pixelserv pixelserv - A Better One-pixel Webserver for Adblock

[tomsk]

@kvic: Entware now installs:
pixelserv-tls version: v35.HZ12.Ki compiled: Oct 30 2016

Thank you!
I have not seen any announcement here or whether you were aware of the fact.
Just checked it and tested it with the soon to be released AB-Solution 3.
Seems to work without a problem, the same switches are still in use and appear to work with my scripts.

I like the redesigned html stats, they are a lot better to read now, especially with the description.
Very well done.

And Ki comes just in time for the users of AB-Solution 3 to profit as well.

Ooooo nice. Was the "stability" issue with Ki reported in earlier posts ever identified? Seems like it only manifested after running for a while.

 

[thelonelycoder]

Ooooo nice. Was the "stability" issue with Ki reported in earlier posts ever identified? Seems like it only manifested after running for a while.

I don't know. No mention on his GitHub so far, except his release words from September.

 

[swetoast]

wierd didnt get anything from entware when i updated.

still on V35.HZ12.Kh compiled: May 12 2016

http://pkg.entware.net/binaries/armv7/pixelserv-tls_V35.HZ12.Kh-20160429-1_armv7soft.ipk

in their repo atleast for arm seems like there is a different version for mipsel

@zyxmon mind updating pixelserv for arm platforms ?

 

[thelonelycoder]

wierd didnt get anything from entware when i updated.

still on V35.HZ12.Kh compiled: May 12 2016

http://pkg.entware.net/binaries/armv7/pixelserv-tls_V35.HZ12.Kh-20160429-1_armv7soft.ipk

in their repo atleast for arm seems like there is a different version for mipsel

@zyxmon mind updating pixelserv for arm platforms ?

I see, maybe there are problems with the ARM version, my development router is an AC66U with MIPS. Lucky me then, I guess?

 

[swetoast]

I see, maybe there are problems with the ARM version, my development router is an AC66U with MIPS. Lucky me then, I guess?

zyxmon will give us the answer there are builds available from September at least so if there aren't any instability or anything we can at least get that update

 

[kvic]

@kvic: Entware now installs:
pixelserv-tls version: v35.HZ12.Ki compiled: Oct 30 2016

Thank you!
I have not seen any announcement here or whether you were aware of the fact.
Just checked it and tested it with the soon to be released AB-Solution 3.
Seems to work without a problem, the same switches are still in use and appear to work with my scripts.

I like the redesigned html stats, they are a lot better to read now, especially with the description.
Very well done.

And Ki comes just in time for the users of AB-Solution 3 to profit as well.

Edit: Apparently only MIPS routers get the new Ki version.

I happened to see this ticket (while myself was submitting a totally unrelated ticket to Entware-ng). We shall thank @Veldkornet and @ryzhov_al.

I think other binaries are coming. Mipsel seems put on fast track.

 

[kvic]

Ooooo nice. Was the "stability" issue with Ki reported in earlier posts ever identified? Seems like it only manifested after running for a while.

I couldn't reproduce the problem. It's been running for weeks before a recent scheduled power down in my building. Below is the run since the power up:



It's possible some un-caught signals in pthread might cause a termination. Pls watch out and report back. I'll look into it..

 

[jrmwvu04]

pixelserv-tls V35.HZ12.Ki-1

Installed via entware for ARM, up and running. The HTML stats facelift is really nice. As a matter of housekeeping, I have removed all of the prior certs generated by pixelserv in /opt/var/cache/pixelserv and I'll let you know how it goes.

 

[swetoast]

yepp finally updated

 

[Veldkornet]

Just wanted to check if this is normal, see the amount of cls vs req.

 

[jrmwvu04]

Just wanted to check if this is normal, see the amount of cls vs req.

As a percentage of total requests, it's a little higher than what I normally see, but the sources of your blocked requests will determine that. So for instance, if you visit a particular site more frequently than others and it has requests that your pixelserv drops, you'll see more of that compared to others. I wouldn't worry about it to be honest.

 

[jrmwvu04]

Working well so far. Good stuff, kvic.

 

[tomsk]

I have noticed that if logging to syslog is switched on, there are no sl* stats logged in my servstats
Im using the arm Ki version installed by entware. Anyone else seeing this?

 

[jrmwvu04]

Having given some time for the certs to be generated by the Ki version, I'm seeing much lower processing times.

