CVS commit: pkgsrc/net/unifi

["David Brownlee" <abs%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   abs
Date:           Fri Jun  7 15:33:17 UTC 2024

Modified Files:
        pkgsrc/net/unifi: Makefile PLIST distinfo options.mk
        pkgsrc/net/unifi/files: unifi.sh

Log Message:
Updated net/unifi to 8.2.93

For changes before 7.5.176 see https://community.ui.com/releases

Now requires mongodb >= 4 and openjdk 17

7.5.176

Improvements

 - Added support for DNS Shield. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console with version 3.2 or newer.
 - Added Switch-related System Logs in its Property Panel.
 - Improved Traffic Monitor UX.
 - Added time estimate when filtering by clients
 - Improved filtering and navigation
 - Improved Dashboard UX.
 - Added confirmation when trying to set Primary/Secondary WAN to ports that are not connected to the Internet.
 - Added messaging for regions where 6GHz is not (yet) supported.
 - Added validation for unreachable custom Echo/Internet Verification Servers.
 - Added support for opening side panels while staying on the same page. E.g., opening a Client property panel while being on the Dashboard.
 - Added validation for checking Honeypot IPs against Fixed IPs from Clients.
 - Added Guest authorization by admins in the System Logs.
 - Added the "Manage" option to the Profiles settings.
 - Added support for running a speed test on WAN2.
 - Added Radio Antenna selection for UWB-XG.
 - Added Country/Region selector to the Network Application Server setup wizard.
 - Automatically restore from recovery backup after replacing the HDD on a UCK G2 Plus.
 - Improved setup flow for Windows/macOS.
 - Improved STP Discarding UX in the Port Manager.
 - Improved auto-backup schedule limits on UniFi Consoles.
 - Improved Data Retention options on UniFi Consoles.
 - Improved Voucher creation process.
 - Improved searching in Settings.
 - Improved Settings section organization.
 - Improved Firewall Rules table UX.
 - Improved Network Application loading time.
 - Improved Device update resiliency by using cached firmware to update a device if the device fails to download the firmware from our servers.
 - Improved adding/editing administrators on Network Application servers.
 - Improved displaying of link speeds in device property panels.
 - Improved memory usage in certain environments.
 - Improved error messaging in Port Manager.
 - Improved Traffic Rule validation when selecting too many countries. Max 150 countries/regions are supported.
 - Updated the packet loss display in the Dashboard Internet Health graph.
 - Updated the UniFi Network Device display names.
 - Display email addresses for guests authorized via Facebook authentication.
 - Prevent enabling Device Isolation on networks with managed UniFi Devices.
 - Prevent offering IP addresses to clients that are configured via a Static IP on UniFi Devices.
 - Moved AP Site Settings and Support to Advanced Settings.
 - Moved Port Manager to the Overview tab for Switches.
 - Moved the Signal column next to the Experience column on the Clients page.
 - Bundle Java inside the Application on Windows Network Application Servers.
 - Aggregate Honeypot hit and Device Reconnected notifications.
 - Always allow disabling Fixed IP addresses for clients.
 - Use channel 4 as default during adoption for UBB/UBB-XG.
 - Changed Rx/Tx error threshold for System Logs.
 - Enable auto-update for Meshed APs. Previously they would not auto-update.
 - Reorganize Firewall and Routing Settings.
 - Removed minutes from the auto speed test scheduler. It will select a random minute within the configured hour to run the test.
 - Removed Update Service Resiliency improvements that override the DNS servers for the UI domains. We'll add messaging in a future release.
 - Removed incorrectly generated Outside of Range messages in System Logs.
 - Removed scheduled Nightly Channel Optimization tasks, you can still optimize manually.
 - Removed pre-configuration messaging from RADIUS profiles.
 - Removed fallback IP address messaging if the site does not have a UniFi Gateway.
 - Require MongoDB 3.6 or newer. This also drops support for 32-bit systems.
 - Require Java 17.

