Releases: Ozark-Connect/NetworkOptimizer
v1.1.2
Some nice quality-of-life improvements in this one.
What's New
- Wireless rate snapshots - Speed tests now capture your WiFi link rates (TX/RX) at multiple times during a test. Handy for tracking down whether that slow test was the network or just shifts in MCS.
- DeviceBridge support - Bridge devices now show up properly in topology views and dashboard device list.
Fixes
- Inter-VLAN isolation audit - Now correctly checks inbound access rules. Previously could miss some isolation gaps depending on rule direction.
- USW-16-PoE excluded from speed tests - These switches have MIPS arch so no straightforward (or performant) iperf3 support.
- CloudKey display name - Fixed the extra space that was bugging me.
- UPnP notes panel - Added debounce and proper timer cleanup. No more UI jank when rapidly switching views.
- Non-network devices excluded - Things like UNAS, UPS, etc no longer show up as speed test targets. I am working to see which of these devices we can deploy iperf3 to cleanly, so they may be included eventually.
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dv1.1.1
What's New
See v1.1.0 for the latest features including Config Optimizer - AP pinning search, VLAN trunk tagging eval, and Port Profile suggestions
Improvements
This release focuses on UI/UX polish with significant layout improvements:
- Expand/collapse animations - Fixed height limitation (was capped at 2000px) using CSS grid for true auto-height
- Mobile layout overhaul - Improved spacing, centering, and responsiveness across all pages
- SQM page - Collapsible WAN configuration panels, optimized live status cards for mobile
- Cellular stats - Better mobile layout for signal metrics
- CSS cleanup - Removed unused styles, added semantic surface color variables
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dv1.1.0
New Feature!
Config Optimizer
So you've got your UniFi network running. It works, mostly. But every now and then something weird happens: a laptop won't connect, a device can't reach a server, or you're spending way too much time clicking through port settings one by one. Sound familiar?
Config Optimizer is a new feature that looks at your network configuration and finds the stuff that's easy to miss. It's not going to redesign your network for you, but it will catch the inconsistencies and cleanup opportunities that accumulate over time.
Checks included so far:
AP Lock Detection. Remember that time you locked a device to a specific access point for troubleshooting and forgot to undo it? Config Optimizer finds mobile devices that shouldn't be pinned, so they can roam properly again. It even checks your offline clients, which means those configuration mistakes from six months ago don't just sit there forever.
Trunk Consistency Analysis. Mismatched VLAN configurations on trunk ports are responsible for more "why can't this talk to that" troubleshooting sessions than I'd like to admit. Config Optimizer compares both sides of every trunk link and flags discrepancies before they turn into a support ticket.
Ethernet Port Profile Suggestions. If you're managing switch ports individually across a decent-sized deployment... you're doing it the hard way. Config Optimizer identifies groups of ports with identical configurations and suggests creating or applying UniFi Ethernet Port Profiles. It's aware of PoE requirements, link speeds (w/ or w/o auto-negotiation), so the suggestions are actually usable (not just theoretically correct).
