Diversion Should I use Diversion Standard or Lite for streaming devices?

Dux

New Around Here
I am using Diversion in standard mode exclusively with some Roku Ultras, it is working as expected. I am unaware of any means of installing certifications on these devices. Is there any performance advantage to using Diversion standard with pixelserv-tls in this situation or would using Diversion lite be more appropriate (less work for the router)? My understanding is standard can block https sites, while lite does not, but I wanted to be certain. Any advice is greatly appreciated. Thank you.
 

Treadler

Very Senior Member
I am using Diversion in standard mode exclusively with some Roku Ultras, it is working as expected. I am unaware of any means of installing certifications on these devices. Is there any performance advantage to using Diversion standard with pixelserv-tls in this situation or would using Diversion lite be more appropriate (less work for the router)? My understanding is standard can block https sites, while lite does not, but I wanted to be certain. Any advice is greatly appreciated. Thank you.
Welcome to the forum.

Ive been using Diversion standard, but with Pixelserv disabled, for a long while now.
Im not seeing any ads.

(Disabled Pixelserv, as it broke a number of legitimate web sites for visitors logged onto my guest network. Why, I don’t know, but I was at my wits end trying to figure out what was wrong, disabled Pixelserv & everything fixed.)
 

thelonelycoder

Part of the Furniture
My understanding is standard can block https sites, while lite does not, but I wanted to be certain. Any advice is greatly appreciated. Thank you.
Both block http and https sites. It‘s just that pixelserv-tls can return a (faked) certificate to the device and quit that request more eloquently and faster than the NULL address Diversion Lite serves - if the certificate is imported into devices / browsers.
Deactivating pixelserv-tls in Diversion Standard essentially transforms it to the Lite version. Try it out and see for yourself.
 

Treadler

Very Senior Member
Both block http and https sites. It‘s just that pixelserv-tls can return a (faked) certificate to the device and quit that request more eloquently and faster than the NULL address Diversion Lite serves - if the certificate is imported into devices / browsers.
Deactivating pixelserv-tls in Diversion Standard essentially transforms it to the Lite version. Try it out and see for yourself.
Just a side issue, when I enable Pixelserv, I see some (not a lot) of ads.
Without Pixelserv, Diversion keeps me absolutely ad free.
I have purged, renewed, reinstalled certificates on devices, but still have the issue.

What am I doing wrong? :(
 

elorimer

Very Senior Member
if the certificate is imported into devices / browsers.
I thought it did that regardless of whether the certificate is imported. If the certificate isn't imported or the page rejects it, you get a box; if it is imported and not rejected you get one pixel.

Its of no matter. I like to see the hundred thousand daily requests to scribe.roku getting rejected quickly.
 

Treadler

Very Senior Member
Just a side issue, when I enable Pixelserv, I see some (not a lot) of ads.
Without Pixelserv, Diversion keeps me absolