Overview

This snapshot firmware is built automatically each day. Use it with caution.

New Features

• 2026-09-29: Added logic to check the TOB mechanism for model features.
• 2026-09-22: Added multilingual tooltips to explain repeater upload and download link rates.

Bug Fixes

• 2026-09-29: Preserved the current LED effect during fallback.
• 2026-09-29: Allowed DDNS and Tailscale hosts to pass OUI host validation.
• 2026-09-24: Fixed issues found during self-testing.
• 2026-09-23: Used the driver type of each interface when disconnecting clients.
• 2026-09-23: Used api.xvpn.io for X-VPN requests.
• 2026-09-23: Reduced CJK fallback fonts for external text.
• 2026-09-23: Improved OpenVPN performance.
• 2026-09-21: Fixed the netnat disable error message.
• 2026-09-21: Synchronized the configuration.
• 2026-09-21: Fixed stale online status for Wi-Fi clients.

Overview

This snapshot firmware is built automatically each day. Use it with caution.

New Features

• 2026-09-29: Added TOB checks for model features.
• 2026-09-22: Added multilingual tooltips explaining repeater upload and download link rates.

Bug Fixes

• 2026-09-29: Preserved the current LED effect during fallback.
• 2026-09-29: Allowed DDNS and Tailscale hosts to pass OUI host validation.
• 2026-09-24: Fixed issues found during self-testing.
• 2026-09-23: Fixed client disconnection by using the correct driver type for each interface.
• 2026-09-23: Updated XVPN requests to use api.xvpn.io.
• 2026-09-23: Reduced the number of CJK fallback font faces used for external text.
• 2026-09-23: Improved OpenVPN performance.
• 2026-09-21: Fixed the error message shown when disabling NetNAT.
• 2026-09-21: Synchronized the configuration.
• 2026-09-21: Fixed stale Wi-Fi client online status.
• 2026-09-20: Adjusted the KMWAN cellular interface to use low data mode for print level detection.

Overview

This snapshot firmware is built automatically each day. Use it with caution.

New Features

• 2026-09-29: Added TOB checks for model features.
• 2026-09-22: Added multilingual tooltips explaining repeater upload and download link rates.

Bug Fixes

• 2026-09-29: Preserved the current LED effect during fallback.
• 2026-09-29: Allowed DDNS and Tailscale hosts to pass OUI host validation.
• 2026-09-24: Fixed issues found during self-testing.
• 2026-09-23: Fixed client disconnection by using the correct driver type for each interface.
• 2026-09-23: Updated XVPN requests to use api.xvpn.io.
• 2026-09-23: Reduced the number of CJK fallback font faces used for external text.
• 2026-09-23: Improved OpenVPN performance.
• 2026-09-21: Fixed the error message shown when disabling NetNAT.
• 2026-09-21: Synchronized the configuration.
• 2026-09-21: Fixed stale Wi-Fi client online status.
• 2026-09-20: Adjusted the KMWAN cellular interface to use low data mode for print level detection.

Overview

This snapshot firmware is built automatically each day. Use it with caution.

New Features

• 2026-09-29: Added TOB mechanism checks for model features.
• 2026-09-22: Added multilingual tooltips for repeater upload and download link rates.
• 2026-09-18: Added support for the QMB416 model.

Bug Fixes

• 2026-09-29: Preserved the current LED effect in the fallback state.
• 2026-09-29: Allowed DDNS and Tailscale hosts to pass OUI Host validation.
• 2026-09-24: Fixed issues identified during self-testing.
• 2026-09-23: Used the driver type of each interface when disconnecting clients.
• 2026-09-23: Used api.xvpn.io for XVPN requests.
• 2026-09-23: Reduced the number of CJK fallback fonts used for external text.
• 2026-09-23: Optimized OpenVPN performance.
• 2026-09-21: Fixed the error message shown when disabling netnat.
• 2026-09-21: Synchronized configuration.
• 2026-09-21: Fixed stale online status for Wi-Fi clients.
• 2026-09-20: Adjusted the KMWAN cellular interface to low-data mode for print-level detection.
• 2026-09-19: Fixed a kernel network queue freeze caused by tc u32 rules on E5800.
• 2026-09-18: Fixed WPS button behavior when the main 5 GHz radio is disabled.
• 2026-09-18: Set the gl-led STOP value to 90.
• 2026-09-18: Moved factory reset LED handling to gl-led.
• 2026-09-18: Applied the configured MTU to the tunnel interface.
• 2026-09-18: Fixed AT+COPS? response parsing.
• 2026-09-17: Fixed initial package filtering in the installed list.
• 2026-09-17: Prevented MG1300 reconnections from getting stuck in the connecting state after an incorrect password.
• 2026-09-17: Fixed loading of the port_forward kernel module on QMB415.
• 2026-09-17: Fixed a QMB415 compilation error.
• 2026-09-17: Disabled WebSocket proxy connection logging.
• 2026-09-16: Bridged the WAN port in AP mode on legacy network layouts.

V4.11.0

Version Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, and security features, along with major enhancements to DNS, VPN, SQM, QoS, and traffic statistics. The OpenWrt version has also been updated to 25.12.

New Features

• OpenWrt Version: Updated OpenWrt to version 25.12.
• Network Quality Monitoring: Added the GL.iNet scoring system, providing key metrics such as latency, jitter, and packet loss. It also supports real-time speed display, active speed tests, and Bufferbloat grading.
• Security Scan: Added comprehensive audits for Wi-Fi security, WAN exposure, application security, and firmware update status. Provides a security score, risk list, and one-click fixes.
• UPnP: Added global UPnP control, including enable/disable controls, permission policy configuration, automatic mapping list display, and manual mapping deletion.
• Mesh: Added EasyMesh-compliant networking, supporting local Mesh node-based networking.
• GL.iNet Account: Added a centralized profile page for viewing and managing GL.iNet account services in one place.

Improvements and Enhancements

• DNS: Introduced a centralized DNS control panel for unified configuration of WAN, VPN, manual, and encrypted DNS, with a clear indication of the currently active DNS status.
• VPN: Expanded VPN capabilities with MFA (Multi-Factor Authentication) support for Surfshark and Windscribe. Integrated X-VPN and added support for the AmneziaWG 2.0 obfuscation protocol.
• SQM: Improved performance in multi-WAN, guest network, IoT, and VLAN scenarios. When interfaces change, rules automatically synchronize queues and AutoRate instances.
• QoS: Unified the configuration entry point, introduced mutually exclusive policy modes, and optimized UDP small-packet prioritization for Gaming Mode.
• Traffic Statistics: Upgraded the traffic visualization experience with client filtering, bar chart analysis, and pie chart analysis.
• GoodCloud: Simplified the account binding process and added an option to clear cloud account data during factory reset.

V4.11.1

Overview

This version fixes some known bugs.

Bug Fixes

• HTTPS: Fixed an issue where the device’s web admin interface could not be accessed over HTTPS (port 443) using a DDNS domain name or Tailscale MagicDNS.
• GoodPAS: Fixed an issue where conflicting features (e.g., Tap-s2s) could not be enabled after enabling GoodPAS and performing a reset.

V4.11.1

Overview

This version fixes some known bugs.

Bug Fixes

• HTTPS: Fixed an issue where the device’s web admin interface could not be accessed over HTTPS (port 443) using a DDNS domain name or Tailscale MagicDNS.

V4.11.0

Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, security, and VLAN features, alongside major enhancements to DNS, VPN, SQM, QoS, and traffic statistics.

New Features

• Network Quality: Adds GL.iNet Score, latency/jitter/packet loss metrics, real-time rate display, active speed tests, and Bufferbloat grading.
• Security Scan: Scans Wi-Fi safety, WAN exposure, app security, and firmware status; provides a security score, risk list, and quick fixes.
• VLAN: Adds native VLAN support based on IEEE 802.1Q for logical network segmentation, enhancing isolation and resource management efficiency.
• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

Optimizations & Enhancements

• DNS: Introduces a centralized DNS dashboard for WAN, VPN, Manual, and Encrypted DNS with clear active-status indicators.
• VPN: Expands VPN capabilities with MFA support for Surfshark and Windscribe, and integrates X-VPN with AmneziaWG 2.0 obfuscation support.
• SQM: Improves multi-WAN, guest network, IoT, and VLAN handling; rules now auto-sync queues and AutoRate instances upon interface changes.
• QoS: Unifies configuration entry, adds mutually exclusive policy modes, and optimizes UDP small-packet prioritization for Gaming mode.
• Data Statistics: Upgrades traffic visibility with client filtering, bar charts, and pie charts.
• GoodPAS: Renames AstroWarp to GoodPAS.
• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.11.0

Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, security, and VLAN features, alongside major enhancements to DNS, VPN, SQM, QoS, and traffic statistics.

