[Dev] Asuswrt-Merlin 388.1 development

[ElfStone]

Hi all,

Thanks again Merlin for all your hard work!

Is the latest Alpha_1 ok to download for AX11000? I mean, except the VPN troubles (I don't use VPN)?

I am running AiMesh (the AX being the main node and 3 lyra's). Would appreciate some feedback as I want to try it tonight but as I am working from home I need a stable connection

For some reason, on the Asus firmware my Samsung S22 Ultra keeps on reconnecting to the AX11000 without internet while roaming, and I hope it doesn't happen on merlin

Thanks in advance!

 

[skeal]

Ax88/Firmware: 388.1_alpha1-g0ca7941c3e

So I toook the plunge and upgraded to 388.1. Oddly, my computer could not connect using the wired connection - I had to use wireless. Here is a screen pic of the network connection box:

View attachment 45160

It appears that the wired connections can see (communicate) with local wired devices, but cannot obtain internet connectivity.

After about 5 minutes and a couple reboots, this came up:

View attachment 45161

Very nice! But still, only wireless provides connectivity to the internet.

You could reflash the firmware again over what you have, or reset to defaults and manually reconfigure. The latter being the better option. Don't import anything other than JFFS. Configure from screenshots.

 

[Elmer]

You could reflash the firmware again over what you have, or reset to defaults and manually reconfigure. The latter being the better option. Don't import anything other than JFFS. Configure from screenshots.

Thanks for your fast reply. It seems I have a failing port on my AX88. Should have thought of that before posting.

 

[RMerlin]

Is the latest Alpha_1 ok to download for AX11000?

It's an alpha build. It is unsupported, a work-in-progress, and I cannot guarantee anything, sorry. You shouldn't flash it if stability is critical for you.

 

[ElfStone]

It's an alpha build. It is unsupported, a work-in-progress, and I cannot guarantee anything, sorry. You shouldn't flash it if stability is critical for you.

I used alpha builds before, they were quite ok but not on the AX110000, and I thought maybe there are people using the builds already and don't have serious issues

Thanks for the reply though. I will flash the latest stable or BETA if there is one.

 

[Rajjco]

I used alpha builds before, they were quite ok but not on the AX110000, and I thought maybe there are people using the builds already and don't have serious issues

Thanks for the reply though. I will flash the latest stable or BETA if there is one.

I'm using 388 on AX11000 no issues so far in logs except for a some warnings related to openvpn mtu which i think can be ignored. I did set wireguard client Persistent Keepalive to 5 from 25 to prevent the tunnel from stopping at idle just in case.

I also have a specific device which keeps showing this in logs.

192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: selected_chspec is 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: Adjusted channel spec: 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: selected channel spec: 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: txop channel select: Performing CSA on chspec 0x1009

 

[Dedel66]

Thanks for your fast reply. It seems I have a failing port on my AX88. Should have thought of that before posting.

Perhaps it is not a defective port, but only synchronized to 100mbit, for whatever reason?

 

[capncybo]

@RMerlin So... perhaps I've miscounted but... if ASUS has decided they (can't or won't) upgrade any of the AC-series routers to 388,
Isn't the RT-AX86U the only eligible router remaining? Just hoping it's soon. Upgrades used to come out so rapidly.
But ever since Asus was forced to redo the source code...
The RT-AX86U seems to cross the development release finish-line last.
I know, I know, RMerlin spoiled us ;-)
Give give give, me, more more more... I'd like it all

 

[ElfStone]

I'm using 388 on AX11000 no issues so far in logs except for a some warnings related to openvpn mtu which i think can be ignored. I did set wireguard client Persistent Keepalive to 5 from 25 to prevent the tunnel from stopping at idle just in case.

I also have a specific device which keeps showing this in logs.

192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: selected_chspec is 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: Adjusted channel spec: 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: selected channel spec: 0x1009 (9)
192.168.1.1    Nov  2 20:46:59    GT-AX11000-CF50-ACA90FA-C    user    debug    acsd    eth6: txop channel select: Performing CSA on chspec 0x1009

Awesome!
Thanks a lot for the feedback!

