[OpenWrt-Devel] Watchdog on x86 Intel Atom D2550
Hi all, Is there and watchdog driver for Intel Atom D2550 on openwrt ? By the way how to reset to default settings on x86 platform ? best regards, banglang.huang___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH] packages: curl: Allow fine grained protocol configuration
On Tue, May 14, 2013 at 11:19 AM, Helmut Schaa helmut.sc...@googlemail.com wrote: Disabling unused protocols in libcurl can save more then 100K, hence add some build time config options to enable/disable protocols. Any update on this patch? Helmut ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [PATCH] Add cgi programs to apcupsd
Hi. In principle the patch looks okay but I think it should not depend on uhttpd specifically as some users might want to run the CGI programs on top of another httpd. ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
Jo-Philipp and Bastian, I used the approach of commenting the iptables modules in /etc/modules.d, and I could send up to 85 Mbps (UDP) from iperf inside the router for each band, compared with 50 Mbps before commenting the modules, much better. Now I'll try find a way to test both bands together. Thanks! Gabriel El 28/05/13 08:04, Jo-Philipp Wich escribió: here the full/updated snippet: http://intercity-vpn.de/files/openwrt/init_kmodules_loader_without_iptables.sh.txt Or, you know, simply comment the relevant modules out in /etc/modules.d/ ... ~ Jow ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
On 2013-05-29 4:16 PM, Gabriel Tolón wrote: Jo-Philipp and Bastian, I used the approach of commenting the iptables modules in /etc/modules.d, and I could send up to 85 Mbps (UDP) from iperf inside the router for each band, compared with 50 Mbps before commenting the modules, much better. Now I'll try find a way to test both bands together. Thanks! Don't test with iperf on the router, it will always be significantly slower than bridging from Ethernet to Wireless. When using bridging, you also avoid the runtime overhead of netfilter, even if the modules are loaded. - Felix ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] GitHub repo with collectd5 package for AA
Hi all, FYI, I have created a GitHub repo with a 'collectd5' package for Attitude Adjustment, which adds collectd 5.0.3 to AA (I plan on doing a trunk port at some point too). Add src-git cshore_aa git://github.com/cshore/openwrt-aa-packages.git and update your feeds if you want to build it / try it out. Regards, Daniel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
Hi Antonio, I'm already using batman-adv, so this bandwidth meter sounds great, I'll try it. If I have some trouble installing batman-adv-devel (I've never used it) or something I ask you or in the batman-adv list. Thanks! Gabriel El 28/05/13 04:00, Antonio Quartulli escribió: On Mon, May 27, 2013 at 05:54:01PM -0300, Gabriel Tolón wrote: Hi, I want to test TP-Link WDR3500 performance using iperf. According to TP-Link specifications, they could reach up to 600 Mbps using both 2.4 and 5 GHz bands. The problem is that as they are 100Mbps Ethernet, if I run iperf from a PC connected to the Ethernet port, I'll be limited to 100Mbps. On the other hand, when running iperf from inside the routers, they don't transmit more than 50 Mbps, limited by the processor. I've read that removing some kernel modules like iptables it would be possible to increase throughput when running iperf in routers, so I've been trying with rmmod, but I couldn't remove iptables modules, I get for example: root@OpenWrt:/# rmmod ip_tables rmmod: can't unload 'ip_tables': Resource temporarily unavailable I guess that's because some dependencies, so I tried removing other modules first, without success. Also I searched for a modprobe package in opkg, but I couldn't find it. I'd appreciate some ideas on how to achieve these measurements. Thanks! Hello Gabriel, I'd like to suggest you another way. In batman-adv[0] we are currently developing an in-kernel bandwidth meter[1][2]. It is entirely implemented inside the batman-adv module and therefore it completely runs in kernel-space. This means that you do not have any context-switch or slow memory operations which hurt a lot the performance on our weak routers. It is in a beta stage, meaning that it has been tested on VMs and real nodes, but only by the devs. It would be nice if you would like to give it a try :) IPtables is not a problem in this case because the inner batman-adv traffic is not inspected. To use it you need to install the batman-adv-devel package because the Bandwidth Meter is not part of any stable release yet. You can read how to install the proper feed and the package here[3]. The commit ID you should configure in order to use the BW meter are: batman-adv: 38a1b72b6 batctl: eebba0bfb On [1] and [2] you will find the instructions on how to run the tool. Since it is a testing phase, any feedback would be really appreciated!! If you are totally new to batman-adv and mesh networking in general I'd recommend you to read [0] and some more doc first... :-) Cheers, [0] http://www.open-mesh.org/projects/batman-adv/wiki/Wiki [1] http://www.open-mesh.org/projects/batman-adv/wiki/Bandwidth_meter [2] http://www.open-mesh.org/projects/batman-adv/wiki/Bandwidth_meter_debug [3] http://www.open-mesh.org/projects/batman-adv/wiki/Building-with-openwrt Gabriel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] authsae: adapt uci scripts to use authsae
This patch modifies the uci scripts to be able to
start meshd-nl80211 for encrypted mesh networks,
therefor a new script (authsae.sh) is inserted.
