Updated 2026-10-28. Device: VBNT-K at .69, firmware 19.4.1051-3401200.
Kernel: 4.1.52 SMP preempt mod_unload ARMv7. Kernel package: git_gitolite_openwrt__openwrt_broadcom_bcm963xx_5_02L_07_git-tch_bcm5_02L_07patch1_wlan19_1_1p2-1-f4e97ee0656c3a247868bb0a3f9c7e55.
14 functional passes; 2 load/unload and namespace smoke passes; 32 busy stock modules left unchanged; 1 replacement payloads checked offline only. A smoke pass does not establish full functionality. Each result applies to the exact module SHA-256 and this firmware ABI.
Corrected Zyxel-only QoS drop-statistic and NAT range extensions absent from Technicolor firmware.
The original HFSC payload warned under traffic and pinned a test namespace; a controlled reboot restored stock modules.
Corrected HFSC, flow and REDIRECT passed traffic tests. Their filenames and version 4.1.52-1 are retained; payload and IPK checksums changed.
Conntrack revision 4.1.52-2 removes SDK-only Altibox UDP timeout and proc hooks.
Its original revision required two symbols absent from the firmware. The corrected payload passes offline symbol checks;
it has not been loaded or functionally tested. Its previous candidate and busy test history remain in the evidence.
xt_nat is withheld. SSH was lost during removal of the stock module, before the new candidate loaded; the modem returned with a different boot ID. The cause is unresolved and the removal will not be repeated. The untested candidate is excluded from the installable feed. The final validation session retained its boot ID and initial taint.
WireGuard passed isolated two-peer handshake and encrypted traffic. SPU passed known-answer and ESP traffic tests with BLOG offload disabled; this does not validate BLOG offload, sustained throughput or third-party client interoperability. Busy conntrack, NAT core and firewall modules were not replaced or runtime validated.
Tests load raw IPK payloads from /tmp and use disposable namespaces. Original modules and parameters are restored; no test IPK is installed, no boot autoload is added, and persistent configuration is unchanged. Manual IPKs write modules to persistent storage when installed: these results do not validate persistent installation. Existing package architecture/firmware guards remain; raw tests do not prove compatibility with every 4.1.52 firmware.
| Module | Validation | Notes | Module SHA-256 | Download |
|---|---|---|---|---|
| act_connmark | Functional test passed | 749c6670032e413ca0f1e0cd925e5134dbeddfe731e6099fd911e13055e3bd21 | Manual IPK | |
| act_skbedit | Functional test passed | 6f7c40aabb7c8c61b24694c249dfd83738e43cca6d45d31e3a7f0d7054437aed | Manual IPK | |
| bcmspu | Functional test passed | Known-answer/tampered-tag tests and SHA1/SHA256 ESP traffic passed; BLOG offload=0. Sustained load and client interoperability remain untested. | 0b743d61ae454e20d2a9a9a3099c9be5f85c7e495773aad4d1d137ab9ac42cd7 | Manual IPK |
| cdc_ether | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. Installed file matches this payload, but it is referenced and no USB traffic test was performed. | 5c424ae82a147d9d0d4dc3e569b3dbdf9d92549cc409e7151ce74ff7b82eb3ab | Manual IPK |
| cls_flow | Functional test passed | Corrected QoS/NAT ABI; isolated traffic test and stock restoration passed. | 5cdfda5f934fd31a0e1352c2eaae4a752f9e0ef9a9937334413a2b7b08ffd2d1 | Manual IPK |
| em_u32 | Functional test passed | bfff4029bb01fc48baa538b2befb81474b3fcc3c598e45989f63cf720a61a735 | Manual IPK | |
| ip6_tables | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 59deabe2e32a9814bad4f05d95ce022f0949acad6386f62dd0388971a2e90caf | Manual IPK |
