[Release] Asuswrt-Merlin 384.12 is now available

[RMerlin]

Asuswrt-Merlin 384.12 is now available for all supported models. This release merges with new GPL and brings various enhancements.

Also, note that the project now has its own dedicated domain name. The official project website is now https://www.asuswrt-merlin.net/ . My contact email for anything related to this project has also now changed to merlin <at> asuswrt-merlin <dot> net.

The highlights of changes in 384.12:

• Merged GPL 384_45717 for non-AX models, with 382_51634/51640 binary blobs for the RT-AC87U and RT-AC3200.
• Implemented support for WS Discovery. This allows Windows clients without SMBv1 support to discover your router's network shares.
• Updated components: nano 4.2, OpenSSL-10x to 1.0.2s, OpenSSL11x to 1.1.1c, curl 7.65.1 and miniupnpd 20190604 snapshot.
• Classification page now shows local clients by their names instead of their IP
• Reworked handling of up/down events in OpenVPN, resolved a number of issues/limitations.
• Added firewall to OpenVPN clients, which is enabled by default. This prevents remote servers from accessing your LAN through the VPN tunnel. If you have a site-to-site tunnel, or another setup where you are expecting inbound traffic to be sent to you through the tunnel then you can disable the firewall on the OpenVPN client page.
• The router will now directly use the WAN-configured DNS for name resolution done on the router itself by default. The option is still configurable under Tools -> Other Settings for those who have a particular need that requires the former default behaviour. This matches how stock firmware works, and this change has zero impact on your LAN clients.
• SSL certificates generated on the router will now use a random serial number, which might help browsers that don't like having different certificates with the same serial number but a different signature.
• Network Analysis page on non-HND router now also use the Netool daemon, however they still use the original busybox version of traceroute (the newer version is not compatible with older uclibc versions)
• Resolved IPv6 connectivity issues on the RT-AX88U (fix backported from other models)

Please review the changelog for the complete list of changes.

Downloads are here.
Changelog is here.

 

[Kingp1n]

Seems like im the 1st downloading for RT-AC86U...awesome job RMerlin!!!

 

[Ah-Pin-Kor]

- FIXED: CVE-2019-11477, CVE-2019-11478 and
CVE-2019-11479 (themiron)

Looks like tcp SACK panic is fixed.
Thanks RMerlin & themiron!

 

[thelonelycoder]

Next Diversion release has the new Asuswrt-Merlin domain (asuswrt-merlin.net) and its subdomain for firmware updates in the hard-coded whitelist.

 

[Raphie]

flashed, seems to work fine.
activated the DNS-TLS thingy, is it me, or is page loading via cloudfare just a bit slower than my own providers DNS servers?
it seems the latency, before the page loads is higher, not as it being a router performance problem, but more the round trip of the DNS query, or am I imagining this?

 

[Stardust]

It seems to work fine on my router too
Thanks
Are using OpenDNS.
What can I do to upgrade security without downgrade the speed too much?

 

[eddiez]

Media bridge working fine. But then again, nothing changed for this

 

[wiz]

Just updated my AC5300. I had to stop / start openvpn before it actually ran (gui said running, logging did not show it was started at all), but other than that nothing out of the ordinary.

Thanks Eric!

 

[thelonelycoder]

Smooth update from 384.11_2 to 384.12 on the AX88U.
I DO have to set local DNS caching to Yes for my local servers to work in my LAN, just as mentioned in the changelog.

 

[netmik3]

Great thanks

 

[Raphie]

TLS DNS is significantly slower here.
Speedtest.net shows 250Mbit+ with my providers DNS configured, and 138Mbit Max with cloudfare configured. I'll leave TLS off for now

 

[miazza]

Sorry for the noob question: if I update do I loose all my settings ? Shall I Install amtm and Diversion again ?

 

[Treadler]

Sorry for the noob question: if I update do I loose all my settings ? Shall I Install amtm and Diversion again ?

No.
I didn’t. I just flashed it over the top & thus far, all seems ok.
YMMV.

 

[Chrisgtl]

@RMerlin Thanks for the latest release. All working well here.

 

[miazza]

On my AC86U Update failed with this file : RT-AC86U_384.12_0_cferom_ubi

Router restarted with 384.11_2

Update: did it again, same file , just a new try and went OK.
Everything OK for the time being.

 

[Centrifuge]

Smooth flash over 384.11_2, thanks Merlin, script magicians, and all the alpha and beta testers, it's been a real education.

 

[EVO2point0]

I guess there will be 384.12_2 in a couple of days.

 

[L&LD]

Updated several RT-AC68U's, RT-AC86U's and a few RT-AC3100's to 384.12, no issues.

 

[MDM]

activated the DNS-TLS thingy, is it me, or is page loading via cloudfare just a bit slower than my own providers DNS servers?
it seems the latency, before the page loads is higher, not as it being a router performance problem, but more the round trip of the DNS query, or am I imagining this?

TLS DNS is significantly slower here.
Speedtest.net shows 250Mbit+ with my providers DNS configured, and 138Mbit Max with cloudfare configured. I'll leave TLS off for now

Of course the DNS inquiry is slower (higher latency than providers DNS) over DoT, but it can not affect the speed when the address gets resolved!
Reset to factory defaults...

 

[MDM]

Updated, all is fine.