R7800 performance

[xeonpj]

no firmware yet compiled with nss ?? Thank you

[ACwifidude]

IPQ806x NSS Drivers

I uploaded my bin folder here: sysupgrade loads and router seems to be working fine. It is a clone of @Ansuel repo with no added custom patches. Only added Luci OpenSSL collection + these 8 packages to the default config for anyone that wants to see how the latest NSS build (26 August 2020) works with their setup: CONFIG_PACKAGE_kmod-nss-ifb=y CONFIG_PACKAGE_kmod-qca-nss-drv=y CONFIG_PACKAGE_kmod-qca-nss-gmac=y CONFIG_PACKAGE_kmod-qca-nss-drv-qdisc=y CONFIG_PACKAGE_kmod-qca-nss-ecm-standa…

Wifi offloading is not working yet (speed is the same as master) but NSS accelerates wired speed to full line rate.

[xeonpj]

you can try without danger of brick ???? Thank you so much

[ACwifidude]

I’ve been running NSS builds for about the last month. R7800 has a good tftp feature - haven’t had to use it. Builds have been stable. Try the sysupgrade - big upgrade in wired speeds.

[xeonpj]

Thanks Friends!!

After installing, do I have to activate something in the firewall window? by hardware? or is it automatic. sqm works? or better off?

[ACwifidude]

You don’t need the box checked for software or hardware off loading in the firewall section (I have both turned off).

SQM requires use of a custom script (I forgot the tc package to be able to use it, I’ll add it on my next build). I’m not using SQM right now, will tinker with it later:

R7800 performance

The script below is used to configure both ingress and egress shapers: # Shape ingress traffic to 500 Mbit with chained NSSFQ_CODEL tc qdisc add dev nssifb root handle 1: nsstbl rate 500Mbit burst 1Mb tc qdisc add dev nssifb parent 1: handle 10: nssfq_codel limit 10240 flows 1024 quantum 1514 target 5ms interval 100ms set_default # Shape egress traffic to 200 Mbit with chained NSSFQ_CODEL tc qdisc add dev eth0 root handle 1: nsstbl rate 200Mbit burst 1Mb tc qdisc add dev eth0 parent 1: handle …

SQM’s performance is very impressive with the NSS cores:

IPQ806x NSS Drivers

Hi @ACwifidude, For testing nss-drv-qdisc/nss-ifb based on Quarky's instructions below you may need to include tc package to configure those. CONFIG_PACKAGE_tc=y I have 1Gb up/down links from ISP and basic dslreport tests using chrome shows; Without any nss-qdics config: [image] Bufferbloat B With Quarky's 500Mb ingress/200Mb egress instructions copy/paste to test it is actually shaping down as expected: [image] Bufferbloat A+ Quarky's instructions adjusted to my 1Gb up/down…

[Chief]

I finally found a time slot that allowed me to swap routers. I can confirm, that my qos integration in webif works for both pppoe and regular wan. I need to adopt the script in order to correctly set the interface, in case someone selects pppoe as wan interface in qos. Qos results are ok for now, but there is room for improvement.

[ACwifidude]

Cool. Let me know the best way to integrate it.

I’ve got the standard SQM package and luci sqm app installed.

[xeonpj]

I have not tried yet due to lack of time, sorry.

[xeonpj]

He visto una nueva versión, alguna mejora?

[ACwifidude]

Kong has a build from 9/9: http://www.desipro.de/openwrt/trunk/ipq806x-nss/

My build is based on @ansuel repo and is using the 5.4.60 kernel (about 2 weeks old, r14339).

My sysupgrade file is incorrectly named r14443 - it is r14339.

ACwifidude/openwrt

This is what is included:

# Use "make defconfig" to expand this to a full .config
CONFIG_TARGET_ipq806x=y
CONFIG_TARGET_ipq806x_generic=y
CONFIG_TARGET_ipq806x_generic_DEVICE_netgear_r7800=y

# exfat is patented
CONFIG_BUILD_PATENTED=y

# NSS Drivers
CONFIG_PACKAGE_kmod-qca-nss-drv=y
CONFIG_PACKAGE_kmod-qca-nss-drv-qdisc=y
CONFIG_PACKAGE_kmod-qca-nss-ecm-standard=y
CONFIG_PACKAGE_kmod-qca-nss-gmac=y
CONFIG_PACKAGE_kmod-nss-ifb=y
CONFIG_PACKAGE_iptables-mod-physdev=y
CONFIG_PACKAGE_kmod-ipt-physdev=y

