| Version | Change log |
| The Dude 7.22.1 Stabl Mar 24, 2026 |
Bgp-vpn - fixed non-working import filter after reboot; Certificate - added option to configure built-in trust store for all services (CLI only); Certificate - use "default" for built-in trust store default value; Chr - improved virtio_net stability; Console - removed the "reset" command from shared settings menus (IP/IPv6/Bridge/L3HW/Neighbor-Discovery/Connection-Tracking); Defconf - fixed architecture detection for apps; Hardware - name serial devices after port names; Hardware - name storage hardware devices after slot name in "/disk" menu; L3hw - fixed a system stability issue (introduced in v7.21); Leds - allow multiple interface selection for interface-activity trigger; Log - do not provide non-existent logging topics for configuration; Log - fixed "/system/logging/action/get" command (introduced in v7.22); Lte - fixed LTE modem automatic modeswitch (introduced in v7.22); Lte - fixed Tx stat reporting in LTE passthrough mode (introduced in v7.22); Qos-hw - display queue0 limits for CPU port; Qos-hw - fixed "offline" tx-manager ability to queue at least one packet (introduced in v7.21); Qos-hw - prohibit setting CPU port with "offline" tx-manager; Quickset - fixed configuration of multi-link APs; Ssh - make login process asynchronous; Switch - disable EEE on RB5009 and CCR2004-16G-2S+ devices; System - fixed total memory reporting on hAP be3 Media; Tr069 - fixed modem extended revision reporting; Wifi - fixed bridge VLAN configuration for multi-link interfaces; Wifi - fixed EAP authentication for multi-link clients; Wifi - improved link-specific parameter application after reboot for multi-link interfaces; Wifi - improved stability during association; Winbox - added "Supported HW Caps" and "Multi Link Mode" configuration options under the "WiFi/Provisioning" menu; Winbox - do not set empty chain when adding/editing routing rule; Winbox - fixed "Remote AS" setting |
| The Dude 7.22 Stable Mar 11, 2026 |
Certificate - added support for multiple ACME certificates (services that use a previously generated certificate need to be reconfigured after the certificate expires); Device-mode - added option to configure device-mode via Netinstall or FlashFig using a “mode script”; App - added configurable app-store URL for custom apps; App - added health check for apps, which automatically rewrites the composed YAML; App - added jupyter-notebook, livebook, myip, and rustfs apps; App - added support for custom apps; App - allow configuring bridge port pvid for app; App - changed ui-url parameter for Smokeping and Nextcloud; App - clean the backup directory after container repull; App - do not show duplicate entries of required-mounts; App - enable swap on all devices that use apps to help with performance; App - fixed /app/export; App - fixed apps constantly polling the cloud; App - fixed elasticsearch, element, pmacct-netflow apps failing to start; App - fixed issue with Cinny not being able to create a root-dir; App - fixed missing reverse-proxy URL; App - fixed potential port collisions between apps; App - show app URL only when it is running; App - show DNS URL for app only if it has a reverse-proxy; Bgp - added BGP unnumbered support; Bgp - changed multipath to number argument; Bgp - fixed BGP output sometimes not being cleaned after session restart; Bgp - fixed early-cut not working properly; Bgp - fixed ignore-as-path-len not being used; Bgp - fixed update messages not being sent on default-prepend value change; Bgp - implemented add-path; Bgp - implemented multipath (ability for BGP best path to select ECMP routes); Bgp - make remote.address parameter optional; Bgp-vpn - allow modifying scopes with routing filters; Bgp-vpn - use target scope for imported route; Bridge - added local and static MAC synchronization for MLAG; Bridge - added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically update |
| The Dude 7.21.3 Stabl Feb 27, 2026 |
