Custom firmware build for R7800 v. 1.0.2.66SF

[Voxel]

Continuation of
. . .
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-64sf.55198/
https://www.snbforums.com/threads/custom-firmware-build-for-r7800-v-1-0-2-65sf.55917/

New version of my custom firmware build: 1.0.2.66SF.

Changes (vs 1.0.2.65SF):

1. wget package is upgraded 1.20.1->1.20.3.
2. sqlite package is upgraded 3260000->3270200.
3. getdns package (used in stubby) is upgraded 1.5.0->1.5.2.
4. stubby package is upgraded 0.2.4->0.2.6.
5. DNSCrypt Proxy v.2 is upgraded 2.0.22->2.0.23.
6. usb-modeswitch package is upgraded 2014-08-26->2017-12-19.
7. usb-modeswitch-data is upgraded 20150115->20170806.
8. proftpd: typo bug is fixed.
9. OpenVPN client: lacking "default turbo mode" issue is fixed (reported by kamoj).
10. congestion control algorithm is changed to westwood+.
11. rmem_max/wmem_max/defaults values are decreased to avoid bufferbloat issues (note: use QoS and limit your max speed for good results in dslreports site).
12. DNSCryps Proxy V1 and its dependence libsodium are removed.
13. CDC/RNDIS USB LTE modem (HiLink) support scheme is significantly changed.
14. OpenSSH client is available for downloading as an addon (useful for Reverse SSH Tunneling, much faster than dropbear).
installation: "/bin/opkg install openssh-client_8.0p1-1_ipq806x.ipk"

The link is:

https://www.voxel-firmware.com (thanks to vladlenas for his help with hosting).

Voxel.

 

[Voxel]

Downloading:

OK, the first is California (US): Greetings California! You are winner.
The second is Texas (US): Greetings cowboys!

Downloaded prior of my announcement (2-3 mins).

P.S. Just for a fun.

P.P.S.

L&LD I know: you are living in this forum... Few minutes for a first reaction... Winner!

Voxel.

 

[kokishin]

Downloading:

OK, the first is California (US): Greetings California!
The second is Texas (US): Greetings cowboys!

Downloaded prior of my announcement (2-3 mins).

P.S. Just for a fun.

Voxel.

Hi Voxel. I think I'm the CA guy. I downloaded 66SF ~15 minutes ago and installed it.

Thanks for your constant efforts to improve the 7800 firmware!

Go Warriors! Go Sharks!

 

[Voxel]

Hi Voxel. I think I'm the CA guy.

So, congratulations winner! Waiting for your dlsreports scores.

Voxel.

 

[Voxel]

P.S.

But I am disappearing for a time.

Voxel.

 

[kokishin]

So, congratulations winner! Waiting for your dlsreports scores.

Voxel.

DSLReports score on 65SF just prior to installing 66SF:

DSLReports score after installing 66SF:

 

[Gar]

Any R9000 updates before you go?

 

[Voxel]

Any R9000 updates before you go?

R9000: yes, planned. Similar updates. Should be ready in 1-2 days. Testing.

Voxel.

 

[eevanskiteboards]

Hello. I updated to the newest fw last night (thanks for that) and I am having an issue getting my VPN (Nord) to function as it was before for months on the previous fw.

Used previous steps as before with no luck. Loaded it on usb, rebooted etc. I even verified the appropriate auth.text and other files were in place in the etc folder. I gave the command openvpn-cleint start (forget the exact command currently)and it keeps telling me that it fails. I viewed the log file and couldn't understand it. When I go to the debug page it says openvpn started but no config file found!

Theory: I updated the fw without restoring to factory defaults like I used to do(got lazy). Maybe a glitch or bad download? Or I just completely overlooked a basic command?

I am currently traveling until Tuesday, so I will not be able to test anything until I'm home

Any suggestions will be welcomed. Thanks

 

[bartj12]

Running solid for 36 hours on 66SF, thanks again!

 

[Voxel]

Hello. I updated to the newest fw last night (thanks for that) and I am having an issue getting my VPN (Nord) to function as it was before for months on the previous fw.

Used previous steps as before with no luck. Loaded it on usb, rebooted etc. I even verified the appropriate auth.text and other files were in place in the etc folder. I gave the command openvpn-cleint start (forget the exact command currently)and it keeps telling me that it fails. I viewed the log file and couldn't understand it. When I go to the debug page it says openvpn started but config file found!

Theory: I updated the fw without restoring to factory defaults like I used to do(got lazy). Maybe a glitch or bad download? Or I just completely overlooked a basic command?

I am currently traveling until Tuesday, so I will not be able to test anything until I'm home

Any suggestions will be welcomed. Thanks

Please put your log file and OVPN after you come back. In general no changes in OpenVPN client scheme vs 65SF. This:

9. OpenVPN client: lacking "default turbo mode" issue is fixed (reported by kamoj).

means changes in /etc/init.d/powerctl init file (turbo mode vs ordinary power saving). I do use OpenVPN client and it works as before.


Voxel.

 

[kokishin]

 

[Jack C Wallace]

Firstly, thanks for the amazing firmware - most stable of all that I've tried without having to sacrifice WiFi speeds.

However, I've been having problems downloading Manjaro torrents (or any really) recently with any desktop-based client (currently qBitorrent). My connection will catastrophically fall of the edge of the cliff for a period of 1-3 minutes, then recovery, and cycle over and over again. I assume this is due to mass connection opening, however, my settings are pretty tame, with 100 max connections per torrent and 200 global (I download rarely, so more than one concurrent download is rare), limited upload to 70% of max upload speed, etc. It's not a massive problem (as I said previously, I download rarely via torrent), but it's annoying enough that I can't do anything else if I'm downloading, and the time it takes extends significantly, as the speeds go from 45 Mb/s down to 45 Kb/s (and back again).

