[Beta] Asuswrt-Merlin 384.16 beta (and 384.13_5) are available

[RMerlin]

Asuswrt-Merlin 384.16 Beta (and 384.13_5 for RT-AC87U and RT_AC3200) are now available.

EDIT 2: 31-March-2020: Beta 3 builds are now available. See this post for the changelog.

EDIT: 22-March-2020: Beta 2 builds are now available.

384.16-beta2 (and refreshed 384.13_5) builds are now available.

Changes since Beta 1:

mainline:

104e894da0 Updated documentation
67e171c075 dnsmasq: update to 2.81rc4-33-g7558f2b-openssl
f2d35bcb60 inadyn: updated to 2.7
6e062fdf89 Merge pull request #447 from dave14305/patch-2
58b587b15e Merge pull request #453 from dave14305/patch-1
c872f241e6 webui: report subunit clients as being Local Clients rather than Guests when in repeater mode
900bae11cf webui: fix layout and colours on the Please Wait progress report
ac8a9b06a1 webui: reuse colours matching other meters for the download/upload meters
31e1c42eae webui: remove Guest flag from all guests clients, not just the first client
6278a1855a openssl-1.1: updated to 1.1.1e
bf2d5998f6 rc: dnsmasq remove expired KSK-2010
6cbd447c74 memaccess: rename unused 'sh' applet for 'sh.bcm' to avoid conflict with the shell
a366a81808 memaccess: re-add it to the build, the RT-AX56U uses it to properly configure its LEDs
805f0b4ae4 webui: fix incorrect guest SSID variables accessed for 5GHz-2
0595408572 rstats: Still broken - Revert "rstats: backport fixes from 386_36400"
2824ac0068 Bumped revision to beta 2
e1b2fe0adb shared: fix duplicate dnspriv entries in defaults.c

ax:

104e894da0 Updated documentation
67e171c075 dnsmasq: update to 2.81rc4-33-g7558f2b-openssl
f2d35bcb60 inadyn: updated to 2.7
58b587b15e Merge pull request #453 from dave14305/patch-1
d0d5b140e3 webui: report subunit clients as being Local Clients rather than Guests when in repeater mode
900bae11cf webui: fix layout and colours on the Please Wait progress report
9dfb96247b webui: remove Guest flag from all guests clients, not just the first client
75f8f183f1 SDK-6750: re-add spudd/pdc (bcmspu) and cryptodev (unused) to the source tree
6278a1855a openssl-1.1: updated to 1.1.1e
f242c9b24f memaccess: rename unused 'sh' applet for 'sh.bcm' to avoid conflict with the shell
7d0da139c6 memaccess: re-add it to the build, the RT-AX56U uses it to properly configure its LEDs
bf2d5998f6 rc: dnsmasq remove expired KSK-2010
04561b693f webui: fix incorrect guest SSID variables accessed for 5GHz-2
cae928a1c1 httpd: backport some fixes from 385_20252 - fixes constant alert() warnings after obtaining LE certificate
0595408572 rstats: Still broken - Revert "rstats: backport fixes from 386_36400"
2824ac0068 Bumped revision to beta 2

legacy:

acc9bd1241 Updated documentation
c1604fe3af webui: fix layout and colours on the Please Wait progress report
7efaadb620 openssl-1.1: update to 1.1.1e

The focus of this release was the addition of two new models, the RT-AX58U (and it's RT-AX3000 cousin) and the RT-AX56U.

I am also formally announcing that as of now, the RT-AC87U and RT-AC3200 are on limited support (which has already been the case for the last two releases, I'm just making it official now since the solutions I investigated didn't work out). The main reason is these two models are no longer based on the same code as their other recent models, and that older code is no longer compatible with mine, making it impossible for me to compile my latest GPL code for these two models. If eventually Asus decides to bring them back on the same codebase as the other main models (like the RT-AC68U or RT-AC88U) then I will be able to bring them back into full support mode. However if it doesn't happen in the near future, then I will eventually be forced to completely drop these two models. For now I just backported a few fixes to them, see the 384.13_5 changelog for details.

