Download Firmware Asuswrt-Merlin 384.7

Asus uses Tomato-derived firmware called Asuswrt for its newer routers, such as the RT-AC56U and RT-AC68U. This firmware is, with the exception of a few drivers, open source, whereby the closed binaries are included. Asuswrt-merlin, in turn, is a modified version of the original firmware from Asus. It includes bug fixes and minor improvements, but still tries to stay close to the original, so that it remains possible to add new features that Asus introduces to the code. Version 384.7 was released a few days ago with the following announcement:

[Release] Asuswrt-Merlin 384.7 is now available

Asuswrt-Merlin 384.7 is now available. This release is not available for the RT-AC3200 or RT-AC56U, due to lack of compatible release code from Asus. In addition to merging with GPL 384_21152, this release brings major changes to the DDNS support, replacing the venerable ez-ipupdate client with the more secure In-a-Dyn.

The highlights of this release:

• Merged with Asus GPL 384_21152. The RT-AC87U binary blobs from GPL 382_50702 were merged in, allowing 384.7 to support this model (it wasn’t available for 384.6).
• Replaced ez-ipupdate with In-a-Dyn. This DDNS client is more modern, and still actively developed It also makes it easier to support multiple services. A custom plugin was developed to fully support Asus’s own DDNS service.
• All DDNS services now use HTTPS. Your DDNS login credentials are finally secure. Welcome to 2018 folks. Now might be a good time to change your DDNS password, just to be on the safe side.
• Added freedns.afraid.org DDNS service to the webui.
• DDNS can now retrieve your public IP either Internally (the original method of using the IP on your router’s WAN interface) or Externally (by querying a remote server). This allows the use of DDNS in a Dual NAT or CGNAT situation. Note that it’s still up to you to handle the fact that you have two firewalls in front of one another, so things like port forwarding or VPN server support will still require you to handle that at the first firewall level.
• DFS Channel information are now shown on the Wireless Log page (based on upstream code from Asus’s stock firmware)
• Updated various components: curl (7.61.1), wget (1.19.5), openssl (1.0.2p), dnsmasq (2.80test8), nano (3.1).
• DNSFilter settings were moved to the LAN section, to make it clearer that this feature is completely unrelated to Trend Micro.
• Removed the various Norton Connect services from the DNSFIlter page. Symantec is going to discontinue the service in November. On first boot, any DNSFilter client set to use a Norton Connect DNS will be switched to OpenDNS Family to prevent service interruption while still providing security. Go to the DNSFilter page to adjust your settings as desired.
• Added Quad9 to the list of supported DNSFIlter services (to compensate for the loss of Norton)
• A couple of IPv6-related fixes surrounding dnsmasq (like dnsmasq crashes on the RT-AC86U in stateful mode).