[Release] Asuswrt-Merlin 384.10 is now available

[L&LD]

Ok Guys , Here is a weird one...
I have had the RT-AC86U running current merlin firmware with amtm, diversion,skynet, 2 vpn servers , 1 vpn client etc, plus some customs.
The router up time was 5 days last night without issues.
This morning i Woke up to a router powered up but totally wiped, "like factory reset wipe" even jffs was wiped!!!
according to logs the router first boot was a 5am.
As far as i know the only change overnite was the clocks change here in the uk.
In all my years of using asus routers i never came across such thing.

Yes, very weird! Maybe it's a new feature?

When was the last time you did a full reset to factory defaults? Followed by a minimal and manual configuration of the router to connect it to the ISP and secure it? Or, did you use a backup config file instead?

Were the scripts you had running also a fresh install onto a newly formatted USB drive (using Ext 4 with journalling enabled)? Or, were they installed from backups too?

More importantly, what exactly were the 'plus some customs'? They may be important to understand this better.

I haven't directly heard of an Asus router doing this until now either. But, over in the Netgear forum, there are a few posts that speak something similar. Wonder if there is any connection?

I wouldn't accept the 'totally wiped' router as-is.

I would perform a full M&M Config restore to it before using it further.

Please see my signature for links to more details.

 

[#TY]

For the longest time, I've been using Merlin 384.9 connected to ExpressVPN without any issues. It ran flawlessly for weeks without a single reboot of the router. When I installed 384.10, I immediately started experiencing the dreaded "Internet Disconnected" message on my router and obviously, nothing on my network would connect to the internet at that point. The way I addressed it was to disconnect the OpenVPN client. Then the internet would come back on, and once that was done, I would reconnect the OpenVPN client. Everything would work fine for x period of time and then, bam, everything would go down again. Same problem. Very frustrating.

This morning, I also noticed the internet was extremely slow and some of my iPad games were having a hard time connecting to GameCenter. Very very weird. So I disconnected the OpenVPN client again and everything went back to normal. I am not sure if the problem is with my ExpressVPN (which was perfect up until 384.10) or if 384.10 introduced something that is now causing compatibility issues with the VPN connection.

SO.... I did a full reset to factory defaults, followed by a minimal and manual configuration of the router to connect it to my ISP (as brilliantly detailed by L&LD).

Right now, I have a mint installation of the following:
Merlin 384.10
AMTM,
Diversion,
Entware,
Stubby,
and a swap file.

Everything is working flawlessly.

Test in progress:
I have not reconnected my OpenVPN client yet. I want to see if any issues arise running everything except the VPN. If none occur, then it has got to be something related with the VPN. Skeal has provided some tests to run in case the network goes down (and I will do them for sure).

If anyone has any other insights or suggestions, I would be happy to check/test for them. I know I'm not the only one having this "Internet disconnected" issue, and even though the causes can be varied, if this can be of help to others, even better

 

[faria]

Yes, very weird! Maybe it's a new feature?

When was the last time you did a full reset to factory defaults? Followed by a minimal and manual configuration of the router to connect it to the ISP and secure it? Or, did you use a backup config file instead?

Were the scripts you had running also a fresh install onto a newly formatted USB drive (using Ext 4 with journalling enabled)? Or, were they installed from backups too?

More importantly, what exactly were the 'plus some customs'? They may be important to understand this better.

I haven't directly heard of an Asus router doing this until now either. But, over in the Netgear forum, there are a few posts that speak something similar. Wonder if there is any connection?

I wouldn't accept the 'totally wiped' router as-is.

I would perform a full M&M Config restore to it before using it further.

Please see my signature for links to more details.

