CakeQOS CakeQOS-Merlin

[ugandy]

possible issue with Cake and/or Yazfi.
after a reboot, yazfi startup script will restart the firewall about 3 times. not sure if yazfi issue or if it started after cake-qos went into nat-start. anyone else seeing this if you have yazfi installed?

 

[ugandy]

If that is true, how would I disable Runner? I would think if it was needed, FlexQoS would disable Runner on install.

"runner disable" should do it.
i think the proper setup is done when you enable adaptive QoS prior to installing Flex

 

[L&LD]

YazFi will restart as needed while other services are brought online.

 

[ugandy]

YazFi will restart as needed while other services are brought online.

good to know.
it's annoying though, after i yell to the family that the wan is back up for good, they lose connectivity for a couple seconds, 3 times because of YazFi. they come at me with pitchforks!

 

[ttgapers]

If we can have a list to choose from for the 'Extra Options' (I don't know how else we would know about them, except by reading the thread otherwise), it would be the icing on the cake!

This seems ready for inclusion in amtm any moment now.

Point taken and to be added, as we tended to use the link back to the Cake manual for this.

 

[Smokey613]

"runner disable" should do it.
i think the proper setup is done when you enable adaptive QoS prior to installing Flex

I did enable adaptive qos with before installing flex.

 

[ttgapers]

I am still watching, trying to decide whether this will be of any practical benefit and have a few questions

1. All the speed tests mentioned (dslreports.com, Fast.com, nperf.com, etc) are designed to be run when the system is quiet, but presumably the purpose of Cake is to manage traffic when it is busy - how can I see if it has a real-world effect?

I have been running my tests ANYTIME with Cake, but also start a steady ping -t to google.com or some other host prior. The Bufferbloat site states that clearly. That I believe is the beauty and simplicity of it.

 

[ugandy]

I did enable adaptive qos with before installing flex.

View attachment 24301 View attachment 24302

then it's above my pay grade
the gui might be out of sync?

 

[ttgapers]

from my test/understanding so far:
cake: both must be off
flex: runner must be off, FC on

@Adamm seems we have an answer to https://github.com/ttgapers/cakeqos-merlin/issues/40

Will update to suit if you are ok with it!

 

[Jack Yaz]

good to know.
it's annoying though, after i yell to the family that the wan is back up for good, they lose connectivity for a couple seconds, 3 times because of YazFi. they come at me with pitchforks!

yazfi doesnt restart the firewall. it hooks into the end of firewall-start

if something is restarting your firewall that often, it will be shown in the logs

 

[ugandy]

yazfi doesnt restart the firewall. it hooks into the end of firewall-start

if something is restarting your firewall that often, it will be shown in the logs

looks like a few of my installed scripts are all taking a go at restarting the firewall

