Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

MikroTik RouterOS v7 stable released

mikrotik.com

Post reply on HN
Print view View original

181–188 of 188 posts

Re: MikroTik RouterOS v7 stable released

#181

Post by imiric »

tw04 wrote: post #169
imiric wrote: post #144

Earlier quoted context omitted.

I also have an EdgeRouter, but will probably replace that last since it works fine and doesn't require any of the Ubiquiti Controller / Cloud shenanigans. I've had intermittent LAN dropouts on the SG3100 that I couldn't explain from the logs. That in addition to Netgate's hostility towards open source with how they're handling pfSense, and the whole pfSense+ product, just puts a bad taste in my mouth when it comes to…

Why not just go to opnsense? That’s what most folks have moved to that have gotten fed up with netgates shenanigans.

I thought about it, but WiFi cards are generally better supported on Linux, and since I'll be running OpenWrt on the APs, I'd prefer having a unified OS for both APs and the router.

I guess it will depend on how much I like OpenWrt :) I don't have any experience with it.

Re: MikroTik RouterOS v7 stable released

#183

Post by tw04 »

imiric wrote: post #181
tw04 wrote: post #169

Earlier quoted context omitted.

Why not just go to opnsense? That’s what most folks have moved to that have gotten fed up with netgates shenanigans.

I thought about it, but WiFi cards are generally better supported on Linux, and since I'll be running OpenWrt on the APs, I'd prefer having a unified OS for both APs and the router. I guess it will depend on how much I like OpenWrt :) I don't have any experience with it.

If you do go the OPNSense route, just be aware you need to disable the spectre/meltdown mitigations to get reasonable performance. pfsense has them disabled by default.

In tunables you need:

hw.ibrs_disable="1"

hw.mds_disable="0"

vm.pmap.pti="0"

Re: MikroTik RouterOS v7 stable released

#184

Post by Hamuko »

liuliu wrote: post #133
Hamuko wrote: post #64

Earlier quoted context omitted.

I used to want Wireguard on my router. It was in fact one of the reasons why I went with an EdgeRouter X. Then one day, when I was away from home and actually needed the VPN, it absolutely melted. Basically everything on the router stopped working, and I suspect it was Wireguard since the router went haywire when I was actually using it extensively. Needed a hard power cycle, which I couldn't actually do. These days…

I sort of only want WG support in EdgeRouter as WG client such that my homes in different geographical locations can share the same network transparently. Is that still a good use?

Since there's no actual WG support in EdgeRouters and the experiences I've had with the community-maintained version, I'd personally not go that route. You can probably get better bang for your buck by configuring a couple of Raspberry Pis.

Granted, it's been a hot minute since I've last tried WG on EdgeRouters.

Re: MikroTik RouterOS v7 stable released

#185

Post by magicalhippo »

technofiend wrote: post #164
magicalhippo wrote: post #143

Earlier quoted context omitted.

Unless something radical has changed in the last half year or so, pfSense will be a giant PITA if you have "residential" IPv6. That is, anything but a completely static prefix.

I am unhappy with pfsense's inability to push gigabit traffic on my hardware, but IPV6 works fine for me. I'd be curious what isp you have and what your issue is.

My ISP has a dynamic prefix, so it changes "willy-nilly", sometimes per day.

With pfSense, the issue was primarily two-fold. First was the fact that all the firewall rules and such did not support dynamic prefixes. Major PITA right there.

Second was the DNS server, that is, when using pfSense as a DNS server I couldn't figure out how to prevent it from sending the public IPv6 address to clients. Thus when the (public) prefix changed, DNS stopped working on the clients.

Some of this might have improved since I last used it, but I switched to OpenWRT and haven't looked back for a second.

Re: MikroTik RouterOS v7 stable released

#186

Post by sliken »

ValentineC wrote: post #147
dont__panic wrote: post #72

Earlier quoted context omitted.

