Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MikroTik RouterOS v7 stable released

mikrotik.com

Post reply on HN
Print view View original

171–180 of 188 posts

Re: MikroTik RouterOS v7 stable released

#171

Post by sam_lowry_ »

ok_dad wrote: post #27

So, what's the best wifi gateway with extra access points for a home that I don't have to screw with and doesn't spy on me or have cloud crap? My ISP sent a Google wifi thing but I'd rather pay a few hundred than use that for 10 bucks a month to rent that thing, and I don't trust Google. Edit: Thanks for all the answers, from me and anyone else who was looking! I have some good ideas from the below comments and hopef…

I am happy with hAP ac2 running OpenWRT.

RouterOS is a bit clunky for a Linux user. They kind of mimick Cisco UX, which is a big mess for everyone except professional network engineers.

Re: MikroTik RouterOS v7 stable released

#172

Post by stingraycharles »

iso1210 wrote: post #73
stingraycharles wrote: post #68

Earlier quoted context omitted.

Big supporter of Mikrotik here, it’s a perfect middle ground between consumer “crap”, and $10,000 enterprise network equipment. Rolled out a 10gbit / 25gbit network at home. My biggest complaints are: * Wireless is really difficult to get “decent speeds”. I also have my ISP’s router and a Draytek at home, these easily do 500mbit, and it’s nearly impossible to get my router board to do the same. When asking support th…

You can always run routeros on X86 hardware. I think the problem with things like mangle rules run into. Had loss and a hell of a lot of reorders at just 500mbit through a CCR1036 the other week, disabled 100 or so mangle rules and it vanished, but from looking at other routers I think it's more of a limit in the linux kernel (perhaps just the 2.6 one). Maybe routeros7.1 will be better, something to test in the comin…

> 10/25 feels like a CCR2004? Or are you just talking switching.

That’s exactly right. Thanks for the tip that things get squished into 2x25gbit before reaching the CPU; this effectively means that anything that isn’t offloaded to the hardware is limited by “just” 2x25GBit. Is my understanding also correct that this would be the case for when traffic needs to go from the SFP+ ports to the SFP28 ones?

Regardless, what I really wanted to do (mostly as an experiment) is use QoS to prioritize iSCSI and others; the problem I’m running into is that the CPUs are just not able to do that that fast.

I think the only solution to this problem would be to use an x86 machine with a bunch of Mellanox cards in it.

Re: MikroTik RouterOS v7 stable released

#173

Post by izacus »

groone wrote: post #148
izacus wrote: post #54

Earlier quoted context omitted.

Nope, it's really not for noobs. Basics things you can get via click on other SoHo routers like sane default firewall configuration, NAT loopback or simple VPN setup do not exist here. Setting up a Mikrotik is more akin to setting up a DSL connection on 1992 Linux - it's all "technically" available in the UI, but the UI is just a clickable version of all the CLI complexity and you need to know network terminology to…

But once you know that you need a NAT loopback, you can quickly follow instructions on internet to create that rule.

Well, I've been fighting this for two years now and it still doesn't work, sooooo :)

(Also configuring IPv6 correctly is also a special hell that's far away from clicking "enable IPv6" on my previous ASUS)

Re: MikroTik RouterOS v7 stable released

#174

Post by Railander »

iso1210 wrote: post #35
gnfargbl wrote: post #23

Earlier quoted context omitted.

Yes, but possibly with more ambition to be a budget alternative to Cisco and Juniper. Looking at the presentations under https://mum.mikrotik.com/ , it seems there are quite a few ISPs running on MikroTik kit, especially in less-developed parts of the world.

A big complaint about routeros6 is the time it takes for a full BGP table to converge - especially on the top-of-range cloud core routers. I don't deal much with IXPs, but I did hear somewhere that there were a shockingly high number of mikrotik peers at one exchange point (10%+)

As a Network Admin at an ISP in Brazil I can confirm their products are extremely popular due to the basically unbeatable price to performance and especially price to features. I can't think of anything close to their retail prices that can offer BGP, OSPF, MPLS, VRF, Wireguard, iptables, L3 hardware-acceleration, MLAG, ZeroTier, RPKI, VRRP, VXLAN, ECMP, Recursive Routing, LetsEncrypt, CA, REST API, etc. They have a 4x 10Gbps switch that has all of these features for $150.

You could potentially build a Linux PC to do some of the more basic stuff that most ISPs require at a similar price, such as PPPoE concentrators, but it's still a lot more hands-on work for no clear benefit.

