Highlights
- MQVPN, a new multipath QUIC-based VPN, is now included and is the default VPN
- New MPTCP schedulers: Weight, Weighted Round-Robin and DSCP - steer traffic per interface weight or pin traffic classes to a specific WAN
- VXLAN tunnel between router and VPS, in Layer 2 (bridged) or Layer 3 mode
- New monitoring: metrics with connection health score and quality trend graph, an Events page, and a plain-English MPTCP Diagnose tab
- Optional AI on the VPS: a machine-learning decision engine that scores each connection and recommends routing weights per traffic class
- nDPId deep packet inspection: bypass traffic by detected application/protocol or category
- Linux kernel 6.18 support and many new device images
- Most LuCI pages migrated from Lua to JavaScript
MQVPN (new default VPN)
- New QUIC-based VPN with native multipath support, set as default VPN
- Configurable IP and port, including a port 443 mode
- Packet reordering support (enabled by default) and congestion control selection
- Weighted Round-Robin path scheduler with per-path weights
- New Metrics tab in the MQVPN page showing live per-path data
MPTCP schedulers and traffic steering
- New Weight scheduler: give each interface a weight (up to 256), configurable in Network -> Interfaces and on the MPTCP page
- New Weighted Round-Robin and DSCP BPF schedulers: DSCP lets you pin a traffic class (e.g. video calls) to a chosen WAN
- New DSCP manager, with DSCP support added to Shadowsocks-Rust, OMR-ByPass and the VPS side
- Scheduler and weight/DSCP settings are synchronized between router and VPS; upload settings are mirrored to the download side when unset
- New Weight/DSCP configuration page for the VPS
- TCP VPN/proxy restarts automatically when the scheduler changes so the new scheduler applies immediately
- Existing BPF schedulers (burst, rr, red, first, bkup) updated
VXLAN
- VXLAN tunnel from router to VPS, selectable Layer 2 (bridge) or Layer 3 mode
- Layer 2 mode can bridge into any interface you choose
- Can be enabled/disabled from the settings page
Monitoring and diagnostics
- New omr-metrics service: connection health status, per-subflow MPTCP metrics, quality trend graph, metrics sent to the VPS, optional custom/dedicated metrics server, and optional AI API integration for analysis
- New Events page (luci-app-omr-events) to follow what happens on the router
- New Diagnose tab on the MPTCP page: fallback/blackhole/reset detection explained in plain English, plus a per-subflow table
- Status page improvements: CPU temperature, currently active VPN and proxy, ASN/whois information for the VPS IP, direct output box, only Multipath-enabled interfaces shown, fixed 5G NSA display, fixed temperature display, dedicated ACL for the status page
- Faster and more reliable connection data collection
AI on the VPS (optional)
- New optional AI decision engine on the VPS, installed with a single script (
install_omr-ai.sh) - nothing is installed unless you choose to - Router metrics are stored in InfluxDB 3 on the VPS (60-day retention by default)
- A neural network (PyTorch) scores every WAN from 21 quality features (latency, loss, jitter, congestion, trends...) and recommends a routing weight per interface
- Can predict short-term link quality and recommend the best WAN per DSCP traffic class (voice, video, bulk...)
- Auto-learning: the model keeps training itself in the background from the link quality it actually observes
OMR-ByPass
- Deep packet inspection via nDPId with a new LuCI app: bypass by detected protocol/application and by category
- Per-rule TCP/UDP protocol choice for domains and IPs, better UDP support, V2Ray/XRay supported when UDP is disabled
- Much faster boot and rule reloading (batched UCI writes, hashing, caching), fixed nftables MARK rules
- Configurable rules reload time
- DSCP marking support
OMR-Tracker (connection monitoring)
- Congestion detection: link quality score can flag a congested interface
- Jitter and min/max RTT measurement
- Custom check IP and latency host usable when no VPS is defined
- Configurable post-tracking interval delay
- Reduced CPU usage, better gateway management, and many stability fixes (duplicate trackers, orphaned lock files, endless loops)
- An interface is no longer promoted back to master before its "up" counter is really satisfied
Wizard and web interface
- New wizard and status page
- LuCI apps migrated from Lua to JavaScript: OpenMPTCProuter (wizard, status, settings), MPTCP, OMR-Quota, OMR-DSCP
- More help texts in OMR-Tracker and OMR-ByPass pages, updated translations (French, Russian, Chinese...)
- New qdisc and weight settings in Network -> Interfaces, custom DHCP gateway support restored
OMR-Quota
- Global quota across interfaces
- Bandwidth throttling when quota is reached
- Configurable billing period (begin/end dates)
- Interface picker in the quota page
VPN and proxy
- OpenVPN updated to 2.7 (kernel DCO module on 6.18, no-delay option, passtos enabled)
- XRay updated: VLESS flow and decryption support, GRPC and XHTTP transports, protocol choice in wizard, fixed several start/firewall race conditions
- V2Ray/XRay: fixed restart loop when the server side is disabled
- Shadowsocks-Rust updated: shorter timeouts, DSCP support, crash fix, rules only applied when a password is set
- Glorytun UDP fixes (secondary WAN handling, port, optimizations applied only when enabled)
- VPN/proxy keys (Glorytun, DSVPN) now stored in volatile /var/run instead of flash
- Only the selected VPN/proxy is kept enabled; VPN restart checks prevent duplicated restarts
Hardware and system
- New device images: GL.iNet GL-MT2500 (Airoha), GL-X3000, GL-XE3000, GL-MT5000, Turris Omnia, NanoPi R3S, Z8802, Z8802BE, Z8803BE
- Fixed network configuration on GL-MT2500 (#4293), fixed mt7915e conflict, WED hardware offload enabled on MT7915 WiFi
- Linux kernel 6.18 support (MPTCP settings, kmod-ovpn, CI builds)
- Performance: irqbalance enabled on 4+ core CPUs (with LuCI app), automatic RPS/XPS setup, LRO/TSO/UFO disabled on multipath interfaces, updated sysctl tuning
- bpftune auto-tuning available on x86 (disabled by default) with a LuCI page
- Modems: SIM PIN handling fixed, automatic operator switch when connected without traffic, faster ModemManager startup, more signal information via omr-qmi/omr-modemmanager
- DNS hijacking detection (alerts when the ISP intercepts DNS queries)
- SQM autorate: multiqueue support and fixes
- QUIC is no longer blocked by default (was previously blocked to force traffic onto TCP/MPTCP)
VPS update is required