The fastTrack improvements are a big improvement for those of you doing such things.<\/p>\n
What’s new in 6.29 (2015-May-27 11:19):<\/p>\n
*) ssh server – use custom generated DH primes when possible;
\n*) ipsec – allow to specify custom IP address for my_id parameter;
\n*) ovpn server – use subnet topology in ip mode if netmask is provided (makes android & ios
\nclients work);
\n*) console – allow ‘-‘ characters in unknown command argument names;
\n*) snmp – fix rare bug when some OIDs where skipped;
\n*) ssh – added aes-ctr cipher support;
\n*) mesh – fixed kernel crash;
\n*) ipv4 fasttrack fastpath – accelerates connection tracking and nat for marked
\nconnections (more than 5x performance improvement compared to regular slow
\npath conntrack\/nat) – currently limited to TCP\/UDP only;
\n*) added ~fasttrack-connection~ firewall action in filter\/mangle tables for marking
\nconnections as fasttrack;
\n*) added fastpath support for bridge interfaces – packets received and transmitted
\non bridge interface can go fastpath (previously only bridge forwarded packets
\ncould go fastpath);
\n*) packets now can go half-fastpath – if input interface supports fastpath and
\npacket gets forwarded in fastpath but output interface does not support fastpath
\nor has interface queue other than only-hw-queue packet gets converted
\nto slow path only at the dst interface transmit time;
\n*) trafflow: add natted addrs\/ports to ipv4 flow info;
\n*) queue tree: some queues would stop working after some configuration changes;
\n*) tilegx: enable autoneg for sfp ports in netinstall;
\n*) health – fix voltage on some RB4xx;
\n*) romon – fix 100% CPU usage;
\n*) romon – moved under tools menu in console;
\n*) email – store hostname for consistency;
\n*) vrrp – do not reset interface when no interesting config changes;
\n*) fixed async. ppp server;
\n*) sstp – fixed router lockup.
\n*) queue tree: some queues would stop working after some configuration changes;
\n*) fixed CRS226 10G ports could lose link (introduced in 6.28);
\n*) fixed FREAK vulnerability in SSL & TLS;
\n*) improved support for new hEX lite;<\/p>\n","protected":false},"excerpt":{"rendered":"
The fastTrack improvements are a big improvement for those of you doing such things. What’s new in 6.29 (2015-May-27 11:19): *) ssh server – use custom generated DH primes when possible; *) ipsec – allow to specify custom IP address for my_id parameter; *) ovpn server – use subnet topology in ip mode if netmask […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[1],"tags":[176,175,177,25,28],"jetpack_publicize_connections":[],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p6VLMf-4V","jetpack-related-posts":[{"id":263,"url":"http:\/\/www.mtin.net\/blog\/new-software-features\/","url_meta":{"origin":305,"position":0},"title":"New Software Features","author":"j2sw","date":"April 23, 2015","format":false,"excerpt":"RoMON another blog post will follow on this. Need to use Winbox 3 FastTrack FastPath + Connection Tracking FastTrack Accelerates packet processing for specific connection tracking entries Full NAT support Works with IPv4\/TCP and IPv4\/UDP \u00a0","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1333,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-routeros-3-36\/","url_meta":{"origin":305,"position":1},"title":"Mikrotik RouterOS 3.36","author":"j2sw","date":"July 22, 2016","format":false,"excerpt":"Lots of things fixed in this release. What's new in 6.36 (2016-Jul-20 14:09): *) arm - added Dude server support; *) dude - (changes discussed here: http:\/\/forum.mikrotik.com\/viewtopic.php?f=8&t=110428); *) dude - server package is now made smaller. client side content upgrade is now removed from it and is downloaded straight from\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":522,"url":"http:\/\/www.mtin.net\/blog\/lots-of-changes-in-routeros-6-34\/","url_meta":{"origin":305,"position":2},"title":"Lots of changes in RouterOS 6.34","author":"j2sw","date":"January 29, 2016","format":false,"excerpt":"Lots of changes in RouterOS 6.34 Some Standouts that will be of benefit to alot of folks I know *) mipsle - architecture support dropped (last fully supported version 6.32.x); *) btest - significantly increased TCP bandwidth test performance; *) ssh - fixed possible kernel crash; *) crs212 - fix\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2554,"url":"http:\/\/www.mtin.net\/blog\/common-questions-masquerade-vs-src-nat-action-mikrotik\/","url_meta":{"origin":305,"position":3},"title":"Common Questions: masquerade vs src-nat action Mikrotik","author":"j2sw","date":"October 26, 2018","format":false,"excerpt":"One of the common questions I get is what is the difference between Masquerade and SRC-NAt? Which should I use? The quick answer is to use SRC-NAT if your gateway IP is static, and use masquerade if it can change. The Mikrotik Wiki Entry Firewall NAT action=masquerade is unique subversion\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.mtin.net\/blog\/wp-content\/uploads\/2014\/09\/2014-08-05-19.26.03.png?fit=650%2C650&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":1078,"url":"http:\/\/www.mtin.net\/blog\/new-routeros-6-34-4\/","url_meta":{"origin":305,"position":4},"title":"New routerOS 6.34.4","author":"j2sw","date":"March 30, 2016","format":false,"excerpt":"From Mikrotik: To upgrade, click \"Check for updates\" at \/system package in your RouterOS configuration interface, or head to our download page: http:\/\/www.mikrotik.com\/download What's new in 6.34.4 (2016-Mar-24 13:13): *) bonding - fixed crash on bonding slave release; *) bonding - fixed mac-address disappearance after reboot in specific setups; *)\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":204,"url":"http:\/\/www.mtin.net\/blog\/mikrotik-router-os-6-22-released\/","url_meta":{"origin":305,"position":5},"title":"Mikrotik Router OS 6.22 Released","author":"j2sw","date":"November 13, 2014","format":false,"excerpt":"From the ChangeLog What's new in 6.22 (2014-Nov-11 14:46): *) ovpn - added support for null crypto; *) files - allow to remove empty disk folders; *) sntp - fix problems with dns name resolving failures that were triggering system watchdog timeout; *) eoip\/eoipv6\/gre\/gre6\/ipip\/ipipv6\/6to4 tunnels have new features: tunnels go\u2026","rel":"","context":"In "Mikrotik"","block_context":{"text":"Mikrotik","link":"http:\/\/www.mtin.net\/blog\/category\/mikrotik\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_likes_enabled":true,"_links":{"self":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/305"}],"collection":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/comments?post=305"}],"version-history":[{"count":2,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/305\/revisions"}],"predecessor-version":[{"id":307,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/posts\/305\/revisions\/307"}],"wp:attachment":[{"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/media?parent=305"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/categories?post=305"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.mtin.net\/blog\/wp-json\/wp\/v2\/tags?post=305"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}