KeeneticOS 5.0

KeeneticOS release notes for Keenetic Hopper (KN-3811) in the Development Channel

KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.

Keenetic Hopper (KN-3811) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.

KeeneticOS 5.0 Alpha 7

14/07/2025

New

Improved

Fixed

KeeneticOS 5.0 Alpha 6

05/07/2025

Improved

Fixed

Fixed the tooltip display on the Wi-Fi Monitor tile of the System Dashboard page. [NWI-4298]
Fixed an issue where rekeying during an IKEv2 VPN connection initiated from a client to a server could cause the client to disconnect. [NDM-3922]
Resolved the binding of an IKEv2/IPsec VPN Server policy to a home network segment. [NDM-3925]
Addressed an issue that caused the ban remote host 127.0.0.1 message to appear in the System log when using the mobile application. [NDM-3926]
Fixed an issue with the DDNS service incorrectly reporting IPv6 update disabled despite the router having an IPv6 address. [NDM-3927]
Fixed an issue where importing WireGuard connection settings from a file with rearranged [Peer] and [Interface] blocks caused the system failed [0xcffd009e] error message to appear in the System log. [NDM-3930]

KeeneticOS 5.0 Alpha 5

29/06/2025

New

Improved

Implemented batch removal of User-Defined Routes per interface through the command line (CLI), allowing the destination arguments {network} {mask} | {host} to be optional. [NDM-3911]
- no ip route [{network} {mask} | {host} | default] [{gateway} | {interface}] [metric] — Deletes IPv4 routes.
- no ipv6 route [{prefix} | default] ({interface} [{gateway}] | {gateway}) — Deletes IPv6 routes.
- no ip policy {name} route [{network} {mask} | {host}] [{interface} | {gateway}] [ {metric}] — Deletes IPv4 routes in policy {name}.
- no ip policy {name} ipv6 route [{prefix} | default] ({interface} [{gateway}] | {gateway}) — Deletes IPv6 routes in policy {name}.
Example command: no ip route ISP — Deletes all IPv4 static routes from the ISP interface.
The following improvements have been applied to the Web Interface.
- Enabled the use of VLAN 0 for Ethernet cable connections, improving compatibility with certain Internet service providers. [NWI-4315]
- Added a new Automatic theme option that adapts to the system’s light or dark colour scheme preferences for a seamless user experience. [NWI-4242]
Reduced the "ZeroTier0": install accepted route log message flow. [NDM-3903]
Removed excess debug messages from the log. [SYS-1384]
Improved handling of routes without a specified outgoing interface. [NDM-3907]
Implemented support for configuring the WireGuard Peer obfuscation key in WireGuard connections via the command line interface (CLI). [NDM-3917]
- interface {name} wireguard peer obfs-key {obfs-key} — Set an obfuscation key {obfs-key} for WireGuard Peer connection {name}.
Enabled mDNS announcements for the Web Interface (HTTP) service, making it discoverable in the Home segment. [NDM-3919]

Fixed

The following fixes have been applied to the Web Interface.
- Fixed an issue where the registration pop-up for unregistered clients could not be closed properly. [NWI-4244]
- Fixed the table scrolling on the Application Traffic Analyser page. [NWI-4283]
- Fixed the table display on the Wi-Fi System → Transition Log page. [NWI-4284]
- Returned table borders around drag and drop elements. [NWI-4299]
Fixed an issue that caused the error message Io::Serial: terminal options verification failed to appear when using a UsbLte-type modem. [NDM-3905]
Fixed an issue that caused WifiStationX interfaces to incorrectly reset their MAC address to the default state. [NDM-3906]
Fixed the usage of the authgroup parameter with the anyconnect protocol in OpenConnect VPN connections. [NDM-3918]

KeeneticOS 5.0 Alpha 4

22/06/2025

Improved

Fixed

The following fixes have been applied to the Web Interface.
- Fixed the appearance of row borders in tables. [NWI-4250]
- Fixed the behaviour of the left-side navigation menu items in the expanded view to ensure correct interaction and display. [NWI-4198]
- Fixed the saving of the ICMP and TCP/UDP (all ports) and ICMP port forwarding rules. [NWI-4253]
- Corrected the tooltip behaviour for the desktop and mobile versions of the Mesh Wi-Fi System tile on System Dashboard. [NWI-4275]
Fixed the forwarding of negative DNS responses from the DNS proxy bound to 127.0.0.1, ensuring that local clients now receive these responses correctly. [SYS-1382]