) certificate - added support for multiple ACME certificates (services that use a previously generated certificate need to be reconfigured after the certificate expires) (additional fixes); ) device-mode - added option to configure device-mode via Netinstall or FlashFig using a “mode script” (additional fixes); app - added health check for apps, which automatically rewrites the composed YAML; app - clean the backup directory after container repull; app - fixed element that was failing to start; app - fixed potential port collisions between apps; app - show DNS URL for app only if it has a reverse-proxy (additional fixes); bgp - make remote.address parameter optional; bridge - added local and static MAC synchronization for MLAG (additional fixes); bridge - added MLAG support per bridge interface (/interface/bridge/mlag menu is moved to /interface/bridge; configuration is automatically updated after upgrade; downgrading to an older version will result in MLAG configuration loss) (additional fixes); bridge - fixed performance regression in complex setups with vlan-filtering (introduced in v7.20); bth - use separate Let's Encrypt certificate for file-share; container - automatically stop/repull/start the container on repull or remote-image change; device-mode - removed authorized-public-key-hash property; dhcpv6-relay - fixed link-layer address inconsistency with the original link-layer address in relay-forward packets (additional fixes); fetch - fixed fetch treating relative paths from redirects as hostnames; health - added CPU temperature monitoring to L009 with ARM64; ip - added reverse-proxy (additional fixes); ipsec - improved aes256-ctr stability on L009; isis - improved stability and fixed a small memory leak; l3hw - fixed missing VLAN counters on reboot (introduced in v7.21); l3hw - improved system stability when enabling VLAN offloading under active traffic (introduced in v7.21); leds - fixed WiFi LEDs on hAP AX S (introduced in v7.22rc1); poe-out - firmwar |
| The Dude 7.21.2 Stabl Jan 29, 2026 |
App - added "media-path" and "download-path" setting in /app/settings; App - added shm_size parameter to apps that require it; App - calibre-web app auto add db if none exists; App - fixed Firefox and Webtop to work with https-proxy; App - fixed fossil app login typo; Bgp - implement revised input error handling per RFC 7606; Container - added support for the shm_size setting; Container - allow non-root user write to SMB share; Container - changed default container registry to docker.io; Container - do not mount tmpfs on /tmp and /run by default; Container - do not start container if any volume is not mounted; Container - fixed nftables/iptables not working with "Message too long" error; Container - made container mounts writable by the user; Defconf - added single port MGMT bridge on CCR/RDS for easier /app configuration; Defconf - improved firewall rule for local traffic to the loopback interface; Disk - fixed issue where mountpoint was not removed after removing the disk; Dns - fixed domain resolution for the ":resolve" command "server" parameter; Lte - fixed issue for Chateau 5G R17 ax (introduced in v7.21.1); Poe-out - firmware update for 802.3at capable boards (the update will cause a brief power interruption to poe-out interfaces); Poe-out - firmware update for 802.3bt capable boards (the update will cause a brief power interruption to poe-out interfaces); Poe-out - fixed occasional firmware update failure on CRS354; Poe-out - fixed PSU state recovery upon unplug/replug on CRS320; Ppp - added initial support for BG770A-GL modem firmware update; Ppp - fixed premature PPP client disconnect on BG77 modems during firmware update; Route - prevent creating routing tables with the same name; Routing-filter - fixed num-set matcher; Sfp - fixed sfp-ignore-rx-loss parameter for RB760iGS; Sfp - improved initialization and linking for some QSFP modules; Snmp - fixed handling of the script "dont-require-permissions&qu |
| The Dude 7.21.1 Stabl Jan 21, 2026 |
bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.21); bridge - improved stability when using MVRP (introduced in v7.21); certificate - fixed empty trust store handling in certain cases (introduced in v7.21); container - changed app auto update to be off by default; container - fixed issue where containers may not start with large mounts; health - fixed fan and PSU state logging for MIPSBE devices; leds - fixed power LED behavior for hAP ax S; lte - fixed APN configuration for QMI modems in a 3G network when use-network-apn=yes is used; switch - fixed switch type for hAP ax lite devices (introduced in v7.21); system - fixed rare partial loss of RouterOS configuration; |
| The Dude 7.21 Stable Jan 13, 2026 |
