Kong pro firmware for IPQ806x (R7500, R7800, EA8500, ...)

aamadorj · 2021-04-12T01:43:29.584Z

I tried the 2021-04-09 build for the first time on Friday but I had to revert to 2021-03-14 build immediately because Samba Network Shares stopped working and I was using this service at that time.

Today I tried this build again on my R7500v2 and after some digging I found there is a Network Shares under Luci Services present after first boot but Samba isn't installed by default. I guess this option under Luci Services is a leftover from Kong's effort to make the firmware leaner.

Samba Network Shares started to work fine after I installed the packages from the software repo but now I have two Network Shares tabs under Luci Services. I also installed miniDLNA service and Luci configuration from the repo and it went fine.

The non-ct wireless driver included at the new build is working great with all my devices, which covers several Android clients (versions 9 to 11), printer, computers and TVs. From my amateur perspective, this driver seems to be better than the ct flavor used previously.

Thanks a lot for your work, @KONG.

Net-Config · 2021-04-12T03:35:36.762Z

Successful upgrade here to the April 12 fw for the R7800, with sysupgrade / keep settings process.

In the absence of a clear changelog, the one thing I do see is the kernel bump to 4.14.229.

@Kong - I know you did special work to improve CAKE SQM in R7800 firmwares, but is that included in these 19.07 versions?

I have a 500 Mbs line, runs SQM with CAKE inbound at 380000 and get about 350Mbs net bandwidth, along with 35Mbs up, all resulting in A+ scores with DSLReports and Waveform.

I had read in the (older) changelog in your directory that the 19.07 version can "now shape up to 600Mbps".

What settings do you use for this?

Thanks for all your AWESOME work @KONG !

KONG · 2021-04-12T22:41:59.567Z

The 600Mbps, are plain ethernet to dhcp wan, no wifi load, and no pppoe load and multiple streams and cpu is on the limit. But for such fast subscriptions it is better to use the trunk ipq-nss build. I have created a very simple nss qos script that you can enable through webif. Just choose fq_codel + nss.qos as Queue setup script. This will handle your 500line easily without putting any load on the cpu:-)

In addition to that both builds now come with non-ct firmware with works with 160Mhz channels, in my test with an AX200 client I was able to transfer at 800Mbps, not bad for a 2 stream client. 80Mhz does around 580 on the same client, too bad we don' have working 80+80 yet. It is much better in areas where you have interference from other 5Gs.

aamadorj · 2021-04-12T23:00:12.038Z

I'm having a hard time with Network Shares. I made it work yesterday with the 2021-04-09 build after a factory reset, the installation of Samba package from software repo and a fresh configuration of everything I need. But today I updated to the 2021-04-12 build while keeping the previous configuration and Network Shares broke again. It's worth to mention that after updating the firmware, I added the Samba package as before but none of my devices can see the network shares.

Could this be caused by some kind of interaction with the first Network Shares that appears installed by default? Any ideas will be very appreciated.

KONG · 2021-04-12T23:16:59.104Z

I switched from samba4 to ksmbd, since samba4 is huge and fro simple shares overkill.
I didn't see any problem with ksmbd here with Win10 and Linux, just had to set it up as it does not use the config from samba.

Judging from the latest ksmbd commits it should be pretty stable now

aamadorj · 2021-04-12T23:32:51.210Z

Thanks for the info, @KONG. I'll read about the configuration of ksmbd.

Update: I found this this thread and this issue report very useful.

Net-Config · 2021-04-13T05:14:45.104Z

Thanks Kong - with multiple people on the internet here, stability is the first priority, so not sure what to think of the NSS trunk builds and no easy way to try them in production.

I tinkered with the SQM settings, selecting CAKE and Simplest, instead of Piece of Cake, and added 18 for the link layer adaptation (DocSis modem) vs having None in there thus far.

That puts it at a solid A+ across the board at just in the 400 Mbs and 35 Mbs up. No person ever runs these speeds sustained anyway, so maybe I should leave good enough alone!

Eyerex · 2021-04-13T18:26:34.619Z

Been running 2021-04-12 for a day now on a r7800 and all is good with my devices

iPhone 7s
Fire Cube v2
Samsung Galaxy Tab A7
PS4
Plus 3 Raspberry Pi's running Plex, TVheadend and Picoreplayer

Mrmad1966 · 2021-04-14T06:21:48.296Z

Screenshot_20210414-0712481080×1920 111 KB

Just installed the 12-4 build and again Luci won't load. Twice now this has happened can anyone shed light on why please ? V frustrating..

rnio · 2021-04-15T14:33:05.474Z

KSMBD on latest KONG build:

I do not get proper authenticated connection to the samba shares. I can login as ANY user with or without PW (I guess KSMBD just defaults to guest (read only) mode ?!

