Asus gebruikt voor zijn routers, zoals de RT-AC68 en RT-AX88, van een Tomato afgeleide firmware met de naam Asuswrt. Deze firmware is, op enkele drivers na, opensource, waarbij de gesloten binaries wel meegeleverd worden. Asuswrt-Merlin is op zijn beurt een aangepaste versie van de originele firmware van Asus. Het bevat onder meer bugfixes en kleine verbeteringen, maar probeert toch dicht bij het origineel te blijven, zodat het mogelijk blijft om nieuwe features die Asus introduceert, toe te voegen aan de code. Versie 388.2 is uitgekomen, een versie die alleen voor de AX-modellen geschikt is, en hierin zijn de volgende veranderingen en verbeteringen aangebracht:
Note:New:
- This release is only available for AX models. AC models will remain on the 386_xx release branch.
Updated:
- Add RT-AX86U_PRO support.
- Merged with GPL 388_20566 (RT-AX88U and GT-AX11000)
- Merged with GPL 388_21224 (all other AX models)
- Experimental ROG UI version for GT models, as a separate firmware image within the distribution archive, with "_rog" in the filename.
- (Asus 388) WireGuard client and server. The server uses the new 388 VPN server webui. Implemented a webui for clients, based on the early development UI from Asus.
WG client routing is handled by VPN Director - you must configure redirection rules through it, same as on stock firmware which requires configuring rules through VPN Fusion.
DNS handling will be identical to OpenVPN's Exclusive DNS mode, forcing clients to use the DNS provided by it (if any is provided).
Note that enabling WireGuard will disable hardware NAT acceleration due to compatibility reasons.- httpd support for EC certificates (Ivan Kruglov)
Changed:
- getdns/stubby to 1.7.2/0.4.2.
- zlib to 1.2.12 + backports.
- openssl to 1.1.1s.
Fixed:
- Rebranded DNSFilter as DNS Director. This will prevent confusion with the company sharing the same name, and also better describes what the feature does.
- Setting an OpenVPN client to redirect all traffic while in "Exclusive" DNS mode will now force redirect ALL DNS traffic just like in VPN Director mode. While this will allow redirecting clients with hardcoded DNS servers, it also means that your whole LAN will lose the ability of doing local name resolution. It might be best to use VPN Director in that case to control which client should be involved in the DNS redirection, or use DNS Director instead of Exclusive DNS mode.
- (Asus 388) nvram storage increased to 192 KB on newer HND 5.04 devices like the GT-AXE16000.
- Reworked VPN Status page to only show currently active services.
- Reworked VPN Director page design, added buttons to access a client's settings page, and allow leaving both source and destination IPs empty (for "all").
- Optimized VPN Director WAN and DNS rule creation, so they no longer get re-created multiple times when editing VPNDirector rules.
- Switched generated self-signed certificate to an EC certificate.
- Disabled DSS key support in Dropbear SSH.
Removed:
- Wrong temperatures used by the temperature graphs (386.8 regression)
- CVE-2022-37434 in zlib.
- GT-AXE16000 random reboots when using an OpenVPN client with VPN Director and Adaptive QoS.
- Clients connected to Guest Network 1 aren't redirected if NTP interception is enabled.
- Name was truncated to 31 chars when enabling OpenVPN client's Server Certificate Name Validation.
- Interface selector on Speedtest page (no longer working, possibly due to an ookla client update)
- NAT Type setting on HND 5.04 devices (fullcone is not supported by kernel 4.19, so it wasn't working)
:fill(white):strip_exif()/i/1339513002.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2001838885.jpeg?f=thumbmedium)
:strip_exif()/i/2005493140.webp?f=thumbmedium)
:fill(white):strip_exif()/i/2003182249.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2002361927.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2000588557.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2001066819.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2001718337.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2001066821.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2001066817.jpeg?f=thumbmedium)
:fill(white):strip_exif()/i/2002720410.jpeg?f=thumbmedium)
:strip_exif()/i/2002724088.png?f=thumbmedium)
:fill(white):strip_exif()/i/2000879038.jpeg?f=thumbmedium)
:strip_exif()/i/2002446010.png?f=thumbmedium)
:fill(white):strip_exif()/i/2004535716.jpeg?f=thumbmedium)
:strip_exif()/i/2003665668.png?f=thumbmedium)
:strip_exif()/i/2001646513.png?f=thumbmedium)
:strip_exif()/i/2003130478.png?f=thumbmedium)
ik hoop dus dat ze (ASUS en merlin) nog een paar jaar door gaan met ondersteunen van security updates.
:strip_icc():strip_exif()/u/312601/crop62ac6b614e17e_cropped.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/289675/crop6401bf2c85501_cropped.jpg?f=community){kind=small}
/u/292807/crop643919f744ba8_cropped.png?f=community){kind=small}
:strip_icc():strip_exif()/u/422758/sheldon2.jpg?f=community){kind=small}
/u/113293/ferrariavatar2.png?f=community){kind=avatar}
:strip_icc():strip_exif()/u/335350/crop61a63ee1f224f.jpg?f=community){kind=small}
:strip_icc():strip_exif()/u/370538/crop5ed0d9cf254d3_cropped.jpeg?f=community){kind=small}
:strip_icc():strip_exif()/u/132443/crop62deab1dcf2c6.jpg?f=community){kind=small}
:strip_exif()/u/18861/MRice-avatar.gif?f=community){kind=avatar}
