Version: 7.25beta3
Development270 changelog entries across 76 component(s)
2026-Sep-02 (2 weeks ago)
| Component | Change |
|---|---|
| app | add the networkRouterIP variable for container apps; |
| app | fix CHR apps getting stuck on "starting" on slower boards; |
| app | show an error when an app variable cannot be resolved; |
| app | update the environment variables of the docker-with-komodo app; |
| arm64 | improved general system stability; |
| bgp | add the always-compare-med setting; |
| bgp | fix BGP link-local nexthops unreachable over a VRF and a crash when disabling an unnumbered connection; |
| bgp | fix BGP unnumbered connections within a VRF; |
| bgp | include the VNI number in outgoing EVPN routes; |
| bgp | log failed BGP connection attempts; |
| bridge | add dynamic ARP inspection; |
| bridge | add IP source guard; |
| bridge | add mlag-lacp-fallback and mlag-init-delay settings for MLAG; |
| bridge | fix a false "already added as bridge port" error; |
| bridge | fix an MLAG peer getting stuck in the disabled state after config changes; |
| bridge | fix bridge ports not forwarding; |
| bridge | fix MLAG failing to establish after bridge config changes; |
| bridge | fix MLAG MAC handling when used with VRRP; |
| bridge | fix unexpected MAC aging in MLAG after a MAC move; |
| bridge | fix VRRP MAC behavior in MLAG setups; |
| bridge | improve stability; |
| bridge | make MVRP work with MLAG dual bonds; |
| bridge | rename the IGMP last-member-interval property to last-member-query-interval; |
| btest | improve stability; |
| bth | add resumable file uploads; |
| bth | allow file sharing over direct LAN connections; |
| bth | check the available disk space before a file upload; |
| bth | fix the file share getting stuck when disabling; |
| capsman | add hw-protection-threshold; |
| capsman | fix the last-ip value being shown backwards; |
| certificate | allow importing a cross-signed certificate without overwriting the existing one; |
| certificate | fix ACME certificate issuance for wildcard domains; |
| certificate | fix changing the built-in trust store setting (introduced in 7.22.2); |
| certificate | improve certificate import process; |
| certificate | refactor certificate internal processes; |
| cloud | improve stability of backup file downloads; |
| console | allow the array access operator to accept arrays of indices or keys; |
| console | expose globals in the API; |
| console | fix a memory leak in background scripts; |
| console | fix background ":execute as-string" jobs not terminating on interrupt; |
| console | fix comment wrapping in the monitor command; |
| console | fix inconsistent /ip/firewall/filter print with src-address-list and dst-address-list; |
| console | fix the where filter ignoring flags set to false; |
| console | improve export order; |
| console | improve stability; |
| console | prevent an out-of-memory condition when ":execute as-string" produces large output; |
| console | prevent duplicate entries in /port/remote-access; |
| container | add a Ctrl-] escape sequence to exit a stuck container shell; |
| container | fix container interface handling on CHR; |
| container | improve container image extraction; |
| container | require the container device-mode to enable swap; |
| crypto | fix a possible crash during IPsec processing on Qualcomm devices; |
| detnet | use a single random source port; |
| dhcpv4-server | add ipv6-only-preferred parameter to respect option 108; |
| dhcpv4-server | show DHCP option 82 parameters in ASCII in addition to hex; |
| dhcpv6-client | add option 39 with the client hostname; |
| dhcpv6-client | fix DHCPv6 client address handling after prefix-hint changes; |
| dhcpv6-client | remove a duplicate dhcp-options parameter; |
| dhcpv6-relay | use the packet's source MAC for option 79 if relay and client are on the same link layer; |
| dhcpv6-server | add option 39 (FQDN) support and add-dns-entries option; |
| disk | improve RAID5/6 throughput; |
| disk | improve stability of the SMB server; |
| dns | improve stability; |
| dot1x | improve stability; |
| dot1x | rename the reauth-timeout to reauth-period; |
