USG-PRO-4 v25.12-usg.2

Prebuilt OpenWrt images for the USG-PRO-4 (CN6120 / ubnt,usg-pro-4) with clean-room hardware flow offload (kmod-octeon-flowtable).

Two variants (prefixed in asset names):

• lean — offload + conntrack/tcpdump
• router — LuCI (HTTPS) + WireGuard/Tailscale + Proton2025 theme + mwan3/pbr/adblock/DoH + diagnostics

Packages (.apk / tarballs) match this kernel and are signed with the USG APK key.
After the Pages job finishes: https://halcycon.github.io/openwrt/apk/v25.12-usg.2/
(also apk/current/; public key at keys/usg-apk.pem). See docs/USG-PRO-4.md.

Device profile: ubnt_usg-pro-4. Enable flow_offloading + flow_offloading_hw, then run the WQE↔netdev port-map check (RJ45 + SFP).

Unofficial community images — flash at your own risk. Verify sha256sums-*.txt before flashing.

CI adapted from https://github.com/packerlschupfer/octeon-flowtable

USG-PRO-4 v25.12-usg.1

Prebuilt OpenWrt images for the USG-PRO-4 (CN6120 / ubnt,usg-pro-4) with clean-room hardware flow offload (kmod-octeon-flowtable).

Two variants (prefixed in asset names):

• lean — offload + conntrack/tcpdump
• router — lean + LuCI (HTTPS) + WireGuard

Packages (.apk / tarballs) match this kernel. After the Pages job finishes, apk feeds are at:
https://halcycon.github.io/openwrt/apk/v25.12-usg.1/
(also apk/current/). See docs/USG-PRO-4.md.

Device profile: ubnt_usg-pro-4. Enable flow_offloading + flow_offloading_hw, then run the WQE↔netdev port-map check (RJ45 + SFP).

Unofficial community images — flash at your own risk. Verify sha256sums-*.txt before flashing.

CI adapted from https://github.com/packerlschupfer/octeon-flowtable