I think I will give it a go. Hopefully will be able to work tomorrow without too many issues.

Thanks again, have a nice evening!

 

[arkoko]

I'll still make use of my Asus devices as Access Points (in fact I do use some already as AP's) for awhile.

Is with this setup (mini-pc + some AP-s) possible to achieve something like AiMesh?

 

[RMerlin]

Isn't the RT-AX86U the only eligible router remaining?

RT-AX68U as well is still missing at this time.

 

[capncybo]

RT-AX68U as well is still missing at this time.

Dammit I knew I miscounted. Must be my old man eyes... I REALLY Need to get me some reading glasses THX

 

[ElfStone]

The alpha is not bad at all... speed wise

 

[RMerlin]

For those who don't follow Github, here's the actual list of commits since the 386.8 release.

Spoiler

46fb5797aa (HEAD -> master) webui: insert Asuswrt-Merlin logo on ROG UI
d79355c4b0 ncurses: fix generation of library symlinks
3a3ceeb786 (origin/master) libovpn: don't set exclusive DNS rules for disabled WG clients; improve logging when forcing/excluding DNS traffic for a device
79012fbcc5 libovpn: move WAN rules creation outside of amvpn_set_routing_rules()
82407d5d47 rc: remove unsupported protocols from vpnc_clientlist
f2561405bf build: add RT-AX86U_Pro to copy-prebuilt
811f30f7fc Updated documentation
51fb106838 rc: add LED control support to RT-AX86U_PRO; improve GT-AX6000 LED control
c138718070 Add support for the RT-AX86U_PRO
25a615f1b2 webui: remove Sinodun DoT servers from presets, they were decommissioned on September 9th 2022
58ed4bf4f7 services: tweak inadyn IP obtention mechanism
02b4503a06 webui: remove duplicate code in menuTree
5fb71044da Updated documentation
bfb9dbf8ea libovpn: remove old AdaptiveQoS patch for upload marking that causes the GT-AXE16000 to reboot
db13fe53cb HND5.04: reduce log verbosity on Ethernet ports going up/down
9ecad5bf14 libovpn: fix router crash in ovpn_set_exclusive_dns()
759917d149 rc: prevent oob access if vpnrouting service event is missing the unit
89b92e5ff6 webui: fix typo in firmware version banner
186c486f23 Merge 388_21224 binary blobs for RT-AX56U
44b8e2f56c Merge 388_21224 SDK + binary blobs for RT-AX58U
f819782a53 libovpn: add outbound rule and IPv6 in/out rules to OpenVPN client firewall
cc42054c27 webui: shorten firmware version label shown in banner
4d134a44b8 Merge GT-AXE11000 binary blobs from 21224
1cb40a851f webui: remove interface selector from speedtest page
42e5bbd43a webui: add WGC interfaces to speedtest
486dea837c Updated documentation
ccb1dc2d74 webui: remove duplicate PSK field on Wireless page (from bad GPL merge)
3cc1630e58 Merge GT-AX6000 binary blobs from 21224
e9855a28b3 webui: fix typo in showing OVPN server2 on VPNStatus page
060c5c5f7e rc: remove duplicate dnssec rc_support
9e62c23a37 Merge GT-AX11000_PRO binary blobs from 21224
744e881097 Updated documentation
301f055eca Merge branch '388_21224'
1218b1653a Merge GT-AXE16000 binary blobs from 21224
07f7d72b39 Merge XT12 binary blobs from 21224
5a47c56bb7 Merge 388_21224 HND5.04 SDK (from gt-axe16000)
c0097d49b9 Merge with GPL 388_21224
8ea471fa9e webui: hide WG priority explanation on VPNDirector page when WG is not supported; fix typo
d684be5a50 httpd: allow specifying wgc unit when requesting wgc interface dump
7712feec92 shared: correctly report disconnected WG client if WG not initialized
31710b0995 busybox: fix crashing awk applet (patch from upstream)
85670281b6 Updated documentation
acf408e082 (origin/388) Updated documentation
e70cfa71d0 webui: update ROG menuTree VPN
007e838d89 webui: fix ROG images for GT-AX11000
35781762ca rom: fix retrieving the correct release notes for AiMesh nodes
34dc6ddcb1 Webui: fix location of Firmware Upgrade button
f178c99432 rc: drop other2wan code in firewall