KeeneticOS 5.0 Alpha 3

14/06/2025

Improved

Added ability to specify the 802.1p Priority Code Point (PCP) mapping to ISP VLANs on the Ethernet Cable Connections to Internet page for compatibility with certain ISPs. [NWI-3726]
The strict prevention of overlapping network configurations in the Allowed IPs field of the WireGuard peer settings has been replaced with a log notification. [NDM-3888]
Improved static route import/export by adding support for comments or remarks in Windows® batch files; lines ending with :: rem and & rem are now correctly identified as comments and preserved during import/export. [NDM-3889]
Routes example:
route add 5.5.5.0 mask 255.255.255.0 0.0.0.0 :: rem route-to-5-network
route add 4.4.4.4 mask 255.255.255.255 0.0.0.0 & rem route-to-4-net

Fixed

The following fixes have been applied to the Web Interface.
- Fixed colour notations for the single client tabs on the Traffic Monitor page. [NWI-4243]
- Removed redundant notice on shared user account permissions on the IKEv2/IPsec VPN Server application page. [NWI-4245]
Fixed the issue with accessing VPN servers when connecting via the IPv6 protocol. [NDM-3886]
Fixed inbound IPv6 connections to the built-in SSH server. [NDM-3891]
Fixed the WGOBFS netfilter chains for correct handling of WireGuard connections configured with the obfs-key setting. [NDM-3890]

KeeneticOS 5.0 Alpha 2

07/06/2025

New

Implemented the DD-WRT-compatible obfuscation key usage for WireGuard connections via the command line interface (CLI). [NDM-3883]
- interface {name} wireguard obfs-key {obfs-key} — Set an obfuscation key {obfs-key} for WireGuard connection {name}.
Implemented support for specifying a domain name (FQDN) in the IKEv2/IPsec VPN Server certificate via the command-line interface (CLI). [NDM-3884]
- crypto ipsec profile VirtualIPServerIKE2 identity-local fqdn {fqdn} — Set {fqdn} certificate for use in the IKEv2/IPsec VPN Server.
- crypto ipsec profile VirtualIPServerIKE2 identity-local fqdn ndns — Set the default KeenDNS certificate in the IKEv2/IPsec VPN Server.

Improved

Fixed

Fixed the issue for Windows clients connecting to WPA/WPA2/WPA3 Enterprise-secured networks with Allow WPS option enabled. [SYS-1361]
Corrected traffic accounting issues causing unintended disconnections for remote clients of the IKEv2/IPsec VPN Server. [NDM-3876]
Resolved issues during the simultaneous operation of IKEv1/IPsec VPN Server and Site-to-Site IPsec VPN connections under specific conditions. [NDM-3878]
Fixed an issue potentially causing system restarts under particular conditions when using the IKEv2/IPsec VPN Server. [NDM-3880]
The following fixes have been applied to the Web Interface.
- Fixed the issue with the Host dropdown on the Access settings card of the Domain Name page. [NWI-4204]

KeeneticOS 5.0 Alpha 1

01/06/2025

New

We are broadening our endorsement programme for Internet Operators by introducing support for the TR‑098 data model under the CPE WAN Management Protocol (CWMP). The feature is available on request. Contact our support (support@keenetic.de) for further details. [NDM-3870]
Added support for seamless integration with ZeroTier virtual networks on the Other Connections page. Create a Permit firewall rule to allow incoming traffic. [NWI-4164]
Implemented CLI commands to configure static IPv6 address and port translation rules, enhancing IPv6 NAT management via the command line. See the Command Reference Guide for full syntax. [NDM-3819]
- ipv6 static [protocol] ({interface} {mac} | {mac}) [{port} [through {end-port}] ] — defines a translation rule;
- ipv6 static rule {index} (disable | schedule {schedule}) — disables a rule or limits its operation by schedule.
Implemented detection and integration of OpkgTun and OpkgTap interfaces created within the OPKG environment, enabling their use in Connection Policies and static routes. [NDM-3846]

Improved

Enabled automatic mounting of the /lib/system-modules directory within the OPKG environment, so additional kernel modules become accessible immediately. [NDM-3693]
Implemented the capability to include a UsbQmi connection in BridgeX configurations, allowing cellular links to join network bridges. [NDM-3707]
Removed the obsolete cifs master command from the system’s SMB file and printer sharing component. [NDM-3827]
Enhanced the allow‑ips validator to prevent overlapping networks across multiple WireGuard peers, ensuring proper routing and peer isolation. [NDM-3868]

Fixed

In this section:

KeeneticOS updates — Dev Channel

KeeneticOS 5.0

KeeneticOS release notes for Keenetic Hopper (KN-3811) in the Development Channel

KeeneticOS 5.0 Alpha 7

New

Improved

Fixed

KeeneticOS 5.0 Alpha 6

Improved

Fixed

KeeneticOS 5.0 Alpha 5

New

Improved

Fixed

KeeneticOS 5.0 Alpha 4

Improved

Fixed

KeeneticOS 5.0 Alpha 3

Improved

Fixed

KeeneticOS 5.0 Alpha 2

New

Improved

Fixed

KeeneticOS 5.0 Alpha 1

New

Improved

Fixed

Search results