Release Asuswrt-Merlin 3004.388.9 is now available

[RMerlin]

Asuswrt-Merlin 3004.388.9 is now available. Note that the BCM4912 devices are being migrated to 3006.102, therefore they will not be included in this or in future 3004.388 release.

The focus of this release is the merge of an updated GPL, updated components, and a few enhancements to VPN clients.

List of models that are not included in thise release, as they will be included in the next 3006.102 release:

• GT-AX6000
• zenWifi Pro XT12
• GT-AX11000 Pro
• GT-AXE16000
• RT-AX86U Pro
• RT-AX88U Pro

Changes:

3004.388.9 (9-Apr-2025)
  - NOTE: BCM4912 models such as the GT-AX6000 have now been
         migrated to the 3006 firmware series.

  - NEW: (re-added) VPN interface selector on the Speedtest page,
         to test a VPN tunnel's throughput.
  - UPDATED: Merged GPL 388_25373.
  - UPDATED: dropbear to 2025.87.
  - UPDATED: OpenVPN to 2.6.14.
  - UPDATED: dnsmasq to 2.91.
  - UPDATED: miniupnpd to 2.3.7 (20250207 snapshot)
  - UPDATED: amtm to 5.2 (decoderman)
  - CHANGED: VPN public IP retrieval now uses HTTP instead of STUN,
             which should be more reliable through a VPN tunnel.
  - CHANGED: Model name will be inserted in the filename of JFFS
             backups.
  - CHANGED: Improved refresh behaviour of the VPN Status page.
  - CHANGED: Set rp_filter mode to "loose" on Wireguard client
             interfaces.
             Fixes gettunnelip.sh and onboard speedtest.
  - CHANGED: Display public IP address for Wireguard clients.
  - CHANGED: Make PCP requests also honor the Secure Mode setting
             (Self-Hosting-Group)
  - CHANGED: Settings/JFFS backup uploads file picker  will filter by
             file extension.
  - CHANGED: Added dhd userspace tool to RT-AX88U and GT-AX11000.
  - CHANGED: WAN IPv6 provided as second argument to the ddns-start
             script.
  - FIXED: CVE-2024-9143 in OpenSSL (Debian backport by RSDNTWK)
  - FIXED: Missing icon for the GT-AX11000 on AiMesh page.

Please keep discussions on this specific release. This thread will eventually be locked down once the release activity has quieted down..


Downloads are here.
Changelog is here.

 

[RMerlin]

Known issues:

• Custom DDNS cannot be configured on the webui (fixed with this and this commit)
• Network Map failing to display System Status for some users (truncated hostname provided by web server, fixed with this commit)

 

[Timo]

Thank you very much for your continued efforts. Up and running and no issues to report

 

[shabbs]

Let's GO!

EDIT: All RT-AX86U APs upgraded here from the Beta. No issues.

 

[tallytr]

Works for me. RT-AX86U

 

[darkarcheangel]

Working perfectly, thank you.

 

[Unetwork]

Hello, thank you for this new update.

Is a Hard Reset necessary after the update, or is it unnecessary because the changes are minor ?

I'm currently running version 3004_388.8_4 (AX88U)

 

[northumberland]

Ax88u seems to be working well so far on a dirty upgrade. Thanks dude

The Asus license agreements though, surely much of that isn't necessary? I grudgingly accepted the first but said no to the second.

 

[northumberland]

Hello, thank you for this new update.

Is a Hard Reset necessary after the update, or is it unnecessary because the changes are minor ?

I'm currently running version 3004_388.8_4 (AX88U)

I didn't hard reset mine yet, but your mileage may vary. Same router, same upgrade path. Maybe upgrade any scripts first in case of compatibility issues.

 

[Unetwork]

@northumberland Thank you for your advice.

I don't use additional scripts or other tricks.

So I can do a dirty update without a reset ?

 

[dave14305]

@RMerlin, Thanks again for all the efforts in this great development.
I always double check the SHA256 signatures, could not find the RT-AX88U_3004_388.9_beta1_ubi.w (86f6bcbde78ee80c61ae6ec3043b12e3f388c66663835c89f4861a32b7d8bf48) in the download site.

The beta is over now.

 

[MF-Bra]

The beta is over now.

My mistake, downloaded the beta for 96u and did the mistake. sorry and thanks.

 

[acale75]

Thank you RMerlin

 

[Ltvscout]

I dirty upgraded from 3004_388.8_4 on my RT-AX86U and when I view the list on Network Map, two Clients Name get overwritten. The overwritten names don't stay the same. It'll periodically change to different IP's. I viewed with the latest FireFox and Chrome and cleared the cache on both.

 

[mastodon]

Why AX68 is not on the list?

 

[aex.perez]

so did a different option, I usually upgrade the nodes first. But this time I made sure all scripts were updated, and applied the amtm update, then did a backup.

So I ugraded the firmware on the Router first.

Lost the nodes, but everything I quickly tested looks to be operational, sees the nodes but not as nodes and can't add them

So now upgrading the Firmware on a node using MerlinAU, both I can SSH to, going to check the non upgraded one see it I can get to it using a borwser and if the upgraded one now is seen as a node. The saga continues....

 

[aex.perez]

I dirty upgraded from 3004_388.8_4 on my RT-AX86U and when I view the list on Network Map, two Clients Name get overwritten. The overwritten names don't stay the same. It'll periodically change to different IP's. I viewed with the latest FireFox and Chrome and cleared the cache on both.

Seeing that as well but also seeing the IPV6 addresses for some of the devices (all but two wired)

 

[aex.perez]

so did a different option, I usually upgrade the nodes first. But this time I made sure all scripts were updated, and applied the amtm update, then did a backup.

So I ugraded the firmware on the Router first.

Lost the nodes, but everything I quickly tested looks to be operational, sees the nodes but not as nodes and can't add them
View attachment 64915View attachment 64916

So now upgrading the Firmware on a node using MerlinAU, both I can SSH to, going to check the non upgraded one see it I can get to it using a borwser and if the upgraded one now is seen as a node. The saga continues....

Node available on SSH not HTTP even thouge the router doesn't see it as a node, No going to ungrade the second node to 388.9 and WPS reset them, readd them and do a recover to get tehm back, worse case I can manually if the restore scres things up again.

 

[dave14305]

Why AX68 is not on the list?

Read the sentence BEFORE the list again.

 

[mastodon]

Read the sentence BEFORE the list again.

Your not realy helpful with this. Certainly, I have read it, but the AX68 version of this firmware is on the download list, but not on the 3006.102. So, I need explanation.