d827e38541 rc: implement custom/postconf config for WireGuard
728d62f1a4 build: remove call to missing checkjffs.py
546452d2e4 libovpn: allow having both source and destination empty in a VPNDirector rule
88efa10ac8 lltd: resync with upstream; drop MIPS version
8eb8ac5d8d Remove obsolete Samba versions
1b4ab3d422 webui: implement field validation on WG client page
0a1f1a47cd rc: don't add wireguard DNS servers to resolv.dnsmasq
4b40a1682a rc: log stopping/starting WireGuard client or server
ebfa778f64 rc: implement exclusive DNS mode for WireGuard
4b9cff9e13 rc: update libovpn calls for updated API
fb6e08e96f libovpn: implement DNS redirection for WireGuard
7a984452db httpd: update libovpn calls for API changes
e1a5ef4869 rc: interface WireGuard with VPN Director
05312ccf71 libovpn: add WireGuard support to route handling/VPN Director
ff8a43056e webui: add WireGuard support to VPNDirector webui; list relevant VPNDirector rules on WG Client page
b681573790 webui: rework VPNStatus page; add WireGuard support
1a257829c9 webui: implement client description field for WG clients
3d60547f0b webui: remove OpenVPN option from available client protocols
ce83145579 shared: increase max vpnc_proto length to 15 chars
36019d344c webui: report connection state on WG Client page
838547b6a1 httpd: provide public key in output generated by ej_get_wgsc_status()
26102b750d httpd: implement WG client connection state report in sysinfo()
c89dfcde30 webui: implement config upload in Wireguard client UI
d9c68b980c webui: implement switch menu on VPN client page
a10fb8535d webui: implement switcher menu on VPN Server page; disable OpenVPN server section in it to reuse our existing webui
14c926427d webui: force gen_switch_menu URLs to open in the parent window
4816126fc6 Merge GT-AX11000 binary blobs from 388_20566
5fe40e8fff shared: fix libovpn include location
1c9a56b301 build: re-enable Wireguard support
8ec84b878f build: added new 388 components to copy-prebuilt
d7287b0f7b Bump version to 388.1 alpha 1
47aa0333ad calc_nvram: add CKN_STR7999 to the list of defined sizes
1f72309bf8 rc: temporary wedge for amas_wgn.o which wants update_default_routing_rule() from VPN Fusion
056f42a2f1 rc: link with frs_service.o, need read_asd_enc_file() from it
8bcaf09c91 busybox: add missing bb_die_memory_exhausted() function
e2f52130c0 Merge RT-AX88U binary blobs from 388_20566
c990d2c05b Merge with 388_20566 (from RT-AX88U) + 5.02axhnd SDK update
2a126de587 (origin/386_x, 386_x) Updated documentation
d8f2d95330 httpd: fix wireless log showing the wrong IPv6 for guests (related to 67be92ce6b)
cc86026010 getdns: temporary fix for building under older cmake (as used by Ubuntu 20.04 LTS)
c490dfcbf8 zlib: Fix configure issue that discarded provided CC definition.
ff96cb9658 zlib: Fix extra field processing bug that dereferences NULL state->head.
9c08785627 zlib: Fix a bug when getting a gzip header extra field with inflate().
e5c4b630bc zlib: updated to 1.2.12
765ff368cb getdns/stubby: Update to 1.7.2/0.4.2
e053bea071 Merge pull request #822 from jeffwidman/patch-1
5a819632ea build: append _rog to the version string if ROG_UI is enabled
1ff944c930 Remove mention of GitHub issue tracker
2db25fa3ab Updated documentation
e2e0174abc libovpn: DNAT all DNS traffic when using Exclusive mode while in RGW_ALL routing mode
8b81346237 rc: once again allow Guest Network clients to go out through VPN, also add similar rule for IPv6
46e855655b Bumped revision to 386.8_1
514d4cf39b webui: add missing class to Wireless Log body
55b3314841 webui: update traffic monitor pages for ROG UI
3e62f2e22c webui: fix qrcode panel display on ROG UI
c44c7f9810 rom: strip _* from local extendno when checking for updates
1a6b75f95a webui: fix temperature graphs
244215a55b (tag: 386.8) Updated documentation