Hot take: All routers completely suck right now, and most of them are built to spy on your network at worst and accidentally expose you to cyberattacks at best. There are two choices, the way I see it: 1. Invest in a decent router (probably $150-200 at least) and throw openwrt on it. You'll need something with serious CPU beef because openwrt relies more on software than hardware, and most routers use hardware for Qo…

> 1. Invest in a decent router (probably $150-200 at least) and throw openwrt on it. You'll need something with serious CPU beef because openwrt relies more on software than hardware, and most routers use hardware for QoS etc., hence the price tag. You'll also need to actually understand the multitude of settings offered by openwrt if you care at all about security or performance -- this is nontrivial if you aren't a…

Old x86 boxes tend to be hot, having moving parts (fans), large, and noisy. Sure some folks have a large house, basement, and don't care. For many a nice new reliable (with warranty) widget that burns little power, is silent, has no moving parts, and is tiny/easily mounted is a pretty big win. The edgerouter is pretty good, I have a 6P, but the ubiquiti trend towards subscriptions, cloud management, etc is pretty worrying.

Given that I'd likely keep my next router for 5+ years, I'm hoping for 2.5gbit (if not 10gbit), 4 ports, IPv6 aware (I get a /60 from my ISP), VLANs (so I can keep the random consumer crap segregated off), etc. I had settled on the hardkernel with 6x2.5 Gbit ports, but it's discontinued.

My Ubiquiti 6xp does a great job, I can keep the config file in git, I can assign a IPv6 /64 per port, run custom firewall rules to redirect all DNS to my DNS server (allowing blocking youtube, web games, etc), etc. I block all remote access to my router and from the consumer crap VLAN with watches, TVs, AV receivers, game consoles, etc.

Here's hoping someone ships similar, have my eye on the Mirotek RB5009UG+S+IN, has 1 10G, 1 2.5G, and a bunch of 1G. I'd need a second vlan capable switch with a 10G uplink for my uses, but it's workable. Hoping for similar with a few more faster ports. Even just 2x10G would make a big difference.

Re: MikroTik RouterOS v7 stable released

#187

Post by aborsy »

tw04 wrote: post #125
nrclark wrote: post #122

Earlier quoted context omitted.

Do their products have much in the way of phone-home / cloud access?

They have a reverse tunnel that you can enable for remote access, but you can disable it. https://kb.synology.com/en-global/SRM/help/SRM/NetworkCenter... I personally like that because I can safely remotely access the routers I've deployed for others if I ever have a reason to. They just need to check a box to turn it on or off in the GUI. They also have an "experience improvement" program that sends home telemetry t…

QuickConnect makes your NAS wide open to internet. It does so using UPnP or a relay station in a synology data center. Not only Stnology will likely have access to users data at the relay station (see change of certificate!), DSM login page will be open to anyone on internet (you can try random usernames on https://quickconnect.to/ and connect to people’s NASes).

Maybe for routers it’s different, but this service is not secure for NAS.

Re: MikroTik RouterOS v7 stable released

#188

Post by c0nsumer »

squarefoot wrote: post #136
c0nsumer wrote: post #102

Earlier quoted context omitted.

FWIW, I do OPNsense on a dedicated box (Protectli FW4B) and then an R610 for wireless, with an eBay special EOL'd Brocade switch in the middle. A dumber switch would be just fine, but I wanted something with 802.1at POE and good VLAN support because I like to break things up a bit. OPNsense is darned handy, and I like that it does more than an EdgeRouter would, like terminate a Wireguard VPN. The R610 works wonderful…

> I do OPNsense on a dedicated box (Protectli FW4B) Interesting, thanks. Looks similar to one I'm considering to purchase when I'm moving next year. I'd be using OpnSense too. https://www.ipu-system.de/index.html

Those look nice as well.

I think that any slim/passive box will work well. So long as it has enough NICs and they have quality drivers for hardware offload and whatnot it'll work great.

Post reply on HN