KeeneticOS 5.1
KeeneticOS release notes for Keenetic Runner 4G (KN-2212) in the Preview Channel
KeeneticOS releases in this channel provide the chance to be among the first to try the latest updates, performance improvements and new features, all with minimal risk. It is updated roughly every two weeks, with major updates about every two months. Releases here are typically more than a month in advance of release to the general audience in the Main Channel.
Keenetic Runner 4G (KN-2212) is currently in the Standard Updates support period and receives regular software updates, including security enhancements, new features, operating system updates, and bug fixes.
KeeneticOS 5.1 Beta 1
23/04/2026
New
Added a dedicated Access Points page in the Web Interface for Wi-Fi configuration. The Segments page now groups settings for all local networks. [NWI-4675]
Added support for advanced WireGuard ASC parameters via configuration file import or by using command line interface (CLI). [NDM-4298]
interface {name} wireguard asc {jc} {jmin} {jmax} {s1} {s2} {h1} {h2} {h3} {h4} [{s3} {s4} {i1} {i2} {i3} {i4} {i5}]
Implemented CLI commands to manage IPv6 access lists. [NDM-4130]
ipv6 access-list {acl}— create an IPv6 access list with name{acl};ipv6 access-list {acl} (permit | deny) ((tcp | udp) ({source} | (host {source}) | any) [port (((lt | gt | eq) {source-port}) | (range {source-port} {source-end-port}))] ({destination} | (host {destination}) | any) [port (((lt | gt | eq) {destination-port}) | (range {destination-port} {destination-end-port}))]) | ((((ipv6 | esp | ahp | pcp | sctp)) | {protocol}) ({source} | (host {source}) | any) ({destination} | (host {destination}) | any)) | (icmp ({source} | (host {source}) | any) ({destination} | (host {destination}) | any) [(icmp-message | ({icmp-type} [{icmp-code}]))])— specify details for IPv6 access rule;ipv6 access-list {acl} rule {index} (disable | (schedule {schedule}) | (order {new-index}) | (description {description}))— set description, schedule, priority, or turn off selected IPv6 access list rule;ipv6 access-list {acl} auto-delete— enable automatic deletion along with all bound network interfaces.
Added an IPv6 rules management tab to the Firewall page of the Web Interface. [NWI-4614]

Improved
The following improvements have been applied to the Web Interface.
Enhanced the Assignment column to better fit larger client device lists in the Application Filter menu. [NWI-4781]
Enabled the option to choose the connection when configuring custom IPv6 DNS servers. [NWI-4799]
Added a command-line option to the ping utility to enable the DF (Do Not Fragment) flag for network diagnostics. [NDM-4391]
tools ping {host} dont-fragment— probe the{host}network host with unfragmented packets.
The following improvements have been applied to the Web Interface.
Added support for eSIM, SMS, and USSD operations on embedded 5G/4G modems for Wi-Fi System extenders. [NWI-4738]
Enhanced the Client Lists page to display information on the client device's currently used connection policy, traffic sent and received, and IPv6 addresses. [NWI-4707]

Implemented a CLI command to enable the collection of application traffic statistics. On devices with less than 256 MB of RAM, application traffic statistics are not processed by default to optimize memory usage. [NDM-4367]
ntce stats no disable— restore application statistics recording.
Updated protection against attacks targeting the Wi-Fi client isolation feature, such as AirSnitch. [SYS-1725]
Improved the retrieval of cached responses for DNS requests to ensure proper functioning of FQDN-based routes. [NDM-4305]
Implemented turning off the modem power cycle for custom Internet availability checker (Ping Check) modes in the Web Interface. [NWI-4629]
Implemented basic access authentication (RFC 7617) for DNS-over-HTTPS (DoH) server URIs (
login:password@). [NDM-4168]Implemented a command line interface (CLI) option to connect to custom ZeroTier networks that use private root servers (moons). [NDM-4236]
interface {name} zerotier orbit {world-id} {moon-id}— set Zerotier connection using{world-id}and{moon-id}options.
The following improvements have been applied to the Web Interface.
Implemented prioritization support for DNS-based routing rules. [NWI-4659]
Added support for IPv6 URIs when configuring DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) secure DNS servers, such as
https://[2606:4700:4700::1111]:80/dns-query. [NWI-4610]Improved toggle state indication. [NWI-4661]
Fixed
Fixed the 2.4 GHz channel width display on single-band models. [SYS-1755]
Fixed the issue with switching to the backup connection when the primary connection check failed, and the Ping Check was not configured for the backup connection. [NDM-4392]
Fixed the Web Interface operation when IPv6 was turned off using the
system set net.ipv6.conf.all.disable_ipv6 1command. [NDM-4303]
Fixed an issue that caused the
domain must be filled for custom typeerror messages and prevented the use of some of the custom DDNS provider types. [NDM-4341]