Router10 Firmware 1.5h Released!

Routers
1
  • Add support for OpenVPN server (using industry-standard certificate validation and RADIUS username/password authentication)
  • Add support for scheduling firewall filter rules
  • Add support for custom DNS records (Settings->Network->DNS)
  • Add support for custom DoH settings (Settings->Network->DNS)
  • Add support for per-port Voice VLAN via LLDP-MED

This update is being rolled out now. You can manually initiate the upgrade if you’d like, or it will automatically update overnight (if auto-updates are enabled). The complete, up-to-date changelog is available here:

If you have questions, feedback, or run into any issues, feel free to reply here or start a new topic. Including configuration details or relevant logs where possible helps us troubleshoot and respond more quickly.

2

Short question, is it possible to add AmneziaWG client in to Route10 ?

3

Hi Team,

are there still any plans for VRRP implementation?

Thank you

4

We haven’t had too many requests for AmneziaWG, so I don’t see it coming soon.

However, VRRP is definitely on the near-term roadmap.

5

First time I’ve seen this after a Route 10 upgrade. After updating to 1.5h, two of my APs ended up on the same IP. The cause looks like the boot clock:

  • The Route 10 boots with its clock at Oct 24 2021, and dnsmasq hands out addresses before the time syncs.
  • Those leases expire in 2021. Once the clock syncs, dnsmasq drops them, so it can give an address that’s still in use to another device.

On one reboot, all four APs got their addresses at Oct 24 09:01–09:02 according to /tmp/log/messages, and none of them were in /cfg/dhcp.leases afterwards. My switch’s lease from before the reboot was still there. It might be a one-off for me, but I ended up power cycling all my APs and it resolved itself.

I wonder if having dnsmasq hand out addresses only after the time sync would work?

6

Glad to see OpenVPN being supported.

Is there an option to use a full tunnel?

I’m unable to configure a custom subnet using 0.0.0.0/0.

7

For custom DNS, is it possible to setup a zone forwarder in the UI for tailnet zones? Or is this already handled by the tailnet client? I want everything on the LAN to be able to resolve tailnet dns records.

8

@eba Yes you can use 0.0.0.0/1,128.0.0.0/1 or use a PBR rule.

9

@tfmm This is not currently possible in the UI. I’ve not experimented with doing it over PBR since we don’t expose tailscale0 as a PBR target but will look into that.

10

Austin I have a DNS question as well. Using my Route10, when I am using Wireguard on my laptop I would like to be able to direct DNS to my NextDNS DoH. Do any of the recent DNS updates make that doable yet?

11

The new DNS settings are nice. But I’m not sure of the intended use case. If I enter my DoH server of choice to encrypt all DNS queries from my network, it still uses the plain IPv4 DNS servers from the WAN DHCP in addition to the DoH server. It kind of defeats the purpose of a DoH server afaik?

12

DoH servers are just used in parallel with the unencrypted requests. The next release will have the ability to turn off unencrypted requests, though.