| Version | Change log |
| The Dude 7.19.4 Jul 31, 2025 |
arm64/x86/chr - added Aquantia network driver; bgp - fixed nexthop force-self for IPv4 and IPv6; bgp - fixed withdraw (introduced in v7.20beta2); bgp - improved configuration upgrade from versions prior to 7.20; bgp - make "as" parameter optional in template configuration; console - fixed incorrect multibyte to=num conversions; console - fixed issue where file completion sometimes shows duplicates; dns - improved DNS service stability when using static CNAME records (introduced in v7.20beta4); file - improved file handling performance in WinBox v4 (additional fixes); firewall - added "liberal-tcp-tracking" connection tracking setting; iot - added additional dongle firmwares to iot-bt-extra package; iot - improvement to LoRa band verification logic; license - updated URL for "libcroco" package in the license notice; log - establish a new connection to the remote log server when action settings are edited (e.g. after changing the src-address property); log - fixed memory leak when a connection to remote TCP log server failed; netinstall-cli - recognize RouterOS v6 system package; poe-out - upgraded firmware for 802.3at/bt controlled boards (the update will cause brief power interruption to PoE-out interfaces); routing-filter - fixed route origin matcher; sfp - added sfp-power-class and sfp-max-power monitor values for QSFP (additional fixes); ssl/tls - fixed SSL looping behavior when multiple different TLS connections were used; supout - added IP Service section; supout - added VXLAN VTEP section; system - fixed internal service communication procedure when exchanging data about existing objects (introduced in v7.20beta2); vrrp - fixed invalid TCP connection state after failover with enabled sync-connection-tracking; vrrp - improved stability when removing VRRP interface with enabled sync-connection-tracking; vxlan - added checksum and learning properties (additional fixes); vxlan - fixed unset behavior for "local-address" and & |
| The Dude 7.19.2 Jun 20, 2025 |
Bfd - fixed socket leak; Bgp - fixed withdraw when input.accept-nlri is non-existent; Btest - properly close unsuccessful TCP test sockets; Console - added prompt to /disk/format command; Disk - do not allow to start Btrfs replace command when a Btrfs replace process is already running; Disk - improve disk file system detection; Hotspot - allow only "http:" and "https:" schemas in dst field; Iot - added LoRa interface recovery mechanism; Iot - LoRa stability improvement; Iot - LR8G/9G firmware update; Ip-service - fixed "print count-only interval" when dynamic entries are added (introduced in v7.19); Ip-service - fixed setting services by name (introduced in v7.19); Ipsec - fixed responder on key exchange compute failure (introduced in v7.19); Pv6 - do not show IPv6 FastPath as active when connection tracking or IPsec is used; L2tp-ether - fixed interface creation/removal process; Lte - added support for R11e-LTE6 v039 firmware release; Lte - do not dial further if modem detects eSIM without profiles; Lte - fixed eSIM management function for mmips and mipsbe architecture CPUs; Lte - fixed eSIM provisioning for servers that do not send content-length in the HTTP response; Route - fixed destination ordering for SNMP; Route - fixed SNMP probing of IPv6 routes; Route - make routing table print faster with hw-offload, gateway and blackhole queries; Switch - fixed ACL rules when ports are not specified (fixes dynamic rules for RoMON); Switch - fixed advertise and speed settings for ether1 on RB5009 (introduced in v7.19.1); Webfig - improved screen reader support for WiFi fields in Quickset; Webfig - make combobox accessible to screen readers; Webfig - more space to branding logo; Wifi-qcom - fixed beacon loss issues and improved stability for IPQ-6018; Wifi-qcom - improved regulatory compliance; Winbox - fixed "Last Topology Change" for bridge port monitor; |
| The Dude 7.19.1 Jun 18, 2025 |
bfd - fixed socket leak; bgp - fixed origin cleanup for mpls-vpn (introduced in v7.20beta2); bgp - fixed warning when instance is not active (introduced in v7.20beta2); bgp - fixed withdraw when input.accept-nlri is non-existent; bgp - migrate correctly router-id and ASN to instance (introduced in v7.20beta2); bridge - added dynamic tagged entry named "switch-cpu" in scenarios where the same VLAN spans multiple switch chips or is used on both HW and SW ports (additional fixes); btest - properly close unsuccessful TCP test sockets; certificate - added "Amazon Root CA 1" to built-in root certificate authorities store; console - added prompt to /disk/format command; console - fixed /file/find not recursive by default (introduced in v7.20beta2); console - fixed /file/read command (introduced in v7.20beta2); console - improved visuals for hexadecimal strings; console - prioritize directory specific parameters and hide rarely used ones in print autocomplete (additional fixes); container - added repull command; container - can use KVM (x86 and arm64) in container QEMU for faster virtualization; container - fixed QEMU VM to host bridge; container - stability improvements (additional fixes); dhcp-client - show warning if DHCP client is configured on dot1x server port; dhcpv4-client - allow specifying DSCP of outgoing packets; dhcpv4-client - show "custom-hostname-suffix" and "custom-source-mac-address" properties if set; dhcpv4-server - added "add dns" step to setup wizard; discovery - improved LLDP Power via MDI TLV with 802.3bt specific field support; discovery - report router as "CAPsMAN" on MNDP under "running" parameter; disk - show error when file based block-device uses a mountpoint to be unmounted; dns - fixed memory leak when static CNAME record was matched; evpn - fixed auto ID setting (introduced in v7.20beta2); evpn - fixed enable/disable handling (introduced in v7.20beta2); evpn - fixed instan |