Thanks
The last time i reconfigure the router manually from scratch was 3 weeks ago .
This included formatting drive into ext4 with journalling . I must say the drive data still intact, the wipe did no affect the external storage.
Custom Scripts = a script to monitor wan, vpns, aliveness runed via cron and report to the log if any interface is down.
+ script to mount folders from the nas ,
+ script to backup jffs and entware to the Nas
+ script with backup ddns.
I re flashed the firmware and now Im currently starting the setup procedure at "minimal" stage.
funny thing is the lat time i factory reset it did not wiped jffs with it.
here is a snip of the log with entries that stand out from a backup log:

Mar 26 20:02:26 kernel: Mem-Info:
Mar 26 20:02:26 kernel: active_anon:4932 inactive_anon:8539 isolated_anon:0
Mar 26 20:02:26 kernel:  active_file:3607 inactive_file:12071 isolated_file:0
Mar 26 20:02:26 kernel:  unevictable:0 dirty:0 writeback:0 unstable:0
Mar 26 20:02:26 kernel:  slab_reclaimable:2137 slab_unreclaimable:45139
Mar 26 20:02:26 kernel:  mapped:2591 shmem:316 pagetables:657 bounce:0
Mar 26 20:02:26 kernel:  free:10975 free_pcp:0 free_cma:0
Mar 26 20:02:26 kernel: DMA free:43384kB min:20480kB low:25600kB high:30720kB active_anon:19884kB inactive_anon:34156kB active_file:14428kB inactive_file:48284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:495616kB managed:440420kB mlocked:0kB dirty:0kB writeback:0kB mapped:10440kB shmem:1264kB slab_reclaimable:8548kB slab_unreclaimable:180556kB kernel_stack:3040kB pagetables:2628kB unstable:0kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all
Mar 26 20:02:26 kernel: lowmem_reserve[]: 0 0 0
Mar 26 20:02:26 kernel: DMA: 3206*4kB (UEM) 3105*8kB (UE) 260*16kB (UE) 1*32kB (R) 0*64kB 2*128kB (R) 1*256kB (R) 0*512kB 1*1024kB (R) 0*2048kB 0*4096kB = 43392kB
Mar 26 20:02:26 kernel: 25232 total pagecache pages
Mar 26 20:02:26 kernel: 9243 pages in swap cache
Mar 26 20:02:26 kernel: Swap cache stats: add 126022, delete 116779, find 2140888/2174900
Mar 26 20:02:26 kernel: Free swap  = 461832kB
Mar 26 20:02:26 kernel: Total swap = 524284kB
Mar 26 20:02:26 kernel: 123904 pages RAM
Mar 26 20:02:26 kernel: 0 pages HighMem/MovableOnly
Mar 26 20:02:26 kernel: 13799 pages reserved
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR

the entry ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
is caused by the backup script when the following commands are run:

    cp -ap /jffs/. /mnt/myssd/Current-Backups/RT-AC86U-BACKUP/jffs/ & "date" >> /mnt/myssd/Current-Backups/RT-AC86U-BACKUP/jffs-backup.log

The "Current-Backups" folder is a mounted folder from the nas.

 

[bobo27]

I also have problems with the OpenVPN server as mentioned in an earlier post. I couldn’t install my own CA in the router in any way so I tried to use the built in functionality. Got a connection but no access to the LAN nor internet.

Left the router on this way for the night.

The next morning the router was completely off (all leds off). Had to power cycle it to get it working again. Switched off the OpenVPN server and no problems since.

Something is very wrong with the OpenVPN implementation imho. Never had any problems with my ac-RT66u but with my brand new AC-86U I cant get OpenVPN to work right.


Sent from my iPhone using Tapatalk

 

[tarado]

Hi:
AX88U 384.10
I also get problems with openvpn client and Nordvpn when try udp ok, if try tcp it does not connect
In the pc (linux/windows) OK

 

[octopus]

I also have problems with the OpenVPN server as mentioned in an earlier post. I couldn’t install my own CA in the router in any way so I tried to use the built in functionality. Got a connection but no access to the LAN nor internet.

Left the router on this way for the night.

The next morning the router was completely off (all leds off). Had to power cycle it to get it working again. Switched off the OpenVPN server and no problems since.

Something is very wrong with the OpenVPN implementation imho. Never had any problems with my ac-RT66u but with my brand new AC-86U I cant get OpenVPN to work right.