| ip6t_REJECT | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | bb4a41ab3d4c2d38e2219267b5c825beba93f8c004c3704c49451ff36800e53f | Manual IPK |
| ip6table_filter | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | b86df50571fd2c33debcc209a98ae083683b40013dafe830667a1c945b77d7a8 | Manual IPK |
| ip6table_mangle | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 469dc4a3d37769b910b3725a93e6f78a87447657ea8abb4b9b16efbc972a8a45 | Manual IPK |
| ip_tables | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 7a42cf979d36585e164840d2b05305c93ec2088432a7e2355eff350bcb527177 | Manual IPK |
| ipt_MASQUERADE | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | ce6c951398763b9eacbd5b9aea83f426bd4e0aa4db1fcce6ff881801002d6a0a | Manual IPK |
| ipt_REJECT | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 6d44501798d2eb99ab5210bc96bd394f28a0adfd9c990861e5357414f8d5f992 | Manual IPK |
| iptable_filter | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 47df899ad6f2ddedaae5d4b63f540a9100f773b4017c5c3c11e0bddf2464634e | Manual IPK |
| iptable_mangle | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 4f0e951b39b1d57cf00ab8879d1199f2ad1138e1a518cce7b133e121ec9415dd | Manual IPK |
| iptable_nat | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 44929bfca204fb9295b05be7081b32bfd46c6f2192594a3ab603974fd89914cc | Manual IPK |
| nf_conntrack | Offline symbols checked; not runtime validated | Revision 2 removes SDK-only Altibox UDP/proc hooks absent from the original firmware. Original kernel and stock modules resolve every strong import. This replacement payload was not loaded or functionally tested; the historical busy observation applies to the previous candidate. | 3af7a2779f0e050acd78e50a4e7978e27ebed7fa101f897045c80483ddc0f179 | Manual IPK |
| nf_conntrack_ipv4 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 702ee1fc361231b1705dbe4a30df5b20c3cefed7159a031db2b4344ecc3dac74 | Manual IPK |
| nf_conntrack_ipv6 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 3730594e815a44e4826e3a8beed605dc4abe9a63b6dd81779ff1125cc96b631a | Manual IPK |
| nf_defrag_ipv4 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 20c2933c22e13292fb924b87a7fcf9479e378c561bc5e85684a6e6200cdf57a3 | Manual IPK |
| nf_defrag_ipv6 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | bc58f3d8cabcb4faa64b1c9bee9eb50be88254c0d5b8c2ee41d4b514b786a126 | Manual IPK |
| nf_log_common | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 3f10d13463f89cc7beeb3fd6672a56b85d4b21338e82314387f4077b1ef7b749 | Manual IPK |
| nf_log_ipv4 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | ec984d6564c3d5ecafa89cb8ae372aec9d7f640ece7c48a5ba3d5a42d0a3e860 | Manual IPK |
| nf_log_ipv6 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | f6b25fa8b8e812e1f7847eb528571aa5a2533f108248c8b1b6d32c2e0aadc447 | Manual IPK |
| nf_nat | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | abd6c5a11a5fdd54604e405f0195ab5edcdc7695bd8adc92b4734cc86c5c9b3b | Manual IPK |
| nf_nat_ipv4 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 3252998a185e8691c39d06d9067e488657f0f82c24b45586052591e55ddb40be | Manual IPK |
| nf_nat_masquerade_ipv4 | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 1932af330fec75aabf97a9012133954aa7d39e66f7396eb54855ef3a7bcbaa85 | Manual IPK |
| nf_nat_redirect | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | ec06909ffa087b05c91ae87148681f862b78b5d14736c027660a1fc44a37eb7a | Manual IPK |
| rndis_host | Load/unload + namespace only | USB device traffic was not exercised; load/unload only. | 56517d64a7d159602730d25c14637d17a51b33910a6fea3ff9f35681b085161e | Manual IPK |
