3 ms·

How well does OPNsense deal with bufferbloat in a home networking situation? It appears to implement fq_codel for traffic shaping, but not the newer cake algori

How well does OPNsense deal with bufferbloat in a home networking situation? It appears to implement fq_codel for traffic shaping, but not the newer cake algorithm. Test: https://www.waveform.com/tools/bufferbloat https://www.waveform.com/tools/bufferbloat

doubleg72 3y ago
Probably depends how you tune it, just like pfsense
circularfoyers 3y ago
This and the debacle with Wireguard are the two top reasons that have kept me on OpenWRT.
- WirelessGigabit 3y ago
  Any suggestions for a WiFi 6 mesh running OpenWRT?
- chaxor 3y ago
  Debacle with wireguard? Opnsense has wireguard easily available. Also, it's just base wireguard, so you don't have to go through any extra steps of trying to understand / trust other additions on top of it, which is very nice IMO.
  - circularfoyers 3y ago
    I'm referring to the kernel implementation of it, unless you weren't. But I think you likely are, considering it is now in the mainline FreeBSD kernel. But this took more than 2 years after it was mainlined into the Linux kernel[1], and the delay was largely was because of what happened regarding it's initial implementation[2]. That's the debacle I'm talking about. [1]: https://www.phoronix.com/news/FreeBSD-WireGuard-Lands-2022 https://www.phoronix.com/news/FreeBSD-WireGuard-Lands-2022 [2]: https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice...
spants 3y ago
https://www.waveform.com/tools/bufferbloat?test-id=5115e016-04a2-427e-b6a4-a012471762d7 https://www.waveform.com/tools/bufferbloat?test-id=5115e016-... No problem with bufferbloat using flowqueue-CoDel. Also no problems with wireguard... Using it to vpn in and also out for some routes to mullvad.
koyote 3y ago
Huh, TIL about bufferbloat. I run OPNsense (very happy with it) and had a B, so I followed this guide (https://docs.ibracorp.io/opnsense/ https://docs.ibracorp.io/opnsense/) and I now have A+. Do you have any information on fq_codel vs cake?
- mrbigbob 3y ago
  Cake is to my knowledge a successor to fq codel. here are some helpful links https://www.bufferbloat.net/projects/codel/wiki/ https://www.bufferbloat.net/projects/codel/wiki/ https://www.bufferbloat.net/projects/codel/wiki/CakeTechnical/ https://www.bufferbloat.net/projects/codel/wiki/CakeTechnica...

doubleg72 3y ago

Probably depends how you tune it, just like pfsense

circularfoyers 3y ago

This and the debacle with Wireguard are the two top reasons that have kept me on OpenWRT.

WirelessGigabit 3y ago
Any suggestions for a WiFi 6 mesh running OpenWRT?
chaxor 3y ago
Debacle with wireguard? Opnsense has wireguard easily available. Also, it's just base wireguard, so you don't have to go through any extra steps of trying to understand / trust other additions on top of it, which is very nice IMO.
- circularfoyers 3y ago
  I'm referring to the kernel implementation of it, unless you weren't. But I think you likely are, considering it is now in the mainline FreeBSD kernel. But this took more than 2 years after it was mainlined into the Linux kernel[1], and the delay was largely was because of what happened regarding it's initial implementation[2]. That's the debacle I'm talking about. [1]: https://www.phoronix.com/news/FreeBSD-WireGuard-Lands-2022 https://www.phoronix.com/news/FreeBSD-WireGuard-Lands-2022 [2]: https://arstechnica.com/gadgets/2021/03/buffer-overruns-license-violations-and-bad-code-freebsd-13s-close-call https://arstechnica.com/gadgets/2021/03/buffer-overruns-lice...

spants 3y ago

https://www.waveform.com/tools/bufferbloat?test-id=5115e016-04a2-427e-b6a4-a012471762d7 https://www.waveform.com/tools/bufferbloat?test-id=5115e016-... No problem with bufferbloat using flowqueue-CoDel. Also no problems with wireguard... Using it to vpn in and also out for some routes to mullvad.

koyote 3y ago

Huh, TIL about bufferbloat. I run OPNsense (very happy with it) and had a B, so I followed this guide (https://docs.ibracorp.io/opnsense/ https://docs.ibracorp.io/opnsense/) and I now have A+. Do you have any information on fq_codel vs cake?

mrbigbob 3y ago
Cake is to my knowledge a successor to fq codel. here are some helpful links https://www.bufferbloat.net/projects/codel/wiki/ https://www.bufferbloat.net/projects/codel/wiki/ https://www.bufferbloat.net/projects/codel/wiki/CakeTechnical/ https://www.bufferbloat.net/projects/codel/wiki/CakeTechnica...