Recent content by paraplu

And back again on the RB4011 as my main router. The Hex, although stable, was unable to deal with the kind of loads in my use cases. My findings to get a RB4011 more stable: Apparently, if you access the conntrack active connection table, through API or webfig or Winbox, CPU throttles up to a...

As a follow-up on this topic trying to share my experiences: Apparently the RB4011 has some stability issues: crashing without reason at random times; sometimes after a month, sometimes after a day after clean reboot. Lots of user-feedback on the mikrotik forums confirm this as well. Difficult...

I would think yes. See last note under the SFP compatibility table on https://wiki.mikrotik.com/wiki/MikroTik_SFP_module_compatibility_table

Watch out with that Mikrotik crs305; it only allows a max of two of their RJ+ 10g adapters; these adapters are power hungry. Optical would be the way to go.

UDP openvpn is upcoming and available with beta ROS7, but haven’t tried this yet. The current IPSEC L2TP vpn solution is working fine with ROS6; giving me around 300mbps between externally wired laptop client, and around 100mbps with my iPhone on 4g. Although the connection times out after a...

running pi-hole on a rPi would take that dns limitation away, which is what I am doing for the past years; works great.

The whole within that budget? Difficult, at the moment. As a router, you could use a DIY small pc box with dual intel 10g nic and a fast cpu. Pfsense on it. Would shave you around 500$ with some old parts. Problem is switch and AP, and the amount of 10g clients. There are some APs with 2.5G lan...

Having an unbalanced up/down, eg your 12mbps upload, COULD kill your wan experience/remote sessions due to bufferbloat, during other download activity. Putting in a device with smart Qos helps a lot on better client latency experience. A cheapy edge X, ERL or mk Hex would be a definite help with...

using Opendns home for the past 10 years, at home for one vlan only, and works fine without paid subscription. Umbrella will set you back a monthly fee; not sure it if would add any advantages in terms of blocking content.

Two routers come to my mind which should be able to handle your requirements for cheaper: Mikrotik Hex Edgerouter X Both can handle 500mbps NAT easily, and provide proper L2TP/ipsec vpn speeds. Both are more popular than linksys.

It all depends on use case. If you have lots of inter-vlan routing (traffic between clients not hitting the WAN) yes a L3 switch is the answer and takes this routing load away from a central WAN router. In my home case, most if not all of my client packets go directly to/from the WAN, for...

Ping test from router to wireless (i)phone always show high latencies. 50 to 100ms seems normal. These devices are not meant to be pinged. Better test the other way around: from your mobile device to router. Any high ping latency you encounter is due to wireless, not the router.

Pure routing with hardware offload and basic firewall rules: no notable difference; both can handle 1 Gbps easily.

Used the excellent Cisco SG350 with Fibre WAN STP and inter vlan routing: works fine both with the MT and ER, both with simple static routing rules, and some ACLs on the switch. If that switch also had NAT this would be more then great, but you still need a separate router which means more...

As a follow up on this topic: Decided to go for the RB4011, selling my ER4. Reasoning: - ER4 bridging IPTV between ISP vlan and eth/vlan gives too much load = no hardware offload. - ER4 SFP didn’t work out. RB4011 is working fine since recent release, with my SFP adapter. - GUI interface of...