 

[doczenith1]

Hopefully this isn't off topic (AC router so not 388 eligible) but I recall a few hundreds posts back some discussion on speed differences between OpenVPN and WireGuard. I ran some tests and wanted to share my results. Speed results are symmetrical. Testing done with the Ookla Windows cli.

Server: AC86U (flow cache enabled)
Client: i5-2500K running Windows 10

OpenVPN over AES-128-GCM TCP (for some reason UDP was 25 Mbps slower) I managed ~250 Mbps

WireGuard managed ~450 Mbps

I probably should of disabled flow cache and ran some tests but forgot to at the moment.

 

[ugandy]

For those who don't follow Github, here's the actual list of commits since the 386.8 release.

Spoiler

46fb5797aa (HEAD -> master) webui: insert Asuswrt-Merlin logo on ROG UI
d79355c4b0 ncurses: fix generation of library symlinks
3a3ceeb786 (origin/master) libovpn: don't set exclusive DNS rules for disabled WG clients; improve logging when forcing/excluding DNS traffic for a device
79012fbcc5 libovpn: move WAN rules creation outside of amvpn_set_routing_rules()
82407d5d47 rc: remove unsupported protocols from vpnc_clientlist
f2561405bf build: add RT-AX86U_Pro to copy-prebuilt
811f30f7fc Updated documentation
51fb106838 rc: add LED control support to RT-AX86U_PRO; improve GT-AX6000 LED control
c138718070 Add support for the RT-AX86U_PRO
25a615f1b2 webui: remove Sinodun DoT servers from presets, they were decommissioned on September 9th 2022
58ed4bf4f7 services: tweak inadyn IP obtention mechanism
02b4503a06 webui: remove duplicate code in menuTree
5fb71044da Updated documentation
bfb9dbf8ea libovpn: remove old AdaptiveQoS patch for upload marking that causes the GT-AXE16000 to reboot
db13fe53cb HND5.04: reduce log verbosity on Ethernet ports going up/down
9ecad5bf14 libovpn: fix router crash in ovpn_set_exclusive_dns()
759917d149 rc: prevent oob access if vpnrouting service event is missing the unit
89b92e5ff6 webui: fix typo in firmware version banner
186c486f23 Merge 388_21224 binary blobs for RT-AX56U
44b8e2f56c Merge 388_21224 SDK + binary blobs for RT-AX58U
f819782a53 libovpn: add outbound rule and IPv6 in/out rules to OpenVPN client firewall
cc42054c27 webui: shorten firmware version label shown in banner
4d134a44b8 Merge GT-AXE11000 binary blobs from 21224
1cb40a851f webui: remove interface selector from speedtest page
42e5bbd43a webui: add WGC interfaces to speedtest
486dea837c Updated documentation
ccb1dc2d74 webui: remove duplicate PSK field on Wireless page (from bad GPL merge)
3cc1630e58 Merge GT-AX6000 binary blobs from 21224
e9855a28b3 webui: fix typo in showing OVPN server2 on VPNStatus page
060c5c5f7e rc: remove duplicate dnssec rc_support
9e62c23a37 Merge GT-AX11000_PRO binary blobs from 21224
744e881097 Updated documentation
301f055eca Merge branch '388_21224'
1218b1653a Merge GT-AXE16000 binary blobs from 21224
07f7d72b39 Merge XT12 binary blobs from 21224
5a47c56bb7 Merge 388_21224 HND5.04 SDK (from gt-axe16000)
c0097d49b9 Merge with GPL 388_21224
8ea471fa9e webui: hide WG priority explanation on VPNDirector page when WG is not supported; fix typo
d684be5a50 httpd: allow specifying wgc unit when requesting wgc interface dump
7712feec92 shared: correctly report disconnected WG client if WG not initialized
31710b0995 busybox: fix crashing awk applet (patch from upstream)
85670281b6 Updated documentation
acf408e082 (origin/388) Updated documentation
e70cfa71d0 webui: update ROG menuTree VPN
007e838d89 webui: fix ROG images for GT-AX11000
35781762ca rom: fix retrieving the correct release notes for AiMesh nodes
34dc6ddcb1 Webui: fix location of Firmware Upgrade button
f178c99432 rc: drop other2wan code in firewall
d827e38541 rc: implement custom/postconf config for WireGuard
