[Beta] Asuswrt-Merlin 382.1 Beta is available

[AM17]

ok- now I think I see something.

Screen shot of certs in my last post shows only two dashes at the end of CRL key. I went back and corrected it..

now when I go back in... there are only 4?!?

Just for the hell of it.. I put in 6; after saving and rechecking - 5 remained.

Save, apply and recheck - still 5. Turned the service on, still got the CRL not loaded issue.

Checked back on cert page... back to four dashes:

something very not right with this process?

​

 

[AM17]

tried a few times - checking it had saved the 5 dashes in the end of the CRL... on the last attempt, it connected - no other parameter changes.

glad it works but concerned its fiddling with certs and will probably be unreliable

 

[bradbort]

I'm experiencing a strange bug since upgrading from beta 2 to beta 3 on my 88U. When I bring my work computer and iPhone home, have them on wifi, and VPN in to work, the CISCO VPN seems to work fine. Unfortunately, outlook will no longer connect to my work email. I verified this on a PC and an iPhone, when connected to router with beta 3. I tried resetting the router. No joy. When I rolled back to beta 2, all was well again.

 

[savagepagan]

I noticed a two 2 degree C increase in cpu temp when I went to beta3.

 

[L&LD]

I noticed a two 2 degree C increase in cpu temp when I went to beta3.

Did the ambient temperature increase also? How soon after installing and booting into beta3 did you check the temps?

 

[Raz69]

Hello,
for development purpose I'm sharing this information. I can't install Astrill applet on the beta3 with 86u (see file). Working great on my ac88u with 380 firmware though.

Thank for the great job Merlin, having astrill applet on 88u is a life changer from where I live. .
If you need me to run some test regarding astrill applet on 86u I'll be glad to do it !

 

[RMerlin]

If you need me to run some test regarding astrill applet on 86u I'll be glad to do it !

The applet is entirely developed by Astrill, I'm not involved in it in any way. Give them time, they probably won't have it fixed until I go out of beta. Don't forget that the RT-AC86U is completely different hardware with a different kernel, so they might need to do additional work to support that model.

 

[RMerlin]

something very not right with this process?

Thanks for digging. It does seem to truncate it indeed. I never noticed it here because the CRL I paste has an extra carriage return at the end, so the five dashes were left untouched.

 

[Raz69]

The applet is entirely developed by Astrill, I'm not involved in it in any way. Give them time, they probably won't have it fixed until I go out of beta. Don't forget that the RT-AC86U is completely different hardware with a different kernel, so they might need to do additional work to support that model.

Thx for the answer. Just to be sure, I cant install 380 firmware on this router ?

 

[dr_lucas]

Thx for the answer. Just to be sure, I cant install 380 firmware on this router ?

No, you can't. 382 is the first firmware that supports AC86U

 

[AM17]

Thanks for digging. It does seem to truncate it indeed. I never noticed it here because the CRL I paste has an extra carriage return at the end, so the five dashes were left untouched.

Thanks for having a look back. Will add the extra carriage return in all cert strings as a safety buffer and revert if I notice anything else weird.

From your perspective, is this behaviour consistent and understandable? Am wondering if this is somehow related to this VPN Cert issue logged in github?

 

[djrm]

I have tested this a bit more and the problem with the max speed is due to the CPU 1 hitting 100% at 260Mb download while with 380.68_4 it is just at aprox 50% for 310Mb. I made a config reset and after that I tested again and exactly the same happened. Also is confirmed that new Trend Micro is the cause of the memory use increase in this version and I think it is probably the root cause of the extra cpu which is causing the issue with the speed as well. So just after the config reset, aiprotection is disabled and the memory use is about 25% and performance tests seems to be ok, but just after enable aiprotection the memory reach 35% and the problem with performance appears.....The problem is that it seems that even disabling aiprotection later, the router doesn't back working normally as before, so it remains with the same memory use and same behaviour with the performance..

After back to 380_68_4 router back to normal in all aspects...

