Kamoj Kamoj Addon 5.5 Beta for Netgear R7800/R8900/R9000 with Voxel FW
twindragon6
New Around Here
twindragon6
New Around Here
What is the url?
wget --no-check-certificate https://voxel-firmware.com/Downloads/kamoj-addon_?????-??????-5.5b29_r9000.ipk
jberry
Regular Contributor
jberry
Regular Contributor
Using Router Firmware Version (Voxel) V1.0.4.68HF and Kamoj Add-on V5.5b29 - AdGuard home latest beta - Version: v0.108.0-b.36 is working on R9000
kamoj
Very Senior Member
Thank you very much @jberry for this confirmation!
Thank you too @R. Gerrits for notifying about the AGH bugs.
I must had really bad luck when I was testing AGH - both release and beta versions broken...
At least I've added some better logging for AGH. Will be included in the next addon version.
This is how the community should work, helping each other and appreciating each others with respect.
kamoj
Very Senior Member
Changes in kamoj-addon beta version 2023-06-19 5.5b30
---------------------------------------------------------------
- DNS Privacy/Ad-Blocking: Aegis.
Aegis will now automatically install private lists if found in /aegis directory on USB device.
- Router Information: Don't flag new Aegis version when Aegis download site is not responding.
- Added: Supervision: BOOT SETTINGS: Max number of tries to synchronize time: AdGuard, DNSCrypt, OpenVPN, Wireguard (@jberry)
(Default was 30, and is now changed to 300)
- Added: Supervision: BOOT SETTINGS: Max number of waits for DNS: OpenVPN, Wireguard
(Default was 30, and is now changed to 60)
- OpenVPN, Wireguard: DNS function is now tested after time sync.
- GUI general: Blocked floating point numbers in Integer input fields
- AdGuardHome: Changed way of installing, and using new download site, and new alternative download places.
- AdGuardHome: Added more logs
- AdGuardHome: Default configuration file updated.
- AdGuardHome: Warnings in previous addon release note were correct.
The AdGuardHome versions were buggy, and new releases are available now.
- udhcpc: The log when renewing the lease is corrected
from "[Internet connected] IP address" to "[Internet connected] IP Renewed"
- DNSCrypt: Changed start order from 70 to 98 as per Voxel releases.
- Minor corrections
---------------------------------------------------------------
- DNS Privacy/Ad-Blocking: Aegis.
Aegis will now automatically install private lists if found in /aegis directory on USB device.
- Router Information: Don't flag new Aegis version when Aegis download site is not responding.
- Added: Supervision: BOOT SETTINGS: Max number of tries to synchronize time: AdGuard, DNSCrypt, OpenVPN, Wireguard (@jberry)
(Default was 30, and is now changed to 300)
- Added: Supervision: BOOT SETTINGS: Max number of waits for DNS: OpenVPN, Wireguard
(Default was 30, and is now changed to 60)
- OpenVPN, Wireguard: DNS function is now tested after time sync.
- GUI general: Blocked floating point numbers in Integer input fields
- AdGuardHome: Changed way of installing, and using new download site, and new alternative download places.
- AdGuardHome: Added more logs
- AdGuardHome: Default configuration file updated.
- AdGuardHome: Warnings in previous addon release note were correct.
The AdGuardHome versions were buggy, and new releases are available now.
- udhcpc: The log when renewing the lease is corrected
from "[Internet connected] IP address" to "[Internet connected] IP Renewed"
- DNSCrypt: Changed start order from 70 to 98 as per Voxel releases.
- Minor corrections
jberry
Regular Contributor
I would like to bring up a post from August 2022. Kamoj was able to fix this, in the latest beta, 5.5b30, by increasing the AdGuard Home default number of tires to synchronize time from 30 to 300, and also me setting the Boot Settings: Max wait time for Internet: Addon start/Router boot and Max wait time for Internet: AdGuard Home to a higher amount fixed this issue. Every time I had a power outage, and both my ISP modem and R9000 router would boot up, sometimes it takes my ISP modem (VDSL) time to train and get a signal (3 to 5 minutes), and for my R9000 to "dial in" PPPoE, so 300 tries for time synchronization time really fixed this, it gave the R9000 time to dial in PPPoE, while waiting for the ISP modem to train which takes 3 to 5 minutes, once I had ISP internet, wireguard client would connect, then AdGuard Home would synchronize time and start
resulting in Adguard home not timing out, and actually resolving DNS inquires. Thank you @kamoj !!Now using Router Firmware Version (Voxel) V1.0.4.68HF and Kamoj Add-on V5.5b30 - installed over older b29, working fine.
