[Cerowrt-devel] cerowrt 3.3.8-1 and related

[Cerowrt-devel] cerowrt 3.3.8-1 and related

[Dave Taht]

I have updated cerowrt 3.3 to Linux version 3.3.8-1 and merged with
openwrt head.

My goal for this release was simply to get caught up with openwrt, then push
out the remaining useful cerowrt stuff into openwrt. After taking 3 weeks
off it's amazing how difficult it was to get back in sync.

Changes in this release:

+ Linux 3.3.8
+ netifd support (more dynamic application startup/shutdown management)
+ Bind 9.1.1-P1 (Fix for a CVE)
+ transmission and transmission web server (uTP) added
+ Jabber chat server added

- I accidentally took a step back on dnsmasq (2.61 to 2.59)
- Firewall rules still need work (transmission support, block port 81, too)
- High performance hang (#379 and friends) untested (but possibly improved)
- UPnP work needs to be folded in
- quagga and gpsd didn't build

There are exciting things happening on the quagga front with babel -
there is a security architecture being prototyped as I write that
looks promising.
As for the gpsd issue, there was a flurry of controversy over how best
to stick it in openwrt, and obviously whatever one I picked lost.

And, of course, fq_codel is running on all interfaces.

I will try to resolve these issues by sunday and get out a 3.3.8-2

Let me know if any new ones have cropped up.

-- 
Dave Täht
SKYPE: davetaht
http://ronsravings.blogspot.com/

Re: [Cerowrt-devel] cerowrt 3.3.8-1 and related

[Dave Taht]

there is at least one mistake in the current firewall rules. the "lan" rule
for se00, sw10, sw00 should have ACCEPT on input,output,and forward.

Plenty more fixes to come by the end of the weekend.

On Fri, Jun 8, 2012 at 5:19 AM, Dave Taht <dave.taht@gmail.com> wrote:
> I have updated cerowrt 3.3 to Linux version 3.3.8-1 and merged with
> openwrt head.
>
> My goal for this release was simply to get caught up with openwrt, then push
> out the remaining useful cerowrt stuff into openwrt. After taking 3 weeks
> off it's amazing how difficult it was to get back in sync.
>
> Changes in this release:
>
> + Linux 3.3.8
> + netifd support (more dynamic application startup/shutdown management)
> + Bind 9.1.1-P1 (Fix for a CVE)
> + transmission and transmission web server (uTP) added
> + Jabber chat server added
>
> - I accidentally took a step back on dnsmasq (2.61 to 2.59)
> - Firewall rules still need work (transmission support, block port 81, too)
> - High performance hang (#379 and friends) untested (but possibly improved)
> - UPnP work needs to be folded in
> - quagga and gpsd didn't build
>
> There are exciting things happening on the quagga front with babel -
> there is a security architecture being prototyped as I write that
> looks promising.
> As for the gpsd issue, there was a flurry of controversy over how best
> to stick it in openwrt, and obviously whatever one I picked lost.
>
> And, of course, fq_codel is running on all interfaces.
>
> I will try to resolve these issues by sunday and get out a 3.3.8-2
>
> Let me know if any new ones have cropped up.
>
> --
> Dave Täht
> SKYPE: davetaht
> http://ronsravings.blogspot.com/



-- 
Dave Täht
SKYPE: davetaht
http://ronsravings.blogspot.com/

Re: [Cerowrt-devel] cerowrt 3.3.8-1 and related

[Maciej Soltysiak]

Hi Dave,

Cool, just flashed my router with the 3.3.8-3, going to use it at home.

About codel, does it mean that I shouldn't enable anything in AQM and
QOS tabs and just edit
/usr/sbin/simple_qos.sh to tune my down/up bandwidth?

Regards,
Maciej

On Fri, Jun 8, 2012 at 4:54 PM, Dave Taht <dave.taht@gmail.com> wrote:
> there is at least one mistake in the current firewall rules. the "lan" rule
> for se00, sw10, sw00 should have ACCEPT on input,output,and forward.
>
> Plenty more fixes to come by the end of the weekend.
>
> On Fri, Jun 8, 2012 at 5:19 AM, Dave Taht <dave.taht@gmail.com> wrote:
>> I have updated cerowrt 3.3 to Linux version 3.3.8-1 and merged with
>> openwrt head.
>>
>> My goal for this release was simply to get caught up with openwrt, then push
>> out the remaining useful cerowrt stuff into openwrt. After taking 3 weeks
>> off it's amazing how difficult it was to get back in sync.
>>
>> Changes in this release:
>>
>> + Linux 3.3.8
>> + netifd support (more dynamic application startup/shutdown management)
>> + Bind 9.1.1-P1 (Fix for a CVE)
>> + transmission and transmission web server (uTP) added
>> + Jabber chat server added
>>
>> - I accidentally took a step back on dnsmasq (2.61 to 2.59)
>> - Firewall rules still need work (transmission support, block port 81, too)
>> - High performance hang (#379 and friends) untested (but possibly improved)
>> - UPnP work needs to be folded in
>> - quagga and gpsd didn't build
>>
>> There are exciting things happening on the quagga front with babel -
>> there is a security architecture being prototyped as I write that
>> looks promising.
>> As for the gpsd issue, there was a flurry of controversy over how best
>> to stick it in openwrt, and obviously whatever one I picked lost.
>>
>> And, of course, fq_codel is running on all interfaces.
>>
>> I will try to resolve these issues by sunday and get out a 3.3.8-2
>>
>> Let me know if any new ones have cropped up.
>>
>> --
>> Dave Täht
>> SKYPE: davetaht
>> http://ronsravings.blogspot.com/
>
>
>
> --
> Dave Täht
> SKYPE: davetaht
> http://ronsravings.blogspot.com/
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel

Re: [Cerowrt-devel] cerowrt 3.3.8-1 and related

[Dave Taht]

3.3.8-3 is the first major resync between openwrt head and cerowrt
in nearly a month...

and needed a lot of love just to get that far.

