Kong pro firmware for IPQ806x (R7500, R7800, EA8500, ...)

OK, new bins are up, which include the missing nss-ifb kernel module. I think I missed the option last time I changed my repo. NSS-QOS should be working again.

P.S. I have flashed the EA8500 build 3 times now, no issue.

1 Like

flashing mine right now! thank you kong!!!

Whats the cpu utilization stats on a R7800 on the latest build ? I know some build had an issue which constantly kept the CPU running at 40% (0.40 ~ 0.45) in the minimum.
Also, are the WiFi speeds still good (around 600mbps down and up) on the 5GHz band in 80MHz mode ?
Lemme know.
Thx

well i am sure i am doing something wrong, maybe flash from web interface causes the broblem, still get no boot, tried to flash standard openwrt 21.02,rc3 and then upgrade to kong nss but still getting a system which doesnt respond and need to reset it 3 times to make it boot on the old partition, should I flash it via ssh instead of web interface to see a difference?

And before flashing from standard openwrt to nss build you reset it?

There's something wrong with nslookup, except for K4.14 builds.

bind-nslookup returns blank

_______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 KONG 20, r16991-7371c0b849
 -----------------------------------------------------
root@OpenWrt:~# nslookup openwrt.org localhost
Server:localhost
Address:127.0.0.1#53

Non-authoritative answer:
Name:openwrt.org
Address: 139.59.209.225
Name:openwrt.org
Address: 2a03:b0c0:3:d0::1af1:1

root@OpenWrt:~# nslookup manifest.googlevideo.com

root@OpenWrt:~#

YT adblocking script

[...]
#defeat redirecting PTR lookups
      killall -HUP dnsmasq; sleep 5
      A='^Address [0-9]+: '; I='[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+'
      while read D; do
        { nslookup $D 2>/dev/null; echo -n " $?" >>badhosts.codes; } \
        | sed -nE "/$A$I/{s/$A($I).*/\1 $D/p;q}"
      done <badhosts.ptr >>badhosts
    echo '' >> badhosts.codes
    wc -l badhosts \
    | awk '{printf "%s has %d lines, exit codes",$2,$1}' \
    | cat - badhosts.codes \
    | logger -t "startup-code adblocker"
  killall -HUP dnsmasq

Everything else is working fine now, cpu .40 idle usage though.
Thank you for your support.

root@KONGR7800:~# nslookup manifest.googlevideo.com
Server:         192.168.5.1
Address:        192.168.5.1#53

Non-authoritative answer:
Name:   manifest.googlevideo.com
Address: 216.58.207.174
Name:   manifest.googlevideo.com
Address: 2a00:1450:4016:807::200e

works here. What does top display for load. I have zero cpu load when idle.

1 Like

Yep, messing with sysctl to disable ipv6 seems to break nslookup with master builds now

22:34:34 up  1:08,  load average: 0.45, 0.52, 0.57

That output doesn't help miuch, better would be something like this:

By the way. To see each core, you can press "1", after you started top.

