Asuswrt-Merlin 384/NG Changelog
===============================
384.10 (xx-xxx-2019)
- NEW: Added OpenSSL 1.1.1b in parallel to 1.0.2. Some services
like AiCloud are still linked against 1.0.2 because only
Asus can recompile them.
Services that currently use OpenSSL 1.1.1:
httpd (webui), OpenVPN, wget, net-snmp,
Tor, Strongswan (IPSEC server), inadyn, vsftpd.
Note that 1.1.x is slightly slower than 1.0.2, however
some services can benefit from the TLS 1.3 support (faster
connection establishing).
Models that lack AES acceleration will prioritize the use
of CHACHA20 over AES-256-GCM, for a small performance
improvement (for instance with the webui).
Note that OpenVPN 2.4.7's support is still limited.
TLS 1.3 is supported, but CHACHA20 support is
only expected with OpenVPN 2.5.0.
The 1.0.2 userspace tool is still named "openssl", while
the 1.1.x version is named "openssl11".
- NEW: Implemented lcp-ident option in PPP (required by some ISPs)
(Themiron).
- NEW: Added NFSv2 support to HND models.
- NEW: You can now choose between having your router do internal
DNS queries locally (through dnsmasq) or with your WAN
configured DNS (like stock firmware). This does not
affect DNS lookups from your clients, only those made
by the router itself. The option is under Tools ->
Other Settings. (Themiron)
- CHANGED: Some firmware cleanups to regain flash space (for
use with the parallel OpenSSL 1.1.x install)
(RMerlin, Themiron)
- CHANGED: Updated curl to 7.64.0.
- CHANGED: Updated OpenVPN to 2.4.7.
- CHANGED: Updated Tor to 0.3.5.8.
- CHANGED: Updated strongswan to 5.7.2.
- CHANGED: Updated OpenSSL 1.0.x to 1.0.2r.
- CHANGED: Updated dnsmasq to 2.80-44-g608aa9f (Themiron)
- CHANGED: Re-worked the Classification page. New design
is much faster, allows filtering, and shows
additional info when hovering on a field. Thanks
to FreshJr for giving me the motivation to
spend more time on it.
- CHANGED: Strongswan is no longer compiled 64-bit
on HND, allowing it to use a shared openssl library
instead of a static one. This should significantly
reduce the memory and flash usage of Strongswan.
(Themiron)
- CHANGED: Reworked DNS WAN probe implementation (Themiron)
- FIXED: IPSEC log display wasn't properly formatted (showed
entirely on a single line)
- FIXED: Compatibility issues between recent Tuxera NTFS driver
and Samba
- FIXED: NFSv2 support
- FIXED: PPP host-uniq support (Themiron)
- FIXED: AiCloud not working on the RT-AX88U
- REMOVED: Beceem Wimax driver. This is deprecated, and was
already removed from the HND models. This allows
to reclaim close to 2 MB of flash space.
- REMOVED: CFB and OFB ciphers from OpenVPN client
============================================
更新机型：
RT-AX88U
RT-AC5300
RT-AC3200
RT-AC88U
RT-AC86U
RT-AC3100
RT-AC87U
RT-AC68U/AC1900P/AC66U B1
============================================
