Asuswrt-Merlin 378.51 Beta 1 is out

[bodean]

How much time did it take before you see any data?
My took 8 hours before anything appeared.

About an hour or so then I saw readings in the graph.

 

[SpOuK3]

WAN/LAN Bandwidth Monitor

Hi Merlin,

I just got my RT-AC87U, I'm running an OpenVPN Client on it... A weird thing, in the "Adaptive QoS - WAN/LAN Bandwidth Monitor", the graphs are only showing "UPLOAD" when the OpenVPN Client is enabled, BUT, in the "Traffic Manager - Traffic Monitor" BOTH Uplaod / Download are showing fine with good bandwith speed...

Do you think it's a bug in the "Adaptive QoS - WAN/LAN Bandwidth Monitor" page? Wrong interface monitored or something?

Apps Analysis is working fine, even with OpenVPN Client enabled... Everything is fine except the Download / Upload graph on that page...

Thanks for your help!

 

[octopus]

About an hour or so then I saw readings in the graph.

Okey thanks, maby you have more traffic then I then.

 

[homer2320776]

I would still love to see the destination IP's in the Realtime Traffic Monitor. The Wireless log page is pretty slick! Gotta give props to that! Thanks a bunch!

 

[RMerlin]

Thanks

fw_nat_loopback=2 working fine for me

love the new Wireless Log page,
but I would prefer same devicenames as in networkmap/clients (if possible)

Which router model?

The Networkmap is something I'm seriously starting to think about removing. After three years of work on it from both Asus and myself, it still only half-works reliably.

 

[RMerlin]

Thank you very much! Really like the new auto refreshing Wireless Log Page Though displaying the host names is not available in AP mode, it would be nice if the saved name entries of the custom_clientlist could be displayed otherwise.

Noticed that on my RT-AC68u (AP mode) the USB-Application is not available on the left side navigation bar anymore.

I haven't changed anything in relation to that in 378.51. What was the previous version you were running? It might have been removed by Asus in a recent GPL merge.

 

[homer2320776]

Did a test on the NAT loopback. Using the Merlin setting I was unable to connect to my Synology using my external DDNS name.

After I changed over to Asus it came right up.

 

[RMerlin]

Wireless log is rock and roll . What's the thing about the other loopback ? What's different ? Is it only regarding DPI ? Is that Trend Micro thing only for ARM ? It can't be ported, isn't it ?

The original NAT loopback will masquerade every single connection coming from a LAN IP. In the past this has been causing issues for some users, sometime every LAN to LAN connection going accross different interfaces (from wired to wifi for instance) would be masqueraded.

About two years ago, I replaced that implementation with a more complex one that was originally designed by Phuzi0n for DD-WRT (back when DD-WRT's own NAT loopback was completely broken). This method involves marking traffic that come into the router but NOT from WAN. As the packet reaches a latter stage in the Netfilter chain, all those marked packets are masqueraded.

(hey, I never said it was simple, people who keep complaining about NAT loopback issues thinking this is a one-line fix don't know much about how it really works).

The problem with this second method is that routers that have the DPI engine (which means those with the Trend Micro-based technologies such as AiProtection and Adaptive QoS) can overwrite the firewall rules used by this NAT loopback implementation, so I had to remove it a few releases ago.

I tried to have the firewall rules reapplied every time the DPI engine is restarted by the firmware in an attempt to resolve those issues. However most of that code is closed source (did I mention how much all this closed source code is slowly killing my ability to do anything in this project?), it might still ocasionally stop working. The only way to REALLY resolve this issue for good would be to have access to the closed source portion of the code that blindly overwrites the firewall rules.

 

[RMerlin]

I know you get this question a lot but do I need to do a reset if coming from 378.50?

No need to do a reset when coming from 378.50.

 

[RMerlin]

Hi Merlin, is the Traffic Analyzer enabled for RT-AC68U in this beta?

Thanks

Traffic Analyzer is now included in all DPI-enabled releases, since the worst that can happen is that page won't display reliable data - it won't have any impact on the router's stability.

 

[RMerlin]

Hi,

no support for SNMP on RT-AC3200 ?

Thanks

I probably just forgot to add it to the build profile, I'll add it for the next release.

 

[emax.b]

Thank you

 

[RMerlin]

Will there also come a beta or final version for the AC56U with ta and dpi? Especial I like the network protection, it has blocked already several malicious sites.

Yes, since it seemed to work reliably enough. For now I want the focus to be on the 378.51 changes themselves so I didn't generate experimental builds.

 

[RMerlin]

Hi Merlin,

I just got my RT-AC87U, I'm running an OpenVPN Client on it... A weird thing, in the "Adaptive QoS - WAN/LAN Bandwidth Monitor", the graphs are only showing "UPLOAD" when the OpenVPN Client is enabled, BUT, in the "Traffic Manager - Traffic Monitor" BOTH Uplaod / Download are showing fine with good bandwith speed...

Do you think it's a bug in the "Adaptive QoS - WAN/LAN Bandwidth Monitor" page? Wrong interface monitored or something?

Apps Analysis is working fine, even with OpenVPN Client enabled... Everything is fine except the Download / Upload graph on that page...

Thanks for your help!

Anything related to the DPI engine is out of my control.

 

[RMerlin]

Did a test on the NAT loopback. Using the Merlin setting I was unable to connect to my Synology using my external DDNS name.

After I changed over to Asus it came right up.

Need to know which router model you are talking about.

 

[SpOuK3]

System logs spam

I have this in my system logs since 378.51 beta 1...

Weird thing... Nothing is plugged into LAN port 1 ... It's spamming every minutes...

Feb 28 13:31:20 kernel: br0: port 1(vlan1) received tcn bpdu
Feb 28 13:31:20 kernel: br0: topology change detected, propagating
Feb 28 13:31:42 kernel: br0: port 1(vlan1) received tcn bpdu
Feb 28 13:31:42 kernel: br0: topology change detected, propagating
Feb 28 13:32:04 kernel: br0: port 1(vlan1) received tcn bpdu
Feb 28 13:32:04 kernel: br0: topology change detected, propagating

 

[homer2320776]

Need to know which router model you are talking about.

Sorry, didn't think before I post. It's an RT-AC68U and I'm running the adaptive QOS.

After reading through the changelog you said it might cause issues.

 

[dlandon]

Port Forwarding on AC3200 Issue

I am running an AC3200 router and had an issue with port forwarding when NAT Loopback was set to "Merlin". I set NAT Loopback to "ASUS" and my port forwarding is now working.

I guess I don't understand NAT Loopback well enough to know if I should have it disabled or not.

 

[SO333]

Hi!
Are the changes of ASUS RT-AC68U Firmware 3.0.0.4.378.4376 included?
In particular, the AI protection fixes?

 

[deathnite]

Wow merlin!,
I hope I can get rid of ps4 lag with this one somehow if and when it shows up.

EDIT1:
Ok lets try to fix the ps4 lag without turning off nat acceleration please?
dd-wrt = 3 - 3 1/2 seconds (4 seconds max)) great!
now asus or yours (nat acceleration on)I get 8 seconds!
as you see double.

DD-WRT doesn't even have NAT Acceleration so why do you insist on keeping this feature on with Merlin firmware if it's laggy for you?
NAT Acceleration is mostly needed only for speeds higher than 200-250 Mbps.
For example with a 1 Gbps internet connection you won't get speeds higher than 250 Mbps if NAT Acceleration is turned off.

Personally I haven't noticed any lag in general and I have CTF and IPv6 enabled. I'm getting 1ms on speedtest.net.

Will there also come a beta or final version for the AC56U with ta and dpi? Especial I like the network protection, it has blocked already several malicious sites.

The latest Asus firmware 3.0.0.4.378.4376 has introduced DPI support for AC56U so I assume this code will soon be merged. In 378.50 it was just experimental using the AC68U wireless driver.