Mem: 220852K used, 255492K free, 9172K shrd, 10888K buff, 41784K cached
CPU0:   0% usr   0% sys   0% nic  98% idle   0% io   0% irq   1% sirq
CPU1:   0% usr   0% sys   0% nic  99% idle   0% io   0% irq   0% sirq
Load average: 0.44 0.40 0.42 3/89 6942
  PID  PPID USER     STAT   VSZ %VSZ %CPU COMMAND
 1312     1 root     S     4952   1%   0% /usr/sbin/hostapd -s -g /var/run/hostapd/global
 6942  6934 root     R     1124   0%   0% top
  287     1 root     S      816   0%   0% /sbin/urngd
    9     2 root     SW       0   0%   0% [ksoftirqd/0]
   76     2 root     IW       0   0%   0% [kworker/0:3-eve]
 6841     2 root     SW       0   0%   0% [kworker/u4:0+ec]
 6920     2 root     IW       0   0%   0% [kworker/1:2-eve]
 4228     1 dnsmasq  S    25420   5%   0% /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf.cfg01411c -k -x /var/run/dnsmasq/dnsmasq.cfg01411c.pid
 3107     1 root     S    13240   3%   0% /usr/sbin/syslog-ng --foreground
 2002     1 root     S     8588   2%   0% /usr/sbin/radiusd -s
 1313     1 root     S     4856   1%   0% /usr/sbin/wpa_supplicant -n -s -g /var/run/wpa_supplicant/global
 3194     1 root     S     4704   1%   0% /usr/sbin/uhttpd -f -h /www -r OpenWrt -x /cgi-bin -u /ubus -t 60 -T 30 -k 20 -A 1 -n 3 -N 100 -R -p 0.0.0.0:80 -p [::]:80 -C /etc/uhttpd.crt -K /etc/uhttpd.key -s 0.0.0.0:443 -s [::]:443 -q
 4246     1 nobody   S     4704   1%   0% /usr/sbin/https-dns-proxy -r https://security.cloudflare-dns.com/dns-query -a 127.0.0.1 -p 5053 -b 1.1.1.2,1.0.0.2 -u nobody -g nogroup -4
  985     1 root     S     2000   0%   0% /sbin/rpcd -s /var/run/ubus/ubus.sock -t 30
 3873     1 nobody   S     1776   0%   0% avahi-daemon: running [OpenWrt.local]
 1375     1 root     S     1600   0%   0% /sbin/netifd
    1     0 root     S     1400   0%   0% /sbin/procd
 3252     1 root     S     1312   0%   0% /usr/bin/dbus-daemon --system
 3991     1 root     S     1256   0%   0% /sbin/blockd
 1431     1 root     S     1252   0%   0% /usr/sbin/odhcpd
 3321     1 root     SN    1124   0%   0% /usr/sbin/nlbwmon -o /var/lib/nlbwmon -b 524288 -i 24h -r 30s -p /usr/share/nlbwmon/protocols -G 10 -I 1 -L 10000 -Z -s 192.168.0.0/16 -s 172.16.0.0/12 -s 10.0.0.0/8 -s 192.168.1.1/24
 6934  6933 root     S     1116   0%   0% -ash
 1527     1 root     S     1112   0%   0% /usr/sbin/crond -f -c /etc/crontabs -l 5
 2130  1375 root     S     1108   0%   0% udhcpc -p /var/run/udhcpc-eth0.2.pid -s /lib/netifd/dhcp.script -f -t 0 -i eth0.2 -x hostname:OpenWrt -C -R -O 212 -O 121
  201     1 ubus     S     1052   0%   0% /sbin/ubusd
  933     1 logd     S     1032   0%   0% /sbin/logd -S 64
 6933  2285 root     S      888   0%   0% /usr/sbin/dropbear -F -P /var/run/dropbear.1.pid -p 192.168.1.1:22 -K 300 -T 3
 2285     1 root     S      868   0%   0% /usr/sbin/dropbear -F -P /var/run/dropbear.1.pid -p 192.168.1.1:22 -K 300 -T 3
 4880     1 root     S      752   0%   0% /usr/sbin/igmpproxy -n /var/etc/igmpproxy.conf
 3421     1 root     S      716   0%   0% /usr/sbin/ntpclient -i 600 -s -l -D -p 123 -h time.cloudflare.com
  207     1 root     S      704   0%   0% /sbin/askfirst /usr/libexec/login.sh
 5298     2 root     IW       0   0%   0% [kworker/u4:3-ec]
