pixelserv pixelserv - A Better One-pixel Webserver for Adblock

[XIII]

Why are you using curl? From browser, try:

https://192.168.1.2/servstats​

I was using curl because I tried to access my router remotely using ssh.

Now back home the URL does not work either:

The connection has timed out
The server at 192.168.1.2 is taking too long to respond.

Update:

I disabled and re-enabled ad-blocking; now the page is working...

Wonder why Diversion stated it was running, but nothing worked...

 

[jrmwvu04]

I was using curl because I tried to access my router remotely using ssh.

Now back home the URL does not work either:

The connection has timed out
The server at 192.168.1.2 is taking too long to respond.

Update:

I disabled and re-enabled ad-blocking; now the page is working...

Wonder why Diversion stated it was running, but nothing worked...

The pixelserv process can be “running” but with some or all portions not serving correctly. I’ve seen that many times with pre release testing versions, though that’s not typically the case with public builds.

 

[JimbobJay]

You also need to set the key usage to Web Server:

https://github.com/RMerl/asuswrt-merlin.ng/commit/e786dfa2a5faac92c77c499a9b7fb0923efce892

Adjust this in the openssl.cnf config file you are using.

Might also want to ensure that the clock is accurately set before generating the cert with a 2 years duration, otherwise your certificate may expire prematurely if someone is running an older firmware release.

https://github.com/RMerl/asuswrt-merlin.ng/commit/9e1566a472b3babcbe463e21e5b00a1b1efff30a

I’m a little confused by this bit. If we are generating our own certs, is there a way of achieving this without an openssl.cnf file? In the command thelonelycoder suggests, there is no reference to a openssl.cnf file, so if I just want to copy that command but add in the serverAuth to the Extended Key Usage attributes, is there a way of doing that?

 

[JimbobJay]

I’m a little confused by this bit. If we are generating our own certs, is there a way of achieving this without an openssl.cnf file? In the command thelonelycoder suggests, there is no reference to a openssl.cnf file, so if I just want to copy that command but add in the serverAuth to the Extended Key Usage attributes, is there a way of doing that?

Never mind, after some more research I added the line to my default openssl.cnf file and it seems to have worked.

 

[gattaca]

^^^^^ From my experience, using your own openssl.cnf file IS the simplest way to keep all the darn options correct...

 

[heysoundude]

I wanted to check my current "tav" value before doing that

Hey XIII - what's the significance of tav, what's a good number, and how does one tweak it?

 

[jrmwvu04]

Hey XIII - what's the significance of tav, what's a good number, and how does one tweak it?

tav is the statistic that tells you what pixelserv’s average response time is, lower is better, and there’s not much you can do to tweak it beyond run it on better hardware. There are options you can adjust to modify things, but as of 2.2.1 the best choices more or less are the default choices, so it’s not something to worry about really.

 

[heysoundude]

My tav is reported as 23ms. That’s pretty quick!


Sent from my iPhone using Tapatalk

 

[elorimer]

I think tav may be time-weighted, and I think it goes down as the percentage of certs are pregenerated. I think you can increase the cache size, which reduces the reloading of a pre-generated certs. And I think you can be sure you are using 0-RTT, which also might improve things.

It still amazes me that some requests are over 100K in size.

 

[Davidncali001]

I have installed IOS 13 on my iPhone and noticed only while I'm using the Reddit app that the links to websites within the app are showing up as insecure. Is this due to pixelserv and I just need to wait for the new pixelserv update to come out?

When I was using the previous IOS this didn't happen.

 

[Butterfly Bones]

I have installed IOS 13 on my iPhone and noticed only while I'm using the Reddit app that the links to websites within the app are showing up as insecure. Is this due to pixelserv and I just need to wait for the new pixelserv update to come out?

When I was using the previous IOS this didn't happen.

View attachment 19312

Yes, it has been discussed now for days, start with the link below, and read to here to get updated as to the issue and attempts to address it.
https://www.snbforums.com/threads/p...server-for-adblock.26114/page-148#post-511516

 

[heysoundude]

I've just now caught up with the rush of what's going on with this thread and the why of it...
this has been (hopefully past tense applies) quite the team effort, with what appears from my perspective to be some pretty heavy lifting; the David vs Goliath proportions to this are not lost on me.

 

[heysoundude]

To be honest I've been concerned about him. For those of you not following the news, Hong Kong is not an ideal place to be lately. To quote another user, the silence is now worrisome.

It's been 5 months to the day since he published anything to his blog/site:
https://kazoo.ga/all-articles/
I'm crossing my fingers that he's fine and simply on sabbatical far away from the troubles at "home"

 

[jrmwvu04]

I've just now caught up with the rush of what's going on with this thread and the why of it...
this has been (hopefully past tense applies) quite the team effort, with what appears from my perspective to be some pretty heavy lifting; the David vs Goliath proportions to this are not lost on me.

Yeah, and there are still hurdles. I’m still working on it but no breakthroughs yet because frankly I’m a compiling novice. I can build it for amd64 Debian and everything is good there but there are considerations for building it for asuswrt platforms I have not figured out yet.

 

[heysoundude]

Lovers in a dangerous time keep kicking at the darkness til it bleeds daylight...
One of you will have the appropriate penny drop or find the right crack in the wall to bust through. [emoji1303][emoji1303]


Sent from my iPhone using Tapatalk

 

[Jack Yaz]

Yeah, and there are still hurdles. I’m still working on it but no breakthroughs yet because frankly I’m a compiling novice. I can build it for amd64 Debian and everything is good there but there are considerations for building it for asuswrt platforms I have not figured out yet.

I may just put the packages I compiled on my fork's releases page

 

[jrmwvu04]

I may just put the packages I compiled on my fork's releases page

Were you able to build a statically linked binary yet?

 

[Jack Yaz]

Were you able to build a statically linked binary yet?

Whatever version i built performs just fine on my 86U, so I'm not entirely sure of the reasoning?

 

[elorimer]

The static builds in the end turned out not to be necessary or deliver what it was thought they delivered, last time around.

 

[jrmwvu04]

Whatever version i built performs just fine on my 86U, so I'm not entirely sure of the reasoning?

Reading up on it, it doesn’t appear that will be useful for most people anymore. At some point between when I left and came back, Entware adopted OpenSSL 1.1.1 and I assume most people are using that install method. So, no worries. I’ll figure out my own thing or just switch to Entware