Choosing the Right Antenna: What Actually Matters
February 16, 2026
Modern networks are no longer built around one clean internet connection.
They are built with Starlink, 5G, OneWeb, broadband, eSIM, remote users, mobile deployments, and cloud management all working together.
That flexibility is powerful, but it also creates new challenges:
high latency, metered data, satellite visibility, secure authentication, remote access, and the need to manage everything without turning every deployment into a science project.
The latest firmware release isn’t just a standard refresh; it’s Peplink giving us a better toolkit to handle that mess. We’re moving away from treating every WAN as a "dumb pipe" and starting to manage them based on how they actually behave in the real world.
SpeedFusion Boost: Crushing the TCP Performance Ceiling
If you’re using Starlink or any high-latency connection, standard TCP often throttles itself because of the delay in acknowledgments. You might have a massive pipe, but a single session feels slow.
SpeedFusion Boost isn't just a "Starlink feature", it works on 5G and fiber too. It essentially "smooths out" that latency so your single-session throughput actually hits the speeds you’re paying for. If you’ve been struggling with "slow" speeds on a "fast" Starlink dish, this is the fix that closes the efficiency gap.
FIPS 140-2 is Now Permanent
In the past, if you needed government-grade encryption, you had to jump through a lot of hoops with licensing. With this release, Peplink is making FIPS 140-2 support a permanent, built-in feature in the local UI for eligible devices.
The technical "why" here is simple: you don't need an active care plan to keep your encryption working. Once it’s on, it stays on. For those of you working in public safety or government sectors, this removes a massive administrative headache and ensures your cryptographic standards stay active regardless of your subscription status.
*Note: Permanent FIPS is available on most enterprise models (Balance, MAX, X-Series), but double-check your SKU, as some entry-level or legacy hardware like the Balance 20X or B One series may be excluded from this specific security branch.
WireGuard for Users, SpeedFusion for Sites
We finally have native WireGuard support for Remote User Access. It’s been one of the most requested features from the community for the last couple of years.The distinction here matters:
- Use WireGuard for your remote staff. It’s lightweight, fast, and easy to set up on a laptop or phone.
- Use SpeedFusion for your site-to-site tunnels. You still need SpeedFusion’s packet-level intelligence for bonding and hot failover between routers.
Orbit WAN and Management-Only Mode
Satellite isn't just a backup anymore; for many of us, it’s the primary. Peplink is leaning into this with native recognition for OneWeb and smarter Starlink management.
The "Management-Only" mode is a massive practical win. When your Starlink is restricted because of data overages, the router can automatically preserve that connection for management traffic only.
This ensures you can still reach the device via InControl to fix the policy without fighting your users for every kilobyte of data.
RadSec: Encrypting the Handshake
If you’re running RADIUS for authentication over a WAN you don't control, your credentials could be exposed. Firmware 8.6 adds RadSec (RADIUS over TLS).
Technically, this just wraps your authentication in an encrypted tunnel, making it essential for distributed hotspots and campus networks where you’re sending sensitive auth data over untrusted paths.
Smaller Improvements That Still Matter
This update includes a long list of additional improvements and fixes.
A few worth noting include:
- Jumbo Frame support for selected models
- Firewall log entries with matching rule names
- Improved OpenVPN detection in DPI
- WAN failover event logs
- WAN names shown in Ethernet Port Details and API
- Support for up to 1000 SpeedFusion peers on Balance 1350 EC
- GPIO-triggered factory reset support on selected models
- PPSK names shown in the wireless client list
- Stronger certificate and key requirements
Firmware 8.6.0 Q & A
Key Takeaways
- SpeedFusion Boost solves the throughput "ceiling" caused by high-latency connections like Starlink.
- FIPS 140-2 is now a permanent part of the local UI for eligible devices—no recurring licenses required for encryption.
- WireGuard is native and free for remote user VPNs.
- Management-Only Mode protects your ability to troubleshoot Starlink during data overage restrictions.
- RadSec ensures your RADIUS authentication stays encrypted even when you're on an untrusted WAN.
What’s next?
The 8.6 beta is live. Don't rush this into production yet; put it on a lab device first and test out the SpeedFusion Boost to see how it handles your specific WAN mix. You can grab the firmware directly through InControl or the Peplink Open Beta Program.
