MikroTik

mikegleasonjr

@lekozs

EDIT: Nope, message re-appeared after one day, still have the bug
ORIGINAL MESSAGE:

I don't know about you but I don't have the messages anymore in 7.14.1

mikegleasonjr

Yes they introduced a bug where when making a DNS request that can't be added to the DNS cache, it thinks the cache is full when the TTL is just actually 0 (the only way to disable the cache). It has nothing to do with my 423.0 MiB available on device especially when the log outputs to memory as rep...

mikegleasonjr

1) It has nothing do to with device memory

2) It has nothing to do with allowing remote requests

mikegleasonjr

I was on 7.13.X previously, never had this message in the log. I don't use cache on DNS queries (it is cached upstream) so my config is this: /ip dns set allow-remote-requests=yes cache-max-ttl=0s servers=X.X.X.X Since 7.14, I get a lot of spam in the logs on every DNS request: cache full, not stori...

mikegleasonjr

started using cake now. its working quite good in the simple queue on my WAN interface. except when Im downloading file from tcp/443, websites slow down like image load time etc. this doesn't happen on watching video or browsing on other devices though. my guess cake cant separate http traffic load...

mikegleasonjr

I run OpenWRT to have wifiwave2 on 3 devices at home (Cap AC). I get 500 mbit/sec on my MacBook running iperf3. But most importantly I get fast roaming on my phone. It fast roams on the same AP between 2 and 5 ghz or across all 3 Cap ACs when I move. I can run an iperf3 test and move around without...

mikegleasonjr

@rextended It's a simple request to make packages smaller or maybe bringing back modularity as in v6. Decision of mounting 16M HD in router was a BIG mistake which implies now a lot of problems for users. It's not our fault that we are now not able to even upgrade quite new devices without some &qu...

mikegleasonjr

Do you see the same behavior when using CAKE's shaper? That should be preferred if you're matching a slow ISP link. Make the simple queue unlimited and enter your bandwidth in the CAKE queue types to give it a try. Cake comes later in the equation, so if the queue gives too much packets already (mo...

mikegleasonjr

I'd like to see a bandwidth measurement from the device doing the downloading too, to see if the queue works, without relying on measurements on the router.

See previous answer.

But also the fact that my buffer bloats shoots up tells me the measurements on the router are accurate.

mikegleasonjr

I did very dirty and very complicated workaround by making queue which matches such downloaders with multi connections and then I set speed almost half from desired one. That's true I noticed it does the same thing with the Epic Games client. What's the general route you've taken ? You're marking p...

mikegleasonjr

https://forum.mikrotik.com/viewtopic.php?p=931315#p931315 I would also like some answers on this but even Mikrotik support I contacted few times about this never gave any useful info.. wow ok I thought I was crazy. Thing is, I am glad we finally narrowed down something that is happening (IMHO) for ...

mikegleasonjr

Hi, Something really weird is happening. Fasttrack is disabled. The simple queue works fine for all traffic except when there's a steam download. Whenever I do speed tests (even by multiple clients at once) or I download large files, the queue barely go over its max limit. But when I start a steam g...

mikegleasonjr

Nobody is going to mention we still cannot specify the direction of the queue in Cake? See.: https://man7.org/linux/man-pages/man8/tc-cake.8.html It defaults to egress.

That way we could have proper flow isolation configuration.

mikegleasonjr

@dtaht Since we have you here, I opened a long time ago, a bug regarding the impossibility of specifying the Cake direction (ingress/egress) when configuring a Cake queue. (Which defaults to egress). So all Cake queues were egress, even when the traffic was for ingress. Does it affect a lot the inte...

mikegleasonjr

How do you specify the Cake bandwidth on asymetric links?

Cake needs a direction in its config to work properly, you can't use a single queue instance to manage both direction.