Topology

 - Added real-time internet traffic visualization to the Topology.
 - Added a Tooltip for Realtime Internet Traffic.
 - Display the current Connection session in the Clients and Topology pages. This works only for local connections and on unifi.ui.com (Google Chrome only).
 - Added ISP/Modem in the Topology.
 - Added 6GHz clients to the Topology.
 - Improved Wireless Uplink reporting in the Topology.

Clients and Devices

 - Added Latency Test option to the Client Devices page. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console with version 3.1 or newer.
 - Added support for adjustable column width for Devices and Client tables.
 - Added the Last Seen and Connection type filter to the top bar on the Client Devices page.
 - Improved displaying OpenVPN Server Clients on the Clients page.
 - Added Device Type filtering to the Device page.
 - Added the ability to reset the sorting preferences by clicking Restore Defaults on the Devices page.
 - Improved UniFi Devices table columns.
 - Added affected clients to the IP Conflict notification.
 - Added Client Session Time widget to the Client property panel.

IPv6

 - Added global IPv6 support in the Network Settings. This requires you to have IPv6 enabled on WAN.
 - Added IPv6 DNS servers in the Internet Settings. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console.
 - Added IPv6 stateless option in the Internet Settings. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console with version 3.2 or newer.
 - Added IPv6 addresses for client devices. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console with version 3.2 or newer.
 - Improved IPv6 Network Settings UX.

VPN

 - Improved Site-to-Site VPN configuration.
 - Added support for FQDN/Hostnames with IPsec Site-to-Site VPNs. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console with version 3.2 or newer.
 - Added support for adding a /32 and /31 to Remote Gateway/Subnets for VPNs. This requires a UniFi Next-Gen Gateway or UniFi Gateway Console.
 - Added additional ESP DH Group Options for Site-to-Site VPNs.
 - Improved the validation of WireGuard VPN Keys.
 - Improved the VPN Creation process by prefilling the name and port.
 - Improved feedback for the OpenVPN Configuration File download button.

WiFi

 - Added AP Density widget to the WiFi Coverage page.
 - Improved AP Group Selection in the WiFi Settings.
 - Added DFS Scanning status for Access Points.
 - Improved Broadcasting AP column in the WiFi Settings.
 - Improved Global WiFi Settings UX.
 - Renamed WiFi QoS to WiFi Speed Limit.
 - Deprecate Facebook-WiFi authorization. Facebook is dropping support for it.
 - Improved Device connection state when adopting Mesh APs after enabling Wireless Meshing.
 - Added support for re-adopting Wireless Meshed APs that are factory reset via the Reset button.
 - Automatically enable Wireless Meshing when doing a Wireless Adoption.

Bugfixes

 - Fixed unable to login to the Network Application Server via Safari.
 - Fixed WAN DNS servers were not getting provisioned to USGs.
 - Fixed a rare issue where WiFi networks were getting paused after updating to 7.5.174.
 - Fixed the inability to delete Firewall rules.
 - Fixed page crash when accessing offline device settings.
 - Fixed an issue with loading statistics when using MongoDB 4.4 on a Network Server.
 - Fixed unable to adopt U-LTE devices on UniFi Gateway Consoles running UniFi OS 3.1.
 - Fixed various gateway configuration issues.
 - Fixed L3 switches were not provisioning after editing L3 Static Routes.
 - Fixed rare Network Application crashes.
 - Fixed incorrect ISP Potential value after speed tests.
 - Fixed unrealistic throughput on switches and setups with USGs.
 - Fixed discrepancy between latency reported in the ISP Health bar and ISP Status.
 - Fixed APs might show up under "unmanaged" while they are ready for adoption after being removed.
 - Fixed UID IoT clients appearing offline.
 - Fixed Network Application startup failure when a custom socket timeout is applied.
 - Fixed some configuration options were not being applied to APs for Open WiFi networks.
 - Fixed channel optimization overriding manual channel configurations in rare cases.
 - Fixed unable to save RADIUS profile under global switch settings.
 - Fixed an issue where disabled APs didn't appear properly.
 - Fixed AP dropdown in the Dashboard.
 - Fixed missing UXG data in the Dashboard on Network Application servers.
 - Fixed missing ISP Logo on the Topology page.
 - Fixed unable to Save/Apply Changes in the firewall section in rare cases.
 - Fixed unable to download backups from a Network Application Server via Remote Access.
 - Fixed unable to configure switch ports if one of the ports had references to a removed L3 Network.
 - Fixed missing Ad Block statistics on the Filtering Activity page.
 - Fixed UDM-Pro/UDM-SE would appear offline when Port 11 has Block All option configured in the Restrict Traffic Settings.
 - Fixed unable to download backup files from Network Application servers when connected via unifi.ui.com.
 - Fixed Device discovery when port 1 is disabled on an UniFi Gateway Console.
 - Fixed missing + and - buttons on the Traffic map when opening the Network Application locally.
 - Fixed voucher printing via Safari browsers.
 - Fixed false positive "Multiple IP Notifications" for UniFi Devices with multiple interfaces.