| sch_hfsc | Functional test passed | Corrected QoS/NAT ABI; isolated traffic test and stock restoration passed. | 351b23130238d71053f748cdca6455f96896cbddef1ce187c9fb0db315169ad8 | Manual IPK |
| tun | Functional test passed | TUN interface creation, UDP injection and ICMP reply readback passed. | 374b8399951a4fa75a0b9c68b6eced9d064cc442d3150d2210d75623c275354e | Manual IPK |
| wireguard | Functional test passed | Two isolated peers: handshake and 5/5 encrypted pings each way, payload size 1000 bytes. | 98e392edb92a574444c0555c9576f6ded0041421c938d0a4921789836c46e6e5 | Manual IPK |
| xt_CT | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | c5236960ec4a46320e917f953dd5bb45005d8262bccbdaf8eda96df5d7022300 | Manual IPK |
| xt_LOG | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 86c60326d1beafc5acaf07501e08a94cb769bab24287fac47b7a66ba1b6a7918 | Manual IPK |
| xt_REDIRECT | Functional test passed | Corrected QoS/NAT ABI; isolated traffic test and stock restoration passed. | 415969570ac982f6c795d9272f5a516f82d52f1a9b30b7e8008aab18a237b29b | Manual IPK |
| xt_TCPMSS | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | dd002c312068c0796d6d86305d181c77310a4e8309ace3af8b1a7c3ec02e391d | Manual IPK |
| xt_comment | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 2bdaca681895736b3fbcd79b911d3c2b7a77cb77bcac5f3df87058be4c51a1ed | Manual IPK |
| xt_connbytes | Functional test passed | 61cfaf8670d969806fee319a51e8e5cdc1a463b68b808aa1c709a830d4014d8c | Manual IPK | |
| xt_connlimit | Functional test passed | 47940f8dc6ca232e6fb0ee3b0d8cbf97150a9874e96a7ac92a3d15d68891bf4d | Manual IPK | |
| xt_connmark | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 3aedc3236f1f91b3d3cfae3cb1f592d8a96b434d17f928bf85a352107baffb0f | Manual IPK |
| xt_conntrack | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | decbbe761d5e76f61226fdb58132aba522a6d80cb1000da56a9aace09c3f0f9f | Manual IPK |
| xt_helper | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 56da827f712c0d62ce65351002627161e3fce38ec8953bed9bdc57ebfa9fda28 | Manual IPK |
| xt_limit | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | f4d72f09e581e96fb9c02ece642f13b1479d49b868dbcc57d22cfa097d46b6ea | Manual IPK |
| xt_mac | Functional test passed | b6adac404212a07e17b7ce49efcb87306469f1e9b0613a27f7bf79ad4f555514 | Manual IPK | |
| xt_mark | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | ab296278a554cc565067a7eea14035e760eae4e2cc432eeb940ed0dd2efb3c6b | Manual IPK |
| xt_multiport | Not substituted: stock module in use | Stock module in use; candidate was not substituted or runtime validated. | 4b823082b8f47dd58640d3c644d56d9bc7ec896a3891483485bc8ee5eaad0b7f | Manual IPK |
| xt_nat | WITHHELD: stock unload caused reboot; candidate untested | Excluded from the installable feed. SSH was lost while removing the stock module, before loading this candidate; subsequent boot ID changed. Do not repeat stock removal. Candidate runtime validation remains incomplete. | c8b5b14a62a12cfea048f4aae817d6ed5c716cfd131512599a889e29103bc4c4 | Withheld from installable feed |
| xt_recent | Functional test passed | 05920fe02816c5a0cd6a73c3bc0974e2d8d4fec50faf0764f2267a0c55499c9b | Manual IPK | |
| xt_state | Load/unload + namespace only | The iptables state userspace extension is absent; traffic matching is untested. | a3da8256b4715cc308f05d3796da81804680c8845ffc04ee7e8a448d40ff38a4 | Manual IPK |
| xt_time | Functional test passed | ccb593576f9bb609172cf63656b5b57fc5108008c2845e437d742f860fc27d38 | Manual IPK |