Router: Netgear R7800
Version: DD-WRT v3.0-r61745 std (06/12/25) via webui flash
File: dd-wrt-webupgrade.bin
Kernel: Linux 6.1.141-rt28 #586 SMP Sun Jun 8 12:19:18 +07 2025 armv7l
Previous: DD-WRT v3.0-r61613 std (06/02/25)
Reset: No
Mode: Gateway, wlan0 & 1 AP
Status: Ok
Uptime: day
Issues/Errors: The Shortcut Forwarding Engine issue persists and I have poor performance over the WAN(Not getting above 750AMb in speed tests).
Update:
"lighttpd : Error on startup, returncode 255"
lighttpd.conf has not been changed for many years, but suddenly it lighttpd doesn't work after update.
Code:
root@AP:~# lighttpd -v
lighttpd/1.4.79 (ssl) - a light and fast webserver
root@AP:~# which lighttpd
/usr/sbin/lighttpd
root@AP:~# lighttpd -f /jffs/etc/lighttpd.conf
2025-06-13 14:25:04: (mod_openssl.c.3299) SSL: Unable to config groups X25519:P-256:P-384:X448
2025-06-13 14:25:04: (server.c.1696) Initialization of plugins failed. Going down.
root@AP:~#
Rebooting router doesn't help.
I haven't tried downgrading ddwrt yet.
Temp fix by installing lighttpd & related modules from Entware.
Joined: 07 Jan 2025 Posts: 296 Location: Bethel Park, PA, USA
Posted: Fri Jun 13, 2025 17:34 Post subject:
dplotz wrote:
I did notice that the 2.4GHz is consistently slightly slower than the MR7350 - ~58Mbps vs 66Mbps.
Update on my last post, I changed the 2.4GHz on the R7800 to Vanilla firmware, and made no other changes to the settings. I'm now averaging 75Mbps on the R7800's 2.4GHz band, slightly faster than the MR7350.
I should add that everything I tested with is Windows 11 with an Intel AX200/AX201 chipset, and perhaps there's some quirk in this chipset that makes it prefer Vanilla. _________________ Formerly dpp3530 Linksys MX4300
Gateway, 2 wired APs, NSS-ECM , Clock 1651MHz
VAPs on wlan0 and wlan1 for guest/IOT devices
IPv4 & IPv6 (Prefix Delegation)
Static Leases & DHCP
SmartDNS (DOQ using NextDNS, Cloudflare), DNSMasq
Wireguard and OpenVPN server
2.4GHz: dd-wrt, AX Only, ACK Timing 2000, WPA3 SAE & WPA2 w/AES
5GHz: dd-wrt, AX/AC/N Mixed, ACK Timing 2000, WPA3 SAE & WPA2 w/AES
Verizon Fios, 500/500Mbps
Joined: 06 Jun 2006 Posts: 7822 Location: Dresden, Germany
Posted: Fri Jun 13, 2025 23:49 Post subject:
kernel-panic69 wrote:
Router Model: Buffalo WZR-HP-G300NH
Firmware Version: DD-WRT v3.0-r61745 std (06/12/25)
Previous: DD-WRT v3.0-r60791 std (04/28/25)
File: wzr-hp-g300nh-dd-wrt-webupgrade-MULTI.bin,buffalo_to_ddwrt_webflash-MULTI.bin
Kernel Version: Linux 3.10.108-d11 #200482 Thu Jun 12 03:33:30 +07 2025 mips
Mode: Gateway/AP/Android Tethering WAN Reset: Yes (webUI flash is f*cked. TFTP recovered to this build and loaded backup taken prior to flash)
Status: OK
Uptime: ~30m
Issues/Errors: None, save and except that webUI flashing this device is now completely b0rked. It *used* to sit and the diagnostic LED flash forever until finally rebooting and coming back up. Now, it cuts off at some point and does not write the image to flash, whatsoever. Unfortunately, I have never opened this one up to attach serial, nor was I tailing the log, but it's been f*cked the past several builds I've tried via webUI the past year or two.