WTF

mikegleasonjr

The way they do it everywhere else is using queues, not interfaces. So you have 2 queues, one inbound one outbound to specify ingress/egress. At least in OpenWRT and PFSense. Also @normis, can you back that quote up? What happens when it lands in the stable branch, you're still making breaking chang...

mikegleasonjr

@dtaht please save us and explain to a hardware maker again how this should be implemented properly in their solution... We could use Cake in queues before.. it's just we couldn't specify the direction as per https://forum.mikrotik.com/viewtopic.php?p=878190#p878190. But it was working okay. Now we ...

mikegleasonjr

CAKE type was always meant only for interface queue, it had no effect when used in simple queue. so my queue trees are worthless? I can only use cake with interface queue? is it always going to be like this? It had effect on queue trees, I was using them successfully. Even though I was not able to ...

mikegleasonjr

The creator of Cake graced us with his presence and knowledge here and they still half baked it. Numerous persons and I created bug reports and suggested features to make it usable. I was still using it over codel with relative success. Now they killed it. I asked why the feature/bug report was clos...

mikegleasonjr

Is the changelog something carried over or new things compared to 7.2?

mikegleasonjr

How come SUP-59224 has been closed while nothing as been done on that front?

Can we specify the direction of the Cake queue please so that we start testing and managing the bandwidth properly. I imagine we will find bugs so now should be the time to implement it no?

mikegleasonjr

Cake has improved a lot, I can get more bandwidth all the while having the same bufferbloat timings.

Still waiting on being able to specify the direction of the flow :P

But a welcome surprise today...

mikegleasonjr

Thanks for the quick fix for the queues, haven't tried it yet. Can you push a quick fix that fast to specify the direction of the Cake queue too :P

mikegleasonjr

Queues are totally broken in this release (for me) RB4011 PPPoE over VLAN Bridge vlan filtering enabled Had 2 queues in the queue tree, one for inboud, one for outboud. I get no Internet when they're enabled. Ping from the router tells me: "rejected packet" or something like that. LAN traf...

mikegleasonjr

Any idea on what the status of being able to specify direction on a cake queue is?

I was told they were porting all the v6 stuff first, then fixing the v7 stuff after.. (referring this specific issue).

mikegleasonjr

Unfortunately, we still can't define one of the parameters of a Cake queue when creating it: direction . Right now if we don't specify it, it defaults to egress . It is clearly a bug since the parameter Autorate ingress is broken if ingress is not specifed. See my post here: https://forum.mikrotik.c...

mikegleasonjr

Please allow us to specify what kind of Cake queue we are creating, ingress or egress. It has been said lots of time by a lot of users please..

mikegleasonjr

unrelated: I predict for the next release we have v7.2RC1 or v7.2beta1 (testing) with move up to 5.10.x LTS kernel Why do you think MT will jump from 7.1rc4 to 7.2beta1? The usual version path is beta -> rc -> release and I don't see any reason to skip release version with 7.1 series. And I don't t...

mikegleasonjr

rc4 has been out for a while now. I fear that next is 7.1 (and not rc5).

Or a v7.2beta1

mikegleasonjr

Ah, I read the doc. All those options are exposed. Yay! I put a PSA about cake's options over here: https://forum.mikrotik.com/viewtopic.php?p=885000#p885000 Selfishly I'd really like to see from y'all some before (say, htb + sfq)/ after results (cake) on mikrotik's hw. Particularly the higher end ...

mikegleasonjr

Most of us are more interested in when the stable v7 is released (with the newer cake/fq_codel supporting linux kernels), because honestly, cake is what everybody needs (now) and is waiting for. And, not unimportant, many other big brands are already using it. So, users are fleeing towards those ot...

mikegleasonjr

Most of us are more interested in when the stable v7 is released (with the newer cake/fq_codel supporting linux kernels), because honestly, cake is what everybody needs (now) and is waiting for. And, not unimportant, many other big brands are already using it. So, users are fleeing towards those ot...

mikegleasonjr

After upgrade from rc3 to rc4 Cloudflare DoH does no longer work because of SSL errors, even though the DigiCert CA is in the certificate store. Deleting and reimporting the CA does not work. I've seen this myself. Works again after importing the new intermediate certificate " DigiCert TLS Hyb...

mikegleasonjr

After upgrade from rc3 to rc4 Cloudflare DoH does no longer work because of SSL errors, even though the DigiCert CA is in the certificate store. Deleting and reimporting the CA does not work.

After downgrade to rc3 DoH works as expected again.

Same here

mikegleasonjr

So for all the people complaining it still doesnt do X and Y, why do you ? They didnt state it was fixed? I've seen the opposite quite often.. "hey this quite major thing is fixed, but it wasn't in the changelog"! The LEDs now working as the user said above, is another example that wasn't...

mikegleasonjr

Still not able to specify the direction (ingress/egress) for the Cake queue. Defaults to egress. So every Cake queue we create, however it is used as (ingress/egress), its internal algorithm thinks it is used as egress...