Clients and Devices

 - Fixed connection column sorting on the Clients page.
 - Fixed some Traffic Identification stats were not cleared when the client is removed from the database.
 - Fixed IP Address column sorting on the clients page.
 - Fixed Connection column sorting on the clients page.
 - Fixed missing columns on the Clients page.

VPN

 - Fixed unable to establish IPsec Site-to-Site VPN with Policy Based Routing connections in rare cases.
 - Fixed unable to create IPsec Site-to-Site VPN if the setup has a USG.
 - Fixed UID VPN users are unable to reach the Remote subnet over VPN in rare cases.
 - Fixed unable to change WAN from Static to DHCP when having a VPN configured.

7.5.187

Improvements

 - Added Active WiFi Channels to the Dashboard.
 - Added validation for IPv6 Prefix ID.
 - Added new IP/Port ranges to the UniFi Talk default Firewall Rules.
 - Improved validation for selecting IPv6 WAN interface.
 - Improved Network Application startup for large setups.
 - Limit auto-backup options to preserve the Console's storage.

Bugfixes

 - Fixed an issue where you might see a blank Guest Portal in rare cases.
 - Fixed WiFi channel options missing when creating new sites.
 - Fixed an issue where Auto IPsec Site-to-Site VPNs could not be deleted.
 - Fixed gateway configuration errors in rare cases.
 - Fixed an issue where the Super Administrator role was assigned to newly created Site Admins.
 - Fixed an issue where the Gateway Console might appear offline when there are multiple default AP Groups.
 - Fixed inability to enable RADIUS Authentication for Hotspots when there is no UniFi Gateway.
 - Fixed an issue where new gateway stats were not populating after adopting a new UniFi Gateway.
 - Fixed a translation issue in the Site Export wizard.
 - Fixed a translation issue in the 24V Passive PoE confirmation popup.
 - Fixed the inability to adjust Port Settings when a device had an invalid channel configuration.
 - Fixed an issue where a Wireless Meshed device could appear Offline during Wireless Adoption.
 - Fixed WireGuard Pre-shared key and Public Key validation.
 - Fixed an issue where Port Mirroring was showing up as an option for Gateway Consoles.

8.0.7

Improvements

 - Improved Port Manager.
 - Added all ports overview.
 - Added VLAN Viewer.
 - Improved VLAN port management UX.
 - Added Site Overview.
 - Added ability to select which networks Suspicious Activity is enabled on.
 - Added sorting feature for IP Groups.
 - Added ability to allow opening predefined firewall rules.
 - Improved validation for Prefix ID in Virtual Network settings.
 - Improved empty MAC whitelist validation in Port Manager.
 - Improved validation for DHCP options.
 - Improved DHCP Server TFTP Server field validation.
 - Improved Traffic Rule IP Address validation.
 - Improved Firewall Rules UX.
 - Improved Security Settings UX.
 - Improved Global Network Settings UX.
 - Enabled auto upgrade for UXG-Pro after the adoption is completed.
 - Remove LTE Failover WAN from IPTV Options.
 - Show the local language in the Language dropdown.
 - Prevent provisioning more Layer 3 static routes than UniFi switches can support.
 - Routes that are over the limit at the time of upgrade will be marked as Paused.
 - This does not mean that total static route support on Layer 3 UniFi switches is decreased, instead, UX is improved to prevent configuration of routes that are not functional.

VPN

 - Added WireGuard VPN Client.
 - Added messaging to create traffic routes after creating VPN Clients. This applies to the VPN Client feature, not adding clients to VPN Servers.
 - Added validation in VPN Server settings when the port overlaps with a Port Forwarding rule.
 - Added IP/Hostname override option for OpenVPN and WireGuard VPN Servers.
 - This adds a custom hostname or IP address to the configuration file used by clients.
 - This option is useful if the UniFi Gateway is behind NAT or is using a dynamically assigned IP address.
 - Added validation for Local IP in IPsec Site-to-Site VPN settings.
 - Automatically remove Site-to-Site Auto IPsec configuration if the adopted gateway doesn't support it.
 - Improved Site-to-Site VPN validations.
 - Improved configuration file generation time for OpenVPN Servers.
 - Increased OpenVPN and WireGuard VPN Client limit from 5 to 8. This applies to the VPN Client feature, not VPN users connecting to VPN Servers.
 - Remove the PPTP Server if the adopted gateway doesn't support it.

Clients and Devices

 - Added PoE power cycle option to the device side panel.
 - Added confirmation message when configuring Network Overrides.
 - Improved UniFi Devices page performance on larger setups.
 - Improved System Logs for client connections.
 - Locked the first column for Devices/Clients pages when scrolling horizontally.
 - Client hostnames (if present) are now shown in the side panel overview.
 - Moved filters to the left side in the Device and Client pages.

WiFi

 - Added Radio Manager.
 - Added ability to enable Professional installer toggle for Consoles.
 - Improved adding clients to MAC Address Filters.
 - Improved actionable feedback when Outdoor Mode is enabled.
 - Removed Global AP Settings, you can now use Radio Manager for bulk editing.
 - Collapse RF Scan tab by default in the AP device panel.
 - Changed WiFi Experience to TX retries for APs in their device panel.
 - Enhanced voucher printing options.

Bugfixes

 - Fixed an issue where some UniFi devices were incorrectly shown on the Client Devices page or not shown at all.
 - As a result of this fix, unmanaged non-network UniFi devices (e.g. UniFi Protect camera) may appear again as offline devices.
 - These offline devices will be removed automatically based on the Data Retention settings.
 - Automatic removal is an automated, periodic process that will run for several minutes after updating. Manual removal is also possible.
 - Fixed an issue where blocked clients couldn't connect if they were removed until the next AP provision.
 - Fixed incorrect channel width for BeaconHD/U6-Extender.
 - Fixed an issue where Virtual Network usable hosts were incorrectly calculated.
 - Fixed missing ISP names in internet-related notifications.
 - Fixed rare gateway adoption issues via Layer 3.
 - Fixed an issue where WiFiman speed test results were not shown.
 - Fixed issue where WAN configuration is not populated when moving a gateway device to a new site.
 - Fixed an issue where CGNAT IP addresses were incorrectly marked as public IPs for Site Magic.
 - Fixed invalid connected client count for In-Wall APs.
 - Fixed unmanaged Network devices not shown on Client and Device pages in rare cases.
 - Fixed an issue where the Console would appear offline in rare cases.
 - Fixed sorting when there are multiple pages.
 - Fixed an issue where Voice VLAN settings are not effective when all VLANs are auto-allowed on switch ports.
 - Fixed an issue where Lock to AP is not disabled when removing an AP.
 - Fixed an issue where RADIUS profiles couldn't be disabled when using a WireGuard VPN Server.
 - Fixed rare gateway configuration error.

8.0.24

Improvements

 - Added Admin Settings change System Logs.
 - Increased default network limit to 255. Some devices have lower limits such as USG, or InWall AP models.
 - Splitted the Clients list into Online/Offline tabs.
 - Added payment name to the Guest Portal landing page.
 - Added 24HR TX Retries to Sites Overview.
 - Added device model column to Radio Manager.
 - Added pagination to Radio Manager.
 - Added support for Korean and Spanish language.
 - Added WAN/LAN IP addresses to the Dashboard for Network Application Servers.
 - Added validation when a new network is trying to use a subnet that is already used by an OpenVPN Client.
 - Added support for PPPoE WAN without credentials. This requires UniFi OS 3.2 or newer.
 - Allow removing networks with references. You will receive a warning message before deletion.
 - Improved Guest Portal loading latency.
 - Increased the index space for Firewall rules.
 - Updated the list of Dynamic DNS providers.

Bugfixes

 - Fixed an issue with configuring radios of UAP-XG's and UAP-BaseStationXG's via Radio Manager.
 - Fixed an issue where IPv6 Prefix Delegation or IPv6 Single Network was broken on non-Default networks. This only affects the UXG line of devices.
 - Fixed inability to edit Port/Device settings when an incorrect channel was applied on an AP.
 - Fixed inability to open Internet Settings in rare cases.
 - Fixed an issue where the All Traffic row in Traffic Monitor didn't include unidentified traffic.
 - Fixed an issue where some port profiles failed to get applied on InWall APs.
 - Fixed a rare case where Traffic Rules would stop working while Ad Blocking was enabled.
 - Fixed an issue where the Network Application wasn't getting stopped on Windows during upgrades or removal.
 - Fixed incorrectly reported built-in antenna gain.
 - Fixed the inability to connect to Guest Portals in rare cases.
 - Fixed the inability to open Security settings in rare cases.
 - Fixed rare gateway configuration error due to invalid default RADIUS profile ports.
 - Fixed rare gateway configuration error on UDM/UDR/UDW.
 - Fixed rare gateway configuration errors.
 - Fixed an issue where Suspicious Activity was allowed to be applied on non-local networks.
 - Fixed an issue where client uptime could be invalid, the fix applies to new connections.
 - Fixed an issue where Device type filters were resetting selected columns.
 - Fixed an issue where Client Isolation couldn't be disabled when using a Guest Portal.
 - Fixed an issue where port anomalies were not showing details on Port diagrams.

8.0.26

Bugfixes

 - Fixed an issue where WAN2 configurations were removed after a firmware upgrade when using 8.0.24 with a Static or PPPoE WAN configuration.
 - This only prevents new occurrences. Affected setups need to be restored from a backup before this issue or re-create their WAN config.
 - Fixed gateway/console showing offline when WAN interface cannot be found.

8.0.28

Bugfixes

 - Fixed the inability to upload hotspot landing page images on consoles running the Native Application (UDR, UDM, Express).
 - Fixed the inability to see the DNS Shield setting in rare cases.
 - Fixed the inability to open Security Logs in rare cases.
 - Fixed the inability to select multiple APs in Display Options on the Clients page.
 - Fixed the inability to update Virtual Networks from the Topology page when DHCP Guarding or DHCP Options are enabled.
 - Fixed the inability to see devices that are Pending Adoption as Site Administrator on Network Application Servers.
 - Fixed an issue where mesh links went down due to an invalid Monitor IP Address for Wireless Meshing after updating to Network Application 7.5 or newer and Access Point firmware version 6.6.12 or 
newer.
 - Fixed gateway configuration/provisioning issues when the WAN interface can't be found.

8.1.113

Improvements

 - Added tabs to the side panel to navigate quickly through recently visited panels.
 - Enabled with Side Panel Tabs option in the Advanced System settings (disabled by default).
 - Added the ability to toggle "Allow Internet Access" and "Isolate Network" via the Network settings.
 - This previously only existed in VLAN Magic settings.
 - Isolate Network blocks communication to all other Virtual Networks.
 - Added NAT Pooling. Requires a UniFi (Cloud) Gateway with firmware version 3.2.9 or newer.
 - Added support for OSPF. Requires a UniFi (Cloud) Gateway with firmware version 3.2.12 or newer.
 - OSPF is limited to one instance and cannot be used with Site Magic simultaneously.
 - Added InnerSpace for Network Application Servers.
 - Added L3 Network Isolation and Device Isolation (ACL). Requires a UniFi Switch with firmware 7.0.44 or newer.
 - Added option to invert the Traffic Statistics to view by client device or application data.
 - Added the ability to copy Switch configuration between models with the same port counts.
 - Added updating progress bar in the Devices list.
 - Added STP and Loop detection logs. They will show in Network Viewer page in Network AI section.
 - Added the option “All” to the AP group setting in WiFi settings.
 - Renamed Isolation in Network settings to Guest Network.
 - Renamed Traffic Routes to Policy-Based Routes.
 - Added Fallback option to Policy-Based Routes.
 - Added support for RF Scanning 6GHz channels.
 - Added warning messages when adding many Multicast DNS networks.
 - Added Etherlighting Breathing on/off toggle.
 - Added 1h time range to Traffic Statistics.
 - Allow removing admins without any roles on Network Application Servers.
 - Allow using .local domains in Virtual Network and Client settings.
 - A warning is shown instead of completely preventing the use of it.
 - Improved validation for RADIUS authentication credentials.
 - Improved feedback for devices in the Adoption Failed state.
 - Improved client roaming System Logs.
 - Improved Traffic Stats data collection to improve data accuracy.
 - Upgrading to this version will take longer for larger setups due to stat migration.
 - Improved validation for Port Forward ports.
 - Improved validation message for VLAN0 QoS Tag.
 - Improved Admins page UX on Network Application Servers.
 - Improved Connection Logs timeline user experience.
 - Related Content Filtering settings are now also getting removed when removing Networks.
 - Improved stability on Express Consoles.
 - Improved user experience when Networks are removed/added/modified.
 - Improved admin changelogs.
 - Improved DHCP Leased IP user experience and accuracy.
 - Improved Network isolation user experience.
 - Improved Topology page user experience.
 - Updated the WiFi Coverage user experience.
 - Updated the Settings layout user experience.
 - Added RADIUS Secret validation restriction for backslashes.
 - Moved the AP selector to the top bar on the all Radio section.
 - Reduced latency test from 60 to 30 seconds.
 - Removed VLAN range validation in the Internet Settings.
 - Automatically disable Fixed IP for devices/clients when their IPs are excluded by subnet changes.

Firewall

 - Improved Firewall Rules user experience.
 - Firewall Rules are now more detailed showing additional columns.
 - Combined Traffic and Firewall Rules into one section with Simple and Advanced toggle.
 - Advanced section also includes Traffic Rules to show the relationship between Traffic and Firewall Rules.
 - Added Firewall Rule IDs.
 - Added filters to Firewall Rules.
 - Improved Firewall Rule creation.
 - Added validation for how many IP addresses can be added for Traffic Rules.
 - Updated Traffic Rules user experience.

IPv6

 - Added IPv6 WAN address to Internet Settings and Internet Health.
 - Added IPv6 address and subnet to the Network settings for Prefix Delegation, Single Network and Static.
 - Added IPv6 link local address to the Network settings.
 - Added last seen IPv6 address for Offline clients.
 - Added IPv6 address to Wireless clients panel. Requires UniFi Access Point firmware version 7.0 or newer.
 - Prevent disabling IPv6 when DS-Lite is enabled.

VPN

 - Added more information to the VPN Client settings.
 - Added validation for Local and Remote IP Uniqueness for Site-to-Site VPNs.
 - Added ability to configure Cipher for OpenVPN Site-to-Site VPNs. Requires a UniFi (Cloud) Gateway with firmware version 3.2.12 or newer.
 - Allow bigger network size for VPN Servers on UniFi (Cloud) Gateways.
 - Improved WireGuard VPN Server Client IP Validation.

WiFi

 - Added a note with WiFi 6 deployment instructions in the WiFi settings when a 6GHz capable AP is adopted.
 - Updated WiFi Network creation user experience when setup contains a 6GHz capable AP.
 - The 6GHz band is automatically selected and defaults to WPA2/WPA3 encryption.
 - Removed band steering in the AP property panel for Gen7 APs.

Switching

 - Added Isolate Network for L3 Switch networks.
 - Improved validation for creating L3 Static Routes.
 - Improved user experience when configuring L3 Switch Networks.

