Skip to content
Snippets Groups Projects
  1. Sep 07, 2016
  2. Sep 05, 2016
  3. Sep 02, 2016
  4. Aug 30, 2016
  5. Aug 28, 2016
  6. Aug 27, 2016
  7. Aug 26, 2016
  8. Aug 24, 2016
  9. Aug 22, 2016
    • Matthias Schiffer's avatar
      Unverified
      1c625690
    • Linus Lüssing's avatar
      gluon-core: reenable multicast snooping on WAN side · 6594ba31
      Linus Lüssing authored
      
      Just like we enabled multicast snooping on the batman-adv client bridge
      again, let's do the same for the WAN side.
      
      With one exception: The IGMP/MLD querier is kept disabled to avoid
      becoming too "bossy"/"noisy" on a foreign network. The main router on
      the WAN side should perform querying and by that enable
      IGMP/MLD/snooping if it considers this appropriate there.
      
      Signed-off-by: default avatarLinus Lüssing <linus.luessing@c0d3.blue>
      6594ba31
    • Linus Lüssing's avatar
      gluon-mesh-batman-adv-core: reenable multicast snooping · 2a51d94f
      Linus Lüssing authored
      
      A few issues with the bridge snooping were identified and fixed
      upstream in OpenWRT:
      
      * "firewall: Allow IGMP and MLD input on WAN" (r45613)
      * "kernel: bridge: backport two snooping related patches" (r45783)
      * netifd: "bridge: Fix multicast_to_unicast feature by hairpin+isolate"
        (OW: "netifd: update to the latest version, adds multicast-to-unicast fixes" (r46719))
      * "kernel: bridge, multicast-to-unicast: assign src after pskb_may_pull()" (r46721)
      * "kernel: bridge, multicast-to-unicast: fix echoes on STA" (46765)
      
      These have very likely caused issues with the bridge snooping before,
      which led to disabling it in the past. Let's reenable the multicast
      snooping now that they were fixed for reduced multicast overhead on the
      wifi.
      
      Advantages are the following:
      
      This mildly reduces overhead on the mesh layer. And significantly reduces
      overhead on the AP interface and therefore significantly increases
      available airtime (the currently most significant scalability bottleneck).
      
      Secondly removes an easy, often accidental node-local Denial-of-Service
      vector based on multicast flooding / streaming.
      
      Thirdly, makes node-local multicast streaming feasible.
      
      Finally should noticably increase battery life of mobile devices.
      
      Note: bridge querier is disabled for br-wan. We want to avoid becoming
      too "bossy"/"noisy" on a foreign network.
      
      Signed-off-by: default avatarLinus Lüssing <linus.luessing@c0d3.blue>
      2a51d94f
    • T-X's avatar
      gluon-mesh-batman-adv-core: disable bridge port learning on bat0 (#780) · d5829d87
      T-X authored
      
      The mesh side has become fairly huge in many communities. Up to
      a few thousand entries can currently be found in the forwarding
      database (fdb) of a bridge for its bridge port bat0.
      
      The bridge fdb is kind of redundant to the batman-adv global translation
      table here. Therefore this patch tries to reduce memory footprint by
      following an approach similar to the IGMP/MLD split patchset approach:
      
      Make the bridge oblivious not only regarding multicast listeners towards
      the mesh but with this patch unicast hosts on the mesh, too.
      
      If the destination of an ethernet frame is known by the bridge to be a
      local one, then the frame is forwarded to the according port. If it is
      unknown, then the frame is forwarded to the wifi AP interface and bat0.
      
      mac80211 and batman-adv then know whether to drop or forward a frame
      further through their own book-keeping.
      
      Note that unicast-flood is not disabled for the wifi AP bridge port, nor
      is learning disabled on the wifi AP. This is mainly to keep the
      configuration in UCI and according setup scripts simple ;). However, not
      disalbling unicast-flood on the wifi AP interface might also give a
      minor latency improvement for newly joining wifi clients.
      
      Signed-off-by: default avatarLinus Lüssing <linus.luessing@c0d3.blue>
      d5829d87
    • Matthias Schiffer's avatar
      dropbear: update to LEDE 277f85c21ae0ede4e15e66cbd801b9fb502531df · b00c1a30
      Matthias Schiffer authored
      Includes a few security updates and enables Curve25519 support.
      
      Fixes #223
      Unverified
      b00c1a30
Loading