Last edited:
twindragon6
New Around Here
There is an issue with the Dnsmasq configuration. The lines below keep getting appended to my config for some reason.
no-resolv
server=127.0.0.1#64153
proxy-dnssec
The line proxy-dnssec is the issue as it disables caching. It also prevents Dnscrypt 2 Ad-Blocking from loading.
--proxy-dnssec Copy the DNSSEC Authenticated Data bit from upstream servers to downstream clients. This is an alternative to having dnsmasq validate DNSSEC, but it depends on the security of the network between dnsmasq and the upstream servers, and the trustworthiness of the upstream servers. Note that caching the Authenticated Data bit correctly in all cases is not technically possible. If the AD bit is to be relied uponwhen using this option, then the cache should be disabled using --cache-size=0. In most cases, enabling DNSSEC validationwithin dnsmasq is a better option. See --dnssec for details.
From:
I use Dnsmasq specifically for caching.
Notes:
dnssec (Not Supported In This Build)
dnssec-check-unsigned (Not Supported In This Build)
proxy-dnssec (when using this option, then the cache should be disabled using --cache-size=0 so caching no longer works!)
A good solution might be to include Dnsmasq Full for those of us not running Entware.
openwrt.org
no-resolv
server=127.0.0.1#64153
proxy-dnssec
The line proxy-dnssec is the issue as it disables caching. It also prevents Dnscrypt 2 Ad-Blocking from loading.
--proxy-dnssec Copy the DNSSEC Authenticated Data bit from upstream servers to downstream clients. This is an alternative to having dnsmasq validate DNSSEC, but it depends on the security of the network between dnsmasq and the upstream servers, and the trustworthiness of the upstream servers. Note that caching the Authenticated Data bit correctly in all cases is not technically possible. If the AD bit is to be relied uponwhen using this option, then the cache should be disabled using --cache-size=0. In most cases, enabling DNSSEC validationwithin dnsmasq is a better option. See --dnssec for details.
From:
I use Dnsmasq specifically for caching.
Notes:
dnssec (Not Supported In This Build)
dnssec-check-unsigned (Not Supported In This Build)
proxy-dnssec (when using this option, then the cache should be disabled using --cache-size=0 so caching no longer works!)
A good solution might be to include Dnsmasq Full for those of us not running Entware.
[OpenWrt Wiki] package: dnsmasq-full
Last edited:
kamoj
Very Senior Member
Changes in kamoj-addon beta version 2023-07-02 5.5b31
---------------------------------------------------------------
- Router Information: Added (sometimes) missing timestamp for "Addon time valid:".
- System Information: Ookla Speed Test: Added button "Start - bypassing VPN"
to run the test bypassing VPN (@jberry)
- Minor changes
---------------------------------------------------------------
- Router Information: Added (sometimes) missing timestamp for "Addon time valid:".
- System Information: Ookla Speed Test: Added button "Start - bypassing VPN"
to run the test bypassing VPN (@jberry)
- Minor changes
This post turned into way longer than planned. So coming back to top to summarize before the excessive comments
SUMMARY: Kamoj addon 5.5b31 is MAGIC. Been almost full day and rock solid. Came from b27 with zero issues and gained performance. By far the smoothest, fastest and least difficult install of any version yet.
Kamoj... Below are more details and my sincere thank you and appreciation for the work you provide.
---
Every time I am ready to get a new Router... new Kamoj add-on version is so good it ruins everything
Installed 5.5b31 on R9000 and VERY NOTICIBLE improvement in UI responsiveness and overall network performance. In fact I installed 5.5b31 on R7800 that is hard wired as AP too and same UI improvement.