Client and Device pages

 - Added option to re-order UniFi Devices & Client tables.
 - Added TX retry % for clients.
 - Added TX retry columns to the Devices page.
 - Allow searching clients by 802.1X Identity on the Clients page.

Bugfixes

 - Fixed an issue where unidentified traffic wasn't included in the Traffic Statistics page "All Traffic".
 - Fixed an issue where Network Isolation was not being applied to some IPv6 Networks.
 - Fixed an issue where the OpenVPN client didn't list the server address from the connection.
 - Fixed the inability to create WAN2 on consoles with dual WAN after restoring backups from single WAN consoles.
 - Fixed the inability to restore backups during the setup wizard on Application Servers in rare cases.
 - Fixed page crashes when using the Europe/Kyiv time zone.
 - Fixed missing translation for some suspicious activity hits.
 - Fixed Admin Change Logs sometimes show IDs instead of change names.
 - Fixed sorting issues with the 2.4/5/6 GHz columns on the Device page.
 - Fixed inability to create more than 9 pre/post-authorization restrictions in Hotspot Manager.
 - Fixed incorrect static IP address shown for PPPoE WAN in Internet Source IP / NAT.

Known issues

 - OSPF Default route redistribution is ineffective, this will be fixed in UniFi OS 4.0.

8.1.127

Improvements

 - Added Tunnel IP to Route-Based IPsec Site-to-Site VPNs.
 - Added Dynamic option to Remote Networks for Route-Based IPsec Site-to-Site VPNs.
 - Use this option to dynamically learn routes over the VPN via OSPF.
 - Added option to disable DHCP Ping Conflict Detection on virtual networks. Requires a UniFi (Cloud) Gateway with version 4.0.1 or newer.
 - Pings are sent by default to determine if DHCP leased IP addresses are in use before allocation.
 - Optionally disable Ping Conflict Detection if DHCP allocation delays are encountered on large networks.
 - For smaller networks, it is recommended to keep Ping Conflict Detection enabled to prevent conflicts.
 - Added validation for IPv6 default static routes.
 - Improved application startup resiliency.
 - Improved user experience when changing WiFi Encryption settings.
 - Improved Device image loading.
 - Improved the user experience for configuring UBB and UBB-XG devices.
 - Improved U-LTE device registration.
 - Force auto Prefix Delegation ID for Gateways.
 - Prevent additional Network Isolation (ACL) entries if ACL rules limit is reached.
 - Prevent selecting L3 Switch networks for OSPF.
 - Renamed the Additional Routes option to Remote Client Networks for clients added to WireGuard Servers.
 - Improved validation of Remote Client Networks for WireGuard Server clients.
 - Prevent WireGuard Server subnet from overlapping with Remote Client Networks.

Firewall

 - Improved Firewall Rules user experience by enhancing visibility.
 - Predefined Rules now open in side panel.
 - Predefined Rules now show additional details such as ports, states, subnets and other criteria that is matched on.
 - Updated predefined Firewall Rule names.
 - Added descriptions to predefined Firewall Rules in side panel.
 - Improved user experience when configuring Traffic Rule directions.

Bugfixes

 - Fixed an issue where the Traffic Rules table is not updated after deleting a rule.
 - Fixed an issue where the ISP name was not updated after disabling a WAN port.
 - Fixed an issue where speed test results were showing undefined speeds in rare cases.
 - Fixed Fallback toggle for Policy-Based Routes not working as intended.
 - Fixed misplaced description labels on the Topology page when using the Safari browser.
 - Fixed the inability to edit Firewall Rules after re-ordering them.
 - Fixed an issue where the Voucher Printing option did not open.
 - Fixed an issue where Speed Limit data was lost when pausing/resuming Traffic Rules.
 - Fixed rare gateway configuration errors.
 - Fixed Radar Detections not appearing in System Logs.
 - Fixed the inability to adopt USP-Plug/Strip in rare cases.
 - Fixed an issue where Stripe Payment in Hotspot Portal failed.
 - Fixed missing Up Pkts on the Clients Page.

