[Beta] Asuswrt-Merlin 384.11 Beta is now available

[Swistheater]

so - intercept is working, ntpd is on, dnsfilter is set to router--- no issues with trace route either.

 

[joe scian]

Its intermittent - sometimes it works - othertimes not - when in condition below the diagnose button never gets initialised - always busy

traceroute to www.yahoo.com (106.10.250.10), 30 hops max, 60 byte packets
 1  220.233.1.3 (220.233.1.3)  8.266 ms  7.955 ms  8.191 ms
 2  10.1.23.236 (10.1.23.236)  8.519 ms  8.453 ms  8.279 ms
 3  116.255.21.108 (116.255.21.108)  8.498 ms  8.443 ms  8.277 ms
 4  103.200.13.98 (103.200.13.98)  101.756 ms  101.800 ms  101.636 ms
 5  103.200.13.115 (103.200.13.115)  101.248 ms  101.302 ms  101.135 ms
 6  103.200.13.129 (103.200.13.129)  101.648 ms  101.363 ms  101.321 ms
 7  103.200.13.121 (103.200.13.121)  101.501 ms  101.357 ms  101.216 ms
 8  103.200.13.235 (103.200.13.235)  101.835 ms  101.648 ms  101.369 ms
 9  27.111.228.3 (27.111.228.3)  102.610 ms  101.872 ms  101.821 ms
10  203.84.209.75 (203.84.209.75)  103.270 ms  103.061 ms  103.113 ms
11  106.10.128.5 (106.10.128.5)  102.858 ms 106.10.128.3 (106.10.128.3)  103.110 ms  103.182 ms
12  106.10.128.35 (106.10.128.35)  102.682 ms 106.10.128.29 (106.10.128.29)  103.007 ms
send: Operation not permitted

 

[bluepoint]

yes, it came on after reboot

What router model is this?

 

[Swistheater]

traceroute to www.google.com (172.217.2.132), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  10.347 ms  15.056 ms  14.714 ms
 2  68.86.171.233 (68.86.171.233)  17.073 ms  16.762 ms  16.725 ms
 3  68.87.166.77 (68.87.166.77)  15.392 ms  15.349 ms  15.273 ms
 4  68.86.95.45 (68.86.95.45)  22.640 ms  22.566 ms  22.281 ms
 5  68.86.82.154 (68.86.82.154)  20.177 ms  21.871 ms  21.601 ms
 6  66.208.233.242 (66.208.233.242)  19.632 ms 66.208.228.98 (66.208.228.98)  17.128 ms 66.208.233.242 (66.208.233.242)  15.686 ms
 7  108.170.253.1 (108.170.253.1)  22.378 ms 108.170.253.17 (108.170.253.17)  20.390 ms *
 8  216.239.57.130 (216.239.57.130)  21.769 ms 216.239.59.61 (216.239.59.61)  19.392 ms 216.239.59.15 (216.239.59.15)  19.018 ms
 9  172.217.2.132 (172.217.2.132)  18.735 ms 216.239.59.15 (216.239.59.15)  19.774 ms 172.217.2.132 (172.217.2.132)  19.463 ms

 

[Swistheater]

What router model is this?

RT-AC5300

 

[Swistheater]

traceroute to www.yahoo.com (72.30.35.10), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  12.237 ms  10.278 ms  11.644 ms
 2  68.86.171.233 (68.86.171.233)  11.774 ms  19.303 ms  19.048 ms
 3  68.87.166.77 (68.87.166.77)  16.393 ms  16.406 ms  16.352 ms
 4  4.68.74.89 (4.68.74.89)  22.002 ms  21.971 ms  21.924 ms
 5  * * *
 6  4.14.4.250 (4.14.4.250)  55.292 ms  51.723 ms  54.924 ms
 7  216.115.104.77 (216.115.104.77)  51.835 ms 216.115.97.105 (216.115.97.105)  55.440 ms 216.115.104.77 (216.115.104.77)  46.694 ms
 8  74.6.227.129 (74.6.227.129)  54.521 ms 74.6.227.139 (74.6.227.139)  56.661 ms 72.30.223.27 (72.30.223.27)  48.231 ms
 9  74.6.122.89 (74.6.122.89)  52.080 ms 74.6.122.91 (74.6.122.91)  55.012 ms 74.6.122.33 (74.6.122.33)  50.465 ms
10  98.139.128.75 (98.139.128.75)  50.424 ms 98.137.192.151 (98.137.192.151)  50.735 ms 98.139.128.75 (98.139.128.75)  46.830 ms
11  72.30.35.10 (72.30.35.10)  53.300 ms  53.215 ms  54.858 ms

 

[Swistheater]

traceroute to www.yandex.ru (5.255.255.88), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  10.744 ms  10.662 ms  10.360 ms
 2  68.86.171.233 (68.86.171.233)  19.133 ms  18.861 ms  18.876 ms
 3  68.87.166.77 (68.87.166.77)  15.518 ms  15.515 ms  15.444 ms
 4  4.68.74.89 (4.68.74.89)  23.226 ms  22.937 ms  23.030 ms
 5  * * *
 6  4.14.97.242 (4.14.97.242)  33.235 ms  30.946 ms  30.501 ms
 7  5.255.255.88 (5.255.255.88)  149.478 ms  149.728 ms  149.418 ms

 

[Swistheater]

traceroute to www.ebay.com (23.46.202.11), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  11.178 ms  11.127 ms  10.844 ms
 2  68.86.171.233 (68.86.171.233)  11.638 ms  19.693 ms  19.415 ms
 3  68.87.166.77 (68.87.166.77)  -1556858803210.992 ms  16.226 ms  16.013 ms
 4  68.86.95.45 (68.86.95.45)  24.704 ms  24.644 ms  24.290 ms
 5  68.86.84.153 (68.86.84.153)  33.359 ms  33.296 ms  32.683 ms
 6  68.86.83.178 (68.86.83.178)  30.474 ms  27.565 ms  27.199 ms
 7  66.208.228.42 (66.208.228.42)  35.315 ms 50.248.118.138 (50.248.118.138)  34.591 ms  29.700 ms
 8  * 23.203.144.146 (23.203.144.146)  37.187 ms *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

 

[Swistheater]

so - intercept is working, ntpd is on, dnsfilter is set to router--- no issues with trace route either.

found a couple of test that gave me issues.