Signed-off-by: Emanuel Taube emanuel.ta...@gmail.com
diff --git a/package/mac80211/files/lib/wifi/mac80211.sh
b/package/mac80211/files/lib/wifi/mac80211.sh
index a052a1c..4cf3e3b 100644
--- a/package/mac80211/files/lib/wifi/mac80211.sh
+++ b/package/mac80211/files/lib/wifi/mac80211.sh
@@ -251,7 +251,7 @@ disable_mac80211() (
include /lib/network
for wdev in $(list_phy_interfaces $phy); do
[ -f /var/run/$wdev.pid ] kill $(cat /var/run/$wdev.pid)
/dev/null 21
- for pid in `pidof wpa_supplicant`; do
+ for pid in `pidof wpa_supplicant` `pidof meshd-nl80211`; do
grep $wdev /proc/$pid/cmdline /dev/null \
kill $pid
done
@@ -371,7 +371,12 @@ enable_mac80211() {
;;
mesh)
config_get mesh_id $vif mesh_id
- iw phy $phy interface add $ifname type mp
mesh_id $mesh_id
+ config_get encryption $vif encryption
+ if [ $encryption = aes ]; then
+ iw phy $phy interface add $ifname
type mp
+ else
+ iw phy $phy interface add $ifname
type mp mesh_id $mesh_id
+ fi
;;
monitor)
iw phy $phy interface add $ifname type
monitor
@@ -426,9 +431,16 @@ enable_mac80211() {
rm -f /var/run/hostapd-$phy.conf
for vif in $vifs; do
config_get mode $vif mode
- [ $mode = ap ] || continue
- mac80211_hostapd_setup_bss $phy $vif
- start_hostapd=1
+ case $mode in
+ ap)
+ mac80211_hostapd_setup_bss $phy $vif
+ start_hostapd=1
+ ;;
+ mesh)
+ config_get encryption $vif encryption
+ [ $encryption = aes ]
authsae_start_interface $device $vif
+ ;;
+ esac
done
[ -n $start_hostapd ] {
diff --git a/package/network/services/authsae/Makefile
b/package/network/services/authsae/Makefile
index 63320ae..4232653 100644
--- a/package/network/services/authsae/Makefile
+++ b/package/network/services/authsae/Makefile
@@ -37,6 +37,8 @@ TARGET_CFLAGS += -D_GNU_SOURCE
define Package/authsae/install
$(INSTALL_DIR) $(1)/usr/bin
$(INSTALL_BIN) $(PKG_INSTALL_DIR)/usr/bin/* $(1)/usr/bin
+ $(INSTALL_DIR) $(1)/lib/wifi
+ $(INSTALL_DATA) ./files/lib/wifi/authsae.sh $(1)/lib/wifi/
endef
$(eval $(call BuildPackage,authsae))
diff --git a/package/network/services/authsae/files/lib/wifi/authsae.sh
b/package/network/services/authsae/files/lib/wifi/authsae.sh
new file mode 100644
index 000..710fe47
--- /dev/null
+++ b/package/network/services/authsae/files/lib/wifi/authsae.sh
@@ -0,0 +1,53 @@
+authsae_start_interface() {
+ local device=$1 # to use the correct channel
+ local vif=$2
+ local band
+ local mcast_rate
+
+ cfgfile=/var/run/authsae-$vif.cfg
+ config_get channel $device channel
+ config_get hwmode $device hwmode
+ config_get htmode $device htmode
+ config_get ifname $vif ifname
+ config_get key $vif key
+ config_get mesh_id $vif mesh_id
+ case $hwmode in
+ *a*)
+ band=11a
+ mcast_rate=6
+ ;;
+ *)
+ band=11g
+ mcast_rate=1
+ ;;
+ esac
+ htmode=${htmode:-none}
+ cat $cfgfile EOF
+authsae:
+{
+ sae:
+ {
+debug = 0;
+password = $key;
+group = [19, 26, 21, 25, 20];
+blacklist = 5;
+thresh = 5;
+lifetime = 3600;
+ };
+ meshd:
+ {
+meshid = $mesh_id;
+interface = $ifname;
+passive = 0;
+debug = 0;
+mediaopt = 1;
+band = $band;
+channel = $channel;
+htmode = $htmode;
+mcast-rate = $mcast_rate;
+ };
+};
+EOF
+ ifconfig $ifname up
+ meshd-nl80211 -i $ifname -s $mesh_id -c $cfgfile -B
+}
--
1.7.10.4
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
Hi Felix, I know it's better to test from ethernet, but the problem is that WDR3500 routers are 100 Mbps ethernet, and these routers should be capable of transmitting much more than that, that's why I want to test another possibilities. Gabriel El 29/05/13 11:28, Felix Fietkau escribió: On 2013-05-29 4:16 PM, Gabriel Tolón wrote: Jo-Philipp and Bastian, I used the approach of commenting the iptables modules in /etc/modules.d, and I could send up to 85 Mbps (UDP) from iperf inside the router for each band, compared with 50 Mbps before commenting the modules, much better. Now I'll try find a way to test both bands together. Thanks! Don't test with iperf on the router, it will always be significantly slower than bridging from Ethernet to Wireless. When using bridging, you also avoid the runtime overhead of netfilter, even if the modules are loaded. - Felix ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
On 2013-05-29 5:26 PM, Gabriel Tolón wrote: Hi Felix, I know it's better to test from ethernet, but the problem is that WDR3500 routers are 100 Mbps ethernet, and these routers should be capable of transmitting much more than that, that's why I want to test another possibilities. Have you considered bridging the two wireless interfaces and passing traffic from one client on one interface to another on the other interface? By the way, I hope you don't expect to actually get 600 Mbit/s of combined throughput - that's just the marketing number which has little to do with reality. - Felix ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] WDR3500, unload kernel modules to improve iperf throughput?
