From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-ig0-x22e.google.com (mail-ig0-x22e.google.com [IPv6:2607:f8b0:4001:c05::22e]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by huchra.bufferbloat.net (Postfix) with ESMTPS id D778E21F1FA for ; Tue, 21 Jan 2014 12:59:21 -0800 (PST) Received: by mail-ig0-f174.google.com with SMTP id hl1so11970137igb.1 for ; Tue, 21 Jan 2014 12:59:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=h9fH01/XPBaimkFduBI40LPwEuFsplIZi/RgF0/RKQ0=; b=ft7t9P1G8+Jxr5QjSef/zPXSoh1DRf+9NoTXRJWrPjiTNXpQB9n/dg8r0lDA31FBWy gbIUtXOvbtovhG8HSw+7zJER1jXeyE4KMuDN8xa++clde4Y0YkssIG95iwQ7P5DbdvHN 9L77M1/gevwjrRtq7KDl6RxdHC85YkRXHxJsJ1mhLG6iEg0SwEb8DdO7fEnjsDdUaUeL gBJqGrfvy5faMNWJwcOcJ6GMwOoXn6kXuBtTDudXT1E1ONWm4g+LZp0KjfQGG2CMYdo7 IzUP/NXM1kZdIRs2dhntKSyqOdduXiSlwzBmojpTfvprDsA1Gr7fcPtdTLDHu9dG3aAq /LyA== MIME-Version: 1.0 X-Received: by 10.42.53.10 with SMTP id l10mr20322344icg.33.1390337961102; Tue, 21 Jan 2014 12:59:21 -0800 (PST) Received: by 10.64.145.67 with HTTP; Tue, 21 Jan 2014 12:59:21 -0800 (PST) Date: Tue, 21 Jan 2014 15:59:21 -0500 Message-ID: From: Dave Taht To: "cerowrt-devel@lists.bufferbloat.net" Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: [Cerowrt-devel] Comcast specific Cerowrt-3.10.26-7: another "too exciting for me" unrelease X-BeenThere: cerowrt-devel@lists.bufferbloat.net X-Mailman-Version: 2.1.13 Precedence: list List-Id: Development issues regarding the cerowrt test router project List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jan 2014 20:59:32 -0000 This is a special release intended only for comcast users with ipv6 capable modems and CMTSes. NOTE: If you are running any form of tunneling for ipv6 (e.g. hurricane) do NOT try this release, as it breaks badly. http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/comcast/3.10.26-7/ I strongly recommend all cerowrt users on comcast, upgrade.[1] If you are on comcast and dare not upgrade to this, comment out these lines in /etc/config/network #config interface ge01 # wan6 on some release. # option ifname @ge00 # option proto dhcpv6 # option 'broadcast' '1' # option 'metric' '2048' # option 'reqprefix' '60' and reboot to disable dhcpv6 on the external interface entirely. I have been having flashbacks to the IPX/SPX transition... but it really did bring a tear to my eye to finally have ipv6 connectivity for the first time, native. And to see no real difference in RTT between ipv4 and v6. http://snapon.lab.bufferbloat.net/~d/bev/comcast_native_ipv6/ Oh brave new world that may have new protocols in it. A bunch of other stuff landed in cero, and if you are not tunneling, and your spouse and family are willing, you can try: + openwrt sync from head + RA spamming filter stopping mega firewall reloads on comcast ipv6 - thx steven barth! + switch from dnsmasq to using odhcpd for ipv6 RAs (thx #openwrt!) + Comcast ipv6 actually tested by me + GUI is now https - thx sebastian! (we still have some work left here) For snowden points, it also does perfect forward secrecy. + GUI has selectable skins (pick one, any one) + SQM starts correctly on boot and other restarts + SQM now scales better to higher rates + updated on-board documentation ( example: http://cero2.bufferbloat.net/cerowrt/index.html ) + updated uftp, ccnx, new libnettle package (for dnsmasq 2.69) - thx stephen walker + sysupgrade fixed on the minus side - We still have some timing problems in picking up the RAs, particularly from wifi. If you don't get ipv6 addresses on your wifi client after a fresh boot of cero, reconnect the wifi client. After cero is fully booted. and has dhcpv6-pd'd addresses, you'll get them. Usually. - bcp38: didn't get 'round2it src/dst routing solves half of it - updated shaperprobe, ditg, same - HT40+ DOES appear to be NOT working. (this has been the case for a while) - Hurricane electric ipv6 tunnels are *badly broken* as in *will disable your router* with a zillion extra processes. a huge change in openwrt made saturday was a switch to source specific rout= ing, e.g, if you have two ipv6 providers, (or a vpn, and so on) stuff from source A will go out the right destination for destination A, and stuff from source B will go out the right destination for destination B. At least in theory. so you will see "from" routes. root@cerowrt:~# ip -6 route default from :: via fe80::201:5cff:de41:b841 dev ge00 proto static metric= 1024 default from 2001:E:L:I:D:E:D:Z via fe80::201:5ccf:fe41:b841 dev ge00 proto static metric 1024 default from 2601:X:Y::0::/60 via fe80::201:5ccf:fe41:b841 dev ge00 proto static metric 1024 2601:X:Y:0::/64 dev gw00 proto kernel metric 256 expires 345262sec 2601:X:Y:1::/64 dev gw10 proto kernel metric 256 expires 345262sec 2601:X:Y:2::/64 dev se00 proto kernel metric 256 expires 345262sec 2601:X:Y:3::/64 dev sw00 proto kernel metric 256 expires 345262sec 2601:X:Y:4::/64 dev sw10 proto kernel metric 256 expires 345262sec unreachable 2601:X:X:0::/60 dev lo proto static metric 2147483647 error = -128 I figure there is much work to be done to get things like ipsec and openvpn and bird/quagga/babeld to work well again, but source/dest routing was desparately needed, so... [1] All my testing was done on an ARRIS TM822G cablemodem. (I have a profou= ndly low opinion of several other cablemodems, notably the technicolor...) There are a few other testers on other cablemodems, please report in... I return now to my regularly scheduled workweek from last wednesday. Share and enjoy. --=20 Dave T=E4ht Fixing bufferbloat with cerowrt: http://www.teklibre.com/cerowrt/subscribe.= html