Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Jim Reisert AD1C]

Regarding my DNS problems.....

I tried flashing back to 3.10.44-6 but the DNS problems persisted.  So
I cracked open /etc/config/network to discover I was using Google's
DNS servers:

config interface ge00
        option 'ifname' 'ge00'
        option 'proto'  'dhcp'
        option 'dns' '8.8.8.8 8.8.4.4'
        option 'peerdns' '0'

I then tried the OpenDNS servers, but the problems still continued.
Finally, I went back to the Comcast DNS servers (my ISP):

config interface ge00
        option 'ifname' 'ge00'
        option 'proto'  'dhcp'
        option 'dns' '75.75.75.75 75.75.76.76'
        option 'peerdns' '0'

Things seemed to be much better after that.

I then re-flashed 3.10.48-2 and the problems were still gone.

I don't know why all of a sudden trying to use non-Comcast DNS servers
became a problem.  I wonder if has something to do with IPV6.  But I'm
leaving things as-is now.

On Wed, Jul 23, 2014 at 9:44 AM, Jim Reisert AD1C
<jjreisert@alum.mit.edu> wrote:

> I seem to be experiencing random DNS failures with this version.  At
> first I thought it was just a couple of domains (fcc.gov and
> census.gov) but last night it took me a few tries to get to my
> personal web site (ad1c.us).  The problem persists today:
>
> f:\>nslookup census.gov
> Server:  UnKnown
> Address:  2601:1:a980:372::1
>
> DNS request timed out.
>     timeout was 2 seconds.
> *** Request to UnKnown timed-out
>
> f:\>nslookup census.gov
> Server:  UnKnown
> Address:  2601:1:a980:372::1
>
> Non-authoritative answer:
> Name:    census.gov
> Address:  148.129.75.218
>
> I don't remember how to tell which DNS service I'm running, either
> OpenDNS or Comcast.  It's not obvious from the GUI.
>
> Is anyone else experiencing DNS-related issues with this version?

-- 
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Jim Reisert AD1C]

One other nugget of goodness:

WINS networking using Samba seems to have broken some number of
releases back.  It seems to be working again in 3.10.48-2.  I believe
this to be true because when I reverted back to 3.10.44-6, it stopped
working again.

-- 
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us

[Cerowrt-devel] cerowrt-3.10.48-2 released

[Dave Taht]

Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/

+ resync with openwrt head
   (it's not clear how to deal with the barrier breaker freeze yet)
+ hopefully a fix for bug #442
 - but only extensive testing will tell
 - we have some rumored negative data so don't get your hopes up
+ sqm improvements
   inbound diffserv squashing works now as does not squashing - you can actually
   see inbound shaping working semi-properly now if you choose to trust
   your inbound connection's classification.
   gui support for above
+ babel improvements
   latest source specific code from the main openwrt-routing repo
   simplification of the default route export mechanism
   diversity routing enabled by default
   link detection enabled by default
   (if you aren't using babel, just disable it)

- wire-incompatible change to babels
  if you are using babels on another router you don't want to upgrade,
you will need to uninstall the babeld package and install the current
babels package from this release. Carefully, as you need to copy over
the new config files (/etc/firewall.user /etc/babeld.conf
/etc/config/babeld) from this release also.

- I am focused on getting ready for ietf, and thus unable to give ipv6
a shakeout without risking my vpn failing while I'm away. I was hoping
to get some time tomorrow to deploy on ipv6. It's looking less likely
by the minute, I'd rather have an extensive test up and running
continuously before I leave of what I got.

- I won't have time for another release for 2 weeks. If it breaks in
some new, crazy way, please revert to a prior version.

-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Dave Taht]

I forgot:

+ ntp startup re-integrated with dnsmasq dnssec support. (thx toke!)
if it wasn't for bug 442, and the integration of hnetd mdns proxy, I'd
love to just say, we're done...

On Thu, Jul 17, 2014 at 3:18 PM, Dave Taht <dave.taht@gmail.com> wrote:
> Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/
>
> + resync with openwrt head
>    (it's not clear how to deal with the barrier breaker freeze yet)
> + hopefully a fix for bug #442
>  - but only extensive testing will tell
>  - we have some rumored negative data so don't get your hopes up
> + sqm improvements
>    inbound diffserv squashing works now as does not squashing - you can actually
>    see inbound shaping working semi-properly now if you choose to trust
>    your inbound connection's classification.
>    gui support for above
> + babel improvements
>    latest source specific code from the main openwrt-routing repo
>    simplification of the default route export mechanism
>    diversity routing enabled by default
>    link detection enabled by default
>    (if you aren't using babel, just disable it)
>
> - wire-incompatible change to babels
>   if you are using babels on another router you don't want to upgrade,
> you will need to uninstall the babeld package and install the current
> babels package from this release. Carefully, as you need to copy over
> the new config files (/etc/firewall.user /etc/babeld.conf
> /etc/config/babeld) from this release also.
>
> - I am focused on getting ready for ietf, and thus unable to give ipv6
> a shakeout without risking my vpn failing while I'm away. I was hoping
> to get some time tomorrow to deploy on ipv6. It's looking less likely
> by the minute, I'd rather have an extensive test up and running
> continuously before I leave of what I got.
>
> - I won't have time for another release for 2 weeks. If it breaks in
> some new, crazy way, please revert to a prior version.
>
> --
> Dave Täht
>
> NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Valdis.Kletnieks]

[-- Attachment #1: Type: text/plain, Size: 407 bytes --]

On Thu, 17 Jul 2014 15:18:31 -0700, Dave Taht said:
> Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/

> - I am focused on getting ready for ietf, and thus unable to give ipv6
> a shakeout without risking my vpn failing while I'm away.

