A stable release of the interface for simplifying network settings configuration is available — NetworkManager 1.38. Plugins for supporting VPN, OpenConnect, PPTP, OpenVPN, and OpenSWAN are being developed within their own development cycles.
Key innovations in NetworkManager 1.38:
- The logic for selecting the source address has been revised when multiple addresses are present on the network interface. (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community.The rules for prioritizing IPv6 addresses have been aligned with those previously applied to IPv4. For example, when multiple addresses with the same metrics exist on the network interface, the address specified first will have a higher priority (previously, the last address was chosen for IPv6). Statistically assigned addresses always have higher priority compared to automatically configured ones.
- When configuring Wi-Fi, the use of frequencies that are not permitted in the user's country has been discontinued (previously, all frequencies supported by the hardware were displayed in the list, but attempts to use unlicensed frequencies were blocked at the kernel level).
- In the implementation of the access point, random selection of frequency bands (channel numbers) has been ensured to reduce the likelihood of collisions. The option to enable the unsupported SAE mode (WPA3 Personal) has been removed.
- The capabilities of the 'nmcli radio' command, used to disable transmitters (putting them in 'flight mode'), have been expanded. When run without arguments, the command outputs a list of available radio devices in the system, such as wireless modems or Wi-Fi adapters. In the new version, when displaying rfkill settings, explicit indication of the absence of physical wireless hardware is provided.
- A warning about the use of the WEP algorithm, which has security issues and is disabled by some distributions in the wpa_supplicant package, has been added to nmcli. When building wpa_supplicant without WEP support, relevant diagnostic information is provided.
- The reliability of network connection checks has been increased, and correct handling of the situation when multiple addresses are returned during the resolution of the checked host name has been ensured.
- The command "nmcli connection" has been updated with the "migrate" operation to simplify the transition from the deprecated ifcfg configuration format (located at /etc/sysconfig/network-scripts/ifcfg-*, used in Fedora Linux) to the keyfile-based format.
- Support for routes of type "throw" has been added.
- A null cryptographic backend has been introduced, which performs no actions when handling certificates for 802.1x profiles.
- Udev rules have been implemented to manage virtual ethernet adapters (Veth), allowing for better network control within LXD containers.
- Hostnames acquired through DHCP are now truncated at the first dot, and excessively long names are shortened to 64 characters.
Source: opennet.ru