| fix server certificate verification; | |
| show certificate related errors in the log; | |
| ethernet | add the arp-accept parameter for interfaces with MAC; |
| ethernet | fix a stability issue on RB1100AHx2 under heavy traffic; |
| ethernet | fix bogus fast-path Rx traffic reported on an unconnected ether8 port on RB5009; |
| ethernet | fix link flap and unexpected reboots on RB5009; |
| ethernet | fix PPPoE link flapping on Intel X710; |
| ethernet | fix PPPoE over VLAN not working on Mellanox ConnectX-4; |
| ethernet | fix SFP compatibility on E-series devices; |
| ethernet | improve stability on Alpine devices after a switch reset; |
| ethernet | improve stability on hAP be3 Media; |
| ethernet | improve stability on x86 routers with Mellanox NICs; |
| evpn | publish MAC-IP routes (RT-2) for neighbors; |
| fetch | show a clearer error when keep-result and output are both used; |
| fetch | improve stability of the TFTP client; |
| fetch | improve upload state reporting when using sftp; |
| fetch | never set a cookie jar for HTTP requests; |
| firewall | add NAT-related fields to CEF format logging; |
| hardware | show the device name and location in /system/resource/hardware menu; |
| igmp-proxy | improve stability when changing /routing/igmp-proxy parameters; |
| iot | add Bluetooth output power control; |
| iot | allow a custom radio plan even under a regional lock; |
| iot | enforce the fixed antenna gain on boards with an embedded antenna; |
| iot | fix round-trip-time timing issues in LoRaWAN Basic Station; |
| ip-service | fix services becoming unreachable after their VRF is disabled and re-enabled; |
| ipsec | add XFRM interface support; |
| ipsec | fix policy and SA handling after moving it to netlink; |
| ipsec | improve IKE handshake stability; |
| ipsec | improved service stability when processing an IKEv1 request; |
| ipv6 | add a neighbor discovery ping; |
| ipv6 | fix cases when address is lost after reboot if prefix was taken from pool; |
| ipv6 | fix the DNS timer in router advertisements; |
| ipv6 | ignore router advertisements received on interfaces not in the accepting list; |
| l3hw | fix IPv6 link-local traffic being routed incorrectly; |
| leds | add dark-mode support for L41; |
| leds | fix LEDs set to interface status staying off when the interface is active; |
| log | improve stability of logging; |
| lte | accept both y and yes for eSIM confirmation; |
| lte | add band display support for Huawei ME909s modems; |
| lte | add missing network error messages for MBIM modems; |
| lte | add support for supplementary downlink and uplink band only selection restriction; |
| lte | add the sms-protocol=qmi option for sending and reading SMS; |
| lte | use RA for IPv6 acquisition for FG621; |
| lte | fixed multi-APN for R11l-LTE7 and R11e-LTE6 modems; |
| lte | fix the RG650E-EU modem not bringing link up after a firmware update; |
| lte | fix traffic statistics in MBIM passthrough mode; |
| lte | remove leftover APN slave interfaces when the master LTE interface is removed; |
| lte | rename "firmware-update" to "firmware-upgrade" in the show-capabilities command output; |
| lte | fix the subscriber number not updating after switching SIM slots; |
| lte | fixed support for MC7710 Sierra modem; |
| lte | fixed IPv6 acquisition for R11e-LTE-US modem; |
| lte | improved link recovery for R11l-LTE7 modem; |
| lte | clear dhcp-server network in passthrough mode when the link goes down; |
| lte | improved system stability when using passthrough mode; |
| mac-telnet | improve stability of MAC Telnet sessions; |
| netinstall | fix a duplicate device entry on RB2011 with SFP; |
| netinstall | fix multiple active interfaces inheriting the first interface's settings; |
| netinstall | fix Netinstall failing to reinstall RB850Gx2 devices; |
| netinstall | fix Netinstaller's memory check failing downloads to disk; |
| ospf | fix DR/BDR traffic not being received with multiple instances; |
| ospf | improve stability when a neighbor is lost; |
| pim | add MLD support for PIM; |
| pim | fix duplicate PIM configuration parameters; |
| pim | fix PIM-SM issues with IPv6; |
