Has Killswitch Been 100% Fixed for 2024?

[mykdrocks]

First things first, a big thanks for a great firmware (any help help provided below)!

I have the custom Asuswrt-Merlin installed on my ASUS VPN router. I have it configured with my OpenVPN, and the killswitch setting active (with the intent that if anything happens with the VPN, it immediately kills the connection to any attached devices). It's always worked great, until a few months ago. I always check my IP address at first boot, to make sure it's the one assigned by the VPN before browsing. This router is only connected when needed, and is stored when not in use (which can be a few weeks to a month between uses). On last boot, I was surprised to find my home IP was reading on my connected device, instead of the usual IP provided by my VPN (and I checked the killswitch setting, which was still on).

I've been reading through the forums, and this seems to be a know issue, so was just wondering if a fix in the more recent updates have been implemented. I'm not sure which version I'm running, but it's at least a year old (based on when I know I set it up, and haven't touched it since). I've always relied with 100% certainty that the killswitch will shield my real IP, but this recent "leak" has me re-evaluating my setup. I'm not seeing in any recent forums posts that this has been fixed to a certainty, so would love to know more (if possible).

Thanks!

 

[m0rF1uS]

First things first, a big thanks for a great firmware (any help help provided below)!

I have the custom Asuswrt-Merlin installed on my ASUS VPN router. I have it configured with my OpenVPN, and the killswitch setting active (with the intent that if anything happens with the VPN, it immediately kills the connection to any attached devices). It's always worked great, until a few months ago. I always check my IP address at first boot, to make sure it's the one assigned by the VPN before browsing. This router is only connected when needed, and is stored when not in use (which can be a few weeks to a month between uses). On last boot, I was surprised to find my home IP was reading on my connected device, instead of the usual IP provided by my VPN (and I checked the killswitch setting, which was still on).

I've been reading through the forums, and this seems to be a know issue, so was just wondering if a fix in the more recent updates have been implemented. I'm not sure which version I'm running, but it's at least a year old (based on when I know I set it up, and haven't touched it since). I've always relied with 100% certainty that the killswitch will shield my real IP, but this recent "leak" has me re-evaluating my setup. I'm not seeing in any recent forums posts that this has been fixed to a certainty, so would love to know more (if possible).

Thanks!

Short answer is NO - implementation of the kill switch is still the same.

Killmon- ver 1-05 - this is an add on that you can install to improve the functionality.

Longer discussion and explanation

 

[mykdrocks]

Short answer is NO - implementation of the kill switch is still the same.

Killmon- ver 1-05 - this is an add on that you can install to improve the functionality.

Longer discussion and explanation

Thanks for the reply!

Here's a thought I had. Tell me if it holds water. What if I daisy chained two VPN routers together? The first would be my router running my custom Merlin firmware. The second would be another VPN router with a different firmware (that also has a killswitch). Theoretically, if they both have OpenVPN, I think I could use the same VPN account for both. So wouldn't that be like backing up my killswitch with another killswitch? The flow would be something like this:

Devices > #1 VPN Router with Killswitch (Merlin) > 2nd VPN Router (with Killswitch) > #3 Normal home network router (for internet connection)

 

[L&LD]

Does not hold water.

 

[mykdrocks]

Does not hold water.

Yeah...honestly I didn't think so either. Just curious.

Thanks for the link about Killmon- ver 1-05. I'm researching it now and how to implement it.

Another quick question. I've been reading every thread I can find on the subject in the forum (and ever page of those threads), and something caught my eye. Some are asking for previous versions of the firmware. Was there a time when this killswitch was programmed differently, and it always worked (or was more reliable) if the VPN connection was severed? Thus preventing the home IP from becoming visible?

 

[m0rF1uS]

Yeah...honestly I didn't think so either. Just curious.

Thanks for the link about Killmon- ver 1-05. I'm researching it now and how to implement it.

Another quick question. I've been reading every thread I can find on the subject in the forum (and ever page of those threads), and something caught my eye. Some are asking for previous versions of the firmware. Was there a time when this killswitch was programmed differently, and it always worked (or was more reliable) if the VPN connection was severed? Thus preventing the home IP from becoming visible?

I think 386.1 was where the implementation was changed to the new one with the introduction of VPN director so anything prior to that firmware release should work “the old way”. running firmware that old is generally not recommended since then there ware a huge number of security fixes in different firmware releases and driver updates. Not to mention just general bug fixes.

 

[alphaswe]

Is it true that VPN killswitch is broken in 2025 on Asuswrt-Merlin?

 

[ducky124]

Is it true that VPN killswitch is broken in 2025 on Asuswrt-Merlin?

you joined just to dig up a post that is over a year old?

 

[alphaswe]

you joined just to dig up a post that is over a year old?

ehh, you seem angry. I am here to check if merlin support what I need.

 

[Viktor Jaep]

Yes, if you're running the latest firmware, the killswitch now works as intended.

 

[alphaswe]

Yes, if you're running the latest firmware, the killswitch now works as intended.

Amazing, thank you for your reply!

I am planning to run a asuswrt-merlin as a 24/7 wireguard vps client with killswitch and auto-reconnect.
I see you have Asus GT-AX6000, is it working stable?
Would you recommend Asus GT-AX6000 or Asus RT-AX86U Pro?


Wish you all the best!
Grettings from Sweden.

 

[bennor]

Would you recommend Asus GT-AX6000 or Asus RT-AX86U Pro?

A suggestion if you haven't done so already. Use the forum search feature to search for the various past discussions on the Asus-Merlin kill switch (and how it operates) and for comparisons between the two routers you asked about. For example one past discussion that comes up in a search for those two routers:

[Review] ASUS GT-AX6000 vs RT-AX88U Pro vs RT-AX86U Pro

After I tested tested each of the three routers, I decided to make a dedicated video to find out which one of them is the better WiFi 6 router. I look forward to any questions and feedback.

www.snbforums.com

Forum searches for Kill Switch and Killswitch:

Search results for query: kill switch

www.snbforums.com

Search results for query: killswitch

www.snbforums.com

And see the Change Log for the Asus-Merlin 388 firmware, there is some information on the KillSwitch implementation in the change log.

Changelog (388.x) | Asuswrt-Merlin

www.asuswrt-merlin.net

 

[Viktor Jaep]

Amazing, thank you for your reply!

Absolutely!

I see you have Asus GT-AX6000, is it working stable?

I've had practically no problems with it. Been one of the better routers I've owned.

Would you recommend Asus GT-AX6000 or Asus RT-AX86U Pro?

As mentioned above... definitely worthy of research, but I believe when comparing the two, the GT-AX6000 comes out on top in a few categories. Remember these are already putting on some years. If you're in the market for something newer, I'd recommend taking a look at the BE lineup.