For the primary router (R9000)... ping times are lower... usually 25-26... now 23-24 (over course of 1 day so far). Pages listing attached devices load so much faster. Now able to run Aegis & Ad-Guard without router RAM use climbing up near 100% and needing reboot. (Had ditched Aegis for past 3-6 months... glad to have it back).
Kamoj... THANK YOU! I had stayed on b27 after trying one of the other updates then reading about Ad-Guard versions. I use Ad-Guard as DHCP server and didn't have time to work through potential issues. Yesterday saw b31 and looked like enough changes to give it a try and it is best version yet and really killed all thoughts of swapping out router.
FYI... I am not running typical setup... and fully aware of issues I have of my own doing but without the add-on I could not attempt let alone manage effectively my home network setup off 1 Router (R9000) and 1 AP (R7800). I have over 100 concurrently connected devices -- WAY ABOVE anything Netgear suggests should be possible. The majority of the devices are Amazon sketchy Tuya based IoT (Smart Home) devices. Though I do also have ~10 phones/tables, 15 laptops/computers, and ~20 VMs along with the 77 smart home devices (lights, air sensors, speakers... etc). On top of that I have terrible internet (AT&T U-Verse 50mbps - bonded 25x2 ADSL) which has high latency (~24ms).
I have all devices staying connected without any issues. Coverage for both 2.4 & 5 seems stronger than before but too early to know if that is persistent or just part of the normal flux given congestion in area... but voice commands for Google Home are faster, sustained download speeds are faster, normal SMB access on local network to files is faster, and amount of times devices not responding due to sheer number of devices on same subnet sharing mainly 2.4 GHz is much lower across literally everything.
I did not do anything special... and probablly was more risky than I could have been. Did not uninstall old add-on -- just backed up config to USB before I installed Voxel update and it killed the add-on after reboot.
Then ran uninstall (via Telnet) and it showed add-on not installed.
Used wget for b31 version to root of Router attached USB.
Installed b31 direct from USB and reboot.
After reboot went to turn on persistent Telnet and no need... EVERYTHING was exactly the same. (All previous settings persisted for add-on.)
I installed Aegis from the add-on but it went to the Router so uninstalled and reboot.
Installed Aegis manually to USB and it installed and was up much faster than it had in past.
Then walked every setting to confirm and everything was perfect.
80 devices with assigned IPs in Ad-Guard DHCP, all Ad-Guard known hosts remained configured, all Ad-Guard settings including pages of custom rules blocking/unblocking.
It is hard to believe the gap between the Netgear R9000 out of the box and what I have setup now. Out of the box I could not realistically host more than 65-70 devices and had non-stop performance issues using R7800 AP when trying to pull up any router page showing attached devices and had to keep access control disabled as well as dial down WiFi settings... and even then both ran HOT.
The add-on with Ad-Guard has let me scale up past 100 devices and improved LITERALLY every single performance related experience. R9000 never goes above 35% RAM, runs far cooler, and I routinely leave it running 30+ days without thinking about it... no more bi-daily reboots to keep internet working. The normal computer/laptop experience is also night & day as DNS no longer lagging no longer the indicator it's time to check router for max RAM use and reboot to fix. I was fully happy with things 2 days ago.
TODAY? It's like I did get new router and AP and all the fun short term performance improvements (until I push further to see where the new line is).
It looks like the clock on the death of my R9000 (router) & R7800 (AP) network has been once again reset for who knows how long.
THANK YOU! THANK YOU! THANK YOU!
One last rant... it is super irritating to read the occasional comment/complaint in the posts. If none of this worked (Voxel FW or Kamoj add-on) -- I would still be appreciative of unpaid developers putting in so much effort for no direct reward. Yet that is not the case -- this unpaid volunteer development work not only does work -- it takes what Netgear thinks is a production ready product and improves it so significantly it becomes an entirely new, better and upgraded product. That is brilliant, amazing and indescribably great and generous.
KAMOJ... ONCE AGAIN... A MILLION THANK YOUs!
kamoj
Very Senior Member
Wow @Grantman !This post turned into way longer than planned. So coming back to top to summarize before the excessive comments
SUMMARY: Kamoj addon 5.5b31 is MAGIC. Been almost full day and rock solid. Came from b27 with zero issues and gained performance. By far the smoothest, fastest and least difficult install of any version yet.