| The Dude 7.18.2 Mar 12, 2025 |
console - fixed issue with file-name completion (introduced in v7.18); container - fixed repository name handling to prevent redirect issues when basic authentication is used; lte - additional fixes for eSIM management support; lte - AT modems, improved redialing when modem lost connectivity without notifying host about APN status change; netinstall - fixed socket reset (introduced in v7.18); queue - fixed system failure when CAKE kind queue was configured but queue type definition does not exist anymore (introduced in v7.18); wifi - improved stability for wifi interfaces; winbox - improve graphing efficiency when communicating with WinBox; |
| The Dude 7.18.1 Mar 3, 2025 |
bridge - improved stability in case of configuration error (introduced in v7.15; bridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17; cloud - fixed issues when BTH is toggled fast between enable/disable; cloud - improved "BTH Files" web page design; console - fixed issue with files when using scripts (introduced in v7.18; console - improved file add/remove process stability; dhcpv6-relay - clear saved routes on DHCP release; dhcpv6-relay - show client address; disk - add "sector-size" property in print detail; disk - improved stability when formatting crypted partitions; l3hw - remove VLAN tag before VXLAN encapsulation (fixes pvid behavior for bridged VXLAN; lte - fixed modem recovery after firmware upgrade for R11e-LTE modem; lte - fixed Router Advertisement processing issue for AT modems when an APN with "ip-type=ipv6" was configured; ovpn - disable hardware accelerator for GCM on MMIPS CPUs (introduced in v7.18; poe-out - fixed health showing 0V voltage when using PoE-in for RB960; poe-out - upgraded firmware for 802.3at/bt PSE controlled boards (the update will cause brief power interruption to PoE-out interfaces; route - show BGP session name instead of cache-id; switch - improved stability when enabling IGMP snooping with VXLAN (introduced in v7.18; system - improved internal "flash/" prefix handling for different file path related settings; winbox - fixed missing SMB client on non-ROSE devices; |
| The Dude 7.18 Feb 28, 2025 |
arp - added warning, when "Published" ARP entry used on an interface with "reply-only" ARP mode enabled; bgp - added input.filter-community; bgp - fixed input.accept-community; bgp - fixed memory leak on receiving notify and closing session; bgp - improved performance on BGP input; bonding - added setting for LACP active/passive modes; bridge - added new STP monitoring fields for bridge and ports (Tx/Rx BPDU, Tx/Rx TC, forward/discard transitions, last topology change, message-age, max-age, remaining-hops, bridge-id); bridge - fixed bridge port hang when using invalid port IDs; bridge - fixed dhcp-snooping in QinQ setups; bridge - fixed minor memory leak on link down; bridge - fixed multicast packet flow on hardware offloaded bridge which acts as "multicast-router"; bridge - improved default bridge and port layout on console and GUI; bridge - improved stability in case of configuration error (introduced in v7.15); bridge - moved "TCHANGE" logs from bridge,stp to bridge,stp,debug; bridge - rename "ports" to "interface" under MDB table for configuration consistency with other menus; bridge - renamed STP monitor fields (port-number to port-id, designated-port-number to designated-port-id, designated-bridge to designated-bridge-id); bridge - show designated-* monitor field for all port roles; bridge - show warning instead of causing error when using multicast MAC as admin-mac (introduced in v7.17); capsman - fixed "undo" command for cap interfaces; certificate - added built-in root certificate authorities store; certificate - do not include CA identity in SCEP POST requests; certificate - improve error message when trying to use certificate; certificate - optimize trust store; cloud - changed asset CDN URL for "BTH Files"; cloud - fixed issues when BTH is toggled fast between enable/disable; console - disallow incomplete double-quoted arguments (allows multiline string pasting); console - fi |
| The Dude 7.17.2 Feb 7, 2025 |
device-mode - do not allow changing CPU frequency if "routerboard" is not allowed by device mode (introduced in v7.17); device-mode - fixed feature and mode update via power-reset on PPC devices; dhcpv4-client - allow selecting to which routing tables add default route (additional fixes); disk - allow to add swap space without container package; disk - fixed showing free space on tmpfs (introduced in v7.17); disk - improved system stability when SMB interface list is used (introduced in v7.17); dns - do not show warning messages for DNS static entries when they are not needed; file - fixed missing meta information from special files such as packages (introduced in v7.18beta2); file - hide store directories, such as container (introduced in v7.18beta2); sfp - improved system stability with some GPON modules for CCR2004 and CCR2116 devices (additional fixes); snmp - added "mtxrAlarmSocketStatus" OID to MIKROTIK-MIB; switch - allow entering IPv6 netmask for switch rules (CLI only); switch - fixed dynamic switch rules created by dot1x server (introduced in v7.17); switch - fixed issues with inactive hardware-offloaded bond ports; switch - improved egress-rate on QSFP28 ports; system - fixed a potential memory leak that occurred when resetting states after an error; |