Q: WHY am I not able to "FORCE USER = ROOT" ?

I Just get "0" size for all files, which I can not read ... TEMP-Folder files look OK though (R/W)?!

Thanks in advance for any ideas / pointers

Stay safe.

Robert

My settings:

downloaded and installed the ksmbd-utils
tried to add ROOT as KSMBD-User to smbdpasswd using "ksmbd.adduser -a root"
-- getting ERROR: "[smbuseradd/20869]: ERROR: User name sanity check failure"
Tried to add other user with ROOT privileges to ksmbd database
tried setting:

valid users = root
force user = root
force group = root
admin users = root, root

==> nothing seemed to work ?!


[global]
        netbios name = HOME-Router
        server string = HOME Router shar
        workgroup = HOME
        interfaces = br-lan
        bind interfaces only = yes
        ipc timeout = 20
        deadtime = 15
        map to guest = Bad User
#       smb2 max read = 64K
#       smb2 max write = 64K
#       smb2 max trans = 64K
#       cache read buffers = no
#       cache trans buffers = no
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=81>

[IPC$]
    guest ok = yes

######### Dynamic written config options #########

[r]
        path = /
        valid users = root
        create mask = 0666
        directory mask = 0777
        read only = no
        guest ok = no
        hide dot files = no
[global]
        netbios name = HOME-Router
        server string = HOME Router shar
        workgroup = HOME

KONG · 2021-04-15T15:17:07.884Z

Check what's in /etc/config/luci, maybe some old entry or some value that does not belong there.

KONG · 2021-04-15T15:19:32.135Z

I have not used user auth yet, but I just checked and I think for user auth ksmbd tools is needed which comes with ksmbd.adduser and most likely is there so you can create users which are stored in etc/ksmbd/ksmbdpwd.db. I'll include it in the next build.

Mrmad1966 · 2021-04-15T16:03:36.235Z

Thanks for the reply Kong. I have such a simple setup so couldn't see anything in there. I used your sysupgrade I'm sure was dated the 12/4, But looking at your downloads it seems you now have 11/4 for download is this correct ? Am I going mad? If I'm not going mad was there a problem with the 12/4 download. Cheers

rnio · 2021-04-15T16:05:36.362Z

Thanks for the quick reply Danke !

I did try using the ksmbd tools ... and added users etc. ... still did not work ...

FYI

KONG · 2021-04-15T18:54:05.732Z

I just did a simple test using ksmbd.adduser, for me it works, I have to supply user and password and can connect to the share.

rnio · 2021-04-15T20:23:20.095Z

Can you edit any /etc/config files?

I ONLY get:


    Directory: /etc/config


Mode                 LastWriteTime         Length Name
----                 -------------         ------ ----
-a----          5/6/2019   3:44 AM              0 acme
-a----         1/24/2020   8:16 AM              0 acme-opkg
-a----         7/17/2019   1:47 PM              0 adblock
-a----         7/17/2019   1:47 PM              0 adblock-backup

I VERIFIED that the user credentials are now accepted ... being able to get denied auth when PW is wrong etc. ==> So I guess I am accessing the share as my ksmb-user with root privileges.

KONG · 2021-04-15T23:29:30.380Z

No this is not possible, and I think the option in the webif force root should be removed as ksmbd does not allow this anymore to be set to root user, it used to be possible in earlier versions.

rnio · 2021-04-16T03:08:56.018Z

Thanks for the info.

I went ahead and installed SAMBA4 (not much else is running on my router) ... works now as before

Stay safe.

Robert

rnio · 2021-04-16T17:05:44.903Z

Net-Config:

NSS trunk builds

Hi Kong (BTW, I liked your new Movie ),

Is there a material difference beside optimization for IQP-NSS traffic between the two builds?

I tried to import my settings from your default build (4/12/21)... into the trunk ipq-nss build(4/11/21) ... and have issues.

KONG · 2021-04-16T17:32:09.403Z

The NSS build is based on trunk not 19.07. Thus you should reset and reconfigure.