The highlights of this release:

• Added support for the RT-AX58U, RT-AX3000 and RT-AX56U.
• Merged GPL 384_8253 (for AX models).
• Merged 384_7977 binary blobs for the RT-AX88U.
• Updated components: Tor (0.4.2.6), curl (7.68.0), nano (4.8), inadyn (2.6), getdns (1.6.0), stubby (0.3.0), amtm (3.1.4).
• The Wireless Log page will now show Guest clients separately from the regular ones.
• Added traffic meter to the main status page. To save space, I removed the mostly useless RAM chart (but it will still report usage itself)
• Fixed VPN clients being unable to use the router as their DNS server.
• Fixed miniupnpd refusing to work if WAN IP was a private IP (was only partly fixed in the past)
• And a few other minor fixes to the webui

The following will require extended testing.

RT-AX56U and RT-AX58U:

• IPSec VPN Server
• AiCloud services
• USB disk sharing performance
• Ipset
• And everything else in general, but these are more important

RT-AC87U and RT-AC3200:

• Just make sure that there were no regressions in the couple of backports made to these two (see their changelog for details)

Please keep discussions in this thread for these specific beta releases and the changes introduced by them. Off-topic posts may be moved, deleted or ignored based on my humor at the time.


Downloads are here.
Changelog is here.

 

[RMerlin]

Known issues:

• Traffic spike on the Traffic Monitor (I attempted to reapply a recent change from Asus along with a fix backported from upstream, looks like that fix still doesn't fix it. Will be reverted in beta 2.)
• Guest clients on the second 5 GHz radio are listed under the first 5 GHz radio SSID (wrong variable referenced, fixed in beta 2)
• RT-AX56U power led stays off (Hardware issue, Asus's own fix was requiring a software component that was missing in my firmware, fixed for beta 2)
• Inadyn reports version 2.6 (cosmetical issue, this is really 2.7, just the version string didn't get bumped at compile time)
• RT-AX56U LAN leds won't turn back on if disabling and re-enabling either through WPS or webui (Bug in Asus's closed source code, outside of my control)
• USB2 port not mounting disks on RT-AX56U (Fixed ports not being enumerated in the correct order due to kernel overriding manual module loading. Fixed for beta 3.)

 

[Deleted member 22229]

Thanks Merlin do you recommend a reset flashing from A-2 ?

 

[RMerlin]

Thanks Merlin do you recommend a reset flashing from A-2 ?

No.

 

[eclp]

The onedrive folders AX58U and AX56U are unfortunately still empty.

 

[bluepoint]

The onedrive folders AX58U and AX56U are unfortunately still empty.

The Alpha's are the only ones placed in onedrive once it hits Beta @RMerlin publish them in the main download sites.
https://sourceforge.net/projects/asuswrt-merlin/files/

 

[Deleted member 22229]

Just flashed AX58U working as expected.

 

[Ozymandias]

All good on my AX56U

 

[RMerlin]

The onedrive folders AX58U and AX56U are unfortunately still empty.

Asustor's Onedrive application sucks. For some reason it synced the folder but not the content, and now that I tried to remove and readd the folder, it won't even allow me to select any folder at all anymore, showing me an empty list.

Use Sourceforge for now, Onedrive was always intended only as a backup location.

 

[bluepoint]

With the updated dnsmasq, rootcanary test passes now with no servfail when using cloudflare's DNS/DNSSEC.

 

[LimJK]

Thank You
Working well for me too. I dirty Flash Beta1 over Alpha2 for my RT-AX88U (AiMesh Router) with 2 x RT-AC86U (AiMesh Nodes) it is working ... rebooted it just to be sure, it is working too.

 

[L&LD]

RT-AX88U dirty flashed on every available firmware version (alpha, beta or release) since originally fully reset on RMerlin 384.14 Beta 3 back on December 7, 2019.

No issues, all working as expected.

Thank you again RMerlin.

 

[netmik3]

The guest network shows the correct name for 2.4ghz but the default name on 5ghz in wireless log AC5300

Guest Network 1: ASUS_5G-1_Guest1

I love the new upload download graph thanks

 

[davidangel64]

Does 384.16 include the 3.0.0.4.384.81352 release which patches the Kr00k vulnerability in the RT-AC86U?

 

[maxbraketorque]

Sorry, I can never find the page that shows changes from build to build. Are these changes from alpha2:

- FIXED: DNS server was unreachable when connecting to an OpenVPN
server with Advertise DNS enabled, due to firewall rules.
- FIXED: Router Security Assessment would fail to recognize WPA3
as being secure.
- FIXED: miniupnpd would reject private WAN IPs - changed that
upstream behaviour to allow these.
- FIXED: Would require you to reset the DHCP scope if you
changed the LAN hostname.
- FIXED: Couldn't set http mode to http-only if you previously
had WAN access enabled but have since switched to
non-router mode.

