Voxel Custom firmware build for Orbi RBK50/RBK53 (RBR50, RBS50) v. 9.2.5.2.22SF-HW

[Voxel]

Continuation of

https://www.snbforums.com/threads/custom-firmware-build-for-orbi-rbk50-v-2-5-0-42sf-hw.60308/
. . .
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-20sf-hw.78324/
https://www.snbforums.com/threads/c...50-rbk53-rbr50-rbs50-v-9-2-5-2-21sf-hw.78795/

New version of my custom firmware build: 9.2.5.2.22SF-HW.

Changes (vs 9.2.5.2.21SF-HW):

1. Toolchain: GCC is upgraded 9.4.0->9.5.0.
2. Toolchain: Go is upgraded 1.18.1->1.18.3.
3. OpenSSL v. 1.1.1 package is upgraded 1.1.1o->1.1.1p.
4. OpenVPN is upgraded 2.5.6->2.5.7.
5. lighttpd package is upgraded 1.4.64->1.4.65.
6. unbound package (used in stubby) is upgraded 1.15.0->1.16.0.
7. curl package is upgraded 7.83.0->7.83.1.
8. libnl-tiny package is upgraded 2021-11-21->2022-05-17.
9. elfutils package is upgraded 0.186->0.187.
10. bind package is upgraded 9.18.2->9.18.3.
11. ethtool package is upgraded 5.17->5.18.
12. sysstat package is upgraded 12.5.6->12.6.0.
13. logrotate package is upgraded 3.19.0->3.20.1.
14. libiconv-full package is upgraded 1.16->1.17.
15. iw package is upgraded 5.9->5.16.
16. iptables: add 'tee' support (iptables-mod-tee/kmod-ipt-tee packages).
17. Slight boost adding '-ftree-vectorize' and '-fvect-cost-model=unlimited' flags to compilation options (speed up).
18. '-O3' optimization for part of kernel components (kernel level).

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[agneev]

Not directly related, but is it possible to get older versions of entware packages? Upgraded to netdata 1.33.1 today and it quite a few changes that I would like to revert (v1.30.1). I see the direct URL for the older package is no longer available.

 

[Voxel]

Not directly related, but is it possible to get older versions of entware packages? Upgraded to netdata 1.33.1 today and it quite a few changes that I would like to revert (v1.30.1). I see the direct URL for the older package is no longer available.

As a rule I keep previous versions as well. Just use BROWSE to find previous versions:

Packages list

Voxel.

 

[Julian Brooks]

Whilst everyone here who is using your firmware am certain greatly appreciates your diligence and regular updates, as a firmware layman it would be good to see what the benefits might be to us users. Version upgrades to particular packages is great, but what does this all mean in reality. I wonder if you might consider on future updates adding further information in the changelog. Many thanks - a very happy user.

 

[HELLO_wORLD]

Version upgrades to particular packages is great, but what does this all mean in reality.

In reality, it means any security leaks or vulnerabilities patched in the upgraded packages are fixed, so first reason is security.
Other reasons are better performances, bug fixes, new features…

 

[TeamZero]

Thanks Voxel !

 

[Voxel]

Version upgrades to particular packages is great, but what does this all mean in reality.

As pointed out by @HELLO_wORLD mostly version changes mean fixing bugs, fixing security issues, improving/optimizing performance and sometimes new functionality. I usually indicate that a critical vulnerability (CVE) is fixed.

Users can google and find what is fixed in this version (changelog). So, for example:

3. OpenSSL v. 1.1.1 package is upgraded 1.1.1o->1.1.1p.

https://www.openssl.org/news/openssl-1.1.1-notes.html

5. lighttpd package is upgraded 1.4.64->1.4.65.

https://www.lighttpd.net/download/

7. curl package is upgraded 7.83.0->7.83.1.

https://curl.se/changes.html

1. Toolchain: GCC is upgraded 9.4.0->9.5.0.

https://gcc.gnu.org/bugzilla/buglist.cgi?bug_status=RESOLVED&resolution=FIXED&target_milestone=9.5


It is problematic for me to put all these long changelogs of packages to my changelog. Sorry. Most people don't need it. It's enough to know that things have gotten better.