  400     2 root     IW       0   0%   0% [kworker/u4:2-ev]
   10     2 root     IW       0   0%   0% [rcu_sched]
 6870     2 root     IW       0   0%   0% [kworker/1:0-eve]
 6897     2 root     IW       0   0%   0% [kworker/1:1-eve]
   15     2 root     SW       0   0%   0% [ksoftirqd/1]
   63     2 root     SW       0   0%   0% [ubi_bgt0d]
   14     2 root     SW       0   0%   0% [migration/1]
   11     2 root     SW       0   0%   0% [migration/0]
   64     2 root     IW<      0   0%   0% [kworker/0:1H-kb]
    2     0 root     SW       0   0%   0% [kthreadd]
   74     2 root     IW<      0   0%   0% [scsi_tmf_0]
   73     2 root     SW       0   0%   0% [scsi_eh_0]
   75     2 root     IW<      0   0%   0% [uas]
  145     2 root     SW       0   0%   0% [ubifs_bgt0_1]
   70     2 root     SW       0   0%   0% [irq/45-keys]
   69     2 root     SW       0   0%   0% [irq/44-keys]
   71     2 root     SW       0   0%   0% [irq/46-keys]
   61     2 root     IW<      0   0%   0% [dsa_ordered]
  367     2 root     IW<      0   0%   0% [bond0]
  389     2 root     IW<      0   0%   0% [ath10k_tx_compl]
  388     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  677     2 root     IW<      0   0%   0% [ath10k_wq]
  678     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  361     2 root     IW<      0   0%   0% [nss_gre_redir_l]
  381     2 root     IW<      0   0%   0% [cfg80211]
  359     2 root     IW<      0   0%   0% [nss_freq_queue]
  352     2 root     IW<      0   0%   0% [gmac_workqueue]
  358     2 root     IW<      0   0%   0% [nss_data_plane_]
  360     2 root     IW<      0   0%   0% [coredump_wait]
  387     2 root     IW<      0   0%   0% [ath10k_wq]
 1283     2 root     IW<      0   0%   0% [ecm_nss_ipv4_wo]
 1282     2 root     SW       0   0%   0% [ECM_wifi_event]
 1284     2 root     IW<      0   0%   0% [ecm_nss_ipv6_wo]
  679     2 root     IW<      0   0%   0% [ath10k_tx_compl]
   60     2 root     IW<      0   0%   0% [ipv6_addrconf]
   65     2 root     IW<      0   0%   0% [kworker/1:1H-kb]
   72     2 root     IW<      0   0%   0% [ata_sff]
   50     2 root     SW       0   0%   0% [watchdogd]
   49     2 root     IW<      0   0%   0% [kworker/u5:0]
   52     2 root     SW       0   0%   0% [kswapd0]
   29     2 root     IW<      0   0%   0% [pdecrypt_serial]
   21     2 root     SW       0   0%   0% [kcompactd0]
   20     2 root     IW<      0   0%   0% [writeback]
   28     2 root     IW<      0   0%   0% [pencrypt_serial]
   48     2 root     IW<      0   0%   0% [kblockd]
   55     2 root     SW       0   0%   0% [irq/40-aerdrv]
   13     2 root     SW       0   0%   0% [cpuhp/1]
   12     2 root     SW       0   0%   0% [cpuhp/0]
   17     2 root     IW<      0   0%   0% [kworker/1:0H-kb]
    8     2 root     IW<      0   0%   0% [mm_percpu_wq]
    4     2 root     IW<      0   0%   0% [rcu_par_gp]
    3     2 root     IW<      0   0%   0% [rcu_gp]
    6     2 root     IW<      0   0%   0% [kworker/0:0H-kb]
   19     2 root     SW       0   0%   0% [oom_reaper]
   56     2 root     SW       0   0%   0% [irq/42-aerdrv]
 5226     2 root     IW       0   0%   0% [kworker/0:0]