 

[Frankflash]

With the updated dnsmasq, rootcanary test passes now with no servfail when using cloudflare's DNS/DNSSEC.
View attachment 21921

I got the servfail

 

[Adamm]

Sorry, I can never find the page that shows changes from build to build. Are these changes from alpha2:

- FIXED: DNS server was unreachable when connecting to an OpenVPN
server with Advertise DNS enabled, due to firewall rules.
- FIXED: Router Security Assessment would fail to recognize WPA3
as being secure.
- FIXED: miniupnpd would reject private WAN IPs - changed that
upstream behaviour to allow these.
- FIXED: Would require you to reset the DHCP scope if you
changed the LAN hostname.
- FIXED: Couldn't set http mode to http-only if you previously
had WAN access enabled but have since switched to
non-router mode.

Non AX models; https://github.com/RMerl/asuswrt-merlin.ng/commits/master

AX models; https://github.com/RMerl/asuswrt-merlin.ng/commits/ax

 

[bluepoint]

I got the servfail

I am not using the built-in DNSSEC instead I let cloudflare do it using DOT at the same time. Clear your browser cache before you do the test.

 

[The Chief]

LE renew error on .15 and .16beta1 as well:

Spoiler: LE error

Mar 15 11:32:17 kernel: [Sun Mar 15 11:32:17 GMT 2020]
Mar 15 11:32:17 kernel: Renew: 'dimchief.ignorelist.com'
Mar 15 11:32:18 kernel: [Sun Mar 15 11:32:18 GMT 2020]
Mar 15 11:32:18 kernel: Standalone mode.
Mar 15 11:32:18 kernel: [Sun Mar 15 11:32:18 GMT 2020]
Mar 15 11:32:18 kernel: Registering account
Mar 15 11:32:21 kernel: [Sun Mar 15 11:32:21 GMT 2020]
Mar 15 11:32:21 kernel: Already registered
Mar 15 11:32:21 kernel: [Sun Mar 15 11:32:21 GMT 2020]
Mar 15 11:32:21 kernel: ACCOUNT_THUMBPRINT='[removed for security]'
Mar 15 11:32:21 kernel: [Sun Mar 15 11:32:21 GMT 2020]
Mar 15 11:32:21 kernel: Single domain='dimchief.ignorelist.com'
Mar 15 11:32:21 kernel: [Sun Mar 15 11:32:21 GMT 2020]
Mar 15 11:32:21 kernel: Getting domain auth token for each domain
Mar 15 11:32:24 kernel: [Sun Mar 15 11:32:24 GMT 2020]
Mar 15 11:32:24 kernel: Getting webroot for domain='dimchief.ignorelist.com'
Mar 15 11:32:24 kernel: [Sun Mar 15 11:32:24 GMT 2020]
Mar 15 11:32:24 kernel: Verifying: dimchief.ignorelist.com
Mar 15 11:32:24 kernel: [Sun Mar 15 11:32:24 GMT 2020]
Mar 15 11:32:24 kernel: Standalone mode server
Mar 15 11:32:30 kernel: [Sun Mar 15 11:32:30 GMT 2020]
Mar 15 11:32:30 kernel: dimchief.ignorelist.com:Verify error:Fetching http://dimchief.ignorelist.com/.well-known/acme-challenge/ijxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxQo: Connection refused
Mar 15 11:32:30 kernel: [Sun Mar 15 11:32:30 GMT 2020]
Mar 15 11:32:30 kernel: Please add '--debug' or '--log' to check more details.
Mar 15 11:32:30 kernel: [Sun Mar 15 11:32:30 GMT 2020]
Mar 15 11:32:30 kernel: See: https://github.com/Neilpang/acme.sh/wiki/How-to-debug-acme.sh

Am I doing smth wrong?

 

[heysoundude]

A stubby upgrade was noted in the changelog. It's been a while since I've visited that thread, so I'm out of that loop (and frankly can't remember if I have to add it via terminal or amtm/Diversion or if it's part of the firmware for DoT, selectable/configurable in the UI).
Maybe I should be sleeping rather than trying to figure that out.