorrect certificates.
- Fixed unable to start RADIUS service in rare cases.
- Fixed an issue where PPPoE MSS Clamping is lost during provisions.
- Fixed Suspicious Activity not working when enabling Jumbo Frames.
- Fixed inability to see DPI statistics when a setup has a lot of clients.
- Fixed unexpected behavior when there are multiple Traffic Rules blocking the same domain.
- Fixed unable to establish IPsec Site-to-Site VPN in rare cases.
- Fixed an issue with DNS servers for VPN Clients.
- Fixed an issue where the default route wasn’t present when having a Static IP on the WAN interface.
- Fixed an issue where IGMP Proxy breaks after PPPoE reconnections.
- Fixed an issue where Traffic Routes didn’t take effect for existing connections.
- Fixed an issue where Traffic Routes conflict with Content Filtering.