Menu
What's new
By:
Filters Better Search

Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    If you link against openssl 1.1.1, you'll get tls 1.3 features and see this flag on servstats page. 1.1.x may not be available on Raspian yet. You could try to pull it yourself. Do you happen to have written/seen a config guide and perhaps could share with raspiban users (assume u run pinhole...
  2. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    The first two errors (failed lo load..) seem to tell you've wiped out your Diversion installation? Do you see the files in the dir? Try "ls -l /opt/var/cache/pixelserv/ca*" The last error (abort..) seems to tell your "S80pixelserv-tls" is overwritten by your Entware update actions. Perhaps...
  3. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    OpenSSL is upgraded to 1.1.x in Entware/Openwrt. I think this is going to upset some of the "automation installers" commonly used on this forum unable to handle unforeseen situations..
  4. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Try manual start (and in future if you see similar errors..) /opt/etc/init.d/S80pixelserv-tls restart
  5. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Run the below one-liner should fix any errors. _binfavor=static sh -c "$(wget -qO - https://kazoo.ga/pixelserv-tls/install-beta.sh)" This (as mentioned on https://kazoo.ga/pixelserv-tls/) will install the latest statically linked pixelserv-tls binary. There is on-going benefit to run the...
  6. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Looks like things in this thread work out very well! Enjoy the refresh from OpenSSL, everyone!
  7. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Very interesting and all these seem happen in the past few years..
  8. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Previously mentioned in this thread, a gentleman has created a Docker image for pixelserv-tls. I see it has accumulated over 10K+ downloads. I'm a bit shocked. Belated realisation of Docker's popularity these days.
  9. K

    OpenSSL Bench for fun and performance - client and server

    Turned a few knobs, fixed some codes mistakenly merged by UBNT or not merged by UBNT. That's about it. So basically UBNT was doing a lousy job. As an aside, after two years in baking, UBNT released a buggy 2.0.0 FW (at least for the ERX/MediaTek platform though it comes with a newer kernel than...
    • kvic
    • Post #7
    • Forum: VPN
  10. K

    Replacing DNSMasq DNS with Unbound

    I tried DNS over TLS in Unbound 1.9.0. Really brief (<10mins). It seems speed-up feature such as session resumption still not available. On a test domain, DNS over TLS to Cloudflare takes 400ms. Plain DNS takes 60ms. Not worth the penalty to me. OpenSSL 1.1.1a won't magically solve this problem.
  11. K

    Replacing DNSMasq DNS with Unbound

    For those interested in knowing EDNS Client-Subnet, I've done a write up recently, mainly notes for myself but general purpose enough to read (click the previous link). Briefly touched upon why you want your own DNS resolvers too. And in case, you want to enable EDNS Client-Subnet in Unbound...
  12. K

    OpenSSL Bench for fun and performance - client and server

    I said so two years ago: GCM vs CBC Also OpenVPN should be retired, given the choice of much faster IPsec, very light weight and flexible Shadowsocks, and now fast and flexible Wireguard. Thanks for sharing your numbers.
    • kvic
    • Post #5
    • Forum: VPN
  13. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Btw, that means for most ppl wanting to be hassle free should have fls-eu.amazon.co.uk and American equivalent domain whitelisted. But I recall you like experimenting things new.. So perhaps you could spend sometime figuring out or simply whitelist it.
  14. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Many months ago when some people reported they could not browse in Amazon app, I tried to reproduce the issue. I tried in apps and browsers. I didn't see browsers on PC hit this domain: fls-eu.amazon.co.uk but Android (and perhaps iOS apps) apps do. Perhaps you could try to figure out where on...
  15. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Common slu errors are categorised under uce, uca & etc. Uncommon ones will be logged on LEVEL 2 as you've found out above. Reason(267) very likely means "wrong ssl version number". That I suspect it's caused by non SSL/TLS clients running on some of your LAN devices that are attempting...
  16. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    Likely SSL_R_WRONG_VERSION_NUMBER caused by non TLS clients knocking on port 443.
  17. K

    Entware Entware: which USB stick performs well?

    Thank you @dugaduga @faria @EmeraldDeer @root. I've included your results in iozone-db. So newer SanDisk Cruzer Fit (USB3 vs my USB2) comes with faster chips and shows much better performance. The two Samsung Fit Plus are interesting. 64GB vs 128GB. The 64GB version shows more reasonable and...
  18. K

    pixelserv pixelserv - A Better One-pixel Webserver for Adblock

    A gent has created a Docker container for pixelserv-tls. Details are here: https://hub.docker.com/r/imthai/pixelserv-tls I've also added the reference to README on Github.
  19. K

    Configuring syslog-ng with merlin firmware

    Sounds like the destructive "sed" operation is for poor souls running the vanilla syslog. So for you running syslog-ng, commenting that out without performance degradation. No? A better way than to have a band-aid over another band-aid. I've never run these scripts. So you'll have to...
  20. K

    Edgerouter 12 vs Mikrotik RB4011

    Hardware designs are pretty standard on both models. So a decisive factor would be firmware features, support and the talent behind it. Edgemax firmware at the moment is a little mess (if not a huge one..). UBNT had gone insane to release an alpha grade FW for ER-X as 2.0.0 in the past week or...
Top