Basic IPv6 is still functional, ssh smtp and http are all working for me over v6.
So it's probably safe for you to leave for IETF. ;)

[-- Attachment #2: Type: application/pgp-signature, Size: 848 bytes --]

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Dave Taht]

Valdis: Thx for  testing ipv6!

All:

somehow I'd managed to do a build without luci-app-bcp38. I redid the
build with it, so  if you want that package,
you can do an
opkg update; opkg install luci-app-bcp38
to get the gui for that. (and new downloads will have that package
automatically preinstalled)



On Fri, Jul 18, 2014 at 7:23 AM,  <Valdis.Kletnieks@vt.edu> wrote:
> On Thu, 17 Jul 2014 15:18:31 -0700, Dave Taht said:
>> Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/
>
>> - I am focused on getting ready for ietf, and thus unable to give ipv6
>> a shakeout without risking my vpn failing while I'm away.
>
> Basic IPv6 is still functional, ssh smtp and http are all working for me over v6.
> So it's probably safe for you to leave for IETF. ;)



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Dave Taht]

If anyone cares... I'd dropped "Stochastic Fair Blue" from cerowrt
ages ago. I had someone (I forget who) ask me about it, so it is back
in in this release... but it's not integrated into sqm (for testing)
at all.

SFB was one of the first algorithms I'd tried 3 years back, and
couldn't make it work right. Thinking back on it, I  realize we had
multiple other problems in the stack at the time (notably GSO/TSO/GRO
offloads), that we didn't understand then, so what the heck, it's in
there now (in addition to the existing codel and fq_codel variants,
pie, qfq, drr, htb, hfsc, tbf, sfq, sfqred, red, ared, and gred) I
don't plan to do anything with it personally, the relevant paper on it
is:

http://www.thefengs.com/wuchang/blue/41_2.PDF

(I really enjoyed learning about bloom filters from that.)

On Fri, Jul 18, 2014 at 7:31 AM, Dave Taht <dave.taht@gmail.com> wrote:
> Valdis: Thx for  testing ipv6!
>
> All:
>
> somehow I'd managed to do a build without luci-app-bcp38. I redid the
> build with it, so  if you want that package,
> you can do an
> opkg update; opkg install luci-app-bcp38
> to get the gui for that. (and new downloads will have that package
> automatically preinstalled)
>
>
>
> On Fri, Jul 18, 2014 at 7:23 AM,  <Valdis.Kletnieks@vt.edu> wrote:
>> On Thu, 17 Jul 2014 15:18:31 -0700, Dave Taht said:
>>> Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/
>>
>>> - I am focused on getting ready for ietf, and thus unable to give ipv6
>>> a shakeout without risking my vpn failing while I'm away.
>>
>> Basic IPv6 is still functional, ssh smtp and http are all working for me over v6.
>> So it's probably safe for you to leave for IETF. ;)
>
>
>
> --
> Dave Täht
>
> NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Dave Taht]

Well, in quick ipv6 testing here, a couple problems:

Couldn't get a default ipv6 route via two routers to work. Definately
could merely be me not having the other router setup right, didn't try
hard to fix it.

The ip6prefix and static ip6assign parameters in /etc/config/network
appear to be mutually exclusive now. This might lead to issues where
you want a static address (e.g. a 6to4 or a ula) and a dynamic one
(assigned via hnetd or dhcpv6). When using the static assignment I had
to force sending a default route via ra to the clients.

Didn't try 6to4 or 6in4.




On Fri, Jul 18, 2014 at 7:31 AM, Dave Taht <dave.taht@gmail.com> wrote:
> Valdis: Thx for  testing ipv6!
>
> All:
>
> somehow I'd managed to do a build without luci-app-bcp38. I redid the
> build with it, so  if you want that package,
> you can do an
> opkg update; opkg install luci-app-bcp38
> to get the gui for that. (and new downloads will have that package
> automatically preinstalled)
>
>
>
> On Fri, Jul 18, 2014 at 7:23 AM,  <Valdis.Kletnieks@vt.edu> wrote:
>> On Thu, 17 Jul 2014 15:18:31 -0700, Dave Taht said:
>>> Get it at: http://snapon.lab.bufferbloat.net/~cero2/cerowrt/wndr/3.10.48-2/
>>
>>> - I am focused on getting ready for ietf, and thus unable to give ipv6
>>> a shakeout without risking my vpn failing while I'm away.
>>
>> Basic IPv6 is still functional, ssh smtp and http are all working for me over v6.
>> So it's probably safe for you to leave for IETF. ;)
>
>
>
> --
> Dave Täht
>
> NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article



-- 
Dave Täht

NSFW: https://w2.eff.org/Censorship/Internet_censorship_bills/russell_0296_indecent.article

Re: [Cerowrt-devel] cerowrt-3.10.48-2 released

[Jim Reisert AD1C]

I seem to be experiencing random DNS failures with this version.  At
first I thought it was just a couple of domains (fcc.gov and
census.gov) but last night it took me a few tries to get to my
personal web site (ad1c.us).  The problem persists today:

f:\>nslookup census.gov
Server:  UnKnown
Address:  2601:1:a980:372::1

DNS request timed out.
    timeout was 2 seconds.
*** Request to UnKnown timed-out

f:\>nslookup census.gov
Server:  UnKnown
Address:  2601:1:a980:372::1

Non-authoritative answer:
Name:    census.gov
Address:  148.129.75.218

I don't remember how to tell which DNS service I'm running, either
OpenDNS or Comcast.  It's not obvious from the GUI.

Is anyone else experiencing DNS-related issues with this version?

Thanks - Jim

-- 
Jim Reisert AD1C, <jjreisert@alum.mit.edu>, http://www.ad1c.us