I can't find right now what the market share of peering routers is in Rio's IX, but i feel like it's significantly higher than 10% (probably between 20 to 30%).

Re: MikroTik RouterOS v7 stable released

#175

Post by Railander »

mmastrac wrote: post #51

Does anyone know what the scripting support looks like in v7? Scripts have always been a bit awkward on RouterOS (I spend ages perfecting one that turned DHCP reservations into dynamic DNS entries). I'm hoping they have worked on this a bit.

From what I understood the part they are changing regarding scripting is in the `routing filters` feature.

Your script is probably going to break due to the new syntaxes in v7, but no significant added new features on that matter that I'm aware.

Re: MikroTik RouterOS v7 stable released

#176

Post by Railander »

Toutouxc wrote: post #29
beebeepka wrote: post #3

I've been thinking about going with Mikrotik at least twice but never pulled the trigger because I am sort of a chicken shit. Is it easy for a noob to setup things like port forwarding and vlans on a router/ap box?

Both the GUI and their CLI are among the most unintuitive systems I've ever seen. I definitely spent more than one evening trying to configure my Mikrotik from scratch as a typical home router + switch + AP. I'm no networking guru, I only did some Cisco stuff a few years ago at uni, but I didn't understand 80 % of the terms used in their OS.

Agreed, MikroTik is extremely complex due to how feature-rich it is and because they run the same OS across all their devices, regardless of router/switch/AP/generation. Definitely not for the faint of heart that simply want to do some basic networking.

On the other hand, I'm not sure "unintuitive" is the correct word here. Having had the (dis)pleasure of setting up complex topologies on other manufactures like Cisco I found MikroTik to be considerably more intuitive (or perhaps "less unintuitive" would be more appropriate), possibly because Cisco has been built on for many decades and new features were constantly added on top of existing systems for compatibility purposes instead of redoing the CLI from scratch to make a more consistent user experience.

Re: MikroTik RouterOS v7 stable released

#177

Post by Railander »

izacus wrote: post #173
groone wrote: post #148

Earlier quoted context omitted.

But once you know that you need a NAT loopback, you can quickly follow instructions on internet to create that rule.

Well, I've been fighting this for two years now and it still doesn't work, sooooo :) (Also configuring IPv6 correctly is also a special hell that's far away from clicking "enable IPv6" on my previous ASUS)

Their firewall is iptables wrapped in a really nice GUI.

The criticism on their firewall might as well be a criticism on iptables (which IMO is completely valid, even after years I still have doubts about what a certain rules structure is going to do).

iptables itself is extremely unintuitive (although extremely powerful and flexible), but their GUI makes it more manageable.

Re: MikroTik RouterOS v7 stable released

#178

Post by Railander »

Sebb767 wrote: post #38
tguvot wrote: post #21

Earlier quoted context omitted.

worked for me. one suggestion though, get a serial cable, so in case you creative some too creative vlan config that will lock you out, you could fix it without having to reset entire box

Alternatively, make a backup before screwing with the VLAN. Then resetting the box is not as much of a set-back.

Also alternatively, turn on Safe Mode so if you lose access the router will revert to the configuration state when Safe Mode was turned on.

Re: MikroTik RouterOS v7 stable released

#180

Post by imiric »

donmcronald wrote: post #150
imiric wrote: post #127

Earlier quoted context omitted.

I'm currently in the process of moving my home network from Ubiquiti to an open solution with a few Mikrotik RBM11Gs to serve as APs, and will probably also replace my Netgate SG-3100 with pfSense with likely a PC Engines machine. All will probably be running OpenWrt, though if that's too limiting / buggy, I'll just use plain Linux or OpenBSD on them. The major benefit of this setup is that you don't depend on some m…

Have you ever looked at VyOS ( https://vyos.io/ )? IIRC EdgeOS was a fork of Vyatta and Vyatta became VyOS. Their LTS pricing doesn't work for small businesses, but the rolling release might be an option for home use. It's sad that everyone only wants to accept huge amounts of cash these days. Take VyOS as an example. The smallest licensing option they have is $6k per year for unlimited installs. That makes it comple…

I haven't, but I remember Vyatta from many years ago, and I'm looking for something less enterprisey. If OpenWrt becomes a problem, I just might fall back to plain Linux or OpenBSD. Though OpenWrt is quite stable and fully featured from what I've read. I really don't need anything special for home use.
Post reply on HN