Sent from my iPhone using Tapatalk

Are you sure you don't use depreciated
BF - CBC chiper.

 

[sadoneli]

I flashed my RT-AX88U from 384.9 to 384.10, I found the jffs partition showed status unmounted, When downgrade to 384.9, jffs mounted correctly.

 

[sadoneli]

I flashed my RT-AX88U from 384.9 to 384.10, I found the jffs partition showed status unmounted, When downgrade to 384.9, jffs mounted correctly.

View attachment 16789

After format jffs it works!

 

[pirx73]

Updated my AC-68U to 384.10
Everything runs fine except for signature update. It fails. But it also failed on .9 so ...
What can i do to troubleshoot it?

 

[bobo27]

Are you sure you don't use depreciated
BF - CBC chiper.

Yes it’s AES-256..


Sent from my iPhone using Tapatalk

 

[faria]

Update...
Followed @L&LD reset procedure then installed Diversion,skynet and amtm.
rebooted.
Setup open vpn Client (IVACY) and pressed the reboot gui button, 15 minutes later the router had not booted, upon checking it was Shutdown, had to cicle the power button to turn the router back on.
This random shutdown issue when asked to reboot is really taking the cake.
Was this triggered by the ovpn part of the firmware i ask myself,
It looks like when i asked the rooter to reboot a "halt" command was issued , i say this because that is exactly what happen when you use the "halt" command to shutdown the device.
Here is some lines from the log that stood out:

May  5 06:05:05 kernel: Bad block table found at page 131008, version 0x01
May  5 06:05:05 kernel: Bad block table found at page 130944, version 0x01

May  5 06:05:05 kernel:   bcm963xx-pcie: found core [2] Rev [ 3. 4]^M
May  5 06:05:05 kernel:   bcm963xx-pcie: failed to bring up core [2] link^M

Now im gonna start manually reconfigurating the vpn servers.
I gonna give the rt-ac86u another try but so far it has proven to be unreliable, i guess i will have to dust off the old rt-ac87u.

another note that may be of interest to people with vpn client issues:
i was unable to connect to my vpn provider servers with UDP protocol, Tcp works just fine, Cipher used AES-256-CBC.
Then again this could be an issue with my vpn provider.

 

[king006]

@RMerlin,

A question! Can you also update the firmware via SSH?

 

[L&LD]

Thanks
The last time i reconfigure the router manually from scratch was 3 weeks ago .
This included formatting drive into ext4 with journalling . I must say the drive data still intact, the wipe did no affect the external storage.
Custom Scripts = a script to monitor wan, vpns, aliveness runed via cron and report to the log if any interface is down.
+ script to mount folders from the nas ,
+ script to backup jffs and entware to the Nas
+ script with backup ddns.
I re flashed the firmware and now Im currently starting the setup procedure at "minimal" stage.
funny thing is the lat time i factory reset it did not wiped jffs with it.
here is a snip of the log with entries that stand out from a backup log:

