Recent content by kuchkovsky

  1. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Unfortunately, TRIM support with external SSD enclosures is often a bit of a gamble. That's why portable SSDs like the Samsung T5 and T7 are usually the safer option, since they tend to support TRIM consistently. Another thing you could try is an enclosure from a more reputable brand, such as...
  2. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    If you have addon-created folders in the root of the drive, it's probably safest to back them up first by copying them under a different name, like folder -> folder.back, just in case an addon tries to modify its configuration on a different router. But no, you definitely don't need to reformat...
  3. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It looks like the issue is with either the enclosure or the SSD, since the script tries multiple approaches and none of them work. But you mentioned the hardware is identical in both cases 🤔 Have you tried swapping the SSD and enclosure between the routers, just as a test? There could be some...
  4. K

    Best router in 2025 for around $200-250?

    I get your point - don't pay for a product with partially broken, falsely advertised features, but from the practical standpoint, it’s not much of an issue unless you need Adaptive QoS. The new BE model is a clear upgrade, thanks to its improved hardware, and Guest Network Pro has a better...
  5. K

    Best router in 2025 for around $200-250?

    It depends on the model. For the best user experience, I'd recommend the RT-AX86U Pro or RT-AX88U Pro for connections up to 1 Gbps, and the RT-BE86U, RT-BE88U, or RT-BE96U for speeds above 1 Gbps. All of these are top-tier models with excellent performance and stable firmware (unlike many...
  6. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Yes. Sorry, I forgot to mention that here. It's a default dependency for all scripts in the repo (it's noted in the README, though). I recently merged the updated version mentioned in the post above, but waited to announce it until I received user confirmation that the fix worked. This update...
  7. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    2025-12-07 This minor update introduces several improvements to the SSD TRIM script (thanks to @guynich on GitHub for reporting the issue and supplying detailed information): Added -n to all echo writes to sysfs device files to ensure compatibility with 3004.388.x firmware. Added a hardcoded...
  8. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It looks like a similar issue to the one @Milan encountered in this thread. Are you using a Windows tool like WinSCP to upload the files? It can mess up line endings. If so, could you change the transfer mode to binary (or a similar option) and reupload the files...
  9. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    To make the VPN client IP and forwarded ports accessible from the home network as well, the script creates rules like these: -A PREROUTING -d 10.0.0.2/32 -j WGC1_VSERVER -A WGC1_VSERVER -i wgc1 -j WGC1_RULES -A WGC1_VSERVER -i br0 -j WGC1_RULES -A WGC1_RULES -p tcp -m tcp --dport 8080 -j DNAT...
  10. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    It is the internal VPN IP address assigned to your router as a WireGuard client. New Merlin versions show a status field on the running WG client page in the format “Connected (Local: x.x.x.x - Public: y.y.y.y)”, and the x.x.x.x value corresponds to your WG_CLIENT_IP. Currently, this script is...
  11. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Maybe your script hasn't applied unmap yet? echo unmap > /sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode If it still fails after this command, then ideally you can temporarily comment out the existing hooks in pre-mount/services-start for your script, reboot the router, and have a...
  12. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Run this command, based on your previous output in this thread: echo 4294966784 > /sys/block/$YOUR_DRIVE/queue/discard_max_bytes The script will print the nvram key in the logs. For example: ssd_trim: Skipping drive=/dev/sdb (disabled via nvram...
  13. K

    Tutorial [Scripts][2025-12-07] SSD TRIM, IPSet-based Firewall & Tunnel Director, IPv6 Enhancements, WG Port Forwarder, and more

    Would be nice if you could run the script to check that it's working correctly on the first try on your side. Theoretically, it should detect and apply the fix on the first run, and then reuse it on subsequent runs. This way, it trims the device properly without any additional configuration.
  14. K

    Need new router with encode decode vpn

    Basically the same thing, but I configured ipset-based split-tunneling on my home network and on-demand profiles on iOS, so the VPN is always active when needed without manual intervention.
  15. K

    Need new router with encode decode vpn

    I can't speak for the UCG Ultra specifically, but the top Asus BE devices definitely have enough horsepower for speeds around 1 Gbps: https://www.snbforums.com/threads/open-vpn-speed-be88u.93564/#post-941572 So the issue @JohnAsus is facing must lie elsewhere - either the wrong protocol or slow...
Back
Top