New Features

• Network Quality: Adds GL.iNet Score, latency/jitter/packet loss metrics, real-time rate display, active speed tests, and Bufferbloat grading.
• Security Scan: Scans Wi-Fi safety, WAN exposure, app security, and firmware status; provides a security score, risk list, and quick fixes.
• VLAN: Adds native VLAN support based on IEEE 802.1Q for logical network segmentation, enhancing isolation and resource management efficiency.
• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

Optimizations & Enhancements

• DNS: Introduces a centralized DNS dashboard for WAN, VPN, Manual, and Encrypted DNS with clear active-status indicators.
• VPN: Expands VPN capabilities with MFA support for Surfshark and Windscribe, and integrates X-VPN with AmneziaWG 2.0 obfuscation support.
• SQM: Improves multi-WAN, guest network, IoT, and VLAN handling; rules now auto-sync queues and AutoRate instances upon interface changes.
• QoS: Unifies configuration entry, adds mutually exclusive policy modes, and optimizes UDP small-packet prioritization for Gaming mode.
• Data Statistics: Upgrades traffic visibility with client filtering, bar charts, and pie charts.
• GoodPAS: Renames AstroWarp to GoodPAS.
• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.11.0

Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, security, and VLAN features, alongside major enhancements to DNS, VPN, SQM, QoS, and traffic statistics.

New Features

• Network Quality: Adds GL.iNet Score, latency/jitter/packet loss metrics, real-time rate display, active speed tests, and Bufferbloat grading.
• Security Scan: Scans Wi-Fi safety, WAN exposure, app security, and firmware status; provides a security score, risk list, and quick fixes.
• VLAN: Adds native VLAN support based on IEEE 802.1Q for logical network segmentation, enhancing isolation and resource management efficiency.
• UPnP: Adds global UPnP controls and supports toggle switches, automatic mapping lists, and manual deletion.
• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

Optimizations & Enhancements

• DNS: Introduces a centralized DNS dashboard for WAN, VPN, Manual, and Encrypted DNS with clear active-status indicators.
• VPN: Expands VPN capabilities with MFA support for Surfshark and Windscribe, and integrates X-VPN with AmneziaWG 2.0 obfuscation support.
• SQM: Improves multi-WAN, guest network, IoT, and VLAN handling; rules now auto-sync queues and AutoRate instances upon interface changes.
• QoS: Unifies configuration entry, adds mutually exclusive policy modes, and optimizes UDP small-packet prioritization for Gaming mode.
• Data Statistics: Upgrades traffic visibility with client filtering, bar charts, and pie charts.
• GoodPAS: Renames AstroWarp to GoodPAS.
• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.11.0

Overview

This release introduces new Mesh, GL.iNet Account, network monitoring, security, and VLAN features, alongside major enhancements to DNS, VPN, SQM, QoS, and traffic statistics.

New Features

• Network Quality: Adds GL.iNet Score, latency/jitter/packet loss metrics, real-time rate display, active speed tests, and Bufferbloat grading.
• Security Scan: Scans Wi-Fi safety, WAN exposure, app security, and firmware status; provides a security score, risk list, and quick fixes.
• VLAN: Adds native VLAN support based on IEEE 802.1Q for logical network segmentation, enhancing isolation and resource management efficiency.
• UPnP: Adds global UPnP controls and supports toggle switches, automatic mapping lists, and manual deletion.
• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

Optimizations & Enhancements

• DNS: Introduces a centralized DNS dashboard for WAN, VPN, Manual, and Encrypted DNS with clear active-status indicators.
• VPN: Expands VPN capabilities with MFA support for Surfshark and Windscribe, and integrates X-VPN with AmneziaWG 2.0 obfuscation support.
• SQM: Improves multi-WAN, guest network, IoT, and VLAN handling; rules now auto-sync queues and AutoRate instances upon interface changes.
• QoS: Unifies configuration entry, adds mutually exclusive policy modes, and optimizes UDP small-packet prioritization for Gaming mode.
• Data Statistics: Upgrades traffic visibility with client filtering, bar charts, and pie charts.
• GoodPAS: Renames AstroWarp to GoodPAS.
• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.9.0

Overview

This firmware is exclusively designed for ExpressVPN co‑branded hardware devices. This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• An option to enable or disable specific profile configurations in WireGuard Server.
• Support for creating dedicated networks for IoT devices.
• Cellular Profile management and online APN database updates.
• ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Support for running the router as a Tailscale exit node and an IP masquerade option.
• An option to disable automatic detection and cancel in-progress firmware download.
• An automatic cleanup function for offline clients on the Client page.
• Support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation supports setting a custom Hostname.

Optimization

• VPN functionality with core interaction flows and visual design for a more intuitive interface and smoother operation.
• Wireless UI with streamlined layout and consistent visual styling for improved simplicity and usability.
• Cellular interface integrating cellular features.
• Encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and the ability to manually configure encrypted DNS servers.
• Parental Control feature with a streamlined setup process, supporting basic device management, internet time control, and content filtering.
• Tailscale version 1.92.5.
• AdGuard Home version 0.107.73.
• VPN Client supports batch selection and deletion of configurations.
• Port Forwarding feature automatically performs one-to-one mapping for external and internal port ranges.
• IPv6 connection status tracking in Multi-WAN is activated automatically when IPv6 is enabled.
• dnsmasq component version 2.92, incorporating upstream CVE fixes.
• AdGuardHome CVE-2026-47703 fix patch.

V4.9.2

Overview

This release adds support for SFP+ DAC modules and fixes several issues to improve the user experience.

New Features

• SFP+ DAC Module: Added support for SFP+ DAC modules.

Bug Fixes

• Wi-Fi: Fixed compatibility issues with some IoT devices and improved Wi-Fi stability.
• Ethernet Port: Fixed several compatibility issues.
• AdGuard Home: Fixed an issue where the AdGuard Home Custom DNS feature did not work properly.
• Tethering: Fixed an issue where iPhone 17 tethering connections could fail.
• System: Fixed an issue where the system Load Average was displayed incorrectly.

V4.10.1

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.
• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.10.1

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.
• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.
• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.
• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.10.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.10.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.10.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

• This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.
• This is a beta firmware with only basic testing completed. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.
• Introduces a centralized profile page, providing a unified dashboard to monitor and manage all associated account services.
• Adds native VLAN support based on IEEE 802.1q for logical network segmentation, enhancing isolation and resource management efficiency.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Redesigned the Cellular page to make cellular status, profiles, and related settings easier to view, configure, and manage.
• Redesigned the Ethernet port page to provide a clearer interface structure and a more intuitive network configuration experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Fixed an issue with incorrect log printing levels.
• Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.
• Fixed an issue where configured port forwarding rules did not take effect after toggling repeater mode on/off.
• Fixed an issue where SIM Auto Switch might not switch SIM cards after the traffic limit was reached.
• Fixed an issue where dual-SIM single-standby devices might not display both SIM slots correctly on the Cellular page.

V4.10.1

Overview

This version fixes some issues to improve the user experience.

Bug Fixes

• File System: Fixed a rare file system error caused by a power outage during initialization.
• Repeater: Fixed a Wi-Fi scanning error that could occur after a connection failure.
• Network Storage: Fixed an issue where the status display was incorrect when a USB drive was not connected.

V4.10.0

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.

• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.

• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.10.0

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.

• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.

• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.9.1

Overview

This release provides a clean OpenWrt firmware image.

V4.8.6

Overview

This release provides a clean OpenWrt firmware image.

V4.10.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.10.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.10.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

• This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.
• This is a beta firmware with only basic testing completed. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.
• Introduces a centralized profile page, providing a unified dashboard to monitor and manage all associated account services.
• Adds native VLAN support based on IEEE 802.1q for logical network segmentation, enhancing isolation and resource management efficiency.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Redesigned the Cellular page to make cellular status, profiles, and related settings easier to view, configure, and manage.
• Redesigned the Ethernet port page to provide a clearer interface structure and a more intuitive network configuration experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Fixed an issue with incorrect log printing levels.
• Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.
• Fixed an issue where configured port forwarding rules did not take effect after toggling repeater mode on/off.
• Fixed an issue where SIM Auto Switch might not switch SIM cards after the traffic limit was reached.
• Fixed an issue where dual-SIM single-standby devices might not display both SIM slots correctly on the Cellular page.