Mar 26 20:02:26 kernel: Mem-Info:
Mar 26 20:02:26 kernel: active_anon:4932 inactive_anon:8539 isolated_anon:0
Mar 26 20:02:26 kernel:  active_file:3607 inactive_file:12071 isolated_file:0
Mar 26 20:02:26 kernel:  unevictable:0 dirty:0 writeback:0 unstable:0
Mar 26 20:02:26 kernel:  slab_reclaimable:2137 slab_unreclaimable:45139
Mar 26 20:02:26 kernel:  mapped:2591 shmem:316 pagetables:657 bounce:0
Mar 26 20:02:26 kernel:  free:10975 free_pcp:0 free_cma:0
Mar 26 20:02:26 kernel: DMA free:43384kB min:20480kB low:25600kB high:30720kB active_anon:19884kB inactive_anon:34156kB active_file:14428kB inactive_file:48284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB present:495616kB managed:440420kB mlocked:0kB dirty:0kB writeback:0kB mapped:10440kB shmem:1264kB slab_reclaimable:8548kB slab_unreclaimable:180556kB kernel_stack:3040kB pagetables:2628kB unstable:0kB bounce:0kB free_pcp:236kB local_pcp:0kB free_cma:0kB writeback_tmp:0kB pages_scanned:0 all
Mar 26 20:02:26 kernel: lowmem_reserve[]: 0 0 0
Mar 26 20:02:26 kernel: DMA: 3206*4kB (UEM) 3105*8kB (UE) 260*16kB (UE) 1*32kB (R) 0*64kB 2*128kB (R) 1*256kB (R) 0*512kB 1*1024kB (R) 0*2048kB 0*4096kB = 43392kB
Mar 26 20:02:26 kernel: 25232 total pagecache pages
Mar 26 20:02:26 kernel: 9243 pages in swap cache
Mar 26 20:02:26 kernel: Swap cache stats: add 126022, delete 116779, find 2140888/2174900
Mar 26 20:02:26 kernel: Free swap  = 461832kB
Mar 26 20:02:26 kernel: Total swap = 524284kB
Mar 26 20:02:26 kernel: 123904 pages RAM
Mar 26 20:02:26 kernel: 0 pages HighMem/MovableOnly
Mar 26 20:02:26 kernel: 13799 pages reserved
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
Mar 26 20:03:06 kernel:  *** ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR

the entry ERROR: [tdts_shell_dpi_l3_skb:249] skb_linearize(skb) ERROR
is caused by the backup script when the following commands are run:

    cp -ap /jffs/. /mnt/myssd/Current-Backups/RT-AC86U-BACKUP/jffs/ & "date" >> /mnt/myssd/Current-Backups/RT-AC86U-BACKUP/jffs-backup.log

The "Current-Backups" folder is a mounted folder from the nas.

I'll let the script gurus offer help with that part of it, but it now looks like something was amiss in the jffs partition that could possibly cause this?

Take the set up and re-install slow and steady. Checking often for anything out of the ordinary and the logs too.

I noticed there is a new amtm version! I would be doing a fresh format of the USB drive, jffs partition and then install amtm and the other scripts you are using (keep notes!).

 

[L&LD]

I also have problems with the OpenVPN server as mentioned in an earlier post. I couldn’t install my own CA in the router in any way so I tried to use the built in functionality. Got a connection but no access to the LAN nor internet.

Left the router on this way for the night.

The next morning the router was completely off (all leds off). Had to power cycle it to get it working again. Switched off the OpenVPN server and no problems since.

Something is very wrong with the OpenVPN implementation imho. Never had any problems with my ac-RT66u but with my brand new AC-86U I cant get OpenVPN to work right.


Sent from my iPhone using Tapatalk

Having delivered to customers over a half dozen RT-AC86U's this past week with all of them passing through a full M&M Config, there has been not one problem with the OpenVPN server. Just checked now and all of them are up and running.

I did buy an RT-AC86U for myself yesterday and proceeded to get it running. I too came back to see it off!

Checking my notes that I leave beside the router I'm working on, I had enabled the 'format jffs on next reboot' option and then (without rebooting!) I reset the router to factory defaults via the GUI). These steps were about 25 minutes apart. Forgot I hadn't rebooted the router 3 times in the 'next 15 minutes, waiting at least 5 to 10 minutes between reboots'.

I proceeded to start over (completely) with my RT-AC86U and a full M&M Config and it has been working flawlessly for the last 10 hrs.

Point being, if you did not do a full M&M Config, it is most likely not the routers fault for showing bugs/glitches now.

In your situation, I would be doing one right now. Please see the links for more details in my signature below.