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dv1.0.13
Changes
- Fix false positive "unused port" audit warnings from corrupted timestamps (#154)
- Fix wired AP backhaul incorrectly flagged as wireless
- Fix Windows iperf3 fallback path for local availability check
- Faster speed test responses (background WiFi enrichment)
- Improved SQM reliability (longer timeouts, double refresh)
- UI polish: SVG icons, combined tooltips, CSS fixes
Installation
Windows: Download the MSI installer below
Docker:
docker compose pull && docker compose up -dv1.0.12
Patch on v1.0.11: Mobile Layout Fixes
- Fix notes field wrapping on mobile speed test results
- Tighter padding on path-max-speed and grade badges for mobile
- Center path summary elements (max speed + grades) on mobile
New Features
- Speed test search/filter - Filter results by device name, IP, network, or date range
- Notes on speed tests - Add notes to results with auto-save
Speed Test Improvements
- Direction-aware efficiency - Accurate efficiency calculation for asymmetric Wi-Fi/mesh links using TX/RX rates
- Colored speed values - Blue (From Device) and Green (To Device) for better visual distinction
- Smart overhead factors - 25% for client Wi-Fi, 55% for mesh backhaul (only when bottleneck), 6% for WAN/wired
- Enhanced tooltips - Show link speed with overhead (e.g., "987 of 1440 Mbps link (~25% overhead)")
Installation
Windows: Download the MSI installer below
- SHA256 (MSI):
d6eb2a2165d0977caf8957cf0b16d63abe579edec96f733f02c3a835353c9b28
Docker:
docker compose pull && docker compose up -dv1.0.11
New Features
- Speed test search/filter - Filter results by device name, IP, network, or date range
- Notes on speed tests - Add notes to results with auto-save
Speed Test Improvements
- Direction-aware efficiency - Accurate efficiency calculation for asymmetric Wi-Fi/mesh links using TX/RX rates
- Colored speed values - Blue (From Device) and Green (To Device) for better visual distinction
- Smart overhead factors - 25% for client Wi-Fi, 55% for mesh backhaul (only when bottleneck), 6% for WAN/wired
- Enhanced tooltips - Show link speed with overhead (e.g., "987 of 1440 Mbps link (~25% overhead)")
Installation
Windows: Download the MSI installer below
- SHA256 (MSI):
0218afe06934dbd5234c6c98aa8af59c563b26d1ef4b8a46eab950ff8e31978f
Docker:
docker compose pull && docker compose up -dv1.0.10
What's Changed
Bug Fixes
- Fix path analysis for UX/UX7 connected clients - Speed test path analysis now works correctly for clients connected through UniFi UX or UX7 devices (#141)
- Fix macOS installer health check - Installer health check now completes properly
Improvements
- Port forward audit scoring - Increased severity for unrestricted privileged port forwards (ports < 1024)
- Port forward recommendations - Clearer guidance matching UniFi UI terminology
v1.0.9
Security Audit Improvements
- DMZ network handling - DMZ networks now correctly report external DNS configuration as informational rather than flagging it as a security issue, since DMZ networks are intentionally isolated from the gateway
- External DNS bypass detection - Networks configured to use external public DNS (like Cloudflare or Google DNS) that bypass local DNS filtering are now detected and reported
- VLAN isolation exception visibility - Firewall rules that create exceptions to VLAN isolation are now clearly displayed with "Source → Destination" format for easier identification
Bug Fixes
- Fixed false positives - App-based firewall rules (like HTTP/HTTPS) are no longer incorrectly flagged as overlapping with unrelated rules
- Improved rule detection - Firewall rules using IP/CIDR source matching are now properly detected for isolation and internet access checks
- IPv6 fix - Fixed a bug in IPv6 CIDR subnet matching
v1.0.8
Speed Test Improvements
- Better path analysis reliability - Network path tracing now automatically retries when a device isn't immediately found, improving success rate for newly-connected clients
- Fixed bottleneck display - Wired client bottlenecks now correctly show the switch port number
v1.0.7
What's New
Firewall Rule Analysis Improvements
Management Network Checks
- Management network Info checks (FW-MGMT-001/002/004) now detect internet blocking via firewall rules, not just the network config toggle
- New INTERNET_BLOCK_BYPASSED audit detects allow rules that circumvent internet restrictions on networks with internet disabled
- 5G/LTE modem registration rules can match by IP, MAC, network, or ANY source
- NTP access validation uses UDP port 123 (NTP uses IPs, not DNS names)
App-Based Firewall Rules
- Overlap detection now handles rules with
AppIdsandAppCategoryIds(DPI-based rules) - Scope scoring correctly identifies APP rules as medium-broad and APP_CATEGORY as broad
- Shadowed rule detection ("Ineffective Allow Rule") works for app-based allow rules preceded by broad deny rules
Bug Fixes
- 5G/LTE device detection checks all devices, not just those with port tables