As you can see, there is no load, zero cpu load no sirq etc. it looks like a bug in top output or the place where the Load average is calculated. I didn't pay attention to the Load average before, but I see the same here.

But this is definitely wrong.

1 Like

Your build has NSS enabled? It looks like the nss-ecm bug where it is using uninterruptible sleep APIs in the kernel worker thread. Load will go to 1.0 over time, even if the CPU is idling. If so, this patch will help:

1 Like

This patch is already included:

And I see no high load. It should show up in top, but it does only on load average calc.
But lets see if removing the qca modules makes a difference.

Update: I completely removed nss modules + mac80211 patches from the build reflashed and have exactly the same load display issue. Thus it has nothing to do with nss support.

1 Like

Interesting enough. I have an NSS enabled build using @ACwifidude which I built myself locally and I am seeing that it doesn't have the ability to show individual core details using the top utility/command (when pressing 1). Probably, that setting isn't baked into top (menuconfig ?). However, the load average seems to be calculated correctly there (or is it?) and it does seem to be consistent with htop load calcs.

htop however does show individual core details

EDIT2: I wanted to make an observed statement regarding the WiFi performance on the build i am using... I am able to transmit at nearly 85MB/s (that's in Bytes) on a HT80 mode 5GHz connection (which translates to roughly 700mbps). This is using an Intel AX200 card (my connection is at 866mbps up/down to my R7800). My test was done by uploading a 4.6GB mkv file to my wired NAS from my desktop (wireless 5GHz HT80 mode), LAN-LAN. Windows 10 file transfer graph was also consistent with speeds maintaining between 75 and 85MB/s (mostly above 80MB/s).
Download speeds are not as consistent (I have FTTH symmetric Gbit line), and Wireless peaks at 640 mbps (but it isn't sustained). When I look at Windows 10 Task Manager's performance tab for my wifi card (or the Windows 10 file transfer grap), I see a peak and then drop and then peak and drop, with drops being a longer duration than the peak... (and I don't run any QOS since I figured I have full line speed, let 'er rip).

I might just give this build a shot to compare the two now that I know the top and uptime load metrics are bogus (but still need to be fixed somehow).

1 Like

Did you compile the 21.02 branch?

I'm running Master (not 21.02)

Checkout the updated build.

1 Like

yep i remember you mentioned it from the first days of nss that these builds are not 100% compatible with standard openwrt settings and need reset!! but the problem might be my router, i am afraid it has errors in flash memory!! will try once again later with 26/6 build

As already mentioned on the Forum there is a more elegant way to block IPv6 without disabling it at a system level (via sysctl).
This is not a universal solution, of course, but in most cases this method eliminates the need to completely disable IPv6.

Just add the following traffic rules to /etc/config/firewall:
Note: These rules should be added prior to any other traffic rules!

config rule
	option	name		'[IPv6] [ANY] to [DEVICE] - ALL - DROP'
	option	family		'ipv6'
	option	src			'*'
	list	proto		'all'
	option	target		'DROP'
	option	enabled		'1'

config rule
	option	name		'[IPv6] [ANY] to [ANY] - ALL - DROP'
	option	family		'ipv6'
	option	src			'*'
	option	dest		'*'
	list	proto		'all'
	option	target		'DROP'
	option	enabled		'1'

Next apply new configuration by reloading firewall:
/etc/init.d/firewall reload

Verify results to ensure the created rules are prepending all other FW3-autogenerated chains (zone_xxx_input, zone_xxx_forward etc.):

ip6tables -nvL INPUT && ip6tables -vS INPUT
ip6tables -nvL FORWARD && ip6tables -vS FORWARD
1 Like
18:05:24 up 10:00,  load average: 0.25, 0.26, 0.25

