Search changelog entries
| Component | Change |
|---|---|
| app | added health check for apps, which automatically rewrites the composed YAML; |
| app | clean the backup directory after container repull; |
| app | fixed element that was failing to start; |
| app | fixed potential port collisions between apps; |
| app | show DNS URL for app only if it has a reverse-proxy (additional fixes); |
| bgp | make remote.address parameter optional; |
| bridge | added local and static MAC synchronization for MLAG (additional fixes); |
| bridge | added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss) (additional fixes); |
| bridge | fixed performance regression in complex setups with vlan-filtering (introduced in v7.20); |
| bth | use separate Let's Encrypt certificate for file-share; |
| container | automatically stop/repull/start the container on repull or remote-image change; |
| device-mode | removed authorized-public-key-hash property; |
| dhcpv6-relay | fixed link-layer address inconsistency with the original link-layer address in relay-forward packets (additional fixes); |
| fetch | fixed fetch treating relative paths from redirects as hostnames; |
| health | added CPU temperature monitoring to L009 with ARM64; |
| ip | added reverse-proxy (additional fixes); |
| ipsec | improved aes256-ctr stability on L009; |
| isis | improved stability and fixed a small memory leak; |
| l3hw | fixed missing VLAN counters on reboot (introduced in v7.21); |
| l3hw | improved system stability when enabling VLAN offloading under active traffic (introduced in v7.21); |
| leds | fixed WiFi LEDs on hAP AX S (introduced in v7.22rc1); |
| poe-out | firmware update for CRS354-48P-4S+2Q+ (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed controller-error for CRS354-48P-4S+2Q+; |
| route | do not set blackhole flag for synthetic routes; |
| route | fixed connected routes sometimes not working (introduced in v7.22rc1); |
| route | removed preset rules and use routing/settings policy-rules (introduced in v7.22beta1); |
| routerboard | allow changing /system/routerboard/settings via Netinstall or FlashFig using a "mode script" (additional fixes); |
| system | improved upgrade service stability when the server is unreachable; |
| user | properly apply login delay (introduced in v7.20); |
| wifi | improved stability of interfaces in station mode during roaming; |
| wifi | improved support for 802.11be access points (additional fixes); |
| winbox | added missing route flags; |
| winbox | added route ISIS tab; |
| winbox | show MPLS tab only to relevant routes; |
| Component | Change |
|---|---|
| app | changed ui-url parameter for Smokeping and Nextcloud; |
| app | fixed CHR reverse proxy entry using the wrong IP address (introduced in v7.22beta3); |
| app | fixed issue with Cinny not being able to create a root-dir; |
| bridge | added local and static MAC synchronization for MLAG (additional fixes); |
| certificate | added support for multiple ACME certificates (additional fixes); |
| container | fixed issue where the container may not start after upgrading if root-dir was not set; |
| container | improved error message if container fails to start; |
| defconf | fixed L009 configuration (introduced in v7.21); |
| iot | added Bluetooth extended scanning and 1M/2M PHY support for the RB924i KNOT devices; |
| iot | added Bluetooth extended scanning, advertising, and 1M/2M/CODED PHY support for EC25 KNOT devices; |
| ipsec | removed modp8192 proposal on MIPS architectures; |
| l2tp | improved system stability on TILE architecture; |
| l3hw | improved system stability on device shutdown/reboot; |
| lte | added subscriber number to monitor command for MBIM modems (additional fixes); |
| lte | fixed crash on LTE passthrough interface deactivation; |
| lte | fixed firmware upgrade for EC25-EU&KNe (introduced in v7.22rc1); |
| wifi | improved support for 802.11be access points (additional fixes); |
| winbox | added local table, mangle action and VRF setting under "Routing/Rule" menu; |
| winbox | fixed empty "Realm Raw" value processing and value inheritance from configuration template (requires WinBox 4); |
| Component | Change |
|---|---|
| bridge | fixed dhcp-snooping incorrectly disabling HW offloading on QCA8337, Atheros8327 switch chips (introduced in v7.20); |
