Beta Asuswrt-Merlin 3004.388.8 beta is now available

[RMerlin]

Asuswrt-Merlin 3004.388.8 Beta is now available for all supported models. The focus of this release is the implementation of the new VPN killswitch first introduced in 3006.102.1.

Changes since 3004.388.7:

3004.388.8 (xx-xxx-2024)
  - NEW: Rewrote VPN killswitch implementation.  The new method
         uses an always present routing rule to prohibit access to
         the main routing table, so it will be active even if the
         user manually stops a client.  Removing the prohibit rule
         requires disabling the killswitch on the webui.
         The rules are also created before WAN goes up, to reduce
         the risks of leaks between WAN going up and VPN connecting.
  - NEW: Added killswitch support for WireGuard clients.
  - UPDATED: Chart.js was upgraded from 2.x to 3.9, to share the
             same version used by Asus.  Any third party addon
             that used it will need to upgrade their charts to
             the new version.
  - UPDATED: wget to 1.24.5.
  - CHANGED: Removed stop/start and "Start with WAN" buttons from
             OpenVPN clients.  There is now just a single
             "Enable" option, which will immediately start the
             client when applying changes, and will also start it
             automatically when WAN comes up.  This is to reduce
             confusion, better integrate into SDN, and match how
             WireGuard clients already worked.
  - FIXED: JS error on Wifi 6e/7 models when toggling DDNS.
  - FIXED: Couldn't mount CIFS shares on the router for BCM4912 devices
  - REMOVED: Wifi Radar was removed (unsupported by Wifi 7 devices,
             and security issues cited by Asus in their own recent
             releases).

Things in need of testing:

• The new killswitch implementation
• WireGuard killswitch implementation

Please keep discussions on this specific beta release.

Downloads are here.
Changelog is here.

 

[RMerlin]

Reserved post.

 

[laracroftonline]

Seems like rog gui is back.

 

[ColDen]

RMerlin only mentionned that it will be dropped for the 3006 branch:

 

[bennor]

Seems like rog gui is back.

Out of curiosity. Where did you read or where was it indicated that ROG support would be dropped for 3004.x branch? He did indicate dropping support for ROG in the 3006.x branch (see this link).

I decided I will be dropping support for the ROG UI with 3006. Having seen that the ROG UI for the GT-98_PRO had issues, I didn't feel like debugging these on top of the rest of the UI work already required for the regular 3006 UI.

 

[Clark Griswald]

"Seems like rog gui is back."
The option is there, but don't use it!

Smooth and Easy dirty upgrade from previous RMerlin releases.

 

[kuki68ster]

Upgraded without issues...Working fine...

The only issue i have is that I am unable to connect the ddns:

Jun 23 19:27:21 watchdog: start ddns.
Jun 23 19:27:21 ddns: eth0 not find External WAN IP, go retry.(5)

But this issue was already present before I upgraded...

 

[Sweden]

Asuswrt-Merlin 3004.388.8 Beta is now available for all supported models. The focus of this release is the implementation of the new VPN killswitch first introduced in 3006.102.1.

Changes since 3004.388.7:

3004.388.8 (xx-xxx-2024)
  - NEW: Rewrote VPN killswitch implementation.  The new method
         uses an always present routing rule to prohibit access to
         the main routing table, so it will be active even if the
         user manually stops a client.  Removing the prohibit rule
         requires disabling the killswitch on the webui.
         The rules are also created before WAN goes up, to reduce
         the risks of leaks between WAN going up and VPN connecting.
  - NEW: Added killswitch support for WireGuard clients.
  - UPDATED: Chart.js was upgraded from 2.x to 3.9, to share the
             same version used by Asus.  Any third party addon
             that used it will need to upgrade their charts to
             the new version.
  - UPDATED: wget to 1.24.5.
  - CHANGED: Removed stop/start and "Start with WAN" buttons from
             OpenVPN clients.  There is now just a single
             "Enable" option, which will immediately start the
             client when applying changes, and will also start it
             automatically when WAN comes up.  This is to reduce
             confusion, better integrate into SDN, and match how
             WireGuard clients already worked.
  - FIXED: JS error on Wifi 6e/7 models when toggling DDNS.
  - FIXED: Couldn't mount CIFS shares on the router for BCM4912 devices
  - REMOVED: Wifi Radar was removed (unsupported by Wifi 7 devices,
             and security issues cited by Asus in their own recent
             releases).

Things in need of testing:

• The new killswitch implementation
• WireGuard killswitch implementation

Please keep discussions on this specific beta release.

Downloads are here.
Changelog is here.

Imagine if someone could add a table allowing you to open the port you can open at your wireguard provider. Then i would buy that person 10 coffees. This is the main reason noone is using WireGuard on AsusMerlin, as you cannot get connectable on different services like torrent.

 

[Viktor Jaep]

- CHANGED: Removed stop/start and "Start with WAN" buttons from
OpenVPN clients. There is now just a single
"Enable" option, which will immediately start the
client when applying changes, and will also start it
automatically when WAN comes up. This is to reduce
confusion, better integrate into SDN, and match how
WireGuard clients already worked.

No functional differences using commands like?

service start_vpnclient1
service stop_vpnclient2

Just wanted to make sure...

 

[RMerlin]

No functional differences using commands like?

service start_vpnclient1
service stop_vpnclient2

No.

 

[Twiglets]

... This is the main reason noone is using WireGuard on AsusMerlin, as you cannot get connectable on different services like torrent.

Careful with the hyperbole, someone might believe this is true !!!

 

[STRUZZIN]

All units updated and working great:
AX88U Pro
AX86U
AX58U

Thanks

 

[MacG32]

Upgraded without a hitch and everything's running well.

 

[EPR]

1 hour in, dirty upgrade, all good here. Waiting for @shabbs now...

 

[shabbs]

1 hour in, dirty upgrade, all good here. Waiting for @shabbs now...

Awwww man...

EDIT: APs upgraded from Alpha - no problems observed - all good so far. Will have to upgrade the router after hours...

 

[AntonK]

Smooth update, network chugging along fine.

 

[Wisiwyg]

Dirty upgrade from alpha. Wan AGG working fine.

 

[Zastoff]

Smooth upgrade on RT-AX88u from 3004.388.7 to new 3004.388.8_beta1

Thanks RMerlin

 

[Dedel66]

Direct update from alpha: everything works as it should!

Thanks again RMerlin!

 

[robinjoo1]

Since alpha needed to switch to non-rog ui i like that more than rog-version