# Longer waiting for failsafe button push
CONFIG_IMAGEOPT=y
CONFIG_PREINITOPT=y
CONFIG_TARGET_PREINIT_TIMEOUT=5

# Busybox tweaks
CONFIG_BUSYBOX_CUSTOM=y
CONFIG_BUSYBOX_CONFIG_FEATURE_EDITING_SAVEHISTORY=y
CONFIG_BUSYBOX_CONFIG_FEATURE_EDITING_SAVE_ON_EXIT=y
CONFIG_BUSYBOX_CONFIG_FEATURE_LESS_FLAGS=y
CONFIG_BUSYBOX_CONFIG_FEATURE_LESS_REGEXP=y
CONFIG_BUSYBOX_CONFIG_FEATURE_LESS_WINCH=y

# Add-on programs
CONFIG_PACKAGE_irqbalance=y
CONFIG_DROPBEAR_ECC=y

# USB device mount & file systems support
CONFIG_PACKAGE_block-mount=y
CONFIG_PACKAGE_kmod-usb-storage=y
CONFIG_PACKAGE_kmod-fs-cifs=y
CONFIG_PACKAGE_kmod-fs-exfat=y
CONFIG_PACKAGE_libblkid=y
CONFIG_PACKAGE_kmod-fs-ext4=y
CONFIG_PACKAGE_kmod-fs-hfsplus=y
CONFIG_PACKAGE_kmod-fs-msdos=y
CONFIG_PACKAGE_kmod-fs-vfat=y
CONFIG_PACKAGE_ntfs-3g=y
CONFIG_PACKAGE_kmod-nls-cp1250=y
CONFIG_PACKAGE_kmod-nls-cp437=y
CONFIG_PACKAGE_kmod-nls-cp850=y
CONFIG_PACKAGE_kmod-nls-iso8859-1=y
CONFIG_PACKAGE_kmod-nls-iso8859-15=y
CONFIG_PACKAGE_kmod-nls-utf8=y

# IPv6 support
CONFIG_PACKAGE_6in4=y
CONFIG_PACKAGE_6to4=y
CONFIG_PACKAGE_6rd=y

# IPv6 NAT support (ip6tables NAT extensions, ipt-nat6 and nf-nat6 kmods)
CONFIG_PACKAGE_ip6tables-mod-nat=y

# WLAN/WPS support
CONFIG_PACKAGE_hostapd-utils=y
CONFIG_WPA_MSG_MIN_PRIORITY=4
CONFIG_PACKAGE_wpad-openssl=y
# CONFIG_PACKAGE_wpad-basic-wolfssl is not set
# CONFIG_PACKAGE_libustream-wolfssl is not set

# SSL certificates
CONFIG_PACKAGE_ca-certificates=y

# Luci (SSL from OpenSSL)
CONFIG_PACKAGE_luci-ssl-openssl=y
CONFIG_PACKAGE_luci-app-commands=y
CONFIG_PACKAGE_luci-app-sqm=y
CONFIG_PACKAGE_luci-app-dawn=y

# Luci statistics
CONFIG_PACKAGE_luci-app-statistics=y
CONFIG_PACKAGE_collectd-mod-conntrack=y
CONFIG_PACKAGE_collectd-mod-cpufreq=y
CONFIG_PACKAGE_collectd-mod-entropy=y
CONFIG_PACKAGE_collectd-mod-ping=y
CONFIG_PACKAGE_collectd-mod-sqm=y
CONFIG_PACKAGE_collectd-mod-thermal=y
CONFIG_PACKAGE_collectd-mod-uptime=y

# nlbwmon app
CONFIG_PACKAGE_luci-app-nlbwmon=y

# chaoskey TRNG USB dongle
CONFIG_PACKAGE_kmod-chaoskey=y

[xeonpj]

Firewall software stream download disabled?

thanks

[ACwifidude]

Yep turn software offloading off.