Router: Netgear R7800
Version: DD-WRT v3.0-r61745 std (06/12/25) via CLI flash (/tmp/firmware.bin)
File: dd-wrt-webupgrade.bin
Kernel: Linux 6.1.141-rt28 #586 SMP Sun Jun 8 12:19:18 +07 2025 armv7l
Previous: DD-WRT v3.0-r61613 std (06/02/25)
Reset: No
Mode: Gateway, wlan0 & 1 AP, DNSCrypt (non-Entware), Android Tethering WAN.
Status: Ok
Uptime: ~30 min
Issues/Errors: None. Automatic upgrade via /tmp/firmware.bin still works flawlessly.
the wzr hp g300nh has a insane slow flash memory. it can take more than 10 minutes to flash the device. so it may happen that the flashing gui in dd-wrt already timed out, but its still flashing in background. if you interrupt it. byebye. _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
Joined: 08 May 2018 Posts: 17299 Location: Texas, USA
Posted: Sat Jun 14, 2025 0:54 Post subject:
As I said in my email response, it acted like it was bricked with all LEDs cycling. That is NOT how it ever acted during a webUI flash in the past. I let it sit for much longer than 10 minutes with the LEDs looping. Normally, it's just the red diagnostic LED flashes at a specific interval just like when you TFTP recover, but for closer to an hour as best I recall. I will try to get syslogs and video next time. I use a Cisco unmanaged switch in between, and either a 2008-ish MacBook 32-bit on Debian, a Win10 laptop, or Win10 desktop.
root@AP:~# lighttpd -v
lighttpd/1.4.79 (ssl) - a light and fast webserver
root@AP:~# which lighttpd
/usr/sbin/lighttpd
root@AP:~# lighttpd -f /jffs/etc/lighttpd.conf
2025-06-13 14:25:04: (mod_openssl.c.3299) SSL: Unable to config groups X25519:P-256:P-384:X448
2025-06-13 14:25:04: (server.c.1696) Initialization of plugins failed. Going down.
root@AP:~#
Rebooting router doesn't help.
I haven't tried downgrading ddwrt yet.
Temp fix by installing lighttpd & related modules from Entware.
the error is shown. so fix your config to use compatible ciphers
lighttpd
comment from a reddit regarding this error
"Cipher suites such as NIST P-256 and AES-GCM are being removed as primitives with only x25519, ChaCha20 and Poly1305 remaining developed by Dan Bernstein (who uses the handle djb)."
so in fact your config is bad since it uses deprecated and now removed ciphers (P-256)
this is no lighttpd issue. its a openssl issue. or lets say. not a issue. its a intential security feature
but i will re verify this. according the source of lighttpd this cipher is unfortunatly the default cipher lighttpd is using if nothing else is specified
edit:
next build will include these extra ciphers, which must be manually selected for openssl3. _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s
Routers: Netgear XR500
Firmware: DD-WRT v3.0-r61745 std (06/12/25)
Kernel: Linux 6.1.141-rt28 #586 SMP Sun Jun 8 12:19:18 +07 2025 armv7l
Previous/Upgrade: DD-WRT v3.0-r57595/Yes (via GUI)
Reset: Yes
Mode & Uptime: Gateway running over 5hrs
Features:
- Gateway & DNSMasq;
- 5GHz; 2.4GHz (DDWRT) & vAPS (IoT & Guess)
- Static Leases & DHCP
- CloudFare & WAN DNS ignored
- WireGuard Server
- QoS (HFSC/SFC on MAC, netmask & i/faces priority);
- CPU overclocked OnDemand;
- VLANS via new GUI at [Setup|Networking] screen. Otherwise, XR500 cannot be upgraded successfully to r61745, if previously working CLI settings for VLANS are left in place since r57595.
Issues/Errors: Minor issue: For some reason, WAN port was somehow disabled following r61745 f/ware update. Manually selected wan for WAN Port Assignment and Internet was connected fine. .
Thanks BS and Devs.