After more checks its clear that new Trend Micro disable the NAT acceleration without notice (although it appears to be active), however when you disable NAT manually and try to active it back again, the following prompt comes confirming both options cannot be active together....
EDIT: Even accepting to active NAT and disable aiprotection following this prompt, aiprotection remains enabled and NAT disabled....

 

[RMerlin]

From your perspective, is this behaviour consistent and understandable? Am wondering if this is somehow related to this VPN Cert issue logged in github?

So far I've been unable to pinpoint the exact location in the code where the last character might get dropped.

 

[vwsplitty1980]

@RMerlin

getting booted out of the web gui every time i click on the networkmap- icon of pc. using firefox and get this message:

using the gearbest china router hardware set to Europe and english

Nov 7 20:59:57 kernel: httpd[2115]: unhandled level 3 translation fault (11) at 0x00000004, esr 0x92000007
Nov 7 20:59:57 kernel: pgd = ffffffc0144ca000
Nov 7 20:59:57 kernel: [00000004] *pgd=0000000015275003, *pud=0000000015275003, *pmd=00000000145c6003, *pte=0000000000000000
Nov 7 20:59:57 kernel: CPU: 0 PID: 2115 Comm: httpd Tainted: P O 4.1.27 #2
Nov 7 20:59:57 kernel: Hardware name: Broadcom-v8A (DT)
Nov 7 20:59:57 kernel: task: ffffffc01e002100 ti: ffffffc0171ec000 task.ti: ffffffc0171ec000
Nov 7 20:59:57 kernel: PC is at 0xf6a969cc
Nov 7 20:59:57 kernel: LR is at 0x1f764
Nov 7 20:59:57 kernel: pc : [<00000000f6a969cc>] lr : [<000000000001f764>] pstate: a0070010
Nov 7 20:59:57 kernel: sp : 00000000ffa99210
Nov 7 20:59:57 kernel: x12: 000000000007cda4
Nov 7 20:59:57 kernel: x11: 000000000006bb5c x10: 0000000000000000
Nov 7 20:59:57 kernel: x9 : 0000000000000000 x8 : 0000000000000000
Nov 7 20:59:57 kernel: x7 : 0000000000000002 x6 : 00000000f70694c0
Nov 7 20:59:57 kernel: x5 : 0000000000000004 x4 : 0000000000000000
Nov 7 20:59:57 kernel: x3 : 0000000000000010 x2 : 0000000000000001
Nov 7 20:59:57 kernel: x1 : 0000000000000000 x0 : 0000000000000000
Nov 7 20:00:06 watchdog: restart httpd
Nov 7 20:00:06 rc_service: watchdog 775:notify_rc stop_httpd
Nov 7 20:00:06 rc_service: watchdog 775:notify_rc start_httpd
Nov 7 21:00:06 RT-AC86U: start httpd
Nov 7 21:00:33 disk_monitor: Got SIGALRM...

 

[vwsplitty1980]

gearbest hardware here too - set to english + US


Worked fine for me - I added another user account as part of test... Not sure if that helped or not. Maybe try the same?

i really dont know then and running out of ideas. everything has been put back to defaults but no matter what i do the keys and certs windows never populate with anything?? starting to wonder if anything to do with being the Chinese version.

edit:
just put the latest offical asus release and defaulted after.
open vpn does not even complete to give me a openvpn file to export see picture no2 (asus.jpg)

getting this via the offical asus firware log:


Nov 7 20:48:12 rc_service: ntp 958:notify_rc restart_upnp
Nov 7 20:48:12 miniupnpd[1407]: shutting down MiniUPnPd
Nov 7 20:48:12 miniupnpd[1648]: version 1.9 started
Nov 7 20:48:12 miniupnpd[1648]: HTTP listening on port 58261
Nov 7 20:48:12 miniupnpd[1648]: Listening for NAT-PMP/PCP traffic on port 5351
Nov 7 20:48:12 rc_service: ntp 958:notify_rc restart_diskmon
Nov 7 20:48:12 disk_monitor: Finish
Nov 7 20:48:12 disk monitor: be idle
Nov 7 20:48:19 crond[766]: time disparity of 384287 minutes detected
Nov 7 20:49:00 rc_service: service 1697:notify_rc start_vpnserver1
Nov 7 20:49:14 dnsmasq-dhcp[759]: Ignoring domain INT.vertivco.com for DHCP host name ENPUKMART5X492Y
Nov 7 20:50:00 rc_service: service 1898:notify_rc start_vpnserver1
Nov 7 20:51:00 rc_service: service 2094:notify_rc start_vpnserver1
Nov 7 20:51:14 rc_service: httpd 767:notify_rc restart_openvpnd;restart_chpass;restart_dnsmasq;restart_samba
Nov 7 20:51:17 Samba Server: smb daemon is stoped
Nov 7 20:52:00 rc_service: service 2456:notify_rc start_vpnserver1
Nov 7 20:53:00 rc_service: service 2617:notify_rc start_vpnserver1
Nov 7 20:53:52 rc_service: httpd 767:notify_rc restart_openvpnd;restart_chpass;restart_samba
Nov 7 20:54:04 Samba Server: smb daemon is stoped
Nov 7 20:55:00 rc_service: service 2997:notify_rc start_vpnserver1
Nov 7 20:56:00 rc_service: service 3158:notify_rc start_vpnserver1
Nov 7 20:57:00 rc_service: service 3319:notify_rc start_vpnserver1
Nov 7 20:58:00 rc_service: service 3484:notify_rc start_vpnserver1
Nov 7 20:59:00 rc_service: service 3651:notify_rc start_vpnserver1
Nov 7 21:00:00 rc_service: service 3815:notify_rc start_vpnserver1
Nov 7 21:00:12 disk_monitor: Got SIGALRM...
Nov 7 21:01:00 rc_service: service 3977:notify_rc start_vpnserver1

 

[jernau]

Looks like the newer 382 based code has now been released for the RT-AC3200 today (3.0.0.4.382.18338). Hopefully not too long before they release the GPL elements so we can get a Merlin variant?

 

[Gingernut]

Normal for the RT-AC86U.

Do you think the drive being in ext3 file system format on the 86U could be the cause of these erratic network file transfers?

When you did your throughput tests what file system were you using?

 

[RMerlin]

getting booted out of the web gui every time i click on the networkmap- icon of pc. using firefox and get this message:

Something on your PC is causing the web server to crash. Which specific icon are you talking about?

Looks like the newer 382 based code has now been released for the RT-AC3200 today (3.0.0.4.382.18338). Hopefully not too long before they release the GPL elements so we can get a Merlin variant?

Won't be until 382.2, provided the GPL is complete and also stable, so probably won't happen until somewhere in December.

Thanks for having a look back. Will add the extra carriage return in all cert strings as a safety buffer and revert if I notice anything else weird.

I rewrote a portion of the key/cert storing/retrieval code today, removing some of the legacy nvram-related code along the way, and simplifying the data manipulations. This resolved the truncate issue, as well as a few other random issues related to certificates.

 

[RMerlin]

Do you think the drive being in ext3 file system format on the 86U could be the cause of these erratic network file transfers?

When you did your throughput tests what file system were you using?

I did my tests using NTFS. I do occasionally get some stalls now when I test it, but no idea where they are happening since the CPU usage is actually quite low during these stalls. Could be the Trend Micro engine, could be the proprietary USB driver... No idea. The only thing I can control in the equation is the Samba configuration, and I found no difference regardless of which optimization settings I tried to change in Samba, so I've moved on.

 

[Gingernut]

I did my tests using NTFS. I do occasionally get some stalls now when I test it, but no idea where they are happening since the CPU usage is actually quite low during these stalls. Could be the Trend Micro engine, could be the proprietary USB driver... No idea. The only thing I can control in the equation is the Samba configuration, and I found no difference regardless of which optimization settings I tried to change in Samba, so I've moved on.

Well I don't get stalls at all, just low throughput on almost every SMB transfer.

Wonder why Asus doesn't give an ext3/4 formating option in the UI?

Native linux file systems are supposed to give better perfrormance, but it seems NTFS is the way to go these days, entware needs ext3/4 right?

Thanks for your help.