V4.10.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.10.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.10.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

• This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.
• This is a beta firmware with only basic testing completed. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.
• Introduces a centralized profile page, providing a unified dashboard to monitor and manage all associated account services.
• Adds native VLAN support based on IEEE 802.1q for logical network segmentation, enhancing isolation and resource management efficiency.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Redesigned the Cellular page to make cellular status, profiles, and related settings easier to view, configure, and manage.
• Redesigned the Ethernet port page to provide a clearer interface structure and a more intuitive network configuration experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Fixed an issue with incorrect log printing levels.
• Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.
• Fixed an issue where configured port forwarding rules did not take effect after toggling repeater mode on/off.
• Fixed an issue where SIM Auto Switch might not switch SIM cards after the traffic limit was reached.
• Fixed an issue where dual-SIM single-standby devices might not display both SIM slots correctly on the Cellular page.

V4.10.0

Overview

This is the initial firmware.

V4.9.0

Cautions

• Parental Controls: Due to a comprehensive feature redesign, existing configurations will not be preserved during this upgrade. Please back up your settings and reconfigure them after the update.
• VPN Failover: With the introduction of multi-node selection and intra-tunnel failover, the legacy inter-tunnel failover feature has been removed. Upgrading with configuration retention will enable the Kill Switch by default across all tunnels. Please back up your settings prior to upgrading.

Overview

This release introduces DPI and SQM for intelligent traffic management and QoS, overhauls the Wireless and VPN interfaces, and expands DNS encryption options alongside multiple service integrations.

New Features

• DPI (Deep Packet Inspection): Delivers traffic statistics, content filtering, and intelligent QoS.
• SQM (Smart Queue Management): Intelligently optimizes network queues to reduce latency and jitter.
• VPN Multi-Node Selection: Supports multiple node selection per tunnel with automatic failover on node failure.
• VPN Service Providers: Adds support for PureVPN and Windscribe under WireGuard protocol.
• WireGuard Server Profile Toggle: Enables or disables specific profile configurations.
• IoT Network Isolation: Creates dedicated networks for IoT devices.
• Cellular Profile Management: Supports cellular profile management and online APN database updates.
• ACL (Access Control List): Controls network traffic based on protocol, source/destination IP, and port rules.
• Tailscale Exit Node: Supports running the router as a Tailscale exit node with IP masquerade.
• Firmware Upgrade Control: Adds option to disable automatic detection and cancel in-progress downloads.
• Offline Client Cleanup: Automatically removes offline clients from the Client page.
• Address Reservation Hostname: Supports custom hostname configuration for address reservations.

Optimizations & Enhancements

VPN & Security Protocols

• VPN Core: Overhauls core interaction flow and visual design for a more intuitive interface.
• AmneziaWG: Introduces support for AmneziaWG 2.0 obfuscation protocol.

Core UI & UX Redesign

• Wireless UI: Redesigns the wireless interface with streamlined layout and consistent visual styling for improved simplicity.
• Cellular Interface: Integrates cellular features and improves overall user experience.
• VPN Client: Supports batch selection and deletion of VPN configurations.
• Parental Control: Streamlines the setup process with enhanced device management, internet time control, and content filtering.

System & Network Services

• Encrypted DNS: Expands encryption method support to DoH, DoT, and DoQ, adds more DNS provider options, and enables manual encrypted DNS server configuration.
• Tailscale: Upgrades to version 1.92.5.
• Port Forwarding: Automatically performs one-to-one mapping for external and internal port ranges.
• Multi-WAN IPv6: Activates IPv6 connection status tracking automatically when IPv6 is enabled.

Bug Fixes & Security

• Security Patches: Updates dnsmasq to v2.92 to incorporate upstream security fixes; applies the CVE-2026-47703 patch for AdGuard Home.

V4.8.6

Overview

This version fixes some issues to improve the user experience.

Bug Fixes

• Fixed the MIC certification issue.
• Fixed the issue where the BE200 wireless adapter could not connect after the upstream network encryption mode was changed from WPA3 to WPA2.
• Fixed the PN code issue.
• Fixed the scan dumpall interface issue and synchronized the corresponding driver patch.
• Fixed the issue with the Repeater blacklist rules and added a timeout mechanism for clearing blacklist entries.
• Fixed the issue where the Repeater would not select the optimal target BSS during reconnection after going offline, even when the BSS was not blacklisted.
• Fixed the issue where the previous state could override the new connection state when a connection was triggered immediately after disabling the Repeater.
• Fixed the issue where wireless clients were unexpectedly isolated from each other in AP mode.
• Fixed the issue where the bandwidth setting did not take effect when the automatic channel and bandwidth settings were changed at the same time.
• Updated the available channel list for 6G ACS to prevent ACS from selecting channels unsupported in certain countries or regions.
• Added support for connecting the Repeater to WPA3-EAP networks.
• Added support for displaying the Germany (DE) country code on the Luci page.
• Fixed the Web UI display issue in firmware versions that support obfuscated VPN.

V4.10.0

Cautions

• Parental Controls: Due to a comprehensive feature redesign, existing configurations will not be preserved during this upgrade. Please back up your settings and reconfigure them after the update.
• VPN Failover: With the introduction of multi-node selection and intra-tunnel failover, the legacy inter-tunnel failover feature has been removed. Upgrading with configuration retention will enable the Kill Switch by default across all tunnels. Please back up your settings before upgrading.

Overview

This release introduces core network intelligence capabilities like DPI and SQM, delivers an overhauled VPN and UI architecture, and rolls out key optimizations across systems, protocols, and touchscreens.

New Features

• DPI (Deep Packet Inspection): Introduces deep packet inspection to enable granular data statistics, content filtering, and intelligent QoS.
• SQM (Smart Queue Management): Adds smart queue management to intelligently optimize network queues, reducing latency and jitter under heavy load.
• GL.iNet Account: Introduces a centralized profile page, providing a unified dashboard to monitor and manage all associated account services.
• ACL (Access Control List): Introduces ACL rules to restrict network traffic based on protocol, source/destination IP, and port numbers.

Optimizations & Enhancements

VPN & Security Protocols

• VPN Dashboard Redesign: Overhauls the entire VPN dashboard, core interactive workflows, and client profile controls. Adds batch selection and deletion capabilities for VPN clients.
• VPN Multi-node & Failover: Introduces multi-node selection for VPN tunnels with automatic node failover. Implements proactive IP and DNS conflict detection specifically for VPN cascading environments.
• Expanded Protocol & Providers: Integrates the AmneziaWG 2.0 obfuscation protocol. Adds PureVPN and Windscribe under WireGuard protocol, and includes a toggle to enable/disable specific profiles for WireGuard Server.

UI & UX Redesign

• Wireless & Cellular: Redesigns the Wireless UI and simplifies the Cellular dashboard layout to improve visual consistency and streamline network configuration.
• Parental Controls: Streamlines the setup wizard, offering basic device management, internet schedules, and web content filtering.
• Ethernet Port: Optimizes the display of the Ethernet Port page for clearer status presentation and easier management.

System & Network Services

• AstroWarp: Redesigns the interface to achieve device pairing via an access code without account binding or complex configurations.
• Encrypted DNS: Enhances encrypted DNS with DoH, DoT, and DoQ support, expands DNS provider options, and enables manual server configuration.
• Tailscale: Upgrades Tailscale to v1.92.5 and adds support for running the router as a Tailscale exit node with an IP masquerading option.
• System & Clients: Adds a cancel option for in-progress firmware downloads, implements automatic offline client cleanup, and supports custom Hostnames for Address Reservation.
• Network Adjustments: Automatically activates IPv6 connection status tracking in Multi-WAN when IPv6 is enabled. Upgrades port forwarding to support automatic one-to-one mapping of port ranges.
• Subnet: Refines subnet management to streamline the centralized configuration of main and guest network parameters.
• Component Upgrades: Upgrades AdGuard Home to v0.107.73.

Touchscreen Experience

• Touchscreen UI: Overhauls the Touchscreen experience with manual firmware update checks, optimizes network prompts, refines VPN controls, cellular layout simplifications, and Guest Wi-Fi management (add/remove networks).

Bug Fixes & Security

• Security Patches: Updates dnsmasq to v2.92 to incorporate upstream security fixes; applies the CVE-2026-47703 patch for AdGuard Home.
• Cellular TTL: Fixed an issue where the Cellular TTL settings failed to take effect after an upgrade with configuration retention enabled.
• Cellular Stability: Fixed an issue where a timer timeout could cause UE to initiate detach, resulting in cellular network disconnection.

V4.10.0

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.

• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.

• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.10.0

Overview

This release introduces Mesh, GL.iNet Account, and native VLAN support. It also improves GoodCloud account management and VPN cascading.

New Features

• Mesh: Adds EasyMesh-compliant networking using local Mesh Nodes.

• GL.iNet Account: Introduces a centralized profile page for viewing and managing GL.iNet account services.

• VLAN: Adds IEEE 802.1Q native VLAN support to improve network segmentation and isolation.