I added this to my /etc/rc.local file to link wifi with the Ethernet interfaces:

# NSS Firewall Tweaks
iptables -D FORWARD -m physdev --physdev-is-bridged -j ACCEPT
iptables -I FORWARD 1 -m physdev --physdev-is-bridged -j ACCEPT

[xeonpj]

perfect! what are those lines supposed to do, is wifi traffic supported by nss? I have several wifis created

the governor lines and frequencies in local rc. are no longer necessary?
Thank you

# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

# min scaling frequency: set to 800MHz because of L2 cache issues
echo 800000 > /sys/devices/system/cpu/cpufreq/policy0/scaling_min_freq
echo 800000 > /sys/devices/system/cpu/cpufreq/policy1/scaling_min_freq

sleep 1

# ondemand governor
echo ondemand > /sys/devices/system/cpu/cpufreq/policy0/scaling_governor
echo ondemand > /sys/devices/system/cpu/cpufreq/policy1/scaling_governor
echo 20 > /sys/devices/system/cpu/cpufreq/ondemand/up_threshold 
echo 60 > /sys/devices/system/cpu/cpufreq/ondemand/sampling_down_factor
echo 1000000 > /sys/devices/system/cpu/cpufreq/ondemand/sampling_rate

# NSS Firewall Tweaks
iptables -D FORWARD -m physdev --physdev-is-bridged -j ACCEPT
iptables -I FORWARD 1 -m physdev --physdev-is-bridged -j ACCEPT

exit 0

[ACwifidude]

Wifi offloading still needs to be figured out. If offloads a small bit. NSS is successfully offloading SQM & wired routing (940mbps is now possible).

Regarding the NSS firewall - the iptables commands deletes the default bridge to the physical device and inserts a new bridge to the physical device with the parameter 1 (....don’t know what the 1 signifies, somehow is connecting the virtual NSS interface with the physical device?)

I’ve been trying the performance governor to see what my temps look like with max frequency NSS + main CPU.

The L2 issues have been fixed so you can delete the sleep 1 line. The default is ondemand so you can delete those lines as well.

This is my /etc/rc.local file:

# Put your custom commands here that should be executed once
# the system init finished. By default this file does nothing.

# Ondemand Governor Tweaks
# echo 800000 > /sys/devices/system/cpu/cpu0/cpufreq/scaling_min_freq
# echo 800000 > /sys/devices/system/cpu/cpu1/cpufreq/scaling_min_freq
# echo 20 > /sys/devices/system/cpu/cpufreq/ondemand/up_threshold
# echo 60 > /sys/devices/system/cpu/cpufreq/ondemand/sampling_down_factor
# echo 1000000 > /sys/devices/system/cpu/cpufreq/ondemand/sampling_rate

# Performance Governor
echo performance > /sys/devices/system/cpu/cpufreq/policy0/scaling_governor
echo performance > /sys/devices/system/cpu/cpufreq/policy1/scaling_governor

# NSS Firewall Tweaks
iptables -D FORWARD -m physdev --physdev-is-bridged -j ACCEPT
iptables -I FORWARD 1 -m physdev --physdev-is-bridged -j ACCEPT

# Shape ingress traffic to 500 Mbit with chained NSSFQ_CODEL
# tc qdisc add dev nssifb root handle 1: nsstbl rate 500Mbit burst 1Mb
# tc qdisc add dev nssifb parent 1: handle 10: nssfq_codel limit 10240 flows 1024 quantum 1514 target 5ms interval 100ms set_default

# Shape egress traffic to 34 Mbit with chained NSSFQ_CODEL
tc qdisc add dev eth0 root handle 1: nsstbl rate 34Mbit burst 1Mb
tc qdisc add dev eth0 parent 1: handle 10: nssfq_codel limit 10240 flows 1024 quantum 1514 target 5ms interval 100ms set_default

exit 0

[xeonpj]

You got it all overruled from what I see

I will have to adapt the last line to my 600mb / 600mb connection, I imagine.

When SQM activates it, I have about 60mb in direct download, but if I deactivate it if I reach the total of my line, thank you !!!!!

[ACwifidude]

Yep - I have FQ Codel offloaded to the NSS if I choose. Currently I have some bufferbloat issues on the upload for my asymmetric 940/35 internet. Setting the egress to 34 works well. Download fq codel is turned off and getting full line rate

[xeonpj]

Entiendo que mi sqm, estará recibiendo carga y por eso guarda 60mb de ancha de banda, con sqm activo solo obtengo 550mb de 600mb

[Pedro]

the internet never forgets.

[xeonpj]

I've been testing the firmware for a few days and it's going really well, zero problems. overall performance seems to be improved, placebo effect?

very happy in general, thank you very much.