From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ma1-aaemail-dr-lapp03.apple.com (ma1-aaemail-dr-lapp03.apple.com [17.171.2.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id B37613CB37 for ; Fri, 22 Jan 2021 14:43:02 -0500 (EST) Received: from pps.filterd (ma1-aaemail-dr-lapp03.apple.com [127.0.0.1]) by ma1-aaemail-dr-lapp03.apple.com (8.16.0.42/8.16.0.42) with SMTP id 10MJgrZf030187; Fri, 22 Jan 2021 11:43:01 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=apple.com; h=content-type : mime-version : subject : from : in-reply-to : date : cc : content-transfer-encoding : message-id : references : to; s=20180706; bh=H9VBImpKIutpB7vRFYq8Jhhv3krxDI/Lt5bMOHBeA5A=; b=NsbFRRxCZbtmAZxjQHSE32PcOvH8qEGDaMPB3skM0ExelFLDFeSIa9k/XmVlXCfD/h0f lzYyoEKMr/N9J7bPH6vM2rBK9opVADFhKNeaEhdV+qmiEPxdX5qga1/Yw3nABzAZMb1l 7x4oxIJpjf2tkh74UF+1qMeuAx2PGXc/JSv18teeTOOz2Bp39IzpsOLfwL8Cm3tHK+gM 28Q/vkPgcD4AShbT2dwskFnIp0fk5cMzn/M6wQ2zQwZpMrGdGwq2mQOb2zoqIpUOTnQo SEX6MdJB7lj7sDTXDMrr0iwT7HVe3zNQitVagpUsaly1uStHf8bCu0p7KgQzh2aVt/0H MQ== Received: from rn-mailsvcp-mta-lapp04.rno.apple.com (rn-mailsvcp-mta-lapp04.rno.apple.com [10.225.203.152]) by ma1-aaemail-dr-lapp03.apple.com with ESMTP id 367k1qr7d4-9 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO); Fri, 22 Jan 2021 11:43:01 -0800 Received: from rn-mailsvcp-mmp-lapp02.rno.apple.com (rn-mailsvcp-mmp-lapp02.rno.apple.com [17.179.253.15]) by rn-mailsvcp-mta-lapp04.rno.apple.com (Oracle Communications Messaging Server 8.1.0.7.20201203 64bit (built Dec 3 2020)) with ESMTPS id <0QNC00ZLIPFJAFH0@rn-mailsvcp-mta-lapp04.rno.apple.com>; Fri, 22 Jan 2021 11:42:55 -0800 (PST) Received: from process_milters-daemon.rn-mailsvcp-mmp-lapp02.rno.apple.com by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.7.20201203 64bit (built Dec 3 2020)) id <0QNC00900PARBZ00@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Fri, 22 Jan 2021 11:42:55 -0800 (PST) X-Va-A: X-Va-T-CD: cfcc11d596f13f96c533bd56e7b0b20a X-Va-E-CD: 59f3d0fade4ac4b5d044a8acdd747b33 X-Va-R-CD: f4ac06a7aa0f4c9fac3c851e2d3fb3da X-Va-CD: 0 X-Va-ID: 45c814fe-4c6c-42f7-8c7d-8028d26c48a1 X-V-A: X-V-T-CD: cfcc11d596f13f96c533bd56e7b0b20a X-V-E-CD: 59f3d0fade4ac4b5d044a8acdd747b33 X-V-R-CD: f4ac06a7aa0f4c9fac3c851e2d3fb3da X-V-CD: 0 X-V-ID: a3916ee6-d1db-4771-a980-94bd54946bef X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.343, 18.0.737 definitions=2021-01-22_14:2021-01-22, 2021-01-22 signatures=0 Received: from [17.235.1.236] (unknown [17.235.1.236]) by rn-mailsvcp-mmp-lapp02.rno.apple.com (Oracle Communications Messaging Server 8.1.0.7.20201203 64bit (built Dec 3 2020)) with ESMTPSA id <0QNC00PIGPFI4400@rn-mailsvcp-mmp-lapp02.rno.apple.com>; Fri, 22 Jan 2021 11:42:55 -0800 (PST) Content-type: text/plain; charset=utf-8 MIME-version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\)) From: Stuart Cheshire In-reply-to: Date: Fri, 22 Jan 2021 11:42:54 -0800 Content-transfer-encoding: quoted-printable Message-id: <932357EB-614C-4F74-925C-A1D6FB5F3AD2@apple.com> References: To: bloat X-Mailer: Apple Mail (2.3608.120.23.2.1) X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.343, 18.0.737 definitions=2021-01-22_14:2021-01-22, 2021-01-22 signatures=0 Subject: Re: [Bloat] UniFi Dream Machine Pro X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 22 Jan 2021 19:43:02 -0000 On 20 Jan 2021, at 07:55, Dave Taht wrote: > This review, highly recommending this router on the high end >=20 > https://www.increasebroadbandspeed.co.uk/best-router-2020 >=20 > also states that the sqm implementation has been dumbed down = significantly and can only shape 800Mbit inbound. Long ago we did a = backport of cake to the other ubnt routers mentioned in the review, has = anyone tackled this one? According to the UniFi Dream Machine Pro data sheet, it has a 1.7 GHz = quad-core ARM Cortex-A57 processor and achieves the following throughput = numbers (downlink direction): 8.0 Gb/s with Deep Packet Inspection 3.5 Gb/s with DPI + Intrusion Detection 0.8 Gb/s with IPsec VPN Is implementing CoDel queueing really 10x more burden than running = =E2=80=9CUbiquiti=E2=80=99s proprietary Deep Packet Inspection (DPI) = engine=E2=80=9D? Is CoDel 4x more burden than Ubiquiti=E2=80=99s IDS = (Intrusion Detection System) and IPS (Intrusion Prevention System)? Is CoDel really the same per-packet cost as doing full IPsec VPN = decryption on every packet? I realize the IPsec VPN decryption probably = has some assist from crypto-specific ARM instructions or hardware, but = even so, crypto operations are generally considered relatively = expensive. If this device can do 800 Mb/s throughput doing IPsec VPN = decryption for every packet, it feels like it ought to be able to do a = lot better than that just doing CoDel queueing calculations for every = packet. Is this just a software polish issue, that could be remedied by doing = some performance optimization on the CoDel code? It=E2=80=99s also possible that the information in the review might = simply be wrong -- it=E2=80=99s hard to measure throughput numbers in = excess of 1 Gb/s unless you have both a client and a server connected = faster than that in order to run the test. In other words, gigabit = Ethernet is out, so both client and server would have to be connected = via the 10 Gb/s SFP+ ports (of which the UDM-PRO has just two -- one in = the upstream direction, and one in the downstream direction). Speaking = for myself personally, I don=E2=80=99t have any devices with 10 Gb/s = capability, and my Internet connection isn=E2=80=99t above 1 Gb/s = either, so as long as it can get reasonably close to 1 Gb/s that=E2=80=99s= more than I need (or could use) right now. Stuart Cheshire