Asuswrt-Merlin 378.53 is now available

[Sanchu]

Merlin has already coded a fix for the 'IPVanish' case for the next release.....
https://github.com/RMerl/asuswrt-merlin/commit/81909a28ec050d0f45613f6e63bdea45b34672d3

I can see 2 problems in the log file

May 10 15:42:01 rc_service: httpd 1767:notify_rc start_vpnclient1
May 10 15:42:02 kernel: tun: Universal TUN/TAP device driver, 1.6
May 10 15:42:02 kernel: tun: (C) 1999-2004 Max Krasnyansky <maxk@qualcomm.com>
May 10 15:42:03 openvpn[3792]: DEPRECATED OPTION: --tls-remote, please update your configuration
May 10 15:42:03 openvpn[3792]: OpenVPN 2.3.6 arm-unknown-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [MH] [IPv6] built on Apr 26 2015
May 10 15:42:03 openvpn[3792]: library versions: OpenSSL 1.0.0r 19 Mar 2015, LZO 2.08
May 10 15:42:03 openvpn[3792]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
May 10 15:42:03 openvpn[3792]: Socket Buffers: R=[122880->131072] S=[122880->131072]
May 10 15:42:03 openvpn[3793]: UDPv4 link local: [undef]
May 10 15:42:03 openvpn[3793]: UDPv4 link remote: [AF_INET]208.76.111.154:443
May 10 15:42:03 openvpn[3793]: TLS: Initial packet from [AF_INET]208.76.111.154:443, sid=9a44212e 75a94b20
May 10 15:42:03 openvpn[3793]: WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
May 10 15:42:04 openvpn[3793]: VERIFY OK: depth=1, /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=IPVanish_CA/emailAddress=support@ipvanish.com
May 10 15:42:04 openvpn[3793]: VERIFY X509NAME OK: /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=tor-c02.ipvanish.com/emailAddress=support@ipvanish.com
May 10 15:42:04 openvpn[3793]: VERIFY OK: depth=0, /C=US/ST=FL/L=Winter_Park/O=IPVanish/OU=IPVanish_VPN/CN=tor-c02.ipvanish.com/emailAddress=support@ipvanish.com
May 10 15:42:05 openvpn[3793]: Data Channel Encrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May 10 15:42:05 openvpn[3793]: Data Channel Encrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
May 10 15:42:05 openvpn[3793]: Data Channel Decrypt: Cipher 'AES-256-CBC' initialized with 256 bit key
May 10 15:42:05 openvpn[3793]: Data Channel Decrypt: Using 256 bit message hash 'SHA256' for HMAC authentication
May 10 15:42:05 openvpn[3793]: Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA
May 10 15:42:05 openvpn[3793]: [tor-c02.ipvanish.com] Peer Connection Initiated with [AF_INET]208.76.111.154:443
May 10 15:42:07 openvpn[3793]: SENT CONTROL [tor-c02.ipvanish.com]: 'PUSH_REQUEST' (status=1)
May 10 15:42:07 openvpn[3793]: PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 198.18.0.1,dhcp-option DNS 198.18.0.2,rcvbuf 262144,explicit-exit-notify 5,route-gateway 172.20.32.1,topology subnet,ping 20,ping-restart 40,ifconfig 172.20.35.251 255.255.252.0'
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: timers and/or timeouts modified
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: explicit notify parm(s) modified
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: --sndbuf/--rcvbuf options modified
May 10 15:42:07 openvpn[3793]: Socket Buffers: R=[131072->245760] S=[131072->131072]
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: --ifconfig/up options modified
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: route options modified
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: route-related options modified
May 10 15:42:07 openvpn[3793]: OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
May 10 15:42:07 openvpn[3793]: TUN/TAP device tun11 opened
May 10 15:42:07 openvpn[3793]: TUN/TAP TX queue length set to 100
May 10 15:42:07 openvpn[3793]: do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
May 10 15:42:07 openvpn[3793]: /usr/sbin/ip link set dev tun11 up mtu 1500
May 10 15:42:07 openvpn[3793]: /usr/sbin/ip addr add dev tun11 172.20.35.251/22 broadcast 172.20.35.255
May 10 15:42:07 openvpn[3793]: updown.sh tun11 1500 1570 172.20.35.251 255.255.252.0 init
May 10 15:42:08 rc_service: service 3835:notify_rc updateresolv
May 10 15:42:08 dnsmasq[3587]: exiting on receipt of SIGTERM
May 10 15:42:08 dnsmasq[3843]: started, version 2.73rc1 cachesize 1500
May 10 15:42:08 dnsmasq[3843]: warning: interface ppp1* does not currently exist
May 10 15:42:08 dnsmasq[3843]: asynchronous logging enabled, queue limit is 5 messages
May 10 15:42:08 dnsmasq-dhcp[3843]: DHCP, IP range 192.168.1.2 -- 192.168.1.254, lease time 1d
May 10 15:42:08 dnsmasq[3843]: read /etc/hosts - 5 addresses
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.4.4#53 for domain local
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.8.8#53 for domain local
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.4.4#53 for domain local
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.8.8#53 for domain local
May 10 15:42:08 dnsmasq[3843]: using nameserver 198.18.0.1#53
May 10 15:42:08 dnsmasq[3843]: using nameserver 198.18.0.2#53
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.8.8#53
May 10 15:42:08 dnsmasq[3843]: using nameserver 8.8.4.4#53
May 10 15:42:10 openvpn[3793]: Ignore conflicted routing rule: 208.76.111.154 255.255.255.255
May 10 15:42:10 openvpn[3793]: /usr/sbin/ip route add 0.0.0.0/1 via 172.20.32.1
May 10 15:42:10 openvpn[3793]: /usr/sbin/ip route add 128.0.0.0/1 via 172.20.32.1

