Re-visit the Switch in Edgerouter X

In my previous post, we looked at the switch block in MediaTek's MT7621A SoC used in Edgerouter X. To recap, between the CPU and the switch is aggregate 2Gbit/s throughput. The switch block has five GbE ports as well as one optional RGMII interface for the additional SFP port…

Read this article

Edgerouter X - IPsec Benchmarked

As I posted last time, the MediaTek SoC (MT7621AT) in ER-X has a EIP-93 crypto engine. It has impressive performance specification. Authentec quotes 450 Kpps for 64-byte packets and 300-500 Mbit/s throughput. MediaTek quotes around 200 Mbit/s. I found mixed results from my tests. I use AES-128/SHA1…

Read this article

Re-visit Forwarding Speed in ER-X

In a previous post, I did quick tests to show maximum packet switching and forwarding performance in Edgerouter X. That gave a glimpse but left more open questions in my mind. I believe same to sophisticated users. I figured EdgeOS is surprisingly easy to re-configure. I thought it would be…

Read this article

ER-X Forwarding Speed

ER-X demonstrates impressive forwarding performance with hardware offload. Expect some hit with NAT, QoS and firewall but I would imagine it won't be more than 10% reduction of the 924Mbps in my setup. I have on IPv4: 1 NAT rule, 2 firewall rulesets with 14 rules each. The QoS impact…

Read this article

ER-X - Use TLS Certificate for GUI

(September 28, 2016: This post was update since initial publish. Please scroll to bottom for the changes.) I have deployed a self-signed root CA to all family devices that I manage. Partly because I use this root CA for pixelserv-tls. I also issue certificates based on this root CA for…

Read this article

Edgerouter X - Smart Queue

Smart Queue is a traffic control solution that EdgeOS calls its knob-less QoS, using fq_codel and HTB underneath. It can be applied to upload or download or both. Knob-less is not exactly correct. There are still a few parameters exposed through GUI for each direction: Rate - the WAN…

Read this article

The Crypto Engine in Edgerouter X

MediaTek made a deal to license crypto core IP from Authentec Inc in 2011, a company acquired by Apple in 2012. Safe to bet that this IP core is ubiquitously used in MediaTek's SoC offerings, including MT7621 used in Edgerouter X. Authentec calls its IP, EIP-93 Packet Engine. It consists…

Read this article