El 29/05/13 12:49, Felix Fietkau escribió: On 2013-05-29 5:26 PM, Gabriel Tolón wrote: Hi Felix, I know it's better to test from ethernet, but the problem is that WDR3500 routers are 100 Mbps ethernet, and these routers should be capable of transmitting much more than that, that's why I want to test another possibilities. Have you considered bridging the two wireless interfaces and passing traffic from one client on one interface to another on the other interface? I've thought something like that, but at the moment I don't have any clients which could transmit high throughputs, 300 Mbps USB adapters would be a good choice I think. By the way, I hope you don't expect to actually get 600 Mbit/s of combined throughput - that's just the marketing number which has little to do with reality. Yes, it seemed too much to me, but I'd expect that both radios could really transmit at the same time using MCS15, right? Regards Gabriel ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
Re: [OpenWrt-Devel] [OpenWrt-Users] Question
compile the image with: [*] Force Atheros drivers to respect the user's regdomain settings And let us know On 05/29/2013 10:50 AM, Daniel Lipuma wrote: Hello Have you ever had this problem? We have a Doodle Labs module DL2435 whit an output power of 2W, 33dBm. http://doodlelabs.com/products/2-4-ghz-range/2335-2535-mhz-dl2435-2w.html Is there any way configure the output power at 33dBm??? Because, when i set 33dbm, it change to 17dBm automatically, (i don't configure any Country Code). Thanks in advance. Daniel ___ openwrt-users mailing list openwrt-us...@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-users 0x782BF73E.asc Description: application/pgp-keys signature.asc Description: OpenPGP digital signature ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] random: Not enough entropy pool available for secure operations dir 601/615
random: Only 4/20 bytes of stron[ 1287.91] br-lan: port 2(wlan0) entered forwarding state g random data av[ 1287.92] br-lan: port 2(wlan0) entered forwarding state ailable from /de[ 1287.92] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready v/random random: Not enough entropy pool available for secure operations WPA: [ 1287.94] device wds0 entered promiscuous mode Not enough entro[ 1287.94] ADDRCONF(NETDEV_UP): wds0: link is not ready py in random pool for secure operations - update keys later when the first station connects However; cat /proc/sys/kernel/random/entropy_avail does slowly show number increase. After rebooting; wifi was at 40 and a few minutes later at 131. The issue happens on wifi restarts # cat /proc/cpuinfo system type : Atheros AR7240 rev 2 machine : D-Link DIR-600 rev. A1 processor : 0 cpu model : MIPS 24Kc V7.4 Linux version 3.3.8 (cmsv@nixbits) (gcc version 4.6.3 20120201 (prerelease) (Linaro GCC 4.6-2012.02) ) #1 Mon May 20 09:22:58 EDT 2013 DISTRIB_ID=OpenWrt DISTRIB_RELEASE=Attitude Adjustment DISTRIB_REVISION=r36652 DISTRIB_CODENAME=attitude_adjustment DISTRIB_TARGET=ar71xx/generic DISTRIB_DESCRIPTION=OpenWrt Attitude Adjustment 12.09 Related: https://dev.openwrt.org/ticket/9222 https://dev.openwrt.org/ticket/9631 -- Site: http://wirelesspt.net Mesh: http://tinyurl.com/wirelesspt Admin: http://wirelesspt.net/wiki/Cmsv Twitter: http://twitter.com/wirelesspt Suporte técnico via sms: 91 19 11 798 Donativos/Paypal: http://tinyurl.com/doar-verba Chave publica PGP/SSH: http://wirelesspt.net/arquivos/pk Email assinado digitalmente pelo emissor assegurando autenticidade 0x782BF73E.asc Description: application/pgp-keys signature.asc Description: OpenPGP digital signature ___ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
[OpenWrt-Devel] [PATCH] bump openvpn to 2.3.1
Hi all,
The following patch bumps OpenVPN to 2.3.1. Version 2.3.1 adds native support
for PolarSSL 1.2+, so I dropped the existing 100-polarssl_update.patch from
OpenVPN. Compile tested both the -polarssl and -openssl versions on ar71xx.