Optimizations & Enhancements

• GoodCloud: Streamlines the account binding process and adds an option to clear cloud account data during a factory reset.

• VPN: Adds IP address and DNS conflict detection for cascaded VPN configurations.

V4.9.2

Overview

This version fixes some bugs.

V4.9.0

Cautions

• Parental Controls: Due to a comprehensive feature redesign, existing configurations will not be preserved during this upgrade. Please back up your settings and reconfigure them after the update.
• VPN Failover: With the introduction of multi-node selection and intra-tunnel failover, the legacy inter-tunnel failover feature has been removed. Upgrading with configuration retention will enable the Kill Switch by default across all tunnels. Please back up your settings prior to upgrading.

Overview

This release introduces core network intelligence capabilities like DPI and SQM, adds dedicated IoT networks and Cellular Profile management, delivers an overhauled VPN architecture with improved WireGuard performance, and rolls out key optimizations across protocols and system security.

New Features

• DPI (Deep Packet Inspection): Introduces deep packet inspection to enable granular data statistics, content filtering, and intelligent QoS.
• SQM (Smart Queue Management): Adds smart queue management to intelligently optimize network queues, reducing latency and jitter under heavy load.
• IoT Network: Adds support for creating isolated, dedicated networks specifically for IoT devices.
• Cellular Management: Introduces Cellular Profile management along with online APN database updates.
• Access Control List (ACL): Introduces ACL rules to restrict network traffic based on protocol, source/destination IP, and port numbers.

Optimizations & Enhancements

VPN & Security Protocols

• WireGuard Performance: Optimizes WireGuard performance for higher throughput and lower CPU overhead under heavy traffic.
• VPN Dashboard Redesign: Overhauls the entire VPN dashboard, core interactive workflows, and client profile controls. Adds batch selection and deletion capabilities for VPN clients.
• VPN Scaling & Failover: Introduces multi-node selection for VPN tunnels with automatic node failover.
• Expanded Protocol Support: Integrates support for the AmneziaWG 2.0 obfuscation protocol. Adds PureVPN and Windscribe support via WireGuard, and includes a toggle to enable/disable specific profiles in WireGuard Server.

Core UI & UX Redesign

• Wireless & Cellular: Redesigns the Wireless UI and consolidates cellular capabilities into a unified interface to streamline network provisioning and monitoring.
• Parental Controls: Streamlines the setup wizard, offering basic device management, internet schedules, and web content filtering.

System & Network Services

• Encrypted DNS: Enhances encrypted DNS with DoH, DoT, and DoQ support, expands DNS provider options, and enables manual server configuration.
• Tailscale: Upgrades Tailscale to v1.92.5 and adds support for running the router as a Tailscale exit node with an IP masquerading option.
• System & Clients: Adds a manual cancel option for in-progress firmware downloads, implements automatic offline client cleanup, and supports custom Hostnames for Address Reservation.
• Network Tweaks: Automatically activates IPv6 connection status tracking in Multi-WAN when IPv6 is enabled. Upgrades port forwarding to automatically perform one-to-one mapping for port ranges.
• Component Upgrades: Upgrades AdGuard Home to v0.107.73.

Bug Fixes & Security

• Security Patches: Updates dnsmasq to v2.92 to incorporate upstream security fixes; applies the CVE-2026-47703 patch for AdGuard Home.

V4.9.1

Overview

This is the initial firmware.

V4.9.1

Overview

This release primarily fixes several known defects to improve user experience.

Bug Fixes

• Fixed an issue where the wireless configuration page still displayed the previous channel after modifying the wireless channel.
• Fixed an issue where the server listening port shown on the VPN dashboard did not match the actual port when connected to NordVPN-OpenVPN.
• Fixed an issue where an abnormal VPN URL download caused the server list to parse to 0, instead of reusing the locally cached file.
• Fixed an issue where hostnames of wired PCs appeared as 'Unknown' on the Clients page after enabling DPI and rebooting the router, which previously required re-plugging the Ethernet cable for recovery.
• Fixed an issue where guest clients failed to access the DUT management interface when an access rule from Guest to LAN (192.168.8.1:80) was configured.

V4.9.0

Cautions

• Due to cellular code refactoring, the eSIM function on X2000 is unavailable in firmware v4.9 beta, and will be supported in a subsequent release. Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

This is a beta firmware with only basic testing completed. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Merge the AdGuardHome CVE-2026-47703 fix patch.

V4.9.1

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience, and updates OpenWRT to version 25.12.5 (kernel version 6.12.94).

This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Added support for setting a custom Hostname in Address Reservation.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-09: Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• 2026-06-09: Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• 2026-07-20: Fixed an issue where the gl-sdk4-tertf module would crash in multi-client scenarios with IPv6 enabled.
• 2026-07-20: Fixed an issue where the fan would not spin when the CPU temperature reached the set threshold.
• 2026-07-20: Fixed an issue where DPI data was occasionally not recorded.
• 2026-07-21: Fixed an issue where an error occurred when configuring multiple Hosts entries in the DNS settings.
• 2026-07-21: Fixed an issue where an error occurred when setting two or more 'Specified Domain/IP Lists' in the VPN dashboard.

V4.9.1

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience, and updates OpenWRT to version 25.12.5 (kernel version 6.12.94).

This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Added support for setting a custom Hostname in Address Reservation.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-09: Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• 2026-06-09: Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• 2026-07-20: Fixed an issue where the gl-sdk4-tertf module would crash in multi-client scenarios with IPv6 enabled.
• 2026-07-20: Fixed an issue where the fan would not spin when the CPU temperature reached the set threshold.
• 2026-07-20: Fixed an issue where DPI data was occasionally not recorded.
• 2026-07-21: Fixed an issue where an error occurred when configuring multiple Hosts entries in the DNS settings.
• 2026-07-21: Fixed an issue where an error occurred when setting two or more 'Specified Domain/IP Lists' in the VPN dashboard.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned Wireless UI with streamlined layout and consistent visual styling for improved simplicity and usability.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Merge the AdGuardHome CVE-2026-47703 fix patch.

V4.9.0

Cautions

• Due to cellular code refactoring, the eSIM function on XE3000/X3000 is unavailable in firmware v4.9 beta, and will be supported in a subsequent release.
• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-29: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-01: Fixed an issue with incorrect log printing levels.
• 2026-06-09: Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• 2026-06-09: Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• 2026-07-01: Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• 2026-07-01: Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.
• 2026-07-01: Fixed an issue where configured port forwarding rules did not take effect after toggling repeater mode on/off.

V4.9.0

Cautions

• Due to cellular code refactoring, the eSIM function on XE3000/X3000 is unavailable in firmware v4.9 beta, and will be supported in a subsequent release.
• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-29: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-01: Fixed an issue with incorrect log printing levels.
• 2026-06-09: Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• 2026-06-09: Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• 2026-07-01: Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• 2026-07-01: Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.
• 2026-07-01: Fixed an issue where configured port forwarding rules did not take effect after toggling repeater mode on/off.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

Bug Fixes

• 2026-05-29: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-09: Fixed an issue where dnsmasq allocated one extra IP address from the address pool.
• 2026-06-09: Fixed an issue where VPN could not connect when both Global Kill Switch and AdGuardHome were enabled.
• 2026-07-01: Fixed an issue where iPhone Tethering fails to obtain an IP address on closed-source firmware after previously successfully connecting to an OP firmware router.
• 2026-07-01: Fixed an issue where the DDNS configuration in LuCI was incorrectly preserved to gl_ddns during system upgrade.

V4.8.3

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.
• Added network storage functionality.

Optimization

• Refactored the Cellular function to improve performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Cellular, Wi-Fi and LED light control.
• Optimized VPN setup wizard to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Upgrade function, replacing Release Candidate with Gray Release.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.1.
• Upgraded Stubby to version 0.4.3.
• Optimized the Repeater's detection logic of Captive Portal to be compatible with identifying more authentication pages in different formats.
• Optimized the switching logic of the Repeater; when the internet is already connected, the repeater will not scan for available networks to ensure wireless communication quality.

Removal

• Removed Tor function due to insufficient remaining memory.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned Wireless UI with streamlined layout and consistent visual styling for improved simplicity and usability.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Merge the AdGuardHome CVE-2026-47703 fix patch.

V4.5.23

Overview

This is a beta firmware with only basic testing completed. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• 2026-06-11: Backported the known vulnerabilities (CVEs) from dnsmasq version 2.92.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Merge the AdGuardHome CVE-2026-47703 fix patch.

V4.8.8

Overview

This version fixes some bugs.

V4.8.5

Overview

This version fixes some issues to improve the user experience.

Bug Fixes

• Fixed an issue where dial-up failed due to slow network registrations on certain ISP networks.