 

[L&LD]

Update...
Followed @L&LD reset procedure then installed Diversion,skynet and amtm.
rebooted.
Setup open vpn Client (IVACY) and pressed the reboot gui button, 15 minutes later the router had not booted, upon checking it was Shutdown, had to cicle the power button to turn the router back on.
This random shutdown issue when asked to reboot is really taking the cake.
Was this triggered by the ovpn part of the firmware i ask myself,
It looks like when i asked the rooter to reboot a "halt" command was issued , i say this because that is exactly what happen when you use the "halt" command to shutdown the device.
Here is some lines from the log that stood out:

May  5 06:05:05 kernel: Bad block table found at page 131008, version 0x01
May  5 06:05:05 kernel: Bad block table found at page 130944, version 0x01

May  5 06:05:05 kernel:   bcm963xx-pcie: found core [2] Rev [ 3. 4]^M
May  5 06:05:05 kernel:   bcm963xx-pcie: failed to bring up core [2] link^M

Now im gonna start manually reconfigurating the vpn servers.
I gonna give the rt-ac86u another try but so far it has proven to be unreliable, i guess i will have to dust off the old rt-ac87u.

another note that may be of interest to people with vpn client issues:
i was unable to connect to my vpn provider servers with UDP protocol, Tcp works just fine, Cipher used AES-256-CBC.
Then again this could be an issue with my vpn provider.

Please see my response to your original post, also see the response to the other poster too.

https://www.snbforums.com/threads/r...10-is-now-available.55742/page-16#post-476318

Is that the order you installed the scripts? I would be using the following order:

1. amtm,
2. format USB drive to Ext4 with journalling (reboot the router, required).
3. create a swap file (I use 2GB on all routers, regardless of RAM size).
4. enable the amtm disk checker.
5. install Diversion (and Entware and pixelserv-tls).
6. check that Entware is updated, within Diversion, ep, 6, 6.
7. Reboot via the GUI and check the disk check log
8. install the rest of the scripts now (the order shouldn't matter).

 

[faria]

Please see my response to your original post, also see the response to the other poster too.

https://www.snbforums.com/threads/r...10-is-now-available.55742/page-16#post-476318

Is that the order you installed the scripts? I would be using the following order:

1. amtm,
2. format USB drive to Ext4 with journalling (reboot the router, required).
3. create a swap file (I use 2GB on all routers, regardless of RAM size).
4. enable the amtm disk checker.
5. install Diversion (and Entware and pixelserv-tls).
6. check that Entware is updated, within Diversion, ep, 6, 6.
7. Reboot via the GUI and check the disk check log
8. install the rest of the scripts now (the order shouldn't matter).

The same order as you posted plus skynet on (5.)with a reboot in between except the swap partition is 1gig.
disk check logs error only when device went into shutdown mode.
i also have 4 customers with asus routers , and they got months up-time, no problems, but then again only one rt-ac68 uses a usb drive for adblock.
My rt-ac87u was running pretty much the same config before i upgraded and i did not have this issues. (shuthdowns when asked to reboot, corrupted file systems)
any way , need to reboot router now but wife and daughter decided to marathon watch the new star-trek on netflix Do they know how critical this is ? NOOOO! as far they are concerned internet is working "fine"
thanks you for your help.

 

[#TY]

Do you guys recommend using the Smart Connect feature for WiFi or does splitting it into 3 distinct SSIDs result in better overall performance? I tried looking for a best practice setup listed somewhere but unfortunately have not found one yet.

 

[L&LD]

Do you guys recommend using the Smart Connect feature for WiFi or does splitting it into 3 distinct SSIDs result in better overall performance? I tried looking for a best practice setup listed somewhere but unfortunately have not found one yet.

https://www.snbforums.com/threads/asus-rt-ax88u-experiences-discussion.49427/page-14#post-473643

I would recommend it to be 'off'. Three distinct SSID's does result in better performance, overall. It is also easier to troubleshoot if a performance issue does come up.

The link above has further settings to try disabling/enabling to see what works best in your network usage with your client devices.

 

[Maloon]

Which cipher is that?

aes256-aes128-sha256-sha1-modp2048-modp4096-modp1024

 

[RMerlin]

Hi:
AX88U 384.10
I also get problems with openvpn client and Nordvpn when try udp ok, if try tcp it does not connect
In the pc (linux/windows) OK

Does the server you try to connect to support TCP?

@RMerlin,

A question! Can you also update the firmware via SSH?

Yes, but this is VERY risky, so not something I want to document, sorry.