Use this for visualisation. If you configure your router WiFi across UNII-bounds might or might not have issues depending on which country profile you are using. Basically, only four (4) 80MHz channels are practically usable (if you slot them into right places, otherwise the trample on each other) and even then, only two of them are guaranteed not to be kicked off air by DFS. 160MHz, picking odd channels etc. is fun but not really usable beyond experimentation.
Basically, everything that is gray might get kicked off the air. And you still need to slot it right or it might get even worse.
Is anyone ese having issues connecting devices via Ethernet when running IPQ807x-5.10-backports branch (latest commit)? When connected to WiFi everything works fine but when connecting via Ethernet the packets seem to get lost.
I had SSL errors and lost packets on Ethernet when using build with kmod-qca-nss-drv enabled. After reading this post Adding OpenWrt support for Xiaomi AX3600 - #3874 by hgblob I tried to disable it and since then I don't have such issues
I am using eth0.6 as uplink since my ISP uses VLAN tagging for the PPPoE connection. Maybe that is the issue. I could try untagging on another router to see if that solves the problem.
$ curl -vv https://www.google.com
* Expire in 0 ms for 6 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 0 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 4 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 1 ms for 1 (transfer 0x5573e38f30)
* Expire in 2 ms for 1 (transfer 0x5573e38f30)
* Trying 216.58.215.132...
* TCP_NODELAY set
* Expire in 149995 ms for 3 (transfer 0x5573e38f30)
* Expire in 200 ms for 4 (transfer 0x5573e38f30)
* Connected to www.google.com (216.58.215.132) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* successfully set certificate verify locations:
* CAfile: none
CApath: /etc/ssl/certs
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to www.google.com:443
* Closing connection 0
curl: (35) OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to www.google.com:443
I am also using IPv4 only.
I tried untagging the traffic outside the router and the issues are gone. So we can confirm that the problem was with the VLAN uplink. Thanks!
Just to confirm, you did try without NSS, and it produced the same issue?
@robimarko I know you are going to hate me, but it seems we will need to pull those updates for your NSS repo... There are some large scale changes, especially in the DP and NSS-DRV parts. VLAN tagging is not some fancy acceleration feature we can live without
Ok, they can be updated to the latest commit as they pushed 11.4.1 out so some stuff was updated.
I know that NSS-DP hasn't seen an update for sure, not sure about the others
they probably fixed ipv6 as it caused kernel panic with some packet (for example with my network at times the router crashed... probably related to ipv6 rd)