KeeneticOS 5.1
KeeneticOS release notes for Keenetic Hero (KN-1012) in the Development Channel
KeeneticOS releases in this channel show what we're working on right now. We update roughly weekly. N.B.: While releases in this channel do undergo testing, they are still sometimes bugs present, as we want you, our community, to share in what's new as soon as possible. Your input is really valued.
Keenetic Hero (KN-1012) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
KeeneticOS 5.1 Alpha 2
21/02/2026
New
Implemented CLI commands to turn off the SSDP and WS-Discovery network host discovery methods. [NDM-4283]
interface {name} ssdp disable— turn off the Simple Service Discovery Protocol discovery on interface{name};interface {name} wsd disable— turn off the Web Services Dynamic Discovery device locator on interface{name}.
Improved
Improved the line wrapping for the mobile view of the System Log popup in the Web Interface. [NWI-4680]
Improved operation stability for USB drives that report unrealistic
discardcapabilities. [NDM-4291]
Fixed
Fixed the issue with the connection information display for wired client devices in the Wi-Fi System. [NDM-4282]
The following fixes have been applied to the Web Interface.
Fixed the sorting mode icon display in the Content Filter settings. [NWI-4671]
Fixed the tooltip display in the Proxy Connections list. [NWI-4670]
Resolved an issue where the ZeroWait DFS adjustment prevents the use of selected Wi-Fi channel width. [SYS-1544]
Eliminated security vulnerabilities: CVE-2014-3570 and CVE-2022-4304. [SYS-1542]
Enhanced the process for renewing the SSL certificate for the system domain name. [NDM-4284]
KeeneticOS 5.1 Alpha 1
16/02/2026
New
Implemented CLI commands to manage IPv6 access lists. [NDM-4130]
ipv6 access-list {acl}— create an IPv6 access list with name{acl};ipv6 access-list {acl} (permit | deny) ((tcp | udp) ({source} | (host {source}) | any) [port (((lt | gt | eq) {source-port}) | (range {source-port} {source-end-port}))] ({destination} | (host {destination}) | any) [port (((lt | gt | eq) {destination-port}) | (range {destination-port} {destination-end-port}))]) | ((((ipv6 | esp | ahp | pcp | sctp)) | {protocol}) ({source} | (host {source}) | any) ({destination} | (host {destination}) | any)) | (icmp ({source} | (host {source}) | any) ({destination} | (host {destination}) | any) [(icmp-message | ({icmp-type} [{icmp-code}]))])— specify details for IPv6 access rule;ipv6 access-list {acl} rule {index} (disable | (schedule {schedule}) | (order {new-index}) | (description {description}))— set description, schedule, priority, or turn off selected IPv6 access list rule;ipv6 access-list {acl} auto-delete— enable automatic deletion along with all bound network interfaces.
Implemented command line interface (CLI) tools to check and format the file system. To use it, install corresponding filesystem utilities via system components options selector on the System Settings page. [NDM-4239]
media {name} partition {partition} check— check the file system on a partition; ability to check depends on the installed filesystem utilities;media {name} partition {partition} format {type}— format a partition, supported file system types depend on the installed filesystem utilities.
Added an IPv6 rules management tab to the Firewall page of the Web Interface. [NWI-4614]

Introduced the Storages & Devices page to manage connected USB devices and storage units, including format, check, disconnect, and safe eject options. [NWI-4583]

Improved
Implemented basic access authentication (RFC 7617) for DNS-over-HTTPS (DoH) server URIs (
login:password@). [NDM-4168]Implemented a command line interface (CLI) option to connect to custom ZeroTier networks that use private root servers (moons). [NDM-4236]
interface {name} zerotier orbit {world-id} {moon-id}— set Zerotier connection using{world-id}and{moon-id}options.
The following improvements have been applied to the Web Interface.
Implemented prioritization support for DNS-based routing rules. [NWI-4659]
Added support for IPv6 URIs when configuring DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) secure DNS servers, such as
https://[2606:4700:4700::1111]:80/dns-query. [NWI-4610]Improved toggle state indication. [NWI-4661]
Added the DuckDNS preset to the Domain Name → DDNS page. [NDM-4273]
Fixed
Resolved an issue where the KeenDNS name was inaccessible to clients on the home network after switching the service from Cloud to Direct mode. [NDM-4255]
The following fixes have been applied to the Web Interface.
Fixed the editing of DNS-based routing rules. [NWI-4622]
Fixed the activation of toggles for the mobile view. [NWI-4632]
Fixed the shortening of client names on the Client Lists page. [NWI-4668]