CPU Hogging on EdgeRouter-X

I started running a public NTP server behind my ER-X recently. The server is part of NTP Pool Project and serves many clients over IPv6 only. At its peak, the load can reach about 1000 requests per second. In the extreme cases, it could go as high as 5000 requests…

Read this article

pixelserv-tls v2.1 Scores A in Tests

pixelserv-tls v2.1 is imminent for release. I setup a special instance in my home lab and put it under scrutiny of SSL Labs tests. Test version 2.1.0-rc.2 pleasantly scores an overall A. Quite a few other things from the test report worth highlights. v2.1 brings…

Read this article

Optimised OpenSSL Library for ER-X

This article introduces an optimised build of OpenSSL 1.0.1te for EdgeRouter-X. It is tested in firmware v1.10 and shall work on models sharing the same ER-X platform. Note that this optimised library is not built for Cavium-based EdgeRouters and will not work on those models. Also worth…

Read this article

Run pixelserv-tls on EdgeRouter-X

This article introduces a Debian package pixelserv-tls for ER-X which as of firmware v1.10.0 runs a variant of Debian Wheezy. ER-X has four logical cores which are a huge advantage. pixelserv-tls can make use of as many cores as you throw at it. I believe the package can…

Read this article

Let's Encrypt with DNS-01 on ER-X

This article assumes you already have configured a self-signed certificate for Edgemax GUI. If not, skim through my previous post to gain some background. We want to replace a self-signed certificate with a certificate signed by Let's Encrypt that works for every single browser anywhere without any extra work. We'll…

Read this article

Time to Retire OpenVPN

Recently I setup a test instance of Shadowsocks on my RT-AC56U (Cortex-A9 clocked at 800Mhz). I did quick benchmarks to compare its throughput against my other VPN builds. Here are the three contestants on the server side: IKEv2 IPsec VPN on ER-X; AES128 + SHA1; hardware accelerated OpenVPN on RT-AC56U; AES128…

Read this article

DHCPv6 Prefix Delegation for IPv6

Updated: Jul 8, 2018 I recently switched ISP and gained native IPv6 connectivity. Googled for instructions to setup IPv6 on my ER-X. None of the articles and forum discussions that I found helped me complete the mission successfully. DHCPv6-PD is commonly used by ISPs to dispatch IPv6 addresses to users.…

Read this article