EDIT: grammar

mikegleasonjr

Thing is, simple export/import is broken in 7.1rc3, "expected end of line error" when line-break inside double-quote, example : /user group set full policy="local,telnet,ssh,ftp,reboot,read,write,policy,test,winbox,pas\ sword,web,sniff,sensitive,api,romon,dude,tikapp,rest-api" M...

mikegleasonjr

Hey MikroTik, how to use the cake-autorate-ingress flag of cake? cake qdisc defaults to egress according to linux docs. No way to tell it, that it is ingress instead. So if you set cake-bandwidth to 50mbit and enable autoingress: it works for some minutes to finally reduce to 1mbit approx. I assume...

mikegleasonjr

Since privilege escalation is pretty much a given, can we also allow root SSH access to RouterOS directly now? Running a single binary is greatly preferred to running an entire container. Depends on the definition of greatly preferred . So I disagree. You can have your binary in a scratch image if ...

mikegleasonjr

Cake seems to work now. But I can only get the expected ingress performance by: * Setting the Simple queue limits to Unlimited and the Cake specific limit to my target * Setting the target slightly lower than the real speed because we are missing the Ingress keyword to compensate My requests are: *...

mikegleasonjr

My requests are: * Please add the Ingress keyword (trivial change) * Give us the ability to create "really mega simple" queues that do not seperate the shaper and qdisc so that we can entirely bypass HTB and only use Cake shaper Please Mikrotik :) Wild guess: ingress/egress is automatical...

mikegleasonjr

Cake seems to work now. But I can only get the expected ingress performance by: * Setting the Simple queue limits to Unlimited and the Cake specific limit to my target * Setting the target slightly lower than the real speed because we are missing the Ingress keyword to compensate That's what I did ...

mikegleasonjr

Cake is very stable now on RB4011, no crash, I played a lot with the settings, leaving Winbox open for a very long time. Had a 36 hours uptime with the rc2 release someone posted in the rc1 thread.

Thanks!

mikegleasonjr

I have pretty much the same problem, did you resolve it?

mikegleasonjr

Interestingly, my RB4011 has fq_codel on all interfaces and never crashes because of fq_codel. Same here 3 totally different devices, I set fq codel mixed configs, from wifi interfaces, pppoe and queues and they all have 3 days uptime now. Yes there is a possibility that the router rebooted for ano...

mikegleasonjr

This might sound bizarre, but anyone experiencing kernel crashes with cake/fq_codel, can you confirm the router is stable if there is no active WinBox session to the device? We currently think the crashes are caused by WinBox management session shaping. So I tried to open as few and quick Winbox se...

mikegleasonjr

This might sound bizarre, but anyone experiencing kernel crashes with cake/fq_codel, can you confirm the router is stable if there is no active WinBox session to the device? We currently think the crashes are caused by WinBox management session shaping. Thanks for the heads up. Indeed in both cases...

mikegleasonjr

This might sound bizarre, but anyone experiencing kernel crashes with cake/fq_codel, can you confirm the router is stable if there is no active WinBox session to the device? We currently think the crashes are caused by WinBox management session shaping. Thanks for the heads up. Indeed in both cases...

mikegleasonjr

And to the people wondering: yes, Cake is still broken and causes a kernel panic.
Thanks, I can confirm the reboot on a RB4011 too.

Trying out codel right now.

fq codel also rebooted the router after 2 hours, falling back to sfq..

mikegleasonjr

And to the people wondering: yes, Cake is still broken and causes a kernel panic.

Thanks, I can confirm the reboot on a RB4011 too.

Trying out codel right now.

mikegleasonjr

Had to return to OpenWrt, can't withstand unreliable WiFi from ROS and is too much time consuming to fine tune it. OpenWrt WiFi just works fast and reliable out of the box without having to tinker with it. offtopic: I had Linksys WRT1200 and WRT3200 running for several years with OpenWrt. Wifi suck...

mikegleasonjr

EDIT: after almost a day of uptime the router went into a kernel panic and rebooted itself, will try fq_codel to check if it also reboots.