 

[RASG]

Im having a hard time to get PS to work on my ac66u, and could really use some help.
The ads are not being replaced by the 1px image served from PS.
I running out of ideas...

First i will walk you guys through all the steps i used to install PS, and after that i will explain what is not working.

1- created alias for the br0 interface

ifconfig br0:pixelserv 192.168.25.101 up

2- why? because httpd is listening on all addresses

ramon@RT-AC66U:/tmp/home/root# lsof -i :80
COMMAND  PID  USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
httpd   8339 ramon   17u  IPv4  36351      0t0  TCP *:www (LISTEN)

3- installed pixelserv-tls V35.HZ12.Ki-1

opkg install pixelserv-tls

4- modified /opt/etc/init.d/S80pixelserv-tls to listen on ports 888 and 4433

sed -i "/ARGS=/c\ARGS=\"192.168.25.101 -p 888 -k 4433\"" /opt/etc/init.d/S80pixelserv-tls

5- checking

ramon@RT-AC66U:/tmp/home/root# grep 'ARGS' /opt/etc/init.d/S80pixelserv-tls
ARGS="192.168.25.101 -p 888 -k 4433"

6- created iptables rules to redirect traffic from ports 80,443 to 888,4433 on 192.168.25.101

iptables -t nat -A PREROUTING -d 192.168.25.101 -p tcp --dport 80 -j DNAT --to 192.168.25.101:888
iptables -t nat -A PREROUTING -d 192.168.25.101 -p tcp --dport 443 -j DNAT --to 192.168.25.101:4433

7- started pixelserv-tls

ramon@RT-AC66U:/tmp/home/root# /opt/etc/init.d/S80pixelserv-tls start
Starting pixelserv-tls...              done.

8- checking

ramon@RT-AC66U:/tmp/home/root# /opt/etc/init.d/S80pixelserv-tls check
Checking pixelserv-tls...              alive.

9- checking again (2 processes showing. why?)

ramon@RT-AC66U:/tmp/home/root# ps | grep pixelserv
13576 nobody    3076 S    pixelserv-tls 192.168.25.101 -p 888 -k 4433
13577 ramon     3076 S    pixelserv-tls 192.168.25.101 -p 888 -k 4433

10- pinging ad domain to see who responds

ramon@RT-AC66U:/tmp/home/root# ping doubleclick.net
PING doubleclick.net (192.168.25.101): 56 data bytes
64 bytes from 192.168.25.101: seq=0 ttl=64 time=0.356 ms
64 bytes from 192.168.25.101: seq=1 ttl=64 time=0.272 ms

Now, what i think is not behaving as it should:

1- accessing http://192.168.25.101 and http://192.168.25.101:888 gives me a blank page
looking at the source code there is no 1px image in there. just blank.

2- accessing https://192.168.25.101 and https://192.168.25.101:4433 fails
translating the error to english, it says "the connection was interrupted"

3- accessing sites that should have the ad replaced, just show a broken image/placeholder

 

[elorimer]

As to 1 and 2, try http://192.168.25.101/servstats

As to the rest, what firmware and what entware are you running?

 

[mstombs]

Re 1: You only get an image if you clearly ask for one ie. http://doubleclick.net/anything.gif
Many ads now served by https - for which you need to do additional steps to set up the certs on the router, and also import the cert into your browser.

 

[RASG]

As to the rest, what firmware

Asuswrt-Merlin 380.62_1

and what entware are you running?

ramon@RT-AC66U:/tmp/home/root# cat /mnt/sdb1/entware/etc/opkg.conf
src/gz entware-ng http://pkg.entware.net/binaries/mipsel

 

[RASG]

Re 1: You only get an image if you clearly ask for one ie. http://doubleclick.net/anything.gif
Many ads now served by https - for which you need to do additional steps to set up the certs on the router, and also import the cert into your browser.

i did create the cert and key, but did not import to the web browser yet.

ramon@RT-AC66U:/tmp/home/root# history | grep open
823 | 13/11/16 - 13:58:50 | openssl genrsa -out ca.key 1024
824 | 13/11/16 - 13:59:01 | openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"

but i still believe that i should be able to make non-secure domains work, right?

 

[mstombs]

Yes, but I think the non-secure sites are working from your message above, if no image file extension detected you get a null text response by default. Many many years ago a .gif was the default, but we found Internet Explorer, for example gave error messages because it sometimes tried to execute the binary image data as javascript. So pixelserv now tries to return a null image in the file type corrected, swf, bmp etc...