Jun 26 12:51:26 RT-AX88U-8158 rc_service: service 12751:notify_rc restart_dnsmasq
Jun 26 12:51:26 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq)
Jun 26 12:51:26 RT-AX88U-8158 cromo: Started unbound from .
Jun 26 12:51:26 RT-AX88U-8158 custom_config: Appending content of /jffs/configs/dnsmasq.conf.add.
Jun 26 12:51:26 RT-AX88U-8158 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jun 26 12:51:27 RT-AX88U-8158 (dnsmasq.postconf): Updating /etc/dnsmasq.conf for unbound.....
Jun 26 12:51:27 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event-end (args: restart dnsmasq)
Jun 26 12:51:32 RT-AX88U-8158 YazFi: Firewall restarted - sleeping 30s before running YazFi
Jun 26 12:51:32 RT-AX88U-8158 cromo: Started taildns from .
Jun 26 12:52:02 RT-AX88U-8158 YazFi: YazFi v4.1.1 starting up
Jun 26 12:52:05 RT-AX88U-8158 YazFi: wl1.1 (SSID: cromonetPT) - VPN redirection enabled, sending all interface internet traffic over VPN Client 1
Jun 26 12:52:07 RT-AX88U-8158 YazFi: wl1.2 (SSID: cromonetUS) - VPN redirection enabled, sending all interface internet traffic over VPN Client 2
Jun 26 12:52:08 RT-AX88U-8158 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 26 12:52:12 RT-AX88U-8158 kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
Jun 26 12:52:19 RT-AX88U-8158 networkmap: Error unlocking 6: 9 Bad file descriptor
Jun 26 12:52:19 RT-AX88U-8158 networkmap: Error unlocking 0: 9 Bad file descriptor
Jun 26 12:53:29 RT-AX88U-8158 rc_service: amas_lib 1389:notify_rc restart_firewall
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Jun 26 12:53:29 RT-AX88U-8158 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/nat-start
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jff1:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/2020s/scripts/service-event-end (args: restart firewall)
Jun 26 12:53:34 RT-AX88U-8158 CakeQOS-Merlin: Stopping
Jun 26 12:53:35 RT-AX88U-8158 kernel: Cpuidle Host Clock divider is enabled
Jun 26 12:53:35 RT-AX88U-8158 CakeQOS-Merlin: Starting - settings: 550Mbit | 15Mbit | diffserv4 | docsis ack-filter-aggressive autorate-ingress
Jun 26 12:53:35 RT-AX88U-8158 kernel: Cpuidle Host Clock divider is disabled
Jun 26 12:53:59 RT-AX88U-8158 YazFi: Firewall restarted - sleeping 30s before running YazFi
Jun 26 12:54:29 RT-AX88U-8158 YazFi: YazFi v4.1.1 starting up
Jun 26 12:54:31 RT-AX88U-8158 YazFi: wl1.1 (SSID: cromonetPT) - VPN redirection enabled, sending all interface internet traffic over VPN Client 1
Jun 26 12:54:33 RT-AX88U-8158 YazFi: wl1.2 (SSID: cromonetUS) - VPN redirection enabled, sending all interface internet traffic over VPN Client 2
Jun 26 12:54:35 RT-AX88U-8158 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 26 12:54:45 RT-AX88U-8158 networkmap: Error unlocking 7: 9 Bad file descriptor
Jun 26 12:54:45 RT-AX88U-8158 networkmap: Error unlocking 0: 9 Bad file descriptor
Jun 26 12:54:50 RT-AX88U-8158 YazFi: YazFi v4.1.1 completed successfully

am i imagining or a recent change to yazfi was to force clients to re auth when this happens? maybe that's why i notice it now? i might just be confused

 

[Jack Yaz]

looks like a few of my installed scripts are all taking a go at restarting the firewall

Jun 26 12:51:26 RT-AX88U-8158 rc_service: service 12751:notify_rc restart_dnsmasq
Jun 26 12:51:26 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event (args: restart dnsmasq)
Jun 26 12:51:26 RT-AX88U-8158 cromo: Started unbound from .
Jun 26 12:51:26 RT-AX88U-8158 custom_config: Appending content of /jffs/configs/dnsmasq.conf.add.
Jun 26 12:51:26 RT-AX88U-8158 custom_script: Running /jffs/scripts/dnsmasq.postconf (args: /etc/dnsmasq.conf)
Jun 26 12:51:27 RT-AX88U-8158 (dnsmasq.postconf): Updating /etc/dnsmasq.conf for unbound.....
Jun 26 12:51:27 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event-end (args: restart dnsmasq)
Jun 26 12:51:32 RT-AX88U-8158 YazFi: Firewall restarted - sleeping 30s before running YazFi
Jun 26 12:51:32 RT-AX88U-8158 cromo: Started taildns from .
Jun 26 12:52:02 RT-AX88U-8158 YazFi: YazFi v4.1.1 starting up
Jun 26 12:52:05 RT-AX88U-8158 YazFi: wl1.1 (SSID: cromonetPT) - VPN redirection enabled, sending all interface internet traffic over VPN Client 1
Jun 26 12:52:07 RT-AX88U-8158 YazFi: wl1.2 (SSID: cromonetUS) - VPN redirection enabled, sending all interface internet traffic over VPN Client 2
Jun 26 12:52:08 RT-AX88U-8158 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 26 12:52:12 RT-AX88U-8158 kernel: bcm_i2c: bus 0: Failed to detect SFP: 100 retries exhausted
Jun 26 12:52:19 RT-AX88U-8158 networkmap: Error unlocking 6: 9 Bad file descriptor
Jun 26 12:52:19 RT-AX88U-8158 networkmap: Error unlocking 0: 9 Bad file descriptor
Jun 26 12:53:29 RT-AX88U-8158 rc_service: amas_lib 1389:notify_rc restart_firewall
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/service-event (args: restart firewall)
Jun 26 12:53:29 RT-AX88U-8158 nat: apply nat rules (/tmp/nat_rules_eth0_eth0)
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/nat-start
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jffs/scripts/firewall-start (args: eth0)
Jun 26 12:53:29 RT-AX88U-8158 custom_script: Running /jff1:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/20201:10 PM 6/26/2020s/scripts/service-event-end (args: restart firewall)
Jun 26 12:53:34 RT-AX88U-8158 CakeQOS-Merlin: Stopping
Jun 26 12:53:35 RT-AX88U-8158 kernel: Cpuidle Host Clock divider is enabled
Jun 26 12:53:35 RT-AX88U-8158 CakeQOS-Merlin: Starting - settings: 550Mbit | 15Mbit | diffserv4 | docsis ack-filter-aggressive autorate-ingress
Jun 26 12:53:35 RT-AX88U-8158 kernel: Cpuidle Host Clock divider is disabled
Jun 26 12:53:59 RT-AX88U-8158 YazFi: Firewall restarted - sleeping 30s before running YazFi
Jun 26 12:54:29 RT-AX88U-8158 YazFi: YazFi v4.1.1 starting up
Jun 26 12:54:31 RT-AX88U-8158 YazFi: wl1.1 (SSID: cromonetPT) - VPN redirection enabled, sending all interface internet traffic over VPN Client 1
Jun 26 12:54:33 RT-AX88U-8158 YazFi: wl1.2 (SSID: cromonetUS) - VPN redirection enabled, sending all interface internet traffic over VPN Client 2
Jun 26 12:54:35 RT-AX88U-8158 YazFi: Forcing YazFi Guest WiFi clients to reauthenticate
Jun 26 12:54:45 RT-AX88U-8158 networkmap: Error unlocking 7: 9 Bad file descriptor
Jun 26 12:54:45 RT-AX88U-8158 networkmap: Error unlocking 0: 9 Bad file descriptor
Jun 26 12:54:50 RT-AX88U-8158 YazFi: YazFi v4.1.1 completed successfully