 

[joe scian]

same here

traceroute to www.ebay.com (23.223.48.183), 30 hops max, 60 byte packets
 1  220.233.1.3 (220.233.1.3)  8.088 ms  -1556858941263.472 ms  -1556858941062.587 ms
 2  10.1.23.234 (10.1.23.234)  8.908 ms  -1556858941027.727 ms  8.681 ms
 3  45.127.172.33 (45.127.172.33)  8.511 ms  8.345 ms  8.391 ms
 4  203.134.37.73 (203.134.37.73)  -1556858940857.263 ms  -1556858941789.176 ms  17.867 ms
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

 

[Swistheater]

traceroute to www.linkedin.com (108.174.11.65), 30 hops max, 60 byte packets
 1  96.120.21.221 (96.120.21.221)  -1556859148479.833 ms  11.127 ms  14.779 ms
 2  68.86.171.233 (68.86.171.233)  22.763 ms  22.714 ms  -1556859148472.684 ms
 3  68.87.166.77 (68.87.166.77)  15.753 ms  15.745 ms  15.690 ms
 4  4.68.74.89 (4.68.74.89)  22.265 ms  22.066 ms  21.865 ms
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *
12  * * *
13  * * *
14  * * *
15  * * *
16  * * *
17  * * *
18  * * *
19  * * *
20  * * *
21  * * *
22  * * *
23  * * *
24  * * *
25  * * *
26  * * *
27  * * *
28  * * *
29  * * *
30  * * *

 

[RMerlin]

Starting to wonder if maybe that traceroute command wouldn't be having issues with the older kernels. While I don't get bogus values here, it however fails to do IP resolutions - no issue on the RT-AX88U, which has a newer kernel.

Anyone using an RT-AC86U or RT-AX88U also having weird issues with traceroute (either bogus delay values or failure to do IP resolution)?

 

[Swistheater]

i think it probably just needs fine tuning and extra testing. i never really use this feature.

 

[Swistheater]

it works but it seems like it is limited. - it seems like it shuts of prematurely.

 

[EeK]

I responded in another thread that I was also having issues with steam+stubby. I noticed Eek and I both have ac86u routers. Anyone else with another router having issues with steam+stubby? ...or others having the issue on an ac86u?

Try a different DoT server. Cloudfalre does not support EDNS, so they might have issues with some CDNs.

I believe I figured out what's the issue.

Some CDNs use DNS to determine the geographical location of the user, and Steam's CDN is likely one of them, due to their regional pricing and geo-blocking practices.

I'm not in the US, and I know for a fact that Cloudflare doesn't have resolvers in my country. So, by using Stubby, access to Steam's servers was severely impaired.

@truglodite, I assume that you're not in the US either? I came across a couple of lists of public resolvers that support DoT, from the DNS Privacy Project and Wikipedia. Now, it's a matter of finding out if they have DNS servers in our countries, which has been a rather difficult task, at least for me.

@RMerlin (or others), do you have any suggestions on how to determine if a resolver has DNS servers in a specific location? As for resolvers not in those lists (OpenDNS, for example), is there any way to test if they support DoT?

 

[joe scian]

been getting a few of these errors lately in log - this morning woke up to a functioning router but the USB2.0 drive was unmounted - had to unplug and reinsert and reboot router before usb could be read. Possible hardware USB 2.0 error on router or possible problem with USB drive ? Any comments welcome

usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: usb 1-2: reset high speed USB device using ehci_hcd and address 3
May  3 12:35:38 RT-AC5300 kernel: sd 0:0:0:0: [sda] Unhandled error code
May  3 12:35:38 RT-AC5300 kernel: sd 0:0:0:0: [sda]  Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
May  3 12:35:38 RT-AC5300 kernel: sd 0:0:0:0: [sda] CDB: Read(10): 28 00 00 10 4e 78 00 04 00 00
May  3 12:35:38 RT-AC5300 kernel: end_request: I/O error, dev sda, sector 1068664

 

[Swistheater]

so--- a DoT question, if i have DoT enabled and I run a tracert command to trace my route to lets say google.com is it normal to see my ISP in that route several times?

 

[bluepoint]

so--- a DoT question, if i have DoT enabled and I run a tracert command to trace my route to lets say google.com is it normal to see my ISP in that route several times?

Yes, your ISP is your gateway to the wild so you'll pass through them.

 

[Swistheater]

Yes, your ISP is your gateway to the wild so you'll pass through them.

i figured this to be true.

 

[RMerlin]

@RMerlin (or others), do you have any suggestions on how to determine if a resolver has DNS servers in a specific location? As for resolvers not in those lists (OpenDNS, for example), is there any way to test if they support DoT?

Some will show the location of their datacenters on their websites (Cloudflare does). However, I suspect that most important would be to use one that supports EDNS - I know that Cloudflare doesn't.

Very few servers support DoT. OpenDNS does not, they are still (at this time) stuck with their proprietary DNSCrypt protocol. Hopefully they will eventually switch to something backed by IETF, be it DoT or DoH.