V4.8.4

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018
• Fixed the SIM card data usage statistics issue
• 2026-06-02: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• 2026-06-02: Fixed the time zone synchronization issue and the default SSID error issue.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.
• Fixed an issue where, after an upgrade with DoT encryption type retained, users were unable to switch DNS servers and other encryption types failed to take effect.

V4.3.29

Overview

This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.3.30

Overview

This version mainly fixed some known bugs and security vulnerabilities. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• 2026-05-29: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.3.26

Overview

This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.8.4

Overview

This version fixes some issues and includes optimizations to improve the user experience.

Optimization

• Optimized the automatic reconnection mechanism for repeater in AC+AP or mesh scenarios to speed up reconnection.
• Adjusted the battery temperature detection to improve battery level display.
• Optimized the display of locked carrier names.
• Optimized the country code information in the database.
• Optimized the data usage statistics feature.

Bug Fixes

• Fixed an issue where disabling the repeater occasionally failed when continuously disabling it on the touchscreen.
• Fixed an issue where the OTA upgrade popup was missing on the touchscreen home page in AP mode and Extender mode.
• Fixed an issue where SMS functionality became unavailable after repeatedly switching network types and SIM cards.
• Fixed an issue where manually configured APN was not correctly displayed on the SIM card details page when using a MobileX SIM card.
• Fixed an issue where the Mudi 7 could not scan nearby Wi-Fi networks when the surrounding Wi-Fi had a special OUI type (0050f2).
• Fixed the issue of unstable cellular network caused by incomplete support for segment characteristics of partial base stations in Europe.

V4.3.29

Overview

This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.

• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.

• Optimized the Cellular interface by integrating cellular features, improving the user experience.

• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.

• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.

• Upgraded Tailscale to version 1.92.5.

• Upgraded AdGuard Home to version 0.107.73.

• VPN Client now supports batch selection and deletion of configurations.

• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.

• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.

Bug Fixes

• 2026-05-28: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

Overview

This is a snapshot firmware, generated by the automatic compiler on a daily basis, please use it with caution.

New Features

Bug Fixes

Overview

This is a snapshot firmware, generated by the automatic compiler on a daily basis, please use it with caution.

New Features

Bug Fixes

V4.8.5

Overview

This version mainly fixed some known bugs. This is a beta firmware, which has only undergone basic testing. Please use with caution and contact [email protected] if you encounter any problems.

Bug Fixes

• Fixed modem dial-up issues.
• Fixed abnormal log printing issues related to the modem.
• Fixed the issue where OLED did not display VPN connection status.
• Fixed the issue where Cell Info was not fully displayed when EM060K module used multi-band carrier aggregation for networking.
• Fixed SMS display issues.
• 2026-05-21: Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.9.0

Cautions

• Due to a comprehensive redesign of the Parental Control feature in V4.9.0, existing configurations for this feature will not be preserved during the upgrade. You will need to reconfigure your settings after the update. Please back up your settings first.
• With the introduction of multi-select configuration and intra-tunnel failover for VPN tunnels in V4.9.0, the inter-tunnel failover feature has been removed. When upgrading with configuration retention, the Kill Switch will be enabled by default in all tunnels. Please back up your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added support for DPI (Deep Packet Inspection), providing data statistics, content filtering, and intelligent QoS (Quality of Service).
• Added SQM (Smart Queue Management) to intelligently optimize network queues, reduce latency and jitter.
• Added multi-node selection for VPN tunnels, with automatic failover in case of node failure.
• Added support for PureVPN and Windscribe services under the WireGuard protocol.
• Added an option to enable or disable specific profile configurations in WireGuard Server.
• Added support for creating dedicated networks for IoT devices.
• Added Cellular Profile management and online APN database updates.
• Added ACL (Access Control List) functionality to control network traffic based on rules such as protocol, source IP address, destination IP address, and port number.
• Added support for running the router as a Tailscale exit node and an IP masquerade option.
• Added an option to disable automatic detection and cancel in-progress firmware download.
• Added an automatic cleanup function for offline clients on the Client page.
• Added support for the AmneziaWG 2.0 obfuscation protocol.
• Address Reservation now supports setting a custom Hostname.

Optimization

• Redesigned the VPN functionality, optimizing core interaction flows and visual design for a more intuitive interface and smoother operation.
• Redesigned the Wireless interface by simplifying the layout and unifying the visual hierarchy, making it cleaner and more intuitive.
• Optimized the Cellular interface by integrating cellular features, improving the user experience.
• Optimized encrypted DNS functionality, supporting DoH, DoT, and DoQ encryption methods, along with more DNS provider options, and added the ability to manually configure encrypted DNS servers.
• Improved the Parental Control feature by streamlining the setup process, supporting basic device management, internet time control, and content filtering.
• Upgraded Tailscale to version 1.92.5.
• Upgraded AdGuard Home to version 0.107.73.
• VPN Client now supports batch selection and deletion of configurations.
• Improved the Port Forwarding feature to automatically perform one-to-one mapping for external and internal port ranges.
• When IPv6 is enabled, IPv6 connection status tracking in Multi-WAN is activated automatically.
• Update the dnsmasq component to version 2.92, incorporating upstream CVE fixes.

V4.8.6

Overview

• This version mainly fixed some known bugs.

V4.8.3

Overview

This version mainly fixed some known bugs and security vulnerabilities.

V4.8.4

Overview

This is initial firmware.

V4.8.5

Overview

This version mainly fixed some bugs and optimizes the DPI function.

Optimization

• Optimized the enabling logic of DPI function

Bug Fixes

• Fixed an issue with SQM rate unit conversion.
• Fixed an issue where enabling DPI-related features could cause Tailscale's dnsmasq to malfunction.
• Fixed an issue where the IPV6_NAT network throughput may be abnormally when LAN1 was set to WAN mode.
• Fixed an issue where abnormal priority of iptables rules caused SYN-ACK packet loss when PPPoE protocol in WAN.
• Fixed an issue where DDNS failed to report the WAN IP.
• Fixed an issue where mark on the VPN server caused VPN clients to fail to connect.

V4.8.3

Overview

This version mainly fixes abnormal internet dialing issues for specific carriers.

Bug Fixes

• Fixed an issue where abnormal dialing with Verizon carrier.

V4.8.7

Overview

• This version fixes some bugs.

V4.3.29

Overview

This version mainly fixed some known bugs and security vulnerabilities.

V4.8.4

Overview

This version mainly fixed some known bugs and security vulnerabilities.

Optimization

• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

New Features

• Added support for the AmneziaWG 2.0 obfuscation protocol.

V4.8.2

Overview

This version fixes some issues to improve the user experience.

Optimization

• Optimized high-temperature battery charging to speed up charging in certain temperature ranges.
• Optimized repeater status display on touchscreen.

Bug Fixes

• Fixed an issue where locking the NR base station on SIM2 would fail when two SIM cards from different carriers were inserted.
• Fixed an issue where unlocking would fail on eSIM after switching from SIM2 with a successful NR base station locking.
• Fixed an issue where some PD adapters could not charge.
• Fixed an issue where the top status bar on the touchscreen would not display properly after a failed online upgrade via the touchscreen.
• Fixed an issue where downstream devices of Mudi 7 failed to obtain an IP address when Mudi 7 was connecting to certain MTK chips Wi-Fi networks in Extender mode.

V4.8.4

Overview

This version mainly fixed some known bugs.

V4.8.4

Overview

This version mainly fixed some known bugs.

Bug Fixes

• Fixed modem dial-up issues.
• Fixed abnormal log printing issues related to the modem.
• Fixed the issue there OLED did not display VPN connection status.
• Fixed the issue where Cell Info was not fully displayed when EM060K module used multi-band carrier aggregation for networking.
• Fixed SMS display issues.

V4.8.4

Overview

This version mainly fixed some known bugs.

Optimization

• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

New Features

• Added support for the AmneziaWG 2.0 obfuscation protocol.

V4.8.4

Overview

This version mainly fixed some known bugs.

Optimization

• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

New Features

• Added support for the AmneziaWG 2.0 obfuscation protocol.

V4.8.4

Overview

This version mainly fixed some known bugs.

Optimization

• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

New Features

• Added support for AmneziaWG obfuscation protocol.

V4.8.3

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018
• Fixed the SIM card data usage statistics issue

V4.8.3

Cautions

The OpenWRT version has been upgraded. Please do NOT keep settings when downgrading to an earlier version. Please backup your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12, support dco to improve OpenVPN performance.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.
• Replaced NTPD with Chrony, which supports the NTS protocol.
• Optimized the Repeater's detection logic of Captive Portal to be compatible with identifying more authentication pages in different formats.
• Optimized the switching logic of the Repeater; when the internet is already connected, the repeater will not scan for available networks to ensure wireless communication quality.
• Optimized the Upgrade function, replacing Release Candidate with Gray Release.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018
• Merge the patch related to CVE-2025-62526.