| pim | fix wrong or missing PIM configuration by separating PIM and GMP per interface; |
| ping | add parameter checks for arp ping; |
| poe-out | fixed missing PoE-Out interface on hEX PoE lite, RB260GSP, OmniTIK 5 PoE, PowerBox; |
| port | accumulate incoming data in log file even without TCP clients connected; |
| port | add an FTDI latency_timer option for low-latency serial applications; |
| ppp | add port interface info to PPP outbound channel defaults; |
| ppp | fix a packet leak during dial-on-demand connection of a ppp-out interface; |
| ppp | fix BG77 modem port name and channel count; |
| ppp | fix the offline firmware-update notification for BG77/BG770 modems; |
| ppp | fix the SINR value reported for BG77 and BG770 modems; |
| ptp | add support for fixed master and slave port roles; |
| ptp | add transparent clock mode; |
| qos | fix PFC and lossless buffer issues (introduced in v7.23); |
| queue | fix a typo in the cake-overhead-scheme parameter value; |
| reverse-proxy | improve stability of the reverse proxy; |
| romon | improve stability of RoMON; |
| route | fix a nexthop mismatch; |
| routing | improve stability of routing protocol packet handling; |
| sniffer | improve packet time resolution; |
| snmp | add an OID and logging for blacklisted program access; |
| snmp | add CAPsMAN radio data to SNMP; |
| snmp | add dynamic SNMP engine ID assignment; |
| snmp | add interface table with mtu and l2mtu OIDs; |
| snmp | add IP pool OIDs; |
| snmp | add IPv6 address and interface name to the MNDP neighbour table; |
| snmp | add OID blacklisting; |
| snmp | add OIDs for Netwatch probes; |
| snmp | add OSPF MIB tables; |
| snmp | add SHA-2 authentication for SNMPv3; |
| snmp | add transmit drop counters; |
| snmp | add VRRP status OIDs for monitoring; |
| snmp | fix the reported capability flags in LLDP-MIB; |
| snmp | fix the snmp tools timing out when authentication is used; |
| snmp | improve stability of SNMP; |
| snmp | log a warning when the src-address family does not match the request; |
| snmp | remove an interface OID that should not be accessible; |
| socks | fix SOCKS proxy connection and address handling; |
| ssh | add host key verification for the SSH client; |
| ssh | limit server output to the client's window size; |
| ssh | refactor SSH internal processes and improved system stability; |
| ssh | show router host key fingerprint; |
| ssh | switch the default host key type to Ed25519; |
| ssl | enabled hardware accelerated GCM on Alpine CPUs; |
| ssl | improve logging; |
| switch | add packet and byte counters for ACL rules on Marvell Prestera switches; |
| switch | fix degraded slow-path throughput on CRS304 switch (introduced in v7.22); |
| system | fix memory handling and correctness issues in the core library; |
| system | fix the frequency units from Mhz to MHz; |
| system | improve stability; |
| system | reduce the fan control interval on multi-core boards; |
| system | remove the channel label from the RouterOS version; |
| system | warn about a missing wifi driver package on BE boards; |
| tftp | add VRF support; |
| tr069 | improve stability; |
| traffic-flow | improved system stability when disabling traffic flow on a busy system; |
| traffic-gen | improve stability; |
| upnp | improve stability; |
| usb | improve stability of RNDIS data handling; |
| user | fix removal of inactive REST API sessions (introduced in 7.21); |
| userman | improve stability when importing database files; |
| vlan | add a force-mac-address option for VLAN interfaces; |
| vrrp | improve stability; |
| webfig | add a generic table and union group support; |
| webfig | add column resizing to embedded tables; |
| webfig | hide the left menu only on QuickSet and Terminal pages; |
| webfig | improve stability; |
| webfig | update style; |
| webfig | update the login page Help link; |
| wifi | add a stream-port argument to configure the sniffer streaming server port; |
| wifi | add fast transition support for MLD devices; |
| wifi | add interworking, aaa and steering settings to the network configuration; |
| wifi | add more steering debug logs; |
| wifi | add network 'labels' parameter to WinBox and WebFig; |