Runtime tested the -openssl version on a WNDR3800. It's working fine.
Interestingly, the OpenVPN package Makefile doesn't include an MD5 hash?
Signed-off-by: Adam Gensler openwrt at gnslr.us
---
Index: network/services/openvpn/patches/100-polarssl_update.patch
===
--- network/services/openvpn/patches/100-polarssl_update.patch (revision 36763)
+++ network/services/openvpn/patches/100-polarssl_update.patch (working copy)
@@ -1,60 +0,0 @@
a/src/openvpn/crypto_polarssl.h
-+++ b/src/openvpn/crypto_polarssl.h
-@@ -60,7 +60,7 @@ typedef md_context_t hmac_ctx_t;
- #define OPENVPN_MODE_OFB POLARSSL_MODE_OFB
-
- /** Cipher is in CFB mode */
--#define OPENVPN_MODE_CFB POLARSSL_MODE_CFB128
-+#define OPENVPN_MODE_CFB POLARSSL_MODE_CFB
-
- /** Cipher should encrypt */
- #define OPENVPN_OP_ENCRYPTPOLARSSL_ENCRYPT
a/src/openvpn/ssl_polarssl.c
-+++ b/src/openvpn/ssl_polarssl.c
-@@ -65,23 +65,6 @@ tls_clear_error()
- {
- }
-
--static int default_ciphersuites[] =
--{
--SSL_EDH_RSA_AES_256_SHA,
--SSL_EDH_RSA_CAMELLIA_256_SHA,
--SSL_EDH_RSA_AES_128_SHA,
--SSL_EDH_RSA_CAMELLIA_128_SHA,
--SSL_EDH_RSA_DES_168_SHA,
--SSL_RSA_AES_256_SHA,
--SSL_RSA_CAMELLIA_256_SHA,
--SSL_RSA_AES_128_SHA,
--SSL_RSA_CAMELLIA_128_SHA,
--SSL_RSA_DES_168_SHA,
--SSL_RSA_RC4_128_SHA,
--SSL_RSA_RC4_128_MD5,
--0
--};
--
- void
- tls_ctx_server_new(struct tls_root_ctx *ctx)
- {
-@@ -515,11 +498,11 @@ void key_state_ssl_init(struct key_state
- ssl_set_rng (ks_ssl-ctx, ctr_drbg_random, rand_ctx_get());
-
- ALLOC_OBJ_CLEAR (ks_ssl-ssn, ssl_session);
-- ssl_set_session (ks_ssl-ctx, 0, 0, ks_ssl-ssn );
-+ ssl_set_session (ks_ssl-ctx, ks_ssl-ssn );
- if (ssl_ctx-allowed_ciphers)
- ssl_set_ciphersuites (ks_ssl-ctx, ssl_ctx-allowed_ciphers);
- else
-- ssl_set_ciphersuites (ks_ssl-ctx, default_ciphersuites);
-+ ssl_set_ciphersuites (ks_ssl-ctx, ssl_default_ciphersuites);
-
- /* Initialise authentication information */
- if (is_server)
-@@ -828,7 +811,7 @@ print_details (struct key_state_ssl * ks
- ssl_get_version (ks_ssl-ctx),
- ssl_get_ciphersuite(ks_ssl-ctx));
-
-- cert = ks_ssl-ctx-peer_cert;
-+ cert = ssl_get_peer_cert(ks_ssl-ctx);
- if (cert != NULL)
- {
- openvpn_snprintf (s2, sizeof (s2), , counter_format bit RSA,
(counter_type) cert-rsa.len * 8);
Index: network/services/openvpn/Makefile
===
--- network/services/openvpn/Makefile (revision 36763)
+++ network/services/openvpn/Makefile (working copy)
@@ -9,7 +9,7 @@
PKG_NAME:=openvpn
-PKG_VERSION:=2.3.0
+PKG_VERSION:=2.3.1
PKG_RELEASE=1
PKG_SOURCE_URL:=http://swupdate.openvpn.net/community/releases
___
openwrt-devel mailing list
openwrt-devel@lists.openwrt.org
https://lists.openwrt.org/mailman/listinfo/openwrt-devel