V4.8.1

Overview

This version introduces a new feature and fixes some issues to improve the user experience.

New Features

• Added online update support for the touchscreen.

Optimization

• Optimize battery level recognition and charging after hot-swapping the battery at low battery level.

Bug Fixes

• Fixed an issue where verification was still required after successful portal authentication.
• Fixed an issue where OpenVPN failed to connect after a power cycle when connected in TAP‑S2S mode.
• Fixed an issue where SMS messages in Greek and Italian were displayed as garbled characters.

V4.8.3

Overview

This version mainly fixed some known bugs.

Optimization

• Replaced NTPD with Chrony, which supports the NTS protocol.
• Optimized the Repeater's detection logic for Captive Portal to be compatible with and identify more authentication pages in different formats.
• Optimized the switching logic of the Repeater: when the internet is already connected, the repeater will not scan for available networks to ensure wireless communication quality.
• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018.
• Merge the patch related to CVE-2025-62526.
• Fixed the issue of iPhone 16 series failed to connect to MLO network.
• Fixed the issue where the WireGuard server cannot access the LAN IP of the WireGuard client without enabling SNAT.
• Fixed the issue where some iOS browsers displayed VPN Dashboard abnormally
• Fixed the issue where changing the failover priority would cause abnormal IPv6 internet access when both Multi-WAN and IPv6 are enabled.
• Fixed the issue where the IPv6 DNS was mistakenly pointed to Cloudflare (2606:4700:4700:1001) instead of the server's tunnel IP when the client connected to the OpenVPN server.
• Fixed the issue where DNS requests from clients that do not comply with VPN rules still reach AdGuard Home when All Other Traffic is disabled.
• Removed duplicate OpenDNS service provider in the options of Manual DNS settings.
• Fixed the issue where the WebDAV certificate address was replaced with the guest network address after modifying the latter, resulting in abnormal connections for LAN side devices.
• Fixed the issue where the port check function could not distinguish protocols in VPN server mode.
• Fixed the issue of no failure reminder when WireGuard port conflicts occurred.
• Fixed the issue where the exclusion list rule set did not take effect when two VPN tunnels were enabled.

V4.8.4

Overview

This version improves the interface interaction and fixes some known bugs.

Optimization

• Optimized the AstroWarp feature design, allowing users to connect to the router using an access code without binding account or complex configurations. Users can also manage connections and top up plans directly on the router interface.

V4.8.5

Overview

• This release focuses on targeted optimizations of the USB-to-Ethernet data path, improving forwarding performance and link negotiation stability to deliver a better network experience in high-bandwidth scenarios.

Optimization

• Optimized the USB-to-Ethernet forwarding path, significantly enhancing throughput and overall forwarding stability.

Bug Fixes

• Fixed an issue where the USB 2.5G Ethernet interface failed to negotiate to 2.5 Gbps in certain scenarios.
• Fixed an issue where the wired WAN interface exhibited abnormally low upload throughput, restoring normal upstream performance.

V4.8.4

Overview

This is the init firmware.

V4.8.7

Overview

This version fixes some bugs.

V4.8.6

Overview

This version fixes some bugs.

V4.8.4

Overview

• release initial version

V4.8.3

Overview

This version mainly fixed some known bugs.

Optimization

• Replaced NTPD with Chrony, which supports the NTS protocol.
• Optimized the Repeater's detection logic of Captive Portal to be compatible with identifying more authentication pages in different formats.
• Optimized the switching logic of the Repeater; when the internet is already connected, the repeater will not scan for available networks to ensure wireless communication quality.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018.
• Merge the patch related to CVE-2025-62526.
• Fixed iPhone 16 series connection to MLO network failed.
• Fixed the issue where WireGuard server cannot communicate with the LAN side of the router (WireGuard client) without enabling SNAT.
• Fixed the issue of abnormal VPN Dashboard display in some IOS browsers.
• Fixed the issue of using IPv6 to access the internet after changing the failover priority when using Multi WAN with IPv6 enabled.
• Fixed an issue in OpenVPN Server mode where the client's IPv6 DNS was incorrectly pointed to Cloudflare (2606:4700:4700:1001) instead of the server's tunnel IP after connection.
• Fixed the issue where DNS requests still reach AdGuard Home for clients not within VPN rules when All Other Traffic is disabled.
• Fixed duplicate OpenDNS service provider in the options of Manual DNS settings.
• Fixed the issue of LAN side device connection caused by the address of the WebMAV certificate being changed to the address of the guest network after modifying the guest network address.
• Fixed the issue where the port check function could not distinguish protocols in VPN server mode.
• Fixed the issue of no failure reminder when WireGuard port conflicts occurred.
• Fixed the issue where two VPN tunnels were opened and exclusion list rules were set, but the rules did not take effect.

V4.8.3

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized vSIM functionality.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12, support dco to improve OpenVPN performance.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.5

Overview

This version fixes bugs related to repeater and IPv6.

Bug Fixes

• Fixed the issue of network instability after the repeater was disconnected.
• Fixed some bugs about IPv6

V4.8.3

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized vSIM functionality.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12, support dco to improve OpenVPN performance.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.3

Overview

This version mainly fixed some known bugs and updated the OpenWRT version to 24.10.4 (kernel version 6.6.110).

Bug Fixes

• Fixed an issue where DNS packets failed to be blocked when toggling off the 'All Other Traffic' switch during a VPN connection failure, while AdGuard Home was enabled and the tunnel Killswitch was disabled.
• Fixed an issue in OpenVPN Server mode where the client's IPv6 DNS was incorrectly pointed to Cloudflare (2606:4700:4700:1001) instead of the server's tunnel IP after connection.
• Fixed the issue where the VPN dashboard page rendered incompletely and caused content display problems when accessing the Web UI via some older versions of iOS Safari.

V4.8.3

Overview

This version mainly fixed some known bugs and updated the OpenWRT version to 24.10.4 (kernel version 6.6.110).

Bug Fixes

• Fixed an issue where DNS packets failed to be blocked when toggling off the 'All Other Traffic' switch during a VPN connection failure, while AdGuard Home was enabled and the tunnel Killswitch was disabled.
• Fixed an issue in OpenVPN Server mode where the client's IPv6 DNS was incorrectly pointed to Cloudflare (2606:4700:4700:1001) instead of the server's tunnel IP after connection.
• Fixed the issue where the VPN dashboard page rendered incompletely and caused content display problems when accessing the Web UI via some older versions of iOS Safari.

V4.8.3

Overview

This version mainly fixed some known bugs.

Optimization

• Optimized the firmware upgrade function, replacing Release Candidate with Gray Release.

Bug Fixes

• Fixed an issue where DNS packets failed to be blocked when toggling off the ‘All Other Traffic’ switch during a VPN connection failure, while AdGuard Home was enabled and the tunnel Killswitch was disabled.
• Fixed an issue in OpenVPN Server mode where the client’s IPv6 DNS was incorrectly pointed to Cloudflare (2606:4700:4700:1001) instead of the server’s tunnel IP after connection.
• Fixed the issue where the VPN dashboard page renders incompletely and causes content display problems when accessing the Web UI via some older versions of iOS Safari.

V4.8.3

Cautions

The OpenWRT version has been upgraded. Please do NOT keep settings when downgrading to an earlier version. Please backup your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the device binding functionality of the GoodCloud platform.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018
• Fixed when configuring the VPN domain name policy, the domain names in the list cannot be resolved properly
• Fixed OLED cannot accurately display the VPN status

V4.8.2

Cautions

The OpenWRT version has been upgraded. Please do NOT keep settings when downgrading to an earlier version. Please backup your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the device binding functionality of the GoodCloud platform.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.2

Cautions

The OpenWRT version has been upgraded. Please do NOT keep settings when downgrading to an earlier version. Please backup your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.2

Cautions

The OpenWRT version has been upgraded. Please do NOT keep settings when downgrading to an earlier version. Please backup your settings first.

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.2

Overview

This version mainly fixed some known bugs and security vulnerability.

Bug Fixes

• Improved issues related to Direct Routing applications
• Fixed the issue where DNS requests did not go through the VPN tunnel when AdGuard Home's upstream DNS server was customized to NextDNS's HTTP/3 and QUIC protocols.
• Fixed the issue where parental controls might not take effect when the VPN client was enabled.
• Fixed security vulnerability CVE-2025-44018.

V4.8.2

Overview

This version mainly fixed some known bugs and security vulnerability.