| wifi | do not preserve branding package on cap when upgrading via capsman; |
| wifi | fix channel reselect interval/time operation for wifi-qcom-be and wifi-mediatek interfaces; |
| wifi | fix incorrect scan results for 320 MHz access points; |
| wifi | fix MLD link type change and SA query in station mode; |
| wifi | fix SAE authentication using a wrong cached PMK; |
| wifi | fix station statistics not updating after switching MLD links; |
| wifi | fix the interworking network type; |
| wifi | fix the wrong band shown in the registration table; |
| wifi | improve stability; |
| wifi | perform a channel switch instead of dropping clients on radar detection; |
| wifi | preserve dude package on cap when upgrading via capsman; |
| wifi | report channel in log messages; |
| wifi | report management frame protection (MFP) usage in registration-table; |
| wifi | show the EAP user identity in the registration table; |
| wifi | show the MLD links and SSID in MLO client log messages; |
| wifi-mediatek | improve MLO client reconnection; |
| wifi-qcom | fix disconnects during fast transition roaming; |
| wifi-qcom | fix station mode association failures; |
| wifi-qcom-ac | fix a regression in station MAC address handling; |
| wifi-qcom-ac | reduce package size; |
| wifi-qcom-be | add hw-protection-mode support; |
| wifi-qcom-be | add the distance setting for 802.11be devices; |
| wifi-qcom-be | fix the block ack request being declined after a channel switch; |
| wifi-qcom-be | fix Wi-Fi intermittently unavailable after reboot; |
| wifi-qcom-be | improve throughput in dense client environments; |
| wifi-qcom-be | upgrade driver and firmware; |
| winbox | add a filtered LLDP tab to neighbor discovery; |
| winbox | add a Security tab and reorganize bridge and port dialogs; |
| winbox | add a wifi radio regulatory info (reg-info) view; |
| winbox | add device-mode configuration; |
| winbox | add ISIS support; |
| winbox | add progress bar support to the GUI; |
| winbox | add RSRP and RSRQ signal graphs to the PPP info view; |
| winbox | add the client MTU option for WireGuard peers; |
| winbox | add the container save option; |
| winbox | add wifi Spectral Scan support; |
| winbox | allow power-cycling multiple interfaces at once; |
| winbox | allow tuple fields with more than two values and multiple separators; |
| winbox | fix SFP optical power values of 0.0 dBm not being shown; |
| winbox | fix the "addresses" spelling in read-only fields; |
| winbox | fix the EC/IO signal quality graph; |
| winbox | fix the ISIS neighbor level type being empty for "l2"; |
| winbox | fix the Memory Limit field of fq_codel to use bytes; |
| winbox | fix the Min Prefix field in the routing rule dialog; |
| winbox | fix the MPLS TE tunnel path hops field; |
| winbox | fix the range field displayed in route filters; |
| winbox | fix the Skins menu for user groups opening a non-existent window; |
| winbox | fix the system note display on startup; |
| winbox | fix the wifi Authentication Types and Encryption fields; |
| winbox | improve stability of WinBox protocol handling; |
| winbox | improve status reporting under Tools/Email menu; |
| winbox | make the Power Cycle button act only on the selected interface; |
| winbox | open the Format Drive panel only for supported disks; |
| winbox | remove the redundant empty status field from the License window; |
| winbox | rename "send" to "transmit" in the Bandwidth Test window; |
| winbox | rework the switch QoS statistics table; |
| winbox | show WireGuard peer information; |
| wireguard | add the client-mtu parameter; |
| wireguard | allow referencing a peer by its name; |
| wireguard | allow unsetting the client-listen-port; |
| wireguard | improve error message reporting when adding a new peer; |
| wireguard | keep peer rx/tx counters when the peer is disabled and enabled; |
| wireguard | use the MTU value when importing a configuration; |
| wireguard | warn when an allowed-address overlaps another peer; |
| www | add the remote client IP and domain to HTTPS log messages; |
| www | fix a memory leak when parsing authentication headers; |
| www | improve stability; |
| www | improve URI parsing; |