Highlights

  • MQVPN, a new multipath QUIC-based VPN, is now included and is the default VPN
  • New MPTCP schedulers: Weight, Weighted Round-Robin and DSCP - steer traffic per interface weight or pin traffic classes to a specific WAN
  • VXLAN tunnel between router and VPS, in Layer 2 (bridged) or Layer 3 mode
  • New monitoring: metrics with connection health score and quality trend graph, an Events page, and a plain-English MPTCP Diagnose tab
  • Optional AI on the VPS: a machine-learning decision engine that scores each connection and recommends routing weights per traffic class
  • nDPId deep packet inspection: bypass traffic by detected application/protocol or category
  • Linux kernel 6.18 support and many new device images
  • Most LuCI pages migrated from Lua to JavaScript

MQVPN (new default VPN)

  • New QUIC-based VPN with native multipath support, set as default VPN
  • Configurable IP and port, including a port 443 mode
  • Packet reordering support (enabled by default) and congestion control selection
  • Weighted Round-Robin path scheduler with per-path weights
  • New Metrics tab in the MQVPN page showing live per-path data

MPTCP schedulers and traffic steering

  • New Weight scheduler: give each interface a weight (up to 256), configurable in Network -> Interfaces and on the MPTCP page
  • New Weighted Round-Robin and DSCP BPF schedulers: DSCP lets you pin a traffic class (e.g. video calls) to a chosen WAN
  • New DSCP manager, with DSCP support added to Shadowsocks-Rust, OMR-ByPass and the VPS side
  • Scheduler and weight/DSCP settings are synchronized between router and VPS; upload settings are mirrored to the download side when unset
  • New Weight/DSCP configuration page for the VPS
  • TCP VPN/proxy restarts automatically when the scheduler changes so the new scheduler applies immediately
  • Existing BPF schedulers (burst, rr, red, first, bkup) updated

VXLAN

  • VXLAN tunnel from router to VPS, selectable Layer 2 (bridge) or Layer 3 mode
  • Layer 2 mode can bridge into any interface you choose
  • Can be enabled/disabled from the settings page

Monitoring and diagnostics

  • New omr-metrics service: connection health status, per-subflow MPTCP metrics, quality trend graph, metrics sent to the VPS, optional custom/dedicated metrics server, and optional AI API integration for analysis
  • New Events page (luci-app-omr-events) to follow what happens on the router
  • New Diagnose tab on the MPTCP page: fallback/blackhole/reset detection explained in plain English, plus a per-subflow table
  • Status page improvements: CPU temperature, currently active VPN and proxy, ASN/whois information for the VPS IP, direct output box, only Multipath-enabled interfaces shown, fixed 5G NSA display, fixed temperature display, dedicated ACL for the status page
  • Faster and more reliable connection data collection

AI on the VPS (optional)

  • New optional AI decision engine on the VPS, installed with a single script (install_omr-ai.sh) - nothing is installed unless you choose to
  • Router metrics are stored in InfluxDB 3 on the VPS (60-day retention by default)
  • A neural network (PyTorch) scores every WAN from 21 quality features (latency, loss, jitter, congestion, trends...) and recommends a routing weight per interface
  • Can predict short-term link quality and recommend the best WAN per DSCP traffic class (voice, video, bulk...)
  • Auto-learning: the model keeps training itself in the background from the link quality it actually observes

OMR-ByPass

  • Deep packet inspection via nDPId with a new LuCI app: bypass by detected protocol/application and by category
  • Per-rule TCP/UDP protocol choice for domains and IPs, better UDP support, V2Ray/XRay supported when UDP is disabled
  • Much faster boot and rule reloading (batched UCI writes, hashing, caching), fixed nftables MARK rules
  • Configurable rules reload time
  • DSCP marking support

OMR-Tracker (connection monitoring)

  • Congestion detection: link quality score can flag a congested interface
  • Jitter and min/max RTT measurement
  • Custom check IP and latency host usable when no VPS is defined
  • Configurable post-tracking interval delay
  • Reduced CPU usage, better gateway management, and many stability fixes (duplicate trackers, orphaned lock files, endless loops)
  • An interface is no longer promoted back to master before its "up" counter is really satisfied

Wizard and web interface

  • New wizard and status page
  • LuCI apps migrated from Lua to JavaScript: OpenMPTCProuter (wizard, status, settings), MPTCP, OMR-Quota, OMR-DSCP
  • More help texts in OMR-Tracker and OMR-ByPass pages, updated translations (French, Russian, Chinese...)
  • New qdisc and weight settings in Network -> Interfaces, custom DHCP gateway support restored

OMR-Quota

  • Global quota across interfaces
  • Bandwidth throttling when quota is reached
  • Configurable billing period (begin/end dates)
  • Interface picker in the quota page

VPN and proxy

  • OpenVPN updated to 2.7 (kernel DCO module on 6.18, no-delay option, passtos enabled)
  • XRay updated: VLESS flow and decryption support, GRPC and XHTTP transports, protocol choice in wizard, fixed several start/firewall race conditions
  • V2Ray/XRay: fixed restart loop when the server side is disabled
  • Shadowsocks-Rust updated: shorter timeouts, DSCP support, crash fix, rules only applied when a password is set
  • Glorytun UDP fixes (secondary WAN handling, port, optimizations applied only when enabled)
  • VPN/proxy keys (Glorytun, DSVPN) now stored in volatile /var/run instead of flash
  • Only the selected VPN/proxy is kept enabled; VPN restart checks prevent duplicated restarts

Hardware and system

  • New device images: GL.iNet GL-MT2500 (Airoha), GL-X3000, GL-XE3000, GL-MT5000, Turris Omnia, NanoPi R3S, Z8802, Z8802BE, Z8803BE
  • Fixed network configuration on GL-MT2500 (#4293), fixed mt7915e conflict, WED hardware offload enabled on MT7915 WiFi
  • Linux kernel 6.18 support (MPTCP settings, kmod-ovpn, CI builds)
  • Performance: irqbalance enabled on 4+ core CPUs (with LuCI app), automatic RPS/XPS setup, LRO/TSO/UFO disabled on multipath interfaces, updated sysctl tuning
  • bpftune auto-tuning available on x86 (disabled by default) with a LuCI page
  • Modems: SIM PIN handling fixed, automatic operator switch when connected without traffic, faster ModemManager startup, more signal information via omr-qmi/omr-modemmanager
  • DNS hijacking detection (alerts when the ISP intercepts DNS queries)
  • SQM autorate: multiqueue support and fixes
  • QUIC is no longer blocked by default (was previously blocked to force traffic onto TCP/MPTCP)

VPS update is required