Kamoj... Below are more details and my sincere thank you and appreciation for the work you provide.
---
Every time I am ready to get a new Router... new Kamoj add-on version is so good it ruins everything
Installed 5.5b31 on R9000 and VERY NOTICIBLE improvement in UI responsiveness and overall network performance. In fact I installed 5.5b31 on R7800 that is hard wired as AP too and same UI improvement.
For the primary router (R9000)... ping times are lower... usually 25-26... now 23-24 (over course of 1 day so far). Pages listing attached devices load so much faster. Now able to run Aegis & Ad-Guard without router RAM use climbing up near 100% and needing reboot. (Had ditched Aegis for past 3-6 months... glad to have it back).
Kamoj... THANK YOU! I had stayed on b27 after trying one of the other updates then reading about Ad-Guard versions. I use Ad-Guard as DHCP server and didn't have time to work through potential issues. Yesterday saw b31 and looked like enough changes to give it a try and it is best version yet and really killed all thoughts of swapping out router.
FYI... I am not running typical setup... and fully aware of issues I have of my own doing but without the add-on I could not attempt let alone manage effectively my home network setup off 1 Router (R9000) and 1 AP (R7800). I have over 100 concurrently connected devices -- WAY ABOVE anything Netgear suggests should be possible. The majority of the devices are Amazon sketchy Tuya based IoT (Smart Home) devices. Though I do also have ~10 phones/tables, 15 laptops/computers, and ~20 VMs along with the 77 smart home devices (lights, air sensors, speakers... etc). On top of that I have terrible internet (AT&T U-Verse 50mbps - bonded 25x2 ADSL) which has high latency (~24ms).
I have all devices staying connected without any issues. Coverage for both 2.4 & 5 seems stronger than before but too early to know if that is persistent or just part of the normal flux given congestion in area... but voice commands for Google Home are faster, sustained download speeds are faster, normal SMB access on local network to files is faster, and amount of times devices not responding due to sheer number of devices on same subnet sharing mainly 2.4 GHz is much lower across literally everything.
I did not do anything special... and probablly was more risky than I could have been. Did not uninstall old add-on -- just backed up config to USB before I installed Voxel update and it killed the add-on after reboot.
Then ran uninstall (via Telnet) and it showed add-on not installed.
Used wget for b31 version to root of Router attached USB.
Installed b31 direct from USB and reboot.
After reboot went to turn on persistent Telnet and no need... EVERYTHING was exactly the same. (All previous settings persisted for add-on.)
I installed Aegis from the add-on but it went to the Router so uninstalled and reboot.
Installed Aegis manually to USB and it installed and was up much faster than it had in past.
Then walked every setting to confirm and everything was perfect.
80 devices with assigned IPs in Ad-Guard DHCP, all Ad-Guard known hosts remained configured, all Ad-Guard settings including pages of custom rules blocking/unblocking.
It is hard to believe the gap between the Netgear R9000 out of the box and what I have setup now. Out of the box I could not realistically host more than 65-70 devices and had non-stop performance issues using R7800 AP when trying to pull up any router page showing attached devices and had to keep access control disabled as well as dial down WiFi settings... and even then both ran HOT.
The add-on with Ad-Guard has let me scale up past 100 devices and improved LITERALLY every single performance related experience. R9000 never goes above 35% RAM, runs far cooler, and I routinely leave it running 30+ days without thinking about it... no more bi-daily reboots to keep internet working. The normal computer/laptop experience is also night & day as DNS no longer lagging no longer the indicator it's time to check router for max RAM use and reboot to fix. I was fully happy with things 2 days ago.
TODAY? It's like I did get new router and AP and all the fun short term performance improvements (until I push further to see where the new line is).
It looks like the clock on the death of my R9000 (router) & R7800 (AP) network has been once again reset for who knows how long.
THANK YOU! THANK YOU! THANK YOU!
