Asus gebruikt voor zijn nieuwere routers, zoals de RT-AC87 en RT-AC5300, van Tomato afgeleide firmware met de naam Asuswrt. Deze firmware is, op enkele drivers na, opensource, waarbij de gesloten binaries wel meegeleverd worden. Asuswrt-merlin is op zijn beurt een aangepaste versie van de originele firmware van Asus. Het bevat onder meer bugfixes en kleine verbeteringen, maar probeert toch dicht bij het origineel te blijven, zodat het mogelijk blijft om nieuwe features die Asus introduceert, toe te voegen aan de code.
Met Asuswrt-Merlin 382 is het team van voor af aan begonnen met een schone 382 firmware van Asus. Het bleek namelijk te moeilijk om de aanpassingen van versie 380 over te brengen naar versie 382. Op dit moment werkt het nog niet met alle modellen. De releasenotes voor deze uitgave zien er als volgt uit:
Note:New:
- Asus has put the RT-AC56U on their End of Life list, meaning no further firmware releases from them. Since it's impossible for me to support models without matching GPL releases from Asus, I also have to retire the RT-AC56U. 384.6 is the final release for that model.
- The RT-AC3200 and RT-AC87U are not supported by this release, Asus hasn't released any updated code yet for these models.
Changed:
- Added RT-AX88U support (based on GPL 384_4736).
- Merged with GPL + binary blobs from 384_32799 (all supported models except RT-AX88U)
- Add LZ4 V2 option to OpenVPN compression (more effective at handling already compressed data)
- Added "extend" support to SNMP.
- Added CleanBrowsing to DNSFilter supported services.
- Webui HTTP LAN port can now be changed from the default 80.
- Added support for the Netfilter TEE target.
Fixed:
- Removed watchdog from OpenVPN clients, to avoid conflicting with more advanced configurations.
- Vsftpd TLS mode will now reuse the web server certificate (including any Let's Encrypt generated one).
- SSL crypto/cipher hardening for httpd (themiron)
- Syslog will now ignore bwdpi debug output (themiron)
- Reworked Wireless Log page, adding a new button to view low-level details (what stock firmware shows on its Wireless Log page), and removed redundant option to display DFS channel details.
- Update dnsmasq to 2.80-11-g59e4703 (themiron)
- Updated nettle to 3.4
- Updated net-snmp to 5.8
- Updated openssl to 1.0.2q
- Migrated /jffs/ssl/* content to /jffs/.cert (to share the same folder used by Asus stock)
- Re-enabled WTFast on non-HND models (curl-related crash has been fixed). This is still untested.
- Updated CA bundle to October 17th 2018 version.
- Support search domains pushed by a remote OpenVPN server
- UOPNP port forwarding not working in CGNAT/double NAT scenario even if proper ports were forwarded upstream.
- Pages based on table.js (like the port trigger one) would fail to work properly under Firefox (Michael Ziminsky)
- Dnsmasq issues when running in non-router mode (John Bacho)
- Routing issues when in non-router mode (John Bacho)
- Bug in curl that could cause some applications to crash on non-HND models
- IFTTT failing to start on non-HND models (caused by curl issue).
- Webui could complain about port 8080 being reserved for http WAN port (which is no longer supported)
- Cannot change image for device with a vendor name containing an apostrophe (like Micro-Star int'l) (Asus bug)
- OpenVPN client download was capped by Adaptive QOS upload limit (fix devised by FreshJR)
- OpenVPN custom config might be lost after a reboot on the RT-AC86U.