Mem: 214628K used, 261720K free, 9172K shrd, 10888K buff, 41772K cached
CPU0:   0% usr   0% sys   0% nic  98% idle   0% io   0% irq   1% sirq
CPU1:   0% usr   0% sys   0% nic  99% idle   0% io   0% irq   0% sirq
Load average: 0.32 0.26 0.25 3/91 6386
  PID  PPID USER     STAT   VSZ %VSZ %CPU COMMAND
 1314     1 root     S     4952   1%   0% /usr/sbin/hostapd -s -g /var/run/hostapd/global
    7     2 root     SW       0   0%   0% [kworker/u4:0+ec]
 6385  6377 root     R     1124   0%   0% top
 3015     1 root     SN    1124   0%   0% /usr/sbin/nlbwmon -o /var/lib/nlbwmon -b 524288 -i 24h -r 30s -p /usr/share/nlbwmon/protocols -G 10 -I 1 -L 10000 -Z -s 192.168.0.0/16 -s 172.16.0.0/12 -s 10.0.0.0/8 -s 192.168.1.1/24
  290     1 root     S      816   0%   0% /sbin/urngd
 6363     2 root     IW       0   0%   0% [kworker/0:1-eve]
 6358     2 root     IW       0   0%   0% [kworker/1:0-eve]
 3921     1 dnsmasq  S    25476   5%   0% /usr/sbin/dnsmasq -C /var/etc/dnsmasq.conf.cfg01411c -k -x /var/run/dnsmasq/dnsmasq.cfg01411c.pid
 2641     1 root     S    13240   3%   0% /usr/sbin/syslog-ng --foreground
 2004     1 root     S     8588   2%   0% /usr/sbin/radiusd -s
 3933     1 nobody   S     4948   1%   0% /usr/sbin/https-dns-proxy -r https://security.cloudflare-dns.com/dns-query -a 127.0.0.1 -p 5053 -b 1.1.1.2,1.0.0.2 -u nobody -g nogroup -4
 1315     1 root     S     4856   1%   0% /usr/sbin/wpa_supplicant -n -s -g /var/run/wpa_supplicant/global
 2845     1 root     S     4820   1%   0% /usr/sbin/uhttpd -f -h /www -r OpenWrt -x /cgi-bin -u /ubus -t 60 -T 30 -k 20 -A 1 -n 3 -N 100 -R -p 0.0.0.0:80 -p [::]:80 -C /etc/uhttpd.crt -K /etc/uhttpd.key -s 0.0.0.0:443 -s [::]:443 -q
  987     1 root     S     2000   0%   0% /sbin/rpcd -s /var/run/ubus/ubus.sock -t 30
 3551     1 nobody   S     1836   0%   0% avahi-daemon: running [OpenWrt.local]
 1377     1 root     S     1600   0%   0% /sbin/netifd
    1     0 root     S     1400   0%   0% /sbin/procd
 2969     1 root     S     1312   0%   0% /usr/bin/dbus-daemon --system
 3666     1 root     S     1256   0%   0% /sbin/blockd
 1434     1 root     S     1252   0%   0% /usr/sbin/odhcpd
 6377  6376 root     S     1116   0%   0% -ash
 1526     1 root     S     1112   0%   0% /usr/sbin/crond -f -c /etc/crontabs -l 5
 2204  1377 root     S     1108   0%   0% udhcpc -p /var/run/udhcpc-eth0.2.pid -s /lib/netifd/dhcp.script -f -t 0 -i eth0.2 -x hostname:OpenWrt -C -R -O 212 -O 121
  203     1 ubus     S     1052   0%   0% /sbin/ubusd
  935     1 logd     S     1032   0%   0% /sbin/logd -S 64
 6374  2291 root     S      924   0%   0% /usr/sbin/dropbear -F -P /var/run/dropbear.1.pid -p 192.168.1.1:22 -K 300 -T 3
 6376  2291 root     S      888   0%   0% /usr/sbin/dropbear -F -P /var/run/dropbear.1.pid -p 192.168.1.1:22 -K 300 -T 3
 2291     1 root     S      868   0%   0% /usr/sbin/dropbear -F -P /var/run/dropbear.1.pid -p 192.168.1.1:22 -K 300 -T 3
 4576     1 root     S      752   0%   0% /usr/sbin/igmpproxy -n /var/etc/igmpproxy.conf
 2874     1 root     S      716   0%   0% /usr/sbin/ntpclient -i 600 -s -l -D -p 123 -h time.cloudflare.com
  210     1 root     S      704   0%   0% /sbin/askfirst /usr/libexec/login.sh
  677     2 root     IW       0   0%   0% [kworker/u4:2-ev]
