Recent content by kuchkovsky

  1. K

    Best router in 2025 for around $200-250?

    I get your point - don't pay for a product with partially broken, falsely advertised features, but from the practical standpoint, it’s not much of an issue unless you need Adaptive QoS. The new BE model is a clear upgrade, thanks to its improved hardware, and Guest Network Pro has a better...
  2. K

    Best router in 2025 for around $200-250?

    It depends on the model. For the best user experience, I'd recommend the RT-AX86U Pro or RT-AX88U Pro for connections up to 1 Gbps, and the RT-BE86U, RT-BE88U, or RT-BE96U for speeds above 1 Gbps. All of these are top-tier models with excellent performance and stable firmware (unlike many...
  3. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Yes. Sorry, I forgot to mention that here. It's a default dependency for all scripts in the repo (it's noted in the README, though). I recently merged the updated version mentioned in the post above, but waited to announce it until I received user confirmation that the fix worked. This update...
  4. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    2025-12-07 This minor update introduces several improvements to the SSD TRIM script (thanks to @guynich on GitHub for reporting the issue and supplying detailed information): Added -n to all echo writes to sysfs device files to ensure compatibility with 3004.388.x firmware. Added a hardcoded...
  5. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It looks like a similar issue to the one @Milan encountered in this thread. Are you using a Windows tool like WinSCP to upload the files? It can mess up line endings. If so, could you change the transfer mode to binary (or a similar option) and reupload the files...
  6. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    To make the VPN client IP and forwarded ports accessible from the home network as well, the script creates rules like these: -A PREROUTING -d 10.0.0.2/32 -j WGC1_VSERVER -A WGC1_VSERVER -i wgc1 -j WGC1_RULES -A WGC1_VSERVER -i br0 -j WGC1_RULES -A WGC1_RULES -p tcp -m tcp --dport 8080 -j DNAT...
  7. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It is the internal VPN IP address assigned to your router as a WireGuard client. New Merlin versions show a status field on the running WG client page in the format “Connected (Local: x.x.x.x - Public: y.y.y.y)”, and the x.x.x.x value corresponds to your WG_CLIENT_IP. Currently, this script is...
  8. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Maybe your script hasn't applied unmap yet? echo unmap > /sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode If it still fails after this command, then ideally you can temporarily comment out the existing hooks in pre-mount/services-start for your script, reboot the router, and have a...
  9. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Run this command, based on your previous output in this thread: echo 4294966784 > /sys/block/$YOUR_DRIVE/queue/discard_max_bytes The script will print the nvram key in the logs. For example: ssd_trim: Skipping drive=/dev/sdb (disabled via nvram...
  10. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Would be nice if you could run the script to check that it's working correctly on the first try on your side. Theoretically, it should detect and apply the fix on the first run, and then reuse it on subsequent runs. This way, it trims the device properly without any additional configuration.
  11. K

    Need new router with encode decode vpn

    Basically the same thing, but I configured ipset-based split-tunneling on my home network and on-demand profiles on iOS, so the VPN is always active when needed without manual intervention.
  12. K

    Need new router with encode decode vpn

    I can't speak for the UCG Ultra specifically, but the top Asus BE devices definitely have enough horsepower for speeds around 1 Gbps: https://www.snbforums.com/threads/open-vpn-speed-be88u.93564/#post-941572 So the issue @JohnAsus is facing must lie elsewhere - either the wrong protocol or slow...
  13. K

    Need new router with encode decode vpn

    Well, there are some valid use cases, such as in countries where the government tries to dictate what you can and cannot do on the internet. VPNs also useful in many second/third-world countries where certain content may not be available due to regional restrictions. They're a nice thing to have...
  14. K

    Need new router with encode decode vpn

    Are you using OpenVPN, based on this speed? It's old and single-threaded - slow by design. This is especially noticeable on low-power devices like routers. Use WireGuard - it reaches up to 1 Gbps on BCM4916 devices (like your RT-BE86U). NordVPN has poor WireGuard support - only through...
  15. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It will try to trim the drive, fail, mark it in nvram as disabled (by generating a unique drive ID), and skip it during all subsequent runs. kuchkovsky@rt:/tmp/home/root# /jffs/scripts/ssd/ssd_trim.sh ssd_trim: Scanning /proc/mounts for USB-backed filesystems under /tmp/mnt ssd_trim: Detected...
Back
Top