One last rant... it is super irritating to read the occasional comment/complaint in the posts. If none of this worked (Voxel FW or Kamoj add-on) -- I would still be appreciative of unpaid developers putting in so much effort for no direct reward. Yet that is not the case -- this unpaid volunteer development work not only does work -- it takes what Netgear thinks is a production ready product and improves it so significantly it becomes an entirely new, better and upgraded product. That is brilliant, amazing and indescribably great and generous.
KAMOJ... ONCE AGAIN... A MILLION THANK YOUs!
Feedback like this make me really happy.
This and "likes" I get, keeps me going on developing the add-on.
Please let me know if there is any function you are missing, and I'll have a look at it.
Maybe I'll even make the addon fully public "soon", but I need some help with documentation.
I know much of the features are not easy to understand, and not described in the FAQ.txt, so there is need for some kind of better "manual",
or I'll be busy answering not so technical users, and have no time for development.
In many ways I feel exactly like you, these routers should be "nothing" without the @Voxel superb base firmware.
He has put years of work into this, and it's a shame that Netgear don't want to use his superior knowledge and due professional care.
The add-on would not exist without Voxels Firmware.
I would not own a Netgear router without @Voxel.
Please everyone, send him a lot of likes, and if you got "a spare dollar", go to his site and donate it.
He's worth it, and he will use it to all our bests interest..
Warm regards,
kamoj
Hello @kamoj, hello Everyone,
I'm taking this opportunity to describe my experience with the 5.5b31 addon and to try and be useful to the snb community.
Things I've observed with the latest version of kamoj's add-on:
Thanks for allowing me the privilege of being a beta tester and keep up the great work!
Regards,
pintycar
I'm taking this opportunity to describe my experience with the 5.5b31 addon and to try and be useful to the snb community.
Things I've observed with the latest version of kamoj's add-on:
- Options for customisation are second to none. Amazing job there.
- The speed and responsiveness of the addon pages is fantastic too. I really like the re-worked router info page, which is now integrated in the main Netgear website.
- Adguard addition is fantastic. I exported the custom settings to the usb I use for entware and so on, and copied it to kamoj's default folder and it works brilliantly.
- I've encountered a couple of minor inconveniences regarding external (WAN) ssh access: I used to have a script that would copy netwall.conf to /etc/ to open port 22, and created a cron job to update the DDNS from duckdns.org. Now those two things don't seem to work and I've had to manually add the port 22 line to the addon/settings 2 page and click "save and restart firewall(s)" and the cron task to the addon/settings page for it to work again. I may be missing something, but it'd be great to be able to automatise it when a new version is installed.
- The ram usage reported in the router info page does not match the ram usage reported by htop. Although... it does match the one reported by top so I guess htop is wrong.
Thanks for allowing me the privilege of being a beta tester and keep up the great work!
Regards,
pintycar
kamoj
Very Senior Member
Thank you very much @pintycar,Hello @kamoj, hello Everyone,
I'm taking this opportunity to describe my experience with the 5.5b31 addon and to try and be useful to the snb community.
Things I've observed with the latest version of kamoj's add-on:
Overall it is a superb improvement over the "vanilla" voxel's firmware, which is, of course, a massive upgrade over netgear's stock firmware. I'm really pleased that we have two heavyweight developers contributing to these not-so-new routers which make them significantly better than they'd ever dreamed of being. I personally never thought I was going to be using an early 2016 router as my main router in 2023..
- Options for customisation are second to none. Amazing job there.
- The speed and responsiveness of the addon pages is fantastic too. I really like the re-worked router info page, which is now integrated in the main Netgear website.
- Adguard addition is fantastic. I exported the custom settings to the usb I use for entware and so on, and copied it to kamoj's default folder and it works brilliantly.
- I've encountered a couple of minor inconveniences regarding external (WAN) ssh access: I used to have a script that would copy netwall.conf to /etc/ to open port 22, and created a cron job to update the DDNS from duckdns.org. Now those two things don't seem to work and I've had to manually add the port 22 line to the addon/settings 2 page and click "save and restart firewall(s)" and the cron task to the addon/settings page for it to work again. I may be missing something, but it'd be great to be able to automatise it when a new version is installed.
- The ram usage reported in the router info page does not match the ram usage reported by htop. Although... it does match the one reported by top so I guess htop is wrong.