 

[Sanchu]

@
Martineau
Did you come across the mentioned QOS problem (POST 226 and 229 ) of this thread for my rt 87u . if you need i can provide the system logs. Is this a hardware problem or a software problem

 

[john9527]

May 10 15:42:03 openvpn[3792]: DEPRECATED OPTION: --tls-remote, please update your configuration

May 10 15:42:10 openvpn[3793]: Ignore conflicted routing rule: 208.76.111.154 255.255.255.255

Those errors are going to have to be taken up with the provider and their ovpn file/instructions and server configuration. This fix I referenced was specifically targeted to the reset of the DNS servers.

 

[Sanchu]

Those errors are going to have to be taken up with the provider and their ovpn file/instructions and server configuration. This fix I referenced was specifically targeted to the reset of the DNS servers.

@john9527 Did you come across the mentioned QOS problem (POST 226 and 229 ) of this thread for my rt 87u . if you need i can provide the system logs. Is this a hardware problem or a software problem

 

[RMerlin]

@RMerlin ^

It was somewhere above ☺
It's ac87u

The 2.4 GHz driver has been unchanged for months on the RT-AC87U (because Asus failed to provide it in their last two GPL releases), and the 5 GHz updates have resolved quite serious connectivity issues for all Apple product owners. The vast majority of the feedback reported improvements with the newer 5 GHz driver, so I recommend you do a factory default reset and manually reconfigure your router if you haven't done so since 378.51. If you're still experiencing issues, then start troubleshooting your LAN environment.

Do you plan to release a new update soon or maybe an experiment build to try out?

Last firmware release was only two weeks ago, and there hasn't even been any new release from Asus since then... There's nothing new to release.

 

[RMerlin]

@RMerlin Did you come across the mentioned QOS problem (POST 226 and 229 ) of this thread for my rt 87u . if you need i can provide the system logs. Please help me

Adaptive QoS was working fine when I last tested it a few weeks ago.

 

[Danny Sasmita Natapradja]

Merlin has already coded a fix for the 'IPVanish' case for the next release.....
https://github.com/RMerl/asuswrt-merlin/commit/81909a28ec050d0f45613f6e63bdea45b34672d3

This is good news

 

[Sanchu]

Adaptive QoS was working fine when I last tested it a few weeks ago.

Is Adaptive QoS a software functionality or combination of hardware and software ?

Attaching the logs after enabling the QOS. If any body can spot any thing wrong please let me know .. Thanks

 

[Sanchu]

I notice the following in the logs

May 10 20:55:13 kernel: htb: htb qdisc 17: is non-work-conserving?
May 10 21:00:09 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:12 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:13 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:14 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:16 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:16 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:16 rc_service: waitting "restart_qos;restart_firewall" via httpd ...
May 10 21:00:17 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:20 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:21 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:31 kernel: htb: htb qdisc 12: is non-work-conserving?


What is the meaning of this statement
is non-work-conserving?