I follow this thread and from what I read, codel panics too, but takes a little longer for some... looking forward to see how it goes on v7.1beta7

mikegleasonjr

Meanwhile I am trying to support an openwrt project that would bring better wifi drivers to my cAP acs at home. https://github.com/openwrt/openwrt/pull/4055 => Nice to see that work was restarted for getting a port done. The actual goal would be to get it into official 21.02 branch in order to reac...

mikegleasonjr

v7 beta releases are somewhat nightly builds with a tag. If it was advertised as such, I wouldn't have said anything in the first place and I would make a decision based on that. Side note, so we all agree that there are devices out there (ex.: Chateau), on shelves, required to be run on a nightly ...

mikegleasonjr

if they wanted to do something constructive then they should donate lots of money to Normis so he can hire more programmers and more testers for in-house work. Magically some think it gets done for free and by prayer, or smoking much ganja. We all paid when we bought the package, which includes sup...

mikegleasonjr

Too many complaints about beta or alpha. It is a testing release so bad things happen. Whether it is beta or alpha, I do not see the point, you install it and take the risk of things not working as supposed to. Remember that mikrotik tries to put lot of features in one box so it is not that easy to...

mikegleasonjr

Well Cake QoS crashes routeros

Does it crashes this beta (beta6) as well?

mikegleasonjr

@infabo The community would immediately have been able to comment on cake being a brand new and not yet successfully implemented feature. I think CODEL has been implemented and came out exactly at the same time as CAKE. They both appeared in 7.1beta3. So I don't think someone could have known that ...

mikegleasonjr

I can uderstand everybody who decide not to install beta version, it's their gear, their time, their life. But why bitching about quality of betas (or lack of it)? Either accept the lack of quality of betas and proceed to test (reporting issues etc.) or stop testing and shut up about it. I was resp...

mikegleasonjr

Will never test betas again ... If you can't accept random things broken, then beta testing is not for you. No need to publicly announce that, we'll accept your decision regardless. From a high level perspective, I think betas are more like alphas. He's kind of right that, while you would expect so...

mikegleasonjr

My RB4011 reboots regularly using Cake: jan/02/1970 00:02:55 system,error,critical router was rebooted without proper shutdown jan/01/2002 01:00:00 system,error,critical router was rebooted without proper shutdown jan/02/1970 00:02:55 system,error,critical router was rebooted without proper shutdown...

mikegleasonjr

I changed both my simple queue and my queue-tree back to sfq and my router has remained stable for 14 hours. I SOO wanted CAKE to be ready for primetime usage on my home router but as I stated above it was causing reboots every 30-45 mins or so. Heres hoping they get the kinks ironed out in the nex...

mikegleasonjr

Finally it is happening. Cake and Codel support in RouterOS: https://mikrotik.com/download/changelog ... lease-tree

Thanks Mikrotik _/\_

mikegleasonjr

Thanks, v6.47.2 introduced my CapACs to max out at 50 mbit/s, now with v6.47.3, they're back up at full speed. CapsMan on a hEX PoE.

mikegleasonjr

Hi, thanks for the ver. 2020 of the guide. I learned a ton while implementing it and playing with it. But for me there was a few issues. Mainly regarding the lack of flexibility and problems about incoming packets not being accounted into the queues (even if properly marked by the mangle rules). I'm...

mikegleasonjr

So how can I access http://192.168.1.1 from the mkt lan?

mikegleasonjr

So I tried to plug a second wire between the two (ether4 mkt to port2 (routed) of the GPON. I don't know what I have to do. I added a static IP on the mkt on the ether4 to be on the same subnet as the GPON. I am able to ping the GPON from the mkt interface, but not from the clients on the lan. Do I ...

mikegleasonjr

Hi, my Mikrotik (bridge ip 192.168.2.1) is sitting behind a GPON (ether1 -> port1) which has its port 1 in bridge mode. Which means the VLAN and PPPoE is configured by my mikrotik router and everything is fine. The remaining ports of the GPON are in routed mode. The GPON has the LAN ip to 192.168.1....

mikegleasonjr

Thank you very much for your replies, I'll look into it tonight!

mikegleasonjr

Hi, I have followed the manual to enable fasttrack with the famous forward rule. Surely enough my queue stopped working. I have a queue which limits the global upload speed to my ISP because when someone uploads a large file my ping times are going up and the connections are slowing down a lot. I st...

Search found 70 matches