Infix v26.06.0

Note

Noteworthy changes and additions in this release:

🌐 Web Interface: Infix gets its first-ever web interface! Browse live status and a full operational tree, handle common tasks from curated configuration pages, and drop into a YANG tree editor for everything else. A maintenance section covers firmware upgrade, backup & restore, and more.

📶 Wi-Fi Roaming & Mesh: Access points sharing an SSID can hand clients off seamlessly with 802.11k/v/r, form a cable-free 802.11s mesh backhaul, and steer dual-band clients onto the faster 5/6 GHz band.

🗓️ System Scheduling: Reusable time schedules based on ietf-schedule (RFC 9922) let features like scheduled reboot and software update checks run on a recurring, cron-style calendar.

Changes

• Upgrade Linux kernel to 6.18.37 (LTS)
• Upgrade Buildroot to 2025.02.15 (LTS)
• Add basic web interface: static status pages and a tree view of operational status. Curated configuration pages for some common tasks and a YANG tree editor for the rest. Also includes a maintenance section for firmware upgrade, backup & restore, and more
• Add Wi-Fi roaming for fast, seamless hand-off between access points that share an SSID: 802.11k, 802.11v and 802.11r (over-the-air FT). See the Wi-Fi guide for details
• Add Wi-Fi 802.11s mesh support, letting access points form a wireless backhaul between each other without cabling
• Add band steering for dual-band access points, nudging dual-band clients onto the faster 5/6 GHz band
• Add legacy-rates option to re-enable 802.11b rates on 2.4 GHz for old IoT devices (disabled by default)
• Add system scheduling based on ietf-schedule (RFC 9922), using the iCalendar recurrence grouping pruned to cron-expressible rules. Schedules are reusable time-specs; features (scheduled-reboot, software/check-update) trigger off them via a schedule reference
• Configuring multiple BSS (more than one SSID) on a single Wi-Fi radio now requires an explicitly configured MAC address per BSS
• New operational advertised-pmd-types leaf-list on each Ethernet interface, exposing the link modes currently advertised, to compare against the supported-pmd-types introduced in v26.05.0
• Release assets no longer ship separate .sha256 checksum files; the download page now publishes a SHA-256 checksum for each asset directly

Fixes

• Fix #941: a VETH pair can now connect two containers directly, with both ends assigned to containers.
• Enabling IP masquerading in the firewall no longer enables IP forwarding on all interfaces. This has been an issue ever since the firewall support was introduced in v25.10.0
• Fix file permission regression in /cfg/startup-config.cfg, causing the default admin user no permission to read or write the file from shell
• Fix admin url shown for HTTP/HTTPS links in https://network.local browser, used pre-conflict resolution hostname.local, instead of hostname-2.local
• Fix unreadable per-port temperature sensor names in show hardware on Marvell based switches: each sensor is now named after the front-panel port it serves (e.g. e1, e2) instead of a raw device-tree path. show system also reports a representative SoC temperature on CN913x platforms
• Fix missing contact and location settings in operational status; the values were configurable but never returned on RESTCONF/NETCONF reads
• Fix spurious YANG validation warnings, for NTP and WireGuard configuration, emitted on every NETCONF session and schema load

Tip

Try Infix in GNS3! See the blog post for details https://www.kernelkit.org/posts/infix-in-gns3/