Bug Fixes

• Improved issues related to Direct Routing applications
• Fixed the issue where DNS requests did not go through the VPN tunnel when AdGuard Home's upstream DNS server was customized to NextDNS's HTTP/3 and QUIC protocols.
• Fixed the issue where parental controls might not take effect when the VPN client was enabled.
• Fixed security vulnerability CVE-2025-44018

V4.8.2

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance to support enabling multiple VPN clients simultaneously.
• Added VPN composite policy for traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only for MAC-based VPN policies.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added HTTPS support for RTTY.
• Added a one-click option to send logs to technical support.
• Added IPv6 support for VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

Bug Fixes

• Fixed security vulnerability CVE-2025-44018

V4.8.1

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance, allowing support for enabling multiple VPN clients at the same time.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

V4.8.1

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance, allowing support for enabling multiple VPN clients at the same time.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, and Wi-Fi.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

V4.8.1

Overview

This version mainly fixed some known bugs.

Bug Fixes

• Improved issues related to Direct Routing applications
• Fixed the issue where DNS requests did not go through the VPN tunnel when AdGuard Home's upstream DNS server was customized to NextDNS's HTTP/3 and QUIC protocols.
• Fixed the issue where parental controls might not take effect when the VPN client was enabled.

V4.7.15

Overview

This version includes adjustments to enhance device security.

New Features

• Added a global SSH toggle.

Optimization

• Added a user privacy policy statement to the initialization wizard page.
• Added a security warning when WiFi security is set to OPEN.
• Optimized the network abnormal traffic protection mechanism, adding flood protection for ICMP and other protocols.
• LuCI functionality is no longer pre-installed; users can install LuCI with one click on the advanced settings page.
• Optimized Nginx log management, adding login and configuration change logs. Logs are automatically synchronized to Flash upon reboot.

V4.8.0

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. It also updates the OpenWRT version to 24.10.2 (kernel version 6.6.93).

New Features

• Added VPN multi-instance, allowing support for enabling multiple VPN clients at the same time.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Cellular, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized vSIM functionality.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

V4.8.0

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience. It also updates the OpenWRT version to 24.10.2 (kernel version 6.6.93).

New Features

• Added VPN multi-instance, allowing support for enabling multiple VPN clients at the same time.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Cellular, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized vSIM functionality.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

V4.7.15

Overview

This version includes adjustments to enhance device security.

New Features

• Added a global SSH toggle.

Optimization

• Added a user privacy policy statement to the initialization wizard page.
• Added a security warning when WiFi security is set to OPEN.
• Optimized the network abnormal traffic protection mechanism, adding flood protection for ICMP and other protocols.
• LuCI functionality is no longer pre-installed; users can install LuCI with one click on the advanced settings page.
• Optimized Nginx log management, adding login and configuration change logs. Logs are automatically synchronized to Flash upon reboot.
• Repairing cellular traffic statistics is ineffective
• Fix that the modem cannot register for 4G network connection

V4.8.0

Overview

This version introduces several new features and enhancements that improve the interface interaction for the overall user experience.

New Features

• Added VPN multi-instance, allowing support for enabling multiple VPN clients at the same time.
• Added VPN composite policy, allowing traffic diversion based on multiple criteria, including source interface, source MAC address, and destination domain/IP.
• Added an option to enable or disable VPN internet access on the Clients page, which is effective only when the VPN policy is based on MAC.
• Added the isolation feature between the Guest Network and the Upstream network.
• Added support for HTTPS in RTTY.
• Added a one-click option to send logs to technical support.
• Added support for IPv6 in VPN.

Optimization

• Refactored the Cellular function for improved performance and user interface, supporting more parameter configurations and status displays.
• Redesigned the UI style, improved the Web Admin Panel topology, and introduced new controls to support the presentation of complex services.
• Optimized toggle switch functionality to support Repeater, Wi-Fi and LED light control.
• Optimized the guidance of VPN functionality to simplify usage.
• Optimized VPN configuration to support IPv6.
• Optimized the export of client configuration files for the VPN Server, allowing users to manually enter the server address in the configuration file.
• Optimized the Clients page, supporting quick setting of reserved IP addresses.
• Optimized the Log display to support filtering by Log level, module, and keywords, as well as exporting more debugging information.
• Optimized the GoodCloud platform's device binding functionality.
• Optimized the display of VPN Server page status information.
• Optimized the Repeater auto-switching logic.
• Improved the ease of use of the AstroWarp functionality.
• Upgraded OpenVPN to version 2.6.12.
• Upgraded Dnscrypt-proxy to version 2.1.5.
• Upgraded Stubby to version 0.4.3.
• Upgraded Zerotier to version 1.14.1.

V4.7.14

Overview

This version primarily addresses certain MLO-related issues and improves the stability of MLO Wi-Fi.

Improvement

• Fixed issues related to MLO and 6 GHz configuration.
• Resolved an issue where DLNA functionality would fail after rebooting with a USB drive inserted.
• Fixed a problem in the network setup wizard where logging into NordVPN would incorrectly display the connection status and prevent the VPN from being disabled.

Security fix

mac80211: backport upstream fixes for FragAttacks(CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-26139, CVE-2020-26140, CVE-2020-26141, CVE-2020-26142, CVE-2020-26143, CVE-2020-26144, CVE-2020-26145, CVE-2020-26146, CVE-2020-26147)

Important bug fix

Fixed a BUG where the OpenVPN connection status was displayed incorrectly on the E750 LCD
Fixed XE300 modem manual settings always being overwritten when reboot
Fixed DNS leakage when using OpenVPN and Wireguard

OpenWrt Distribution

Based on OpenWrt 19.07.7 (AR150, MIFI, AR300M, USB150, N300, AR750, AR750S, X750, E750, X1200,XE300, MT300N-V2, MT1300, MV1000)
Based on QSDK11 (B1300, S1300, AP1300)

UI

Added VPN status indicator icon to the navigation page
Added quick navigation to Wireguard client commercial configuration
Removed the import method with JSON format in Wireguard client

Important bug fix

Fixed the problem that AdGuardHome cannot be upgraded
Fixed MV1000 memory leak problem
Fixed tethering problem with iOS14 system
Fixed the problem that port 53 is exposed to the WAN after opening Override DNS Settings for All Clients
Fixed the problem that the client of the router cannot access the address of the Wireguard server when using Wireguard client
Fixed the problem that the Wireguard client AllowedIPs parameter does not take effect
Fixed the problem that Mullvad WireGuard needs to manually modify the MTU to 1380
Fixed the X1200 dual-module IP exchange problem
Fixed the problem that some websites cannot be opened after using VPN policy (AR750S, X1200)
Fixed other known issues

New features

Supported traffic statistics in bridge mode
Supported OpenVPN bridge
Supported NextDNS personal ID
File sharing supported closing LAN sharing and supports shared folder selection
OpenVPN server supported CHACHA20-POLY1305 encryption
OpenVPN server supported Authentication option setting
Wireguard server supported local network access switch
The modem supported QCM protocol, SMS forwarding, adding Auth, Proto, TTL, and other configuration options (MIFI, X750, E750, X1200)
Supported MCU setting (E750)
Supported AdGuardHome (S1300)

Software upgrade

Openssl upgraded to 1.1.1d
Openvpn upgraded to 2.5.0

Optimization

Optimized real-time traffic statistics and reduce CPU load
Optimized MQTT
Optimized 4G to WiFi speed (MIFI,X750,E750)
Optimized the number of X1200 5G client connections

Language

Supported Russian
Fixed the problem of incomplete and inaccurate translation of some languages

OpenWrt Distribution

Based on OpenWrt 19.07.7 (AR150, MIFI, AR300M, USB150, N300, AR750, AR750S, X750, E750, X1200,XE300, MT300N-V2, MT1300, MV1000)
Based on QSDK11 (B1300, S1300, AP1300)

Security fix

mac80211: backport upstream fixes for FragAttacks(CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-26139, CVE-2020-26140, CVE-2020-26141, CVE-2020-26142, CVE-2020-26143, CVE-2020-26144, CVE-2020-26145, CVE-2020-26146, CVE-2020-26147)

Important bug fix

Fixed a BUG where the OpenVPN connection status was displayed incorrectly on the E750 LCD
Fixed XE300 modem manual settings always being overwritten when reboot
Fixed DNS leakage when using OpenVPN and Wireguard

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

Optimization

Optimized real-time traffic statistics and reduce CPU load
Optimized MQTT
Optimized 4G to WiFi speed (MIFI,X750,E750)
Optimized the number of X1200 5G client connections

Language

Supported Russian
Fixed the problem of incomplete and inaccurate translation of some languages

UI

Added VPN status indicator icon to the navigation page
Added quick navigation to Wireguard client commercial configuration
Removed the import method with JSON format in Wireguard client

