I'm curious, did you test/ compare the throughput for bridge vlan filtering compared to using wan/ lanx directly? On ipq806x/ qca8k, the bridge vlan filtering seems to be slower (I don't have mt7621/ mt7622 devices, so can't test this myself).
Can't say that I have. I suppose with VLAN filtering turned on, the kernel would have to process incoming/outgoing frames more, compared to not using VLAN filtering. But I would think it would not be too much of an overhead. With h/w offload enabled, it should be totally bypassed.
Compared to swconfig? If it's purely DSA, how much of a penalty did you observed?
wed only support ethernet->wlan. So I think qos only have impact on upload since this direction doesn't support offload.
1 Like
My apologies, I had Proto installed, but not wireguard status, and client, I rebooted and they are there.
hi everybody is what banip work to rt3200
i has error when i restart,
i'm on 22.03 snapshot
thanks
I am on OpenWrt SNAPSHOT r19327 coming from r19314 and it works fine. And it never gave me an error. And, for sure it is not device-related.
If you could share the error details, for sure you could get a better feedback.
1 Like
Thu Mar 31 17:29:08 2022 user.info banIP-0.7.10[3629]: banIP is currently disabled, please set the config option 'ban_enabled' to '1' to use this service
Thu Mar 31 17:32:11 2022 user.info banIP-0.7.10[5437]: start banIP processing (reload)
Thu Mar 31 17:32:11 2022 user.err banIP-0.7.10[5437]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:17 2022 user.info banIP-0.7.10[5790]: start banIP processing (restart)
Thu Mar 31 17:32:17 2022 user.err banIP-0.7.10[5790]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:23 2022 user.info banIP-0.7.10[5987]: start banIP processing (restart)
Thu Mar 31 17:32:23 2022 user.err banIP-0.7.10[5987]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:26 2022 user.info banIP-0.7.10[6183]: start banIP processing (refresh)
Thu Mar 31 17:32:26 2022 user.err banIP-0.7.10[6183]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:35 2022 user.info banIP-0.7.10[6369]: start banIP processing (refresh)
Thu Mar 31 17:32:35 2022 user.err banIP-0.7.10[6369]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:35 2022 user.info banIP-0.7.10[6564]: start banIP processing (refresh)
Thu Mar 31 17:32:35 2022 user.err banIP-0.7.10[6564]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:35 2022 user.info banIP-0.7.10[6758]: start banIP processing (refresh)
Thu Mar 31 17:32:35 2022 user.err banIP-0.7.10[6758]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 17:32:37 2022 user.info banIP-0.7.10[6938]: start banIP processing (restart)
Thu Mar 31 17:32:37 2022 user.err banIP-0.7.10[6938]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 18:17:49 2022 user.info banIP-0.7.10[10606]: start banIP processing (restart)
Thu Mar 31 18:17:49 2022 user.err banIP-0.7.10[10606]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables packages
Thu Mar 31 18:17:52 2022 user.info banIP-0.7.10[10798]: start banIP processing (start)
Thu Mar 31 18:17:52 2022 user.err banIP-0.7.10[10798]: iptables utilities '/usr/sbin/iptables, /usr/sbin/iptables-save, /usr/sbin/iptables-restore/-', -, - not executable, please install the relevant iptables package
i think the problem is fw4
i will try the new snapshot build
sorry but he doesn't work too on snapshot 19327 
Looks like this is the case. I found this list of incompatible packages and banip is shown:
1 Like
thank you that's what I thought for now it is not compatible 
thank you again for your message
These are my alternate configs, both for DSA - one using wan/ lan1/2/3/4 directly, the other using bridge vlan filtering
with bridge vlan filtering (and multi CPU port patches) I can't get over ~360 MBit/s on ipq8065 and around 300 MBit/s routing on ipq8064, ignoring bridge vlan filtering and using wan/ lan1/2/3/4 directly gets me significantly beyond that (not that much worse compared to swconfig).
Hi:
I am trying to use sysupgrede to upgrade my belkin openwrt install to latest snapshot.
I have done it several times with no problem.
But from some time ago I get an error when I try to upgrade.
Unsupported package(s): ip6tables, iptables
Please report the error message and request
I suspect that the problem may be with the firewall package having being upgraded to version 4, but not sure.
How can upgrade the router.
My current version is
OpenWrt SNAPSHOT r18660-5bd926efa9
Per this post, I was able to work around this issue using attended sys upgrade:
However, firewall (3) became unstable in my case so I re-flashed to this base firewall 4 release then added-back my packages using attended sys upgrade.
PS - can anyone now confirm hardware flow offloading is working with firewall 4 and PPPoE internet access? I can test easily enough but I saw this recent update and wondering if it's now working?
https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=0f029b3d2b505b40aca9a24a002838ed1060f83d
Update: tested and still not working with hardware flow offloading enabled.
3 Likes
Interesting. From my understanding vlan filtering should not impose much performance penalty, but apparently it does. I'll try to do some iperf tests with my E8450 when it's freed up for more test. Currently am monitoring the DSA switch driver changes for issues. Will report back when I have results.
I have yet to try DSA for ipq806x tho. Looks like it probably is time to start tinkering with it since I would think master will likely go to 5.15 and DSA soon for ipq806x.
1 Like
Last Sunday, I decided to upgrade my router from a previous version. I was facing some problems like iptables does not want to work with the new one.
After remove those package, the sysupgrade did the job.
Now the device is here without any issues.
All ports were assigned a VLAN, so the default VLAN is not present here.
Thanks.
So the problem seem to be ralated with upgrade to firewall4.
As it is my main router and it seems that there are some problems after upgrading, I think I will wait to upgrade to the future 22.03 release.
I don't want to have the device blocked or misworking for several days.
1 Like
Hi guy
I have some questions
about ea8450
1.Is openwrt stable enough to use as main router ? (my isp requires ppoe and vlan tagging)
2.wifi coverage is it good?,Compare to netgear r7000 or linksys ea7500 v2
3.about openwrt because mostly of my devices support only wifi 5 (except my iPhone)
Can i use ac/ax mixed mode in 5ghz ? (For 802.11s mesh to old ea7500 too)
Sorry for my bad eng and i’m new to openwrt.
Thanks!
- Yes.
- I do not have any hard data but my perception that my R7800 allowed high signal strength at medium to far distances vs the RT3200. That said, I do not have any issues with connectivity with the RT3200.
- If you do not have any devices that can use the 802.11ax, and if you have a stable setup currently, you might as well wait IMO.
2 Likes
Thanks man
sadly R7800 not available in my country anymore.
Netgear XR500 is the almost identical successor for R7800. (Sata port is missing)
I have both R7800 and this RT3200. The RT3200/E8450 has a bit weaker WiFi signal, but in general it works well.
4 Likes
1-YES, I'm using it for ~ 1 month without any issues.
2- As far I know, it is working great.
3-A friend test it with his note, don't remember the model well, but he noticed that it was showing 6 in the Wi-Fi icon.
4- Don't worry, English is not my main language.
BTW, I'm using some kind of mesh network between different devices that I have here. All using OpenWrt with same network's name, I mean using something like Fast Transition or FT.
1 Like