P.S. Still unsure about specific application of [Settings] options under [Create a Bridge] under [Setup|Networking). However, I left it defaulted to [Linklocal Learn]. _________________ Netgear XR700 Gateway, Clock 2000MHz, DNSMasq
IPv4, MAC-tied IP & DHCP
SPI Firewall, QoS
OpenVPN Client
wlan0-5GHz, DD-WRT, AC/N Mixed, Wide 40MHz, Beacon 300, DTIM interval 2, ACK Timing 3160, WPA2/WPA3 w/AES
wlan1-2.4GHz, DD-WRT, N/G Mixed, Full 20MHz, Beacon400, DTIM interval 2, ACK Timing 3150, WPA2 w/AES
10Gb SFP+ connected to Switch (Optical cable)
Network separation
Posted: Sat Jun 14, 2025 10:42 Post subject: Re: Netgear XR500 - AP - r61745
BrainSlayer wrote:
the error is shown. so fix your config to use compatible ciphers
lighttpd
comment from a reddit regarding this error
"Cipher suites such as NIST P-256 and AES-GCM are being removed as primitives with only x25519, ChaCha20 and Poly1305 remaining developed by Dan Bernstein (who uses the handle djb)."
so in fact your config is bad since it uses deprecated and now removed ciphers (P-256)
this is no lighttpd issue. its a openssl issue. or lets say. not a issue. its a intential security feature
but i will re verify this. according the source of lighttpd this cipher is unfortunatly the default cipher lighttpd is using if nothing else is specified
edit:
next build will include these extra ciphers, which must be manually selected for openssl3.
Routers: Linksys MX4300
Firmware: DD-WRT v3.0-r61745 std (06/12/25)
Kernel: Linux 6.6.93-rt29 #3486 SMP Thu Jun 12 05:51:45 +07 2025 aarch64
Previous/Upgrade: DD-WRT v3.0-r59045/ Yes, via GUI
Reset: Yes
Mode & Uptime: Gateway running over 8hrs
Features:
- Gateway
- 5GHz (wlan0); 2.4GHz (both using DDWRT wifi component) & vAPS (Guess, &IoT)
- Static Leases & DHCP
- WireGuard Server
- QoS (HFSC/SFC on i/faces priority);
- VLANS - (This is the second router and of different make that I configured VLANS via GUI with ease).
Joined: 08 May 2018 Posts: 17299 Location: Texas, USA
Posted: Tue Jun 24, 2025 0:33 Post subject:
For those who may have the WZR-HP-G300NH or fall under the "HAVE_WZRG300NH" flag,
flashing issues should be fixed in a future release, but there is a workaround:
the flash memory of the WZR-G300NH is that slow and blocking the kernel and userspace
while writing, so the watchdog is not able to refresh the timer early enough. this will result
in a reboot in the middle of the flashing process. workaround for users with previous versions
is 'nvram set disable_watchdog=1; nvram commit; reboot'.
For those who may have the WZR-HP-G300NH or fall under the "HAVE_WZRG300NH" flag,
flashing issues should be fixed in a future release, but there is a workaround:
the flash memory of the WZR-G300NH is that slow and blocking the kernel and userspace
while writing, so the watchdog is not able to refresh the timer early enough. this will result
in a reboot in the middle of the flashing process. workaround for users with previous versions
is 'nvram set disable_watchdog=1; nvram commit; reboot'.
Have had this script for many years, dont know since when it start casuing reboot, if it startup ok and why restarting it cause the reboot? Out of memory?
With Smartdns setting as below, it randomly causeing internet issue like not able to access to some sites, after restart smartdns it will work
Joined: 08 May 2018 Posts: 17299 Location: Texas, USA
Posted: Tue Jul 01, 2025 15:40 Post subject:
The settings on services tab for domain name are gone, only the one on the Basic Setup page exists now. The nvram backups do not store MAC addresses. System logs with nvram set console_debug=1 will glean fruitful information for your other issues, perhaps. Outside of that, serial console must be connected. I'm failing to understand quoting a post that tells you exactly what you need to do to flash upgrades from versions prior to current release then telling us what we already know. _________________ "Life is but a fleeting moment, a vapor that vanishes quickly; All is vanity"
Contribute To DD-WRT Pogo - A minimal level of ability is expected and needed... RSS feed for DD-WRT releases (2025) RSS feed for DD-WRT releases (2024) RSS feed for DD-WRT releases (2023)
----------------------
Linux User #377467 counter.li.org / linuxcounter.net