Important bug fix

Fixed the problem that AdGuardHome cannot be upgraded
Fixed MV1000 memory leak problem
Fixed tethering problem with iOS14 system
Fixed the problem that port 53 is exposed to the WAN after opening Override DNS Settings for All Clients
Fixed the problem that the client of the router cannot access the address of the Wireguard server when using Wireguard client
Fixed the problem that the Wireguard client AllowedIPs parameter does not take effect
Fixed the problem that Mullvad WireGuard needs to manually modify the MTU to 1380
Fixed the X1200 dual-module IP exchange problem
Fixed the problem that some websites cannot be opened after using VPN policy (AR750S, X1200)
Fixed other known issues

New features

Supported traffic statistics in bridge mode
Supported OpenVPN bridge
Supported NextDNS personal ID
File sharing supported closing LAN sharing and supports shared folder selection
OpenVPN server supported CHACHA20-POLY1305 encryption
OpenVPN server supported Authentication option setting
Wireguard server supported local network access switch
The modem supported QCM protocol, SMS forwarding, adding Auth, Proto, TTL, and other configuration options (MIFI, X750, E750, X1200)
Supported MCU setting (E750)
Supported AdGuardHome (S1300)

Software upgrade

Openssl upgraded to 1.1.1d
Openvpn upgraded to 2.5.0

No release notes.

Important bugfix

1. fix ipv6: test-ipv6.com report fail
   
2. fix router policy mem leak
   
3. fix "cmnos_thread.c: 3656" type of wifi crash
   

New features

1. supports side router setup
   

No release notes.

New features

Supported traffic statistics in bridge mode
Supported OpenVPN bridge
Supported NextDNS personal ID
File sharing supported closing LAN sharing and supports shared folder selection
OpenVPN server supported CHACHA20-POLY1305 encryption
OpenVPN server supported Authentication option setting
Wireguard server supported local network access switch
The modem supported QCM protocol, SMS forwarding, adding Auth, Proto, TTL, and other configuration options (MIFI, X750, E750, X1200)
Supported MCU setting (E750)
Supported AdGuardHome (S1300)

Software upgrade

Openssl upgraded to 1.1.1d
Openvpn upgraded to 2.5.0

Optimization

Optimized real-time traffic statistics and reduce CPU load
Optimized MQTT
Optimized 4G to WiFi speed (MIFI,X750,E750)
Optimized the number of X1200 5G client connections

Language

Supported Russian
Fixed the problem of incomplete and inaccurate translation of some languages

UI

Added VPN status indicator icon to the navigation page
Added quick navigation to Wireguard client commercial configuration
Removed the import method with JSON format in Wireguard client

Important bug fix

Fixed the problem that AdGuardHome cannot be upgraded
Fixed MV1000 memory leak problem
Fixed tethering problem with iOS14 system
Fixed the problem that port 53 is exposed to the WAN after opening Override DNS Settings for All Clients
Fixed the problem that the client of the router cannot access the address of the Wireguard server when using Wireguard client
Fixed the problem that the Wireguard client AllowedIPs parameter does not take effect
Fixed the problem that Mullvad WireGuard needs to manually modify the MTU to 1380
Fixed the X1200 dual-module IP exchange problem
Fixed the problem that some websites cannot be opened after using VPN policy (AR750S, X1200)
Fixed other known issues

No release notes.

No release notes.

No release notes.

OpenWrt Distribution

Based on OpenWrt 19.07.7 (AR150, MIFI, AR300M, USB150, N300, AR750, AR750S, X750, E750, X1200,XE300, MT300N-V2, MT1300, MV1000)
Based on QSDK11 (B1300, S1300, AP1300)

Security fix

mac80211: backport upstream fixes for FragAttacks(CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-26139, CVE-2020-26140, CVE-2020-26141, CVE-2020-26142, CVE-2020-26143, CVE-2020-26144, CVE-2020-26145, CVE-2020-26146, CVE-2020-26147)

Important bug fix

Fixed a BUG where the OpenVPN connection status was displayed incorrectly on the E750 LCD
Fixed XE300 modem manual settings always being overwritten when reboot
Fixed DNS leakage when using OpenVPN and Wireguard

OpenWrt Distribution

Based on OpenWrt 19.07.7 (AR150, MIFI, AR300M, USB150, N300, AR750, AR750S, X750, E750, X1200,XE300, MT300N-V2, MT1300, MV1000)
Based on QSDK11 (B1300, S1300, AP1300)

Security fix

mac80211: backport upstream fixes for FragAttacks(CVE-2020-24586, CVE-2020-24587, CVE-2020-24588, CVE-2020-26139, CVE-2020-26140, CVE-2020-26141, CVE-2020-26142, CVE-2020-26143, CVE-2020-26144, CVE-2020-26145, CVE-2020-26146, CVE-2020-26147)

Important bug fix

Fixed a BUG where the OpenVPN connection status was displayed incorrectly on the E750 LCD
Fixed XE300 modem manual settings always being overwritten when reboot
Fixed DNS leakage when using OpenVPN and Wireguard

No release notes.

No release notes.

System

1. Based on openwrt 19.07.8 (AR150,MIFI,AR300M,USB150,N300,AR750,AR750S,X750,E750,XE300,MT1300,MT300N-V2,MV1000)
   
2. Based on QSDK11 (B1300,S1300,AP1300,B2200)
   
3. Based on Siflower SDK (SF1200,SFT1200)
   

Security

1. Synchronously repair OpenWrt 19.07.10 CVE.(AR150,MIFI,AR300M,USB150,N300,AR750,AR750S,X750,E750,XE300,MT1300,MT300N-V2,MV1000).
   

New feature

1. SF1200/SFT1200 WIFI supports WPA3 Personal Security.
   
2. Modem add Verizon,Visible support.
   
3. Modem add QFirehose tools.
   
4. Modem add SIM puk detection.
   
5. Guest wifi supports IPv6.
   

Optimize

1. Optimized the handling mode of Modem Reset.
   
2. Optimize AT instructions:AT+COPS=?.
   

Important bugfix

1. Fixed MT1300 using MAC Clone causing wifi to not work properly.
   
2. Fixed MT1300 cannot relay Fritzbox's wifi.
   
3. Fixed MT1300 HNAT causes VPN data leakage.
   
4. Fixed MT300N-V2 unable to change wifi password when using MAC Clone.
   
5. Fixed MT300N-V2 cannot relay special characters SSID.
   
6. Fixed MT300N-V2 data leak caused by switch bridge during startup.
   
7. Fixed MT300N-V2 removes WPA3 because it is not yet supported.
   
8. Fixed TxPower batch modification in GoodCloud not working.
   
9. Fixed the control logic conflict of traffic statistics switch between router and Goodcloud.
   
10. Fixed WireGuard manual edit allowedip parsing error.
    
11. Fixed the WireGuard server whose IP address is DDNS cannot be automatically reconnected after the IP address changes.
    
12. Fixed override DNS causes internet access failure in extender mode.
    

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

New features

Supported traffic statistics in bridge mode
Supported OpenVPN bridge
Supported NextDNS personal ID
File sharing supported closing LAN sharing and supports shared folder selection
OpenVPN server supported CHACHA20-POLY1305 encryption
OpenVPN server supported Authentication option setting
Wireguard server supported local network access switch
The modem supported QCM protocol, SMS forwarding, adding Auth, Proto, TTL, and other configuration options (MIFI, X750, E750, X1200)
Supported MCU setting (E750)
Supported AdGuardHome (S1300)

Software upgrade

Openssl upgraded to 1.1.1d
Openvpn upgraded to 2.5.0

Optimization

Optimized real-time traffic statistics and reduce CPU load
Optimized MQTT
Optimized 4G to WiFi speed (MIFI,X750,E750)
Optimized the number of X1200 5G client connections

Language

Supported Russian
Fixed the problem of incomplete and inaccurate translation of some languages

UI

Added VPN status indicator icon to the navigation page
Added quick navigation to Wireguard client commercial configuration
Removed the import method with JSON format in Wireguard client

Important bug fix

Fixed the problem that AdGuardHome cannot be upgraded
Fixed MV1000 memory leak problem
Fixed tethering problem with iOS14 system
Fixed the problem that port 53 is exposed to the WAN after opening Override DNS Settings for All Clients
Fixed the problem that the client of the router cannot access the address of the Wireguard server when using Wireguard client
Fixed the problem that the Wireguard client AllowedIPs parameter does not take effect
Fixed the problem that Mullvad WireGuard needs to manually modify the MTU to 1380
Fixed the X1200 dual-module IP exchange problem
Fixed the problem that some websites cannot be opened after using VPN policy (AR750S, X1200)
Fixed other known issues

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.

No release notes.