| The Dude 7.16.2 Nov 27, 2024 |
certificate - do not download CRL if there is not enough free RAM; certificate - fixed handling of capsman-cap certificates (introduced in v7.16); dhcpv4-server/relay - added additional error messages for DHCP servers and relays; dns - fixed lookup order for static DNS entries (introduced in v7.16.1); ethernet - improved linking after reboot for hAP ax lite devices ("/system routerboard upgrade" required); gps - changed default GPS antenna setting for LtAP mini with internal LTE/GPS combo antenna; leds - fixed bogus argument for "leds" property (introduced in v7.16); leds - fixed PoE-in LEDs for CRS318-1Fi-15Fr-2S device; modem - KNOT BG77 modem, improved handling of modem unexpected restarts; route - fixed possible issue with inactive routes after reboot (introduced in v7.16); routerboot - improved stability for IPQ8072 and IPQ6010 when flash-boot is used ("/system routerboard upgrade" required); |
| The Dude 7.16.1 Oct 18, 2024 |
device-mode - after upgrade, mode "enterprise" is renamed to "advanced" and bandwidth-test, traffic-gen, partition (command "repartition"), bootloader and downgrade features will be disabled; webfig - redesigned HTML, styling and functionality (additional fixes); arm64 - fixed for bare-metal servers to be able to access more than 2GB RAM; arm64 - show CPU frequency on bare-metal installations; bridge - correctly display PPP interfaces in VLAN menu; bridge - fixed first host table response for SNMP; bridge - fixed VLAN overlap check; bridge - improved port handling; certificate - fixed handling of capsman-cap certificates (introduced in v7.16); console - added more argument definitions for mac-protocol property; console - execute :return command without error; crypto - improve crypto speeds (additional fixes); crypto - use hardware accelerator for GCM cipher in TLS connection on Alpine CPUs; defconf - changed wireless installation from "indoor" to "any"; defconf - disable 5GHz secondary channel on RB4011; defconf - fixed new port name recognition; device-mode - changed "partition" to allow activate and do not allow repartition (introduced in v7.17beta2); device-mode - clarify message that pressing a button will reboot device; device-mode - limit "/tool/ping-speed" and "/tool/flood-ping" under "traffic-gen" feature; device-mode - show all features and active restrictions with "print" command; dhcp-relay - added "local-address-as-src-ip" property; dhcp-server - use interface ID for NAS-Port and added interface name to NAS-Port-ID attribute in RADIUS requests; dhcp-server - use single RADIUS accounting session for IPv4 and IPv6 when dual stack is used; dhcpv4-client - fixed crash when releasing disabled DHCP client; dhcpv4-server - properly detect DHCP server address when underlying interface has multiple IP addresses configured; dhcpv4-server/relay - added addi |
| The Dude 7.16 Sep 24, 2024 |
6to4 - fixed 6to4 tunnel LL address generation after system reboot; 6to4 - improved system stability when using 6to4 tunnel without specified remote-address; 6to4 - limit keepalive timeout maximum value; address - added "S" flag for addresses that belong to a slave interface; arm64 - fixed "disable-running-check" for ARM64 UEFI; arm64 - increased reserved storage space for bootloader; arm64/x86 - added rtl8111/8168/8411 firmware; arp - fixed possible issue with invalid entries; bgp - fixed BGP sessions missing vpnv6 afi; bgp - fixed cluster-list and originator-id; bgp - fixed corrupted as-path when received update with empty AS_PATH attribute (introduced in v7.15); bgp - fixed minor logging typo; bgp - fixed vpnv6 safi; bgp - small logging improvements; bridge - added dynamic tagged entry when VLAN interface is created on vlan-filtering bridge; bridge - added forward-reserved-addresses property which controls forwarding of MAC 01:80:C2:00:00:0x range (separated from "protocol-mode=none" functionality, disabled by default after upgrade); bridge - added L2 MDB support for IGMP snooping; bridge - added max-learned-entries property for bridge; bridge - added message about who created a dynamic VLAN entry; bridge - added MVRP support for VLANs assigned to bridge; bridge - do not allow duplicate ports; bridge - fixed BPDU address when using "ether-type=0x88a8" configuration; bridge - fixed MVRP leave; bridge - fixed port "point-to-point" status after first link change; bridge - fixed typo in filter and NAT error message; bridge - improved system stability when removing MLAG configuration; bridge - show invalid flag for ports that fails to be added to bridge (e.g. maximum port limit of 1024 is reached); bth - improved stability on system time change; certificate - added no-key-export parameter for import; certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only); certificate - automatica |
