Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

OpenWrt 22.03

openwrt.org

Post reply on HN
Print view View original

111–120 of 133 posts

Re: OpenWrt 22.03

#111

Post by Nextgrid »

Zizizizz wrote: post #18
c0l0 wrote: post #2

This is a pretty significant release - it marks the end of iptables in the main distribution; the OpenWrt-specific translation layer (previously firewall3, now firewall4) for netfilter-related configuration now targets nftables. Also, yet more devices have made the switch from swconfig to DSA for configuring Ethernet switches. I've been using 22.03 release candidates on all my networking gear (router, switch, access…

If you don't do anything out of the ordinary with your router is there any benefit to this over for example, the Netgear or tplink firmware?

Better security in general. The firmware on consumer-grade routers is an afterthought. They are routinely running 10-year-old versions of services which are sometimes exposed to the internet, and all insist on rolling their own shitty web UIs which often include command injection vulnerabilities.

Re: OpenWrt 22.03

#112

Post by rnhmjoj »

oynqr wrote: post #108
rnhmjoj wrote: post #50

I hoped this would fix the squashfs corruption[1][2][3] on the mt7621, but it doesn't seem so. It looks like I'll have to keep playing russian roulette on every boot for another two years, at least. [1]: https://forum.openwrt.org/t/patch-squashfs-data-probably-cor... [2]: https://github.com/openwrt/openwrt/issues/9085 [3]: https://github.com/openwrt/openwrt/issues/9729

Thanks for the heads-up, but I suppose I'm fine since my router only reboots for sysupgrades.

Unfortunately the issues are not with just the reboot: as files are (re)read from the flash storage the kernel pages become corrupted and files unreadable.

Eventually the programs start crashing as config, shared libraries, etc. are being pulled from under their feet.

Re: OpenWrt 22.03

#113

Post by InvaderFizz »

poisonborz wrote: post #73
ncmncm wrote: post #61

Earlier quoted context omitted.

Wireguard, particularly.

Except if you don't have a premium router with high-end CPU you will have minimal bandwith.

I can do over 270Mbps down and 80Mbps up (May be limited by my upload, download is a CPU limitation) on a RBM33G as a client-router.

I'm not 100%, but it may actually be 370Mbps down, but I don't want to advertise that number without being sure. I replaced it with a RPi4 as a router-on-a-stick WG gateway. The RPi4 has no problem keeping up with my 500/100 fiber connection.

The RBM33G has a pretty weak MTK7621a dual core 800mhz MIPS cpu.

I should setup two of them and run some proper benchmarks at some point.

Re: OpenWrt 22.03

#114

Post by zantana »

highmastdon wrote: post #31

How does this compare to DD-WRT? I’m using that on my accesspoint and so far I have no problems.

I've been using FreshTomato, which I got pre-installed from a seller on ebay, but IIRC DD-WRT has better support for some Broadcom chips because they allow binary blobs which have better hardware support.

Re: OpenWrt 22.03

#116

Post by Snuupy »

amelius wrote: post #100
pedrocr wrote: post #89

OpenWRT is amazing. It's a great distribution that's incredibly well tailored for routers/APs. Not having to deal with whatever the manufacturer slapped together is amazing. For those that have never tried it it's also worth it just to understand more deeply how amazing these cheap devices are. For ~100$/€ you get a single board computer, plus a managed switch, plus 1 or 2 wifi cards. The managed switch in particular…

I love the idea. I see two problems though. The biggest one is that hardware vendors are starting to add cryptographic signatures to their firmware upgrade process. And another problem is that the hardware often has very limited memory, which makes it impractical for many things.

> vendors are starting to add cryptographic signatures to their firmware

serial console/TFTP/buy from vendors that don't restrict your choice (ubiquiti, netgear, belkin/linksys, some chinavendors come to mind)

RAM is usually fine, just get a decently specced router.

Re: OpenWrt 22.03

#117

Post by Snuupy »

bubblethink wrote: post #36
Snuupy wrote: post #32

Earlier quoted context omitted.

Belkin RT3200, goes on sale at Walmart for $60.

Do you have this device, and if so, what's the peak bandwidth you are able to achieve over wifi?

No, I have an ISP supplied router at the moment while I wait for 6e support on openwrt.

You should see similar numbers for the RT3200.

On a 80 Mhz channel with a wifi6 client device, I hit 700/500 (PHY rate is 1200/800).

I frequently see reports of 930mbps (maxed line speeds) with 160 MHz on openwrt forums, assuming you can set up an AP with 160 Mhz.

160 MHz channels are not allowed on the 5 GHz band in Canada, so I currently do not run 160 Mhz.

6 GHz will have plenty of 160 MHz channels, so as you can see that's why I'm waiting for that.

Re: OpenWrt 22.03

#118

Post by c0l0 »

oynqr wrote: post #107
c0l0 wrote: post #83

Earlier quoted context omitted.

There is a VERY elegant solution to this problem, called "attended sysupgrade", that is not as widely known as it should be. It's probably best explained in a video on what may be the best youtube channel on OpenWrt-related things: https://www.youtube.com/watch?v=FFTPA6GkJjg Or, if you prefer textual information: https://openwrt.org/docs/guide-user/installation/attended.sy... (OpenWrt's infra is kinda slow today for…

Wow, I've been running OpenWRT for years and never heard of this, thanks. Although I suppose it does nothing to resolve config upgrade issues, right?

It does exactly as much as using `sysupgrade` with any other suitable image will or would do :) So yes, limitations apply - but for most users with a bunch of custom installed packages, this is enough of a game changer regardless.

Re: OpenWrt 22.03

#120

Post by Snuupy »

ur-whale wrote: post #70
ncmncm wrote: post #66

Earlier quoted context omitted.

Works! Works well! I have it set up so everything using the routers sees WG nodes as ordinary endpoints.

Neat, thanks, will give it a try today then.

https://gist.github.com/Snuupy/543baed996a01506499bcc59398da... you might find this helpful (some menu buttons might be outdated since the last time I did this was on 19.07.3)
Post reply on HN