Thanks for allowing me the privilege of being a beta tester and keep up the great work!
Regards,
pintycar
your experience is important for both @Voxel and me, and of course for the community!
I'd like to address your inconveniences in point 4:
The addon (and Voxel FW) still accepts /etc/netwall.conf.
The rules in it are added every time "net-wall rule" is run, e.g. at router boot.
The addon (and Voxel FW) still executes "/mnt/sdxx/autorun/scripts/post-mount.sh" at router boot.
So it is enough to add e.g. this to post-mount.sh:
Code:
echo "ACCEPT net fw udp 9994" >/etc/netwall.conf
net-wall ruleYou don't leave any details on why your own cron job doesn't work, so I'll be brief here:
You can start your cron job using 'Kamoj Menu/Settings 2', or from post-mount.sh.
Here you can check if your cron job is running:
Kamoj Menu: System Information: cron jobs
(No need to install cron from Entware).
Again, many thanks for the feedback!
/kamoj
LeKeiser
Senior Member
Hello Mr @kamoj
Quick question if I may. As you did see on my latest thread about the CPU consumption
I checked the setting "Disable Apple Filing Protocol (AFP) / Netatalk / Time Machine" but after a reboot, the box is unchecked. So I check it again, I guess AFP is then disabled but after a reboot, once more, it's on.
Is this behavior normal ?
Thanx for your feedback
Quick question if I may. As you did see on my latest thread about the CPU consumption
I checked the setting "Disable Apple Filing Protocol (AFP) / Netatalk / Time Machine" but after a reboot, the box is unchecked. So I check it again, I guess AFP is then disabled but after a reboot, once more, it's on.
Is this behavior normal ?
Thanx for your feedback
kamoj
Very Senior Member
That is not normal.
The fault is an nvram variable "noafp" that the addon uses to check at boot.
This variable is of some reason reset at boot.
I don't know where and why, so in next version the addon only uses a kamoj-variable.
Thank you for the report, very good feedback!
The fault is an nvram variable "noafp" that the addon uses to check at boot.
This variable is of some reason reset at boot.
I don't know where and why, so in next version the addon only uses a kamoj-variable.
Thank you for the report, very good feedback!
kamoj
Very Senior Member
Changes in kamoj-addon beta version 2023-07-13 5.5b32
---------------------------------------------------------------
- Fixed the wrong status after reboot:
"Disable Apple Filing Protocol (AFP) / Netatalk / Time Machine" (@LeKeiser)
- Cleared up and corrected a number of bugs in code that mounts USB and SATA-devices at boot.
Booting and mounting should now also be faster.
(The hotplug2.mount code is a mess, still full of debugging code and is a disgrace for Netgear/DNI.)
(hotplug2.mount, cmdftp, detectSATA)
- Keep time stamp on OpenVPN and WireGuard configurations when copying from USB to router at boot.
- Don't overwrite newer OpenVPN and WireGuard configurations when copying from USB to router at boot.
- Merged the different settings for net-wall log
- Minor changes
---------------------------------------------------------------
- Fixed the wrong status after reboot:
"Disable Apple Filing Protocol (AFP) / Netatalk / Time Machine" (@LeKeiser)
- Cleared up and corrected a number of bugs in code that mounts USB and SATA-devices at boot.
Booting and mounting should now also be faster.
(The hotplug2.mount code is a mess, still full of debugging code and is a disgrace for Netgear/DNI.)
(hotplug2.mount, cmdftp, detectSATA)
- Keep time stamp on OpenVPN and WireGuard configurations when copying from USB to router at boot.
- Don't overwrite newer OpenVPN and WireGuard configurations when copying from USB to router at boot.
- Merged the different settings for net-wall log
- Minor changes
Similar threads
Latest threads
-
XT8 Packet Loss Wired Mesh - Using as Access Points Only
- Started by spyerx
- Replies: 0
-
Asus BQ16 Little help required.
- Started by Reinforcer
- Replies: 0
-
-
-
Support SNBForums w/ Amazon
If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!
Sign Up For SNBForums Daily Digest
Get an update of what's new every day delivered to your mailbox. Sign up here!