winbox - fixed switch QoS monitor for mirror properties; winbox - hide certificate "Issuer" field for certificate template; winbox - hide IPv6 addresses for IP neighbors that no longer have them; winbox - make multiple address fields required; winbox - make separate inputs for WiFi Interworking "Authentication Types" and "Connection Capabilities" fields; winbox - make VETH gateway fields not required; winbox - move VRF from Ethernet to generic Interface table; winbox - removed "Add" for dynamic DNS servers; winbox - reorder BGP and OSPF tabs in logical order; winbox - restore route max object 10000 limit; winbox - show "Trusted" field for certificate template; winbox - show warnings in "Routing/BGP" menus; winbox - show warnings in Disk menu; winbox - updated and shortened window titles (e.g. Address List -> Addresses); wireguard - added VRF option (CLI only); wireguard - allow to add AllowedIPs configuration for client configuration template; wireless - added last-ip parameter for the CAPSMAN registration-table tab; wireless - improved system stability when stopping scan process; www - added option to disable individual web services in /ip/service/webserver and IP>Services>Web Server; www - handle escaped characters in resource IDs and names for REST API requests; www - process REST API requests only after user authentication is completed; www - removed ability to publish directories via "/files" www service; |
| The Dude 7.20.6 Stabl Jan 12, 2026 |
Bgp - fixed l2vpn-cisco decoding (introduced in v7.20); Bgp - fixed occasional corruption of MPLS labels in BGP VPN update messages; Bridge - fixed dynamic switch-cpu VLAN creation (introduced in v7.20); Bridge - improved system stability when forwarding traffic with fast-path and bridged interface gets removed or disabled (introduced in v7.20); Bth - make user private-key sensitive; Console - fixed empty output in route menus when using "print where gateway"; Console - updated copyright notice; Firewall - clear relevant masqueraded connection tracking entries on IP address change; Ipv6 - initialize RA receiving when enabled and without any other IPv6 configuration; Log - fixed memory leak; Lte - fixed LTE interface IPv6 address generation to use EUI-64 (introduced in v7.20); Lte - fixed no re-connection after cellular network requested APN deactivation on Chateau 5G ax R17; Ovpn - fixed OVPN server handling on reboot (introduced in v7.20); Ovpn - improved system stability when using cipher=blowfish128; Sfp - fixed "sfp-tx-fault" state indication for CRS520-4XS-16XQ; Sfp - fixed missing link up/down notifies; Switch - fixed non-IP multicast packet receive on 98DX8208, 98DX8216, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98CX8410 switches; System - detect policy mismatch sooner if script is executed internally by some other service; Ups - fixed board hibernation shutdown; Wifi-mediatek - added Superchannel regulatory profile; |
| The Dude 7.20.7 Stabl Jan 9, 2026 |
bridge - expose more DHCP snooping warning logs; bridge - fixed possible DHCP packet drop caused by the add-dhcp-option82; firewall - clear relevant masqueraded connection tracking entries on IP address change; log - fixed memory leak; tr069-client - expose 5G NR signal metrics for the Chateau R17 ax; w60g - fixed possible memory leak when an interface is disabled; winbox - fixed Preshared Key "auto" and "none" options for WireGuard Peer; |
| The Dude 7.20.6 Stabl Dec 16, 2025 |
bridge - fixed issue where use-ip-firewall was enabled due to running container (introduced in v7.21beta8); certificate - added certificate "trust-store" parameter (additional fixes); console - fixed empty output in route menus when using "print where gateway"; console - improved service stability and memory allocation when using "regexp" operator; console - improved service stability when executing commands that can timeout; hotspot - prevent service from starting unnecessarily in the background on export/print commands; lte - ask for user confirmation before installing eSIM profile (additional fixes); ovpn - improved system stability when using cipher=blowfish128; socksify - listen on all addresses for incoming connections; ups - fixed board hibernation shutdown; usb - fixed cases where USB bus order could change on D53 devices; |
| The Dude 7.20.5 Stabl Nov 28, 2025 |
bgp - fixed BGP origin attribute initial value; bgp - properly apply link.local connection setting when it is used as an interface; bgp-vpn - fixed prefix matching for filters "dst" matcher; ospf - fixed wrong LS Ack warning; pimsm - added comment for static-rp; route - fixed gateway print when gateway is equal to BGP peers address; route - fixed some routes installed in main routing table instead of specified VRF; route - make discourse work with destinations from VRF; routing-filter - fixed inline filters that process BGP communities; system - improved incoming TCP connection responsiveness; user - improved login service stability on busy system; webfig - fixed broken WebFig after going to Quick Set (introduced in v7.20.4); wifi - improved regulatory compliance for Bangladesh country profile; winbox - group L3 and L4 fields under switch rules menu; |