am i imagining or a recent change to yazfi was to force clients to re auth when this happens? maybe that's why i notice it now? i might just be confused

maybe best to start a new thread, but the culprit is

Jun 26 12:53:29 RT-AX88U-8158 rc_service: amas_lib 1389:notify_rc restart_firewall

which is AiMesh related. if you don't use aimesh, the only way i've seen to solve this oddity is a factory reset

 

[skeal]

I think this is ready for AMTM now! Working great on my rig.

 

[raion969]

do you think i will work in the future also with the asus ac-rt5300 ?

 

[Sonyrolfy]

Isnt the RT-AC2900 the same as RT-AC86U? happy to give it a try but no can, do according to the message:
CakeQOS-Merlin - v1.0.0: Cake isn't yet compatible with ASUS RT-AC2900, keep watching our thread!

 

[rgnldo]

Exactly!! I think @ugandy is testing.

I am thinking of CakeQoS as a solution for reducing latency and network congestion. For this reason I am trying to adapt the autorate-ingress solution. Who knows, CakeQoS will be an unbound or dnsmasq plugin

 

[sentinelvdx]

Any possibility if it'll work on AC88U? I'm currently working with FreshJr's but really like this project

Using S.G.S9+ Duos w/ Tapatalk

 

[Treadler]

I think this is ready for AMTM now! Working great on my rig.

Drum roll!!
Yes, yes, yes!

 

[brummygit]

I've been running diffserv4 and it seems to run reasonably well, with anything not marked landing in the besteffort tin which has access to the entire bandwidth anyway. I've not seen any traffic in the bulk tin but I have traffic in the other 3 in both directions.

I have a question - the script uses the default nowash configuration on upload traffic, but wash on the download. Reading the cake manual this is listed as useful on some providers such as Comcast but I'm wondering why this was chosen for the script?

I've manually edited the script and I seem to get more Voice & Video hits with nowash in both directions, although this could be a case of snake oil.

Hopefully as the script moves forward there'll be the ability to change these more advanced settings, but it would be good to hear the reasoning behind the hard coded defaults.

 

[skeal]

You know Cake works great until you enable AI- Protection then it messes up big time. I'm seeing that you must be withdrawn from AI-Protect and the reason could be the traffic classification that comes with. Is anyone else seeing this?