728d62f1a4 build: remove call to missing checkjffs.py
546452d2e4 libovpn: allow having both source and destination empty in a VPNDirector rule
88efa10ac8 lltd: resync with upstream; drop MIPS version
8eb8ac5d8d Remove obsolete Samba versions
1b4ab3d422 webui: implement field validation on WG client page
0a1f1a47cd rc: don't add wireguard DNS servers to resolv.dnsmasq
4b40a1682a rc: log stopping/starting WireGuard client or server
ebfa778f64 rc: implement exclusive DNS mode for WireGuard
4b9cff9e13 rc: update libovpn calls for updated API
fb6e08e96f libovpn: implement DNS redirection for WireGuard
7a984452db httpd: update libovpn calls for API changes
e1a5ef4869 rc: interface WireGuard with VPN Director
05312ccf71 libovpn: add WireGuard support to route handling/VPN Director
ff8a43056e webui: add WireGuard support to VPNDirector webui; list relevant VPNDirector rules on WG Client page
b681573790 webui: rework VPNStatus page; add WireGuard support
1a257829c9 webui: implement client description field for WG clients
3d60547f0b webui: remove OpenVPN option from available client protocols
ce83145579 shared: increase max vpnc_proto length to 15 chars
36019d344c webui: report connection state on WG Client page
838547b6a1 httpd: provide public key in output generated by ej_get_wgsc_status()
26102b750d httpd: implement WG client connection state report in sysinfo()
c89dfcde30 webui: implement config upload in Wireguard client UI
d9c68b980c webui: implement switch menu on VPN client page
a10fb8535d webui: implement switcher menu on VPN Server page; disable OpenVPN server section in it to reuse our existing webui
14c926427d webui: force gen_switch_menu URLs to open in the parent window
4816126fc6 Merge GT-AX11000 binary blobs from 388_20566
5fe40e8fff shared: fix libovpn include location
1c9a56b301 build: re-enable Wireguard support
8ec84b878f build: added new 388 components to copy-prebuilt
d7287b0f7b Bump version to 388.1 alpha 1
47aa0333ad calc_nvram: add CKN_STR7999 to the list of defined sizes
1f72309bf8 rc: temporary wedge for amas_wgn.o which wants update_default_routing_rule() from VPN Fusion
056f42a2f1 rc: link with frs_service.o, need read_asd_enc_file() from it
8bcaf09c91 busybox: add missing bb_die_memory_exhausted() function
e2f52130c0 Merge RT-AX88U binary blobs from 388_20566
c990d2c05b Merge with 388_20566 (from RT-AX88U) + 5.02axhnd SDK update
2a126de587 (origin/386_x, 386_x) Updated documentation
d8f2d95330 httpd: fix wireless log showing the wrong IPv6 for guests (related to 67be92ce6b)
cc86026010 getdns: temporary fix for building under older cmake (as used by Ubuntu 20.04 LTS)
c490dfcbf8 zlib: Fix configure issue that discarded provided CC definition.
ff96cb9658 zlib: Fix extra field processing bug that dereferences NULL state->head.
9c08785627 zlib: Fix a bug when getting a gzip header extra field with inflate().
e5c4b630bc zlib: updated to 1.2.12
765ff368cb getdns/stubby: Update to 1.7.2/0.4.2
e053bea071 Merge pull request #822 from jeffwidman/patch-1
5a819632ea build: append _rog to the version string if ROG_UI is enabled
1ff944c930 Remove mention of GitHub issue tracker
2db25fa3ab Updated documentation
e2e0174abc libovpn: DNAT all DNS traffic when using Exclusive mode while in RGW_ALL routing mode
8b81346237 rc: once again allow Guest Network clients to go out through VPN, also add similar rule for IPv6
46e855655b Bumped revision to 386.8_1
514d4cf39b webui: add missing class to Wireless Log body
55b3314841 webui: update traffic monitor pages for ROG UI
3e62f2e22c webui: fix qrcode panel display on ROG UI
c44c7f9810 rom: strip _* from local extendno when checking for updates
1a6b75f95a webui: fix temperature graphs
244215a55b (tag: 386.8) Updated documentation