I'm very happy that it's "final" versions of the codel codel and
getting-close-to-openwrt's-freeze versions of openwrt....

But:

Some more polish and testing is needed, so I would be reluctant to
have you just slam it into your default setup.

Notably:

ethtool's syntax changed on me, so fq_codel is not being enabled
properly on the ethernet interfaces.

The new version of quagga isn't quite baked yet, so babeld is the default still.

There is a bug in the new firewall rules in the last stanza - it
should read "guest" and have a different name than the previous
stanza. I did fix the "lan" rule mentioned in the previous email. Mo
bettah rules desired...

Felix has made some major improvements on the ath9k front, which I
haven't tested against bug #379 and related yet.

I haven't addressed the long-standing upnp issue.

There was a switch to netifd also. My concern here is that ahcpd will break.

gpsd is now from openwrt head, not ceropackages.

dnsmasq isn't fully enabled with ipv6 dhcp support yet.

jabberd is installed on the router with access limited to the ip address
ranges on the secure network (see /etc/xinetd.d/xmpp-client for details)

There are two default jabber users there, with default passwords. I'm
not happy with this setup, but it is kind of neat to be able to leave
notes to the other person's that use the router, on the router....

Transmission (bittorrent) is included but disabled by default. I have
some patches for it for both ipv6 classification and uTP diffserv,
too, that didn't make 3.3.8-3.

And so on. By all means, please test, but my usual concerns about
installing something alpha-quality on your primary gateway to the
universe in the presence of wives, parents, or children, apply.

On Thu, Jun 14, 2012 at 1:36 PM, Maciej Soltysiak <maciej@soltysiak.com> wrote:
> Hi Dave,
>
> Cool, just flashed my router with the 3.3.8-3, going to use it at home.

Jeeze, I have barely had that built for an hour...

> About codel, does it mean that I shouldn't enable anything in AQM and

Please note that codel is the base substrate for a new class of
network queuing algorithms, of which the first is fq_codel. I would
recommend you run fq_codel in preference to codel in nearly all
situations.

I keep trying to make these distinctions clear, because many other
things besides fq_codel are possible on top of codel. I hope others
will clearly distinguish between "codel": the underlying theory and
basic drop strategy, and stuff layered on top of it like fq_codel,
qfq+codel, and stuff like the openwrt qos scripts and the currently
under test simple_qos script. (which use hfsc and htb, respectively,
for soft-rate limiting)

> QOS tabs and just edit
> /usr/sbin/simple_qos.sh to tune my down/up bandwidth?

I re-enabled the QoS tab to see how good the std openwrt + fq_codel
implementation now was, so as to compare it against simple_qos, so
you can try either and let us know how it works. :)

The AQM tab remains entirely disfunctional.

>
> Regards,
> Maciej
>
> On Fri, Jun 8, 2012 at 4:54 PM, Dave Taht <dave.taht@gmail.com> wrote:
>> there is at least one mistake in the current firewall rules. the "lan" rule
>> for se00, sw10, sw00 should have ACCEPT on input,output,and forward.
>>
>> Plenty more fixes to come by the end of the weekend.
>>
>> On Fri, Jun 8, 2012 at 5:19 AM, Dave Taht <dave.taht@gmail.com> wrote:
>>> I have updated cerowrt 3.3 to Linux version 3.3.8-1 and merged with
>>> openwrt head.
>>>
>>> My goal for this release was simply to get caught up with openwrt, then push
>>> out the remaining useful cerowrt stuff into openwrt. After taking 3 weeks
>>> off it's amazing how difficult it was to get back in sync.
>>>
>>> Changes in this release:
>>>
>>> + Linux 3.3.8
>>> + netifd support (more dynamic application startup/shutdown management)
>>> + Bind 9.1.1-P1 (Fix for a CVE)
>>> + transmission and transmission web server (uTP) added
>>> + Jabber chat server added
>>>
>>> - I accidentally took a step back on dnsmasq (2.61 to 2.59)
>>> - Firewall rules still need work (transmission support, block port 81, too)
>>> - High performance hang (#379 and friends) untested (but possibly improved)
>>> - UPnP work needs to be folded in
>>> - quagga and gpsd didn't build
>>>
>>> There are exciting things happening on the quagga front with babel -
>>> there is a security architecture being prototyped as I write that
>>> looks promising.
>>> As for the gpsd issue, there was a flurry of controversy over how best
>>> to stick it in openwrt, and obviously whatever one I picked lost.
>>>
>>> And, of course, fq_codel is running on all interfaces.
>>>
>>> I will try to resolve these issues by sunday and get out a 3.3.8-2
>>>
>>> Let me know if any new ones have cropped up.
>>>
>>> --
>>> Dave Täht
>>> SKYPE: davetaht
>>> http://ronsravings.blogspot.com/
>>
>>
>>
>> --
>> Dave Täht
>> SKYPE: davetaht
>> http://ronsravings.blogspot.com/
>> _______________________________________________
>> Cerowrt-devel mailing list
>> Cerowrt-devel@lists.bufferbloat.net
>> https://lists.bufferbloat.net/listinfo/cerowrt-devel



-- 
Dave Täht
SKYPE: davetaht
http://ronsravings.blogspot.com/