    9     2 root     SW       0   0%   0% [ksoftirqd/0]
   10     2 root     IW       0   0%   0% [rcu_sched]
   15     2 root     SW       0   0%   0% [ksoftirqd/1]
 6372     2 root     IW       0   0%   0% [kworker/0:2-eve]
   14     2 root     SW       0   0%   0% [migration/1]
   11     2 root     SW       0   0%   0% [migration/0]
   65     2 root     SW       0   0%   0% [ubi_bgt0d]
 5339     2 root     IW       0   0%   0% [kworker/u4:1-ec]
    2     0 root     SW       0   0%   0% [kthreadd]
   78     2 root     IW<      0   0%   0% [uas]
   75     2 root     SW       0   0%   0% [scsi_eh_0]
   74     2 root     IW<      0   0%   0% [ata_sff]
   76     2 root     IW<      0   0%   0% [scsi_tmf_0]
  148     2 root     SW       0   0%   0% [ubifs_bgt0_1]
   71     2 root     SW       0   0%   0% [irq/44-keys]
   67     2 root     IW<      0   0%   0% [kworker/1:1H-kb]
   72     2 root     SW       0   0%   0% [irq/45-keys]
   60     2 root     IW<      0   0%   0% [ipv6_addrconf]
  364     2 root     IW<      0   0%   0% [bond0]
  386     2 root     IW<      0   0%   0% [ath10k_tx_compl]
  385     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  679     2 root     IW<      0   0%   0% [ath10k_wq]
  680     2 root     IW<      0   0%   0% [ath10k_aux_wq]
  363     2 root     IW<      0   0%   0% [nss_gre_redir_l]
  379     2 root     IW<      0   0%   0% [cfg80211]
  361     2 root     IW<      0   0%   0% [nss_freq_queue]
  354     2 root     IW<      0   0%   0% [gmac_workqueue]
  360     2 root     IW<      0   0%   0% [nss_data_plane_]
  362     2 root     IW<      0   0%   0% [coredump_wait]
  384     2 root     IW<      0   0%   0% [ath10k_wq]
 1285     2 root     IW<      0   0%   0% [ecm_nss_ipv4_wo]
 1284     2 root     SW       0   0%   0% [ECM_wifi_event]
 1286     2 root     IW<      0   0%   0% [ecm_nss_ipv6_wo]
  681     2 root     IW<      0   0%   0% [ath10k_tx_compl]
   55     2 root     SW       0   0%   0% [irq/42-aerdrv]
   61     2 root     IW<      0   0%   0% [dsa_ordered]
   66     2 root     IW<      0   0%   0% [kworker/0:1H-kb]
   73     2 root     SW       0   0%   0% [irq/46-keys]
   49     2 root     IW<      0   0%   0% [kworker/u5:0]
   48     2 root     IW<      0   0%   0% [kblockd]
   50     2 root     SW       0   0%   0% [watchdogd]
   28     2 root     IW<      0   0%   0% [pencrypt_serial]
   20     2 root     IW<      0   0%   0% [writeback]
   19     2 root     SW       0   0%   0% [oom_reaper]
   21     2 root     SW       0   0%   0% [kcompactd0]
   29     2 root     IW<      0   0%   0% [pdecrypt_serial]
   51     2 root     SW       0   0%   0% [kswapd0]
   12     2 root     SW       0   0%   0% [cpuhp/0]
   13     2 root     SW       0   0%   0% [cpuhp/1]
    8     2 root     IW<      0   0%   0% [mm_percpu_wq]
    4     2 root     IW<      0   0%   0% [rcu_par_gp]
    3     2 root     IW<      0   0%   0% [rcu_gp]
    6     2 root     IW<      0   0%   0% [kworker/0:0H-kb]
   17     2 root     IW<      0   0%   0% [kworker/1:0H-kb]
   54     2 root     SW       0   0%   0% [irq/40-aerdrv]
 6357     2 root     IW       0   0%   0% [kworker/1:2]
 6373     2 root     IW       0   0%   0% [kworker/0:0-eve]
 6386     2 root     IW       0   0%   0% [kworker/u4:3-ev]

@open.nya I'll check it out.