Additional information

 - Create a backup before upgrading your UniFi Network Application in the event any issues are encountered.
 - See the UniFi Network Server Help Center article for more information on self-hosting a server.
 - UniFi Network Application 7.5 and newer requires MongoDB 3.6 and Java 17.
 - Version 7.5 till 8.0 supports up to MongoDB 4.4.
 - Version 8.1 and newer supports up to MongoDB 7.0.
 - UniFi Network Application updates may cause your adopted devices to be re-provisioned.

UniFi Network Native Application for UniFi OS

A specific application version that is only compatible with the UDM, UDR, Express and UCG-Ultra (running UniFi OS 3.1.6 or newer).

 - The UniFi OS update uses the application version that is required for your console.
 - The manual update process via SSH requires you to use the compatible package. Incompatible packages will be rejected on installation.
 - Older UniFi OS versions (before UniFi OS 3.1.6) on the UDM and UDR still use regular UniFi Network Application for UniFi OS.

8.2.93

Improvements

 - Added support for BGP. Requires a UniFi (Cloud) Gateway with version 4.1 or newer.
 - Added support for Multi-Link Operation (MLO). Requires UniFi 7 Access Points with firmware version 7.1.3 or newer.
 - Added support for ACL Rules. Requires UniFi Switch with firmware version 7.0.50 or newer.
 - Added STP Priorities to the Topology page.
 - Added release notes for managed devices.
 - Added WiFi Broadcast filter in Radio Manager.
 - Added Native VLAN filter in Port Manager.
 - Added FEC (Forward error correction) setting to 25G capable ports in Port Manager.
 - This will appear only when using a fixed Link Speed.
 - Added warning message when Network subnet is not within a RFC1918 range.
 - Added link to best practices for Sonos devices.
 - Added progress bar for device updates.
 - Added Network and WiFi Broadcast filters to the Topology.
 - Added messaging for features that can cause performance degradation on the UniFi Express.
 - Added Firewall Rules to prevent access to the Shadow Mode Management link.
 - Improved RF scanning user experience.
 - Improved System Logs user experience.
 - Improved Port Manager user experience.
 - Improved Settings user experience.
 - Improved searching and filtering on the Clients page.
 - Improved Clients/Devices page side panel user experience.
 - Improved device authentication password validation.
 - Must contain a lowercase letter.
 - Must contain a capital letter.
 - Must contain a number.
 - Must be at least 12 characters long.
 - Improved MFA flow when enabling Early Access Release channels.
 - Improved DHCP range validation in Network settings.
 - Improved the user experience around OSPF.
 - Moved the Hotspot section to Insights.
 - Moved Statistics to Insights.
 - Removed the global IPv6 Support setting.
 - IPv6 support is enabled by default.
 - For setups that don't require IPv6, keep it disabled on individual LAN and WAN networks.
 - Renamed WiFi Scheduler to WiFi Blackout Scheduler.
 - Changed Networks section to Insights.
 - Updated the available channels per country for Access Points.

Bugfixes

 - Fixed log rotation issues on Windows setups.
 - Fixed the inability to use an external antenna with a U-LTE-Pro with empty APN fields.
 - Fixed an issue where the Link Speed setting is not retained during console setup.
 - Fixed Express adoption issues on Network Application Servers when using a Mesh connection.
 - Fixed Smart Subnet Detection not working properly on UniFi Native Consoles.
 - Fixed an issue where the Guest Portal landing page where not appearing if an unsupported customization option was configured.
 - Fixed an issue where Magic VLAN was not appearing on setups with USW-Ultra switches.
 - Fixed an issue where deleting multiple Virtual Networks can cause configuration issues on switch ports.
 - Fixed missing IPv6 WAN address when using SLAAC/DHCPv6-PD for DS-Lite.


To generate a diff of this commit:
cvs rdiff -u -r1.34 -r1.35 pkgsrc/net/unifi/Makefile
cvs rdiff -u -r1.17 -r1.18 pkgsrc/net/unifi/PLIST
cvs rdiff -u -r1.21 -r1.22 pkgsrc/net/unifi/distinfo
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/unifi/options.mk
cvs rdiff -u -r1.1 -r1.2 pkgsrc/net/unifi/files/unifi.sh

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffs are larger than 1MB and have been omitted