that's a lot of work!

 

[cljackhammer]

FYI Merlin, fatal signal error during startup using the latest Alpha. GT-AXE16000 AI-Mesh setup.

Nov 2 22:01:44 rc_service: conn_diag 2858:notify_rc restart_amas_portstatus
Nov 2 22:01:44 custom_script: Running /jffs/scripts/service-event (args: restart amas_portstatus)
Nov 2 22:01:44 custom_script: Running /jffs/scripts/service-event-end (args: restart amas_portstatus)
Nov 2 22:01:44 kernel: potentially unexpected fatal signal 4.
Nov 2 22:01:44 kernel: CPU: 1 PID: 2858 Comm: conn_diag Tainted: P O 4.19.183 #1
Nov 2 22:01:44 kernel: Hardware name: GTAXE16000_2GB (DT)
Nov 2 22:01:44 kernel: pstate: 600a0010 (nZCv q A32 LE aif)
Nov 2 22:01:44 kernel: pc : 00000000001a16ac
Nov 2 22:01:44 kernel: lr : 000000000000004e
Nov 2 22:01:44 kernel: sp : 00000000ffdc4308
Nov 2 22:01:44 kernel: x12: 00000000009830a4
Nov 2 22:01:44 kernel: x11: 00000000ffdc437c x10: 0000000000007fb1
Nov 2 22:01:44 kernel: x9 : 0000000000983190 x8 : 0000000000000000
Nov 2 22:01:44 kernel: x7 : 0000000000209000 x6 : 0000000000000015
Nov 2 22:01:44 kernel: x5 : 00000000ffdc43ac x4 : 00000000ffdc43b0
Nov 2 22:01:44 kernel: x3 : 0000000000000009 x2 : 0000000000000400
Nov 2 22:01:44 kernel: x1 : 0000000000100000 x0 : 00000000001f45dc

 

[RMerlin]

FYI Merlin, fatal signal error during startup using the latest Alpha. GT-AXE16000 AI-Mesh setup.

Known issue on this model, Asus already fixed it in later code, but that code won't be available for 388.1. Just ignore it.

 

[mygame]

Hi Merlin, can i request a feature: node HDD spin down, thank you so much!

 

[dwadj]

This morning i also flashed my 2 GT-ax11000's (Aimesh Main + node) to latest alpha1_rog-g96084cefee, let's see if it is as good/stable as the 386.49599 from Asus.
A lot of devices, some with VDI and Teams, printers with fixed ip, Nas with link aggregation, IPTV, .... so will be a good test...