Voxel.

 

[HELLO_wORLD]

It is problematic for me to put all these long changelogs of packages to my changelog. Sorry. Most people don't need it. It's enough to know that things have gotten better.

Voxel.

As you pointed out, the change logs for the packages are public and documented, so anyone looking for the details can dig themselves (google) and find what changed and why.
Moreover, all these packages are open source, so one can dig very deep and see in details all the changes.

 

[mazdamiata210]

If I run my commands in this order will it disable them all? Or do I have to do one at a time and commit/reboot after each set command?

nvram set noarmor=1
nvram set nocircle=1
nvram set nocloud=1
nvram set noaws=1
nvram set samba_disable=1
nvram commmit
reboot

 

[HELLO_wORLD]

If I run my commands in this order will it disable them all? Or do I have to do one at a time and commit/reboot after each set command?

nvram set noarmor=1
nvram set nocircle=1
nvram set nocloud=1
nvram set noaws=1
nvram set samba_disable=1
nvram commit
reboot

That should do it no need to do it multiple times. Just try and check.

 

[yiga]

@Voxel et al, what would you recommend for a watchdog utility i.e. pinging an IP and reboot (or restart wan interface) if fails. Openwrt has a watchcat utility and I rather not write a custom script for it. Thx !

Btw, my use case: pinging external e.g. 1.1.1.1 but also devices with a reserved IP connected to satellites as i noticed when unreachable, restarting the satellite doesn't help, I need to restart the router (which will reboot the satellites)

 

[HELLO_wORLD]

@Voxel et al, what would you recommend for a watchdog utility i.e. pinging an IP and reboot (or restart wan interface) if fails. Openwrt has a watchcat utility and I rather not write a custom script for it. Thx !

Btw, my use case: pinging external e.g. 1.1.1.1 but also devices with a reserved IP connected to satellites as i noticed when unreachable, restarting the satellite doesn't help, I need to restart the router (which will reboot the satellites)

A custom script would be the simplest though in your case…
A simple cron task that tests a ping result and do a reboot if needed.
The most basic would be:

* * * * * /bin/ping -c 1 -q 1.1.1.1 >/dev/null 2>&1 || /sbin/reboot

To add a cronjob properly, you would need either @kamoj add-on or Entware

Note: with this script (and concept), if you lose internet connexion, the router would keep restarting and restarting… So it is more like a base for you to develop onto.

 

[digital10]

I have problem with Orbi satellite disconnections. One weird solution was that I have the satellite too close to the router. One would think a closer distance will make a stronger connection. I have since dropped 2.4mhz power to 50%. I have yet to test it to see if it works.

I was wondering if Voxel firmware solves this problem?!

 

[yiga]

A custom script would be the simplest though in your case…
A simple cron task that tests a ping result and do a reboot if needed.
The most basic would be:

* * * * * /bin/ping -c 1 -q 1.1.1.1 >/dev/null 2>&1 || /sbin/reboot

To add a cronjob properly, you would need either @kamoj add-on or Entware

Note: with this script (and concept), if you lose internet connexion, the router would keep restarting and restarting… So it is more like a base for you to develop onto.

Thanks. I ended up writing a script indeed, looping through a set of LAN and one WAN IPs - if any down, reboot the whole shebang.

 

[yiga]

Puzzling: I cannot access from my laptop the web interface of a satellite or any device connected to it... BUT... I can curl them just fine from within the router.
In other words:
1. from my browser, http://192.168.1.4 (or ...11 which is an ATA connected to it): no response
2. but a SSH into the router and curl 192.168.1.4 renders an html response

How come ? Any service I need to restart on the router or the satellite (from the router, if feasible) ???