Run pixelserv-tls -B
And see if it does a benchmark test.
Sent from my iPhone using Tapatalk
Thank you
I see lines “generate cert to disk” and each takes around 14.5ms
Load from disk average is 14.617 sec
Run pixelserv-tls -B
And see if it does a benchmark test.
Sent from my iPhone using Tapatalk
Thank you
I see lines “generate cert to disk” and each takes around 14.5ms
No, I’m ashamed to admit I haven’t yet tried that!Ok then pixelserv-tls is indeed installed and running. Did you try after a complete reboot?
Still looking for a solution to make the pixelserv IP visible to computers on the guest networks. Is this something I could do with an iptables rule maybe? Most of the devices at my place are on guest networks, but unfortunately that means ABS & PS are of limited utility, unless I can get this visibility thing figured out.
something like...
Code:iptables --append INPUT --match tcp --protocol tcp --src 192.168.10.1/24 --dst 192.168.10.3 --jump ACCEPT
Surprisingly, a reboot didn’t fix it. I’ll sleep on it and try again tomorrow. Maybe a bit of perseverence will work.Ok then pixelserv-tls is indeed installed and running. Did you try after a complete reboot?
As typing bits of scripts seems to trigger 'cloudflare' blocking your account I have screen captured the text I want to typeSurprisingly, a reboot didn’t fix it. I’ll sleep on it and try again tomorrow. Maybe a bit of perseverence will work.
opkg install http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
admin@RT-AC86U:/tmp/home/root# opkg install http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
Downloading http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
Package libopenssl (1.0.2o-1) installed in root is up to date.
opkg list-installed |grep libopenssl
libopenssl - 1.0.2o-1
Thanks. Then I have the reverse problem, and would need to DROP all packets from the guest networks NOT going to pixelserv. I don't trust the machines on the Guest networks, which is why they're not on my main network.The easiest way to do that is to allow guest network to access Intranet, but that approach is not for everyone since the guests can too access your internal network ( assuming they know the security credentials)
Thanks. Then I have the reverse problem, and would need to DROP all packets from the guest networks NOT going to pixelserv. I don't trust the machines on the Guest networks, which is why they're not on my main network.
Appreciate your thought though!
Hey @kvic so I just did a clean reinstall of Entware, Pixelserv-tls and ABS and after that when I try to update the libopenssl library to the updated one you posted using this one liner:
$ opkg --force-depends remove libopenssl
When running code
Code:sh -c "$(wget -qO - https://kazoo.ga/pixelserv-tls/config-webgui.sh)"
to issue a certificate to the webGUI, I see the message that I either don’t have pixelserv installed or running.
I have version 2.1.1 installed and I can obtain servstats in my browser. I can also ping the server (from the router command prompt).
Workaround
Uninstall v1.0.2o
Code:$ opkg --force-depends remove libopenssl
After that re-run the commands as per installing the test lib as before.
My quick tests show the test library is still compatible with all my installed packages (a lot!) that depend on libopenssl.
admin@RT-AC86U:/tmp/home/root# opkg --force-depends remove libopenssl
Removing package libopenssl from root...
admin@RT-AC86U:/tmp/home/root# opkg install http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
Downloading http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk
Installing libopenssl (1.0.2o-1) to root...
Downloading http://bin.entware.net/aarch64-k3.10/libopenssl_1.0.2o-1_aarch64-3.10.ipk
Configuring libopenssl.
admin@RT-AC86U:/tmp/home/root# /opt/etc/init.d/S80pixelserv-tls restart
Shutting down pixelserv-tls... done.
Starting pixelserv-tls (AB-Solution)... done.
admin@RT-AC86U:/tmp/home/root# opkg list-installed |grep libopenssl
libopenssl - 1.0.2o-1
admin@RT-AC86U:/tmp/home/root#
Download the ipk manually and install it by specifying its' path. The file on the server looks good and hasn't been touched since the beginning of April.Looks like they are redirecting the test files URL to the latest version too :/
Code:admin@RT-AC86U:/tmp/home/root# opkg --force-depends remove libopenssl Removing package libopenssl from root... admin@RT-AC86U:/tmp/home/root# opkg install http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk Downloading http://bin.entware.net/aarch64-k3.10/test/libopenssl_1.0.2n-1c_aarch64-3.10.ipk Installing libopenssl (1.0.2o-1) to root... Downloading http://bin.entware.net/aarch64-k3.10/libopenssl_1.0.2o-1_aarch64-3.10.ipk Configuring libopenssl. admin@RT-AC86U:/tmp/home/root# /opt/etc/init.d/S80pixelserv-tls restart Shutting down pixelserv-tls... done. Starting pixelserv-tls (AB-Solution)... done. admin@RT-AC86U:/tmp/home/root# opkg list-installed |grep libopenssl libopenssl - 1.0.2o-1 admin@RT-AC86U:/tmp/home/root#
Are you running the config-webgui.sh on the same router that you're running pixelserv-tls ? They need to be on the same machine.
If already so, then check "ps | grep pixelserv" to see what you get.
Looks like they are redirecting the test files URL to the latest version too :/
'opkg --force-depends remove libopenssl' broke my entware install anyway.. wget stopped working..
On a side note I have some troubles with pixelserv-tls.. After a while it's just dead... I have tried to reproduce it but to no avail.. I'll enable debug logging again.
All of this happened after a fresh install of the router (I reused the /jffs and /opt partitions thought).
Yes, only the one router.
And ps | grep pixelserv does nothing: I simply get the command prompt again with no message of any sorts.
However, pinging the pixelserv server works, as does servstats in the browser, and checking the status of pixelserv through AMTM shows it as ON.
Thanks very much for looking after us ER and MIPS users, in due course when you are ready I'll be happy to do any testing.
Download the ipk manually and install it by specifying its' path. The file on the server looks good and hasn't been touched since the beginning of April.
That weird and I haven't seen before. Download the test lib manually and install from local copy should do
Unresponsive or crash? More descriptions of the problem may help.
Thread starter | Title | Forum | Replies | Date |
---|---|---|---|---|
C | Diversion Pixelserv replacement | Asuswrt-Merlin AddOns | 2 | |
L | Is Diversion better than NextDNS, PiHole or AdGuard Home? | Asuswrt-Merlin AddOns | 10 |
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!