[Announcement] Removal of AiCloud from Asuswrt-Merlin

[muffintastic]

Less code to deal with. Good riddance.

 

[ColinTaylor]

Can we hope to gain memory without this feature ?

No.

 

[Tech9]

Less code to deal with.

This is ASUS proprietary component and the code will most likely stay, just won't be visible for the user.

 

[John Fitzgerald]

This is ASUS proprietary component and the code will most likely stay, just won't be visible for the user.

The way you phrased this makes it sound like it would still be a point of attack. I would think the "container" would be removed or RMerlin would request special builds without it.

 

[Tech9]

I’m sure RMerlin knows how to disable it properly in case it stays.

 

[gabox]

Tera Agree! TIA.

 

[RMerlin]

This is ASUS proprietary component and the code will most likely stay, just won't be visible for the user.

AiCloud support can be disabled at compile time, it's a build time option.

If the device supports CaptivePortal then lighttpd will still be included, but none of the code used to enable and run AiCloud will be. And if the device doesn't support CaptivePortal, then lighttpd won't be included at all in the firmware image.

The closed source portion is just a few proprietary lighttpd modules, these won't be included if AiCloud is not enabled.

 

[Cleanev]

Great idea, never used it so this will be good to reclaim some space whether in code or in nvram (if it matters)

 

[Ouss23]

go ahead

 

[PoliteWaifer]

Very glad. It was insecure bloat. I've never once wanted to use it. Thanks Merlin.

 

[spykos]

@RMerlin

Are you going to remove the entry completely in the webUI ? I am asking because in the 388.11 alpha builds it is still there. At least for the AX86U.

 

[RMerlin]

@RMerlin

Are you going to remove the entry completely in the webUI ? I am asking because in the 388.11 alpha builds it is still there. At least for the AX86U.

The whole menu will eventually disappear. I currently only disabled the webdav component (which is the web portion of AiCloud), I also need to disable the rest of the Cloudsync functionality to fully remove the menu. I wanted to see if I could split Cloudsync functionality (capacity of syncing Asuswebstorage/Dropbox/Google Drive) from AiCloud.

 

[Pir8pete]

This is not good, I use this when I'm away in Thailand and need an important file to my laptop or iPhone. What amta "add-on" could I use in place of this? Now I need to focus on this right before packing and getting all my things ready for a 4 month stay.

 

[Ripshod]

This is not good, I use this when I'm away in Thailand and need an important file to my laptop or iPhone. What amta "add-on" could I use in place of this? Now I need to focus on this right before packing and getting all my things ready for a 4 month stay.

You don't need any addons. Just set up an ovpn/Wireguard server on the router or an internal server and connect through that. Download as if you're on the local network.

 

[Pir8pete]

ok and how do I use my iphone 16 pro max to connect? with iCloud theres an app for that keeping it simple.

And i have no idea how to setup a "ovpn/Wireguard server" on my router BE98-PRO, is there a thread that explains how to do it?

 

[Ripshod]

ok and how do I use my iphone 16 pro max to connect? with iCloud theres an app for that keeping it simple.

And i have no idea how to setup a "ovpn/Wireguard server" on my router BE98-PRO, is there a thread that explains how to do it?

[VPN] How to set up a VPN server on ASUS router – OpenVPN | Official Support | ASUS UK

 

[Tech9]

with iCloud theres an app

What about this App? It's been there like forever.

Instant-Guard｜ASUS USA

ASUS routers with Instant Guard use VPN to create free and secure connection over public WiFi, via easy 1-click setup. Click to learn more about how to stay safe on public WiFi.

www.asus.com

 

[Pir8pete]

thank you for helping, I'll have to dive into some reading

 

[bennor]

This is not good, I use this when I'm away in Thailand and need an important file to my laptop or iPhone.

For security reasons, this is good that RMerlin is hiding or removing the AiCloud feature in future Asus-Merlin firmware releases. Apparently the AiCloud feature has been a possible malware intrusion vector for the recent malware that affected people's routers and very likely has been a intrusion point in the past (more than once).

Malware damaging ASUS routers?

This malware damaging Asus routers has to be described in a sticky thread with a warning sign! Update: Asus is releasing patched firmware for multiple models. Check for firmware updates! The changelog for most firmware releases contains the following: 1. Strengthened input validation and data...

www.snbforums.com

Asus has had to repeatedly patch AiCloud over the years and has been instructing users to disable AiCloud if they are using EOL routers. For those EOL routers Asus further suggests disabling additional options/features like (not a complete list): remote access from WAN, port forwarding, DDNS, DMZ, Port triggering, and FTP.

As others have indicated the Asus router firmware already includes other options to allow you to have remote access to the local network behind the router or to the router itself. You can likely replicate most of the AiCloud feature(s) by enabling a VPN Server within the router's GUI VPN section, then use a VPN app on your mobile device or computer to access your router while in a remote location. From there you would, assuming the VPN has been properly configured, access your router and devices behind it just as you would if you were on the same local network behind the router. For example, by using a file manager app like Mac Finder or Windows File Explorer or a file manger app on a mobile device.

In addition to Asus support documents on setting up a VPN server (like WireGuard or OpenVPN or Instant Guard) there are plenty of "how-to" guides (and videos) on the internet that also show the general process to setting up a VPN Server on an Asus router. One can find the free PC and mobile device WireGuard and or OpenVPN clients at their respective websites:

Installation - WireGuard

www.wireguard.com

OpenVPN Connect - VPN For Your Operating System | OpenVPN

Download the official OpenVPN Connect client VPN software for your operating system, developed and maintained by our experts. Get started with our VPN software.

openvpn.net

You may need to enable DDNS if you haven't done so already when using AiCloud.

[Wireless Router] DDNS introduction and set up | Official Support | ASUS Global

And if/when you move to using a VPN Server rather than AiCloud, remember to disable the AiCloud feature in the router GUI to close that potential security vulnerability.

 

[lgkahn]

ok and how do I use my iphone 16 pro max to connect? with iCloud theres an app for that keeping it simple.

And i have no idea how to setup a "ovpn/Wireguard server" on my router BE98-PRO, is there a thread that explains how to do it?

intstall openvpn connect on the iphone pretty simple.