| certificate | fixed initial certificate creation using SCEP (introduced in v7.21); |
| console | improved service stability when processing files over CLI; |
| dhcpv4-server | append "s" after lease-time value in setup command; |
| gps | fixed port configuration for CubeG-5ac60ay; |
| hotspot | rename totp-secret to otp-secret; |
| ipv6 | do not invalidate router if RA without included prefix is received (introduced in v7.21); |
| ipv6 | fixed "on-link" and "autonomous" flag detection (introduced in v7.21); |
| ipv6 | invalidate router only when router lifetime expires (introduced in v7.21); |
| lte | fixed eSIM profile switching on ATL 5G R16; |
| lte | improved notification handling during firmware update for Quectel modems; |
| poe-out | firmware update for hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed rare false overload triggers on hEX PoE, OmniTIK 5 PoE ac, PowerBox Pro; |
| sfp | fixed sfp-ignore-rx-loss parameter for hEX PoE; |
| Component | Change |
|---|---|
| app | enable swap on all devices that use apps to help with performance; |
| app | show app URL only when it is running (additional fixes); |
| app | show DNS URL for app only if it has a reverse-proxy (additional fixes); |
| bridge | added local and static MAC synchronization for MLAG (additional fixes); |
| bridge | added RA guard feature (additional fixes); |
| bridge | fixed dhcp-snooping incorrectly disabling HW offloading on QCA8337, Atheros8327 switch chips (introduced in v7.20); |
| bridge | improved VRRP MAC address handling (additional fixes); |
| certificate | added support for multiple ACME certificates (additional fixes); |
| ethernet | increased Rx buffer size for devices with Alpine CPUs (reduces packet rx-drop in certain cases); |
| gps | fixed port configuration for CubeG-5ac60ay; |
| hotspot | allow WireGuard interface type (additional fixes); |
| hotspot | check validity of base32 for otp-secret; |
| hotspot | rename totp-secret to otp-secret; |
| hotspot | set sensitive flag on /ip/hotspot/user otp-secret; |
| ike1 | added ChaCha20-Poly1305 ESP encryption support; |
| ike1,ike2 | improved netlink update handling; |
| iot | added modbus delay using interframe-gap setting; |
| ip | added reverse-proxy (additional fixes); |
| ip-service | properly disable IP/Service on manual disable; |
| ipv6 | fixed "on-link" and "autonomous" flag detection (introduced in v7.21); |
| ppp | added initial support for BG770A-GL modem firmware update; |
| route | fixed routes when scope was less than 10; |
| sfp | fixed sfp-ignore-rx-loss parameter for RB960PGS; |
| snmp | report maximum "ifSpeed" value if out of bounds; |
| wifi | fixed an issue preventing WiFi interfaces from getting correct bridge vlan-id (introduced in v7.22beta1); |
| wifi | improved support for 802.11be access points (additional fixes); |
| wireguard | fixed private key generation when creating a WireGuard interface; |
| x86 | added JME network driver (additional fixes); |
| Component | Change |
|---|---|
| bgp | fixed route refresh subcode 0 warning; |
| bgp | implement revised input error handling per RFC 7606; |
| bridge | fixed dynamic switch-cpu VLAN creation (introduced in v7.20.7); |
| container | fixed nftables/iptables not working with "Message too long" error; |
| health | fixed fan and PSU state logging for MIPSBE devices; |
| poe-out | firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); |
| poe-out | fixed PSU state recovery upon unplug/replug on CRS320; |
| ppp | added initial support for BG770A-GL modem firmware update; |
| route | prevent creating routing tables with the same name; |
| routing-filter | fixed num-set matcher; |
| sfp | fixed sfp-ignore-rx-loss parameter for RB760iGS; |
| snmp | fixed handling of the script "dont-require-permissions" parameter when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput; |
| snmp | fixed permission error reporting when executing scripts using MIKROTIK-MIB::mtxrScriptRunOutput (introduced in v7.20.7); |
| snmp | fixed script "run-count" update after execution; |
| system | fixed rare partial loss of RouterOS configuration; |
| user-manager | properly release database backup file after backup creation; |
| w60g | fixed possible memory leak when an interface is disabled; |
| zerotier | improved route removal; |