I've not had this particular problem on other firmware, so not sure if it's related to any particular change or setting that I'm overlooking, but figured I'd report it just in-case.

Various bits'n'bobs:
FW Version : V1.0.2.65SF
Series number : 4H656C5X004E0
Wireless Region : Europe
2.4G Data rate : Up to 800 Mbps
2.4G Channel : Auto ( 13(p) + 9(s) )
2.4G Coexist : 1
5G Data rate : Up to 1733 Mbps
5G Channel : 36(p)+40+44+48
WAN speed : 1000M/Full
QoS: Disabled
WMM: Enabled on 2.4 Ghz & 5 Ghz
Port Scan and DoS protection: Disabled
Implicit Beam Forming: Enabled
MU-MIMO: Disabled
HT160: Disabled
UPnP: Enabled (30/4)

Footnote: Apologies in advance if this is something I overlooked that is stupidly simple - I've looked over and tried everything I can think of!

 

[maddoc]

Hi,
When starting openvpn service I'm getting the following iptable errors, is it normal?

Generating Rules...
Done!
Starting Firewall...
Done!
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: No chain/target/match by that name.
iptables: Bad rule (does a matching rule exist in that chain?).
iptables: No chain/target/match by that name.
iptables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.
ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: No chain/target/match by that name.
ip6tables: Bad rule (does a matching rule exist in that chain?).
ip6tables: No chain/target/match by that name.
ip6tables: No chain/target/match by that name.

 

[EasternlightNZ]

Thank you too for your continued efforts, from a KIWI in Osaka. It is definitely demonstrating an increase in download speed, dont mind the upload thats almost the maximum on the plan here.

Just instlled a Intel(R) Wi-Fi 6 AX200 160MHz card in a pcie adptor and its running as fast aas the cabled connection, it also is maxing our rated connection speed so it isnt losing out any. I guess the AX200 has potential to be faster but I dont have a way of testing this yet.

 

[Voxel]

Thank you too for your continued efforts, from a KIWI in Osaka. It is definitely demonstrating an increase in download speed, dont mind the upload thats almost the maximum on the plan here.

ありがとう ございます

Voxel.

 

[Voxel]

FW Version : V1.0.2.65SF

65SF? Or 66SF?

Voxel.

 

[Voxel]

Hi,
When starting openvpn service I'm getting the following iptable errors, is it normal?

It is the output of NG's firewall, net-wall. I have to restart it from openvpn init script. No source codes of net-wall so I cannot correct this. But it is just warnings, so just ignore this.

Voxel.

 

[Jack C Wallace]

65SF? Or 66SF?

Voxel.

Either. Sorry, I flashed back to 65SF to ascertain if I could fix it (I could not).

 

[eevanskiteboards]

can anybody decode this to to tell me why i can't start my vpn? thanks


root@R7800:~$ cat /var/log/openvpn-client.log
Tue May 21 15:28:57 2019 OpenVPN 2.4.7 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZ O] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Tue May 21 15:28:57 2019 library versions: OpenSSL 1.0.2r 26 Feb 2019, LZO 2.10
Tue May 21 15:28:57 2019 WARNING: --ping should normally be used with --ping-res tart or --ping-exit
Tue May 21 15:28:57 2019 NOTE: the current --script-security setting may allow t his configuration to call user-defined scripts
Tue May 21 15:28:57 2019 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue May 21 15:28:57 2019 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue May 21 15:28:57 2019 nice -20 succeeded
Tue May 21 15:28:57 2019 TCP/UDP: Preserving recently used remote address: [AF_I NET]185.245.86.43:1194
Tue May 21 15:28:57 2019 Socket Buffers: R=[163840->327680] S=[163840->327680]
Tue May 21 15:28:57 2019 UDP link local: (not bound)
Tue May 21 15:28:57 2019 UDP link remote: [AF_INET]185.245.86.43:1194
Error: OpenVPN client start failed.
Tue May 21 15:29:12 2019 event_wait : Interrupted system call (code=4)
Tue May 21 15:29:12 2019 SIGTERM received, sending exit notification to peer
Tue May 21 15:29:16 2019 SIGTERM[soft,exit-with-notification] received, process

next attempt

Tue May 21 15:29:12 2019 event_wait : Interrupted system call (code=4)
Tue May 21 15:29:12 2019 SIGTERM received, sending exit notification to peer
Tue May 21 15:29:16 2019 SIGTERM[soft,exit-with-notification] received, process exiting
Tue May 21 15:34:19 2019 OpenVPN 2.4.7 arm-openwrt-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Tue May 21 15:34:19 2019 library versions: OpenSSL 1.0.2r 26 Feb 2019, LZO 2.10
Tue May 21 15:34:19 2019 WARNING: --ping should normally be used with --ping-restart or --ping-exit
Tue May 21 15:34:19 2019 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Tue May 21 15:34:19 2019 Outgoing Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue May 21 15:34:19 2019 Incoming Control Channel Authentication: Using 512 bit message hash 'SHA512' for HMAC authentication
Tue May 21 15:34:19 2019 nice -20 succeeded
Tue May 21 15:34:19 2019 TCP/UDP: Preserving recently used remote address: [AF_INET]185.245.86.43:1194
Tue May 21 15:34:19 2019 Socket Buffers: R=[212992->425984] S=[212992->425984]
Tue May 21 15:34:19 2019 UDP link local: (not bound)
Tue May 21 15:34:19 2019 UDP link remote: [AF_INET]185.245.86.43:1194
Error: OpenVPN client start failed.