Posted: Mon Oct 13, 2014 8:18 Post subject: Hardware NAT acceleration in DD-WRT?
Hi, forum and developers (like Kong etc.)!
What are the chances of hardware NAT acceleration being implemented (at all or anytime soon) in DD-WRT?
From several tests I've done with WNDR3700v1, RT-AC66U & RT-N66U I've come to the conclusion that the only firmware which can deliver (and not loose any WAN speed) is Merlin/ASUS builds.
So right now I'm using Merlins build even though I hate the ASUS GUI and features so I don't loose any speed...
Posted: Mon Oct 13, 2014 8:34 Post subject: Re: Hardware NAT acceleration in DD-WRT?
BL wrote:
Hi, forum and developers (like Kong etc.)!
What are the chances of hardware NAT acceleration being implemented (at all or anytime soon) in DD-WRT?
From several tests I've done with WNDR3700v1, RT-AC66U & RT-N66U I've come to the conclusion that the only firmware which can deliver (and not loose any WAN speed) is Merlin/ASUS builds.
So right now I'm using Merlins build even though I hate the ASUS GUI and features so I don't loose any speed...
Kong was working on this but disabled it until it runs fine for everyone. IIRC it's only for Netgear models though.
For me it's a "deal-breaker" (and I don't think I'm alone) so I really hope it's possible to implement on current ASUS models as well as future models of various kinds (different models/makes).
BL,
the topic of ctf has been discussed quite a bit a couple of months ago.
It has to do with the kernel & when Broadcom gives updated ones to BrainSlayer.
Do a forum search and try "ctf" I believe that would be the easiest way to find the discussion so you can get caught up.
Since I have only used kong firmware on my r7000 I do not know if BS put ctf in the firmware for your router. _________________ Router currently owned:
Netgear R7800 - Router
Netgear R7000 - AP mode
SliderMike; I too prefer DD-WRT, that is why I'm so interested in this question and why I posted.
Hopefully BrainSlayer and other developers already knows the need for this and is working on it or will do so when Broadcom (and other chip manufacturers) release the necessary hardware information, meantime I'll (sadly) be on ASUS Merlin.
You could try loading one of kongs firmware (not the latest as it been disabled) for your router.
Kong had ddtb (ddwrt turbo I think it was called) enabled in a couple of the recent builds.
If you experience issues with it, just flash back to asus merlin.
Some users said it worked fine, others complained about this or that.
I never noticed a problem while I was running the firmware.
I don't have that sort of wan speed to tax non-ctf firmware. _________________ Router currently owned:
Netgear R7800 - Router
Netgear R7000 - AP mode
I was going over kongs read me's and I keep forgetting you don't have the r7000.
I do not see ddtb for your line of routers.
Best to keep with asus merlin or stock IMO from what I can see. _________________ Router currently owned:
Netgear R7800 - Router
Netgear R7000 - AP mode
When I was running VDSL2 recently everything was fine, as soon as the fiber was installed I got problems (the WNDR3700 I got couldn't communicate with the fiber modem and the RT-N66U & RT-AC66U lost most of the fiber speed/performance).
But right now, when using Merlin on the RT-AC66U the communication with the modem works and no speed is lost (actually not a single Megabit (which is impressive in itself I think)).
So again, developers of DD-WRT; hope that you can solve the problem with hardware NAT acceleration / ctf soon so me and others in the same situation can go back to our beloved DD-WRT!
Posted: Fri Nov 27, 2015 17:56 Post subject: Command to re-enable it if one wants to try...
I'm using dd-wrt.v24-28366_NEWD-2_K3.x_mega-WNDR4500 and I was wondering how one could re-enable the Hardware NAT if one wants to give it a try. Googled around for it, but don't see anyone explaining how to turn it on..
Posted: Fri Nov 27, 2015 21:29 Post subject: Re: Command to re-enable it if one wants to try...
petersk wrote:
I was wondering how one could re-enable the Hardware NAT if one wants to give it a try.
You can't...it was only an experimental addition (by Kong I think, briefly) a year or two ago. You have to use OEM s/w for hardware NAT. _________________ #NAT/SFE/CTF: limited speed w/ DD#Repeater issues#DD-WRT info: FAQ, Builds, Types, Modes, Changes, Demo#
OPNsense x64 5050e ITX|DD: DIR-810L, 2*EA6900@1GHz, R6300v1, RT-N66U@663, WNDR4000@533, E1500@353,
WRT54G{Lv1.1,Sv6}@250|FreshTomato: F7D8302@532|OpenWRT: F9K1119v1, RT-ACRH13, R6220, WNDR3700v4
Joined: 06 Jun 2006 Posts: 7463 Location: Dresden, Germany
Posted: Sat Nov 28, 2015 0:51 Post subject:
ctf is impossible since its incompatible with any kernel different from broadcoms. the ctf driver is also only provided as binary. (even if i have a nda with broadcom and own all sourcecodes for wireless drivers. no vendor in this world got ever the ctf sourcecode)
but this is no hw nat acceleration. ctf is a software hotpath to accelerate bridged networks. but not nat.
hw nat acceleration might bring some benefits, but some really poor problems.
hw nat acceleration does not take care about any special firewall settings.
it all. it will break alot of iptables specific rules.
current cpu's are fast enough anyway to handle any sort of traffic.
some devices like newer broadcom devices do also offer complete wireless offloading, since chipsets own a own cpu with a own micro os. so the main cpu isnt that busy with handling the wireless stack etc.
so the answer is. some devices/architectures do support hw offloading features which are supported.
but broadcom ctf is no hw acceleratin or hw offloading. its a kernel hack to override the network stack and bypass the complete network stack to make it faster. but bypassing means it bypasses really everything, also features you will miss at the end.
we played with a own ctf like driver one year ago, but it was never finished and had the same troubles with filtering like described here _________________ "So you tried to use the computer and it started smoking? Sounds like a Mac to me.." - Louis Rossmann https://www.youtube.com/watch?v=eL_5YDRWqGE&t=60s