 

[Martineau]

I notice the following in the logs

May 10 20:55:13 kernel: htb: htb qdisc 17: is non-work-conserving?
May 10 21:00:09 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:12 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:13 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:14 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:16 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:16 rc_service: httpd 477:notify_rc restart_qos;restart_firewall
May 10 21:00:16 rc_service: waitting "restart_qos;restart_firewall" via httpd ...
May 10 21:00:17 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:20 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:21 start_nat_rules: apply the nat_rules(/tmp/nat_rules_ppp0_eth0)!
May 10 21:00:31 kernel: htb: htb qdisc 12: is non-work-conserving?


What is the meaning of this statement
is non-work-conserving?

Try and use the search facility on this forum....

http://www.snbforums.com/threads/asuswrt-merlin-378-52-is-available.23738/page-12#post-177209

 

[Sanchu]

Try and use the search facility on this forum....

http://www.snbforums.com/threads/asuswrt-merlin-378-52-is-available.23738/page-12#post-177209

i think this subject is too complex for me to understand

 

[lzkill]

Hi folks.

With 378.53 I lose WAN SSH access when the DMZ is turned on. Any ideas? (68R)

 

[Maxiller]

I've successfully used the code below on 378.52_2 for selective routing via Dual Wan and One VPN Tunnel Client; I have not try it in 378.53 though.

Thanks for that, as it will be very useful for me, once I get my dual wan back to live ))
My problems seems to lie a bit deeper: http://www.snbforums.com/threads/378-5x-dual-wan-no-ip-on-second-wan.23486/

 

[RMerlin]

Is Adaptive QoS a software functionality or combination of hardware and software ?

It's entirely software, however the traffic classification is done by a closed source kernel module.

 

[themrindy]

Hi,

Sorry for this "spam" about my issues with bandwidth and my CPU core 1 to 100%.

I have a 1000Mbit fiber optic network.
ASUS rt87U (europe)
All tests are done through a Desktop PC with 1000Mbit NIC with full cat 6 network (switchboard, complete cat 6 networks cables from main fiber to PC)

I have used both ASUS firmware but mostly the great RMerlin builds since last December. I think around Christmas I got to use a firmware that I got about 600Mbit/s (speedtest) and CPU core 1 to about 40-50% but the last 2 builds I only got around 360-380Mbit/s and then CPU core 1 to 100% (almost directly after run). I have tested my line direct without any router and then I get around 800Mbit download and upload around 940Mbit.

@RMerlin do you know what could be the issue or change regarding those last firmwares that make the router getting a "poor" throughput? I really like to get what I pay for but maybe I'm only geeking around, I'm mean who needs more than 380Mbit/s.

Any help regarding settings and so forth would be really appreciated. I'm currently using RMerlin 378.53 and I haven't done any "special" scripts or config except creating a VPN Server (OpenVPN) all done via the GUI.

Many thanks,
Christian

 

[Marc66]

Hi,
I have used both ASUS firmware but mostly the great RMerlin builds since last December. I think around Christmas I got to use a firmware that I got about 600Mbit/s (speedtest) and CPU core 1 to about 40-50% but the last 2 builds I only got around 360-380Mbit/s and then CPU core 1 to 100% (almost directly after run). I have tested my line direct without any router and then I get around 800Mbit download and upload around 940Mbit.

You should make sure you have NAT acceleration enabled. Did you check this?
Do you have any other specific options enabled (QoS, DPI, ...)?

 

[themrindy]

You should make sure you have NAT acceleration enabled. Did you check this?
Do you have any other specific options enabled (QoS, DPI, ...)?

NAT HW activated and no QoS, TrafficAnyl etc...

/C

 

[RMerlin]

NAT HW activated and no QoS, TrafficAnyl etc...

/C

Make sure it's actually enabled by checking on the Tools -> Sysinfo page.

Also, disable STP under LAN -> Switch Control then reboot. STP is not compatible with Flow Acceleration.

 

[Chrysalis]

Interesting, after your post Merlin I checked mine and Spanning-Tree Protocol is enabled but sysinfo also shows Acceleration enabled, and as you may remember from my linksys forum post I deffo have acceleration on as cpu usage plummeted.

So I assume if I disable Spanning-Tree Protocol then I can expect some kind of further improvement?

 

[RMerlin]

Interesting, after your post Merlin I checked mine and Spanning-Tree Protocol is enabled but sysinfo also shows Acceleration enabled, and as you may remember from my linksys forum post I deffo have acceleration on as cpu usage plummeted.

So I assume if I disable Spanning-Tree Protocol then I can expect some kind of further improvement?

Only for the RT-AC87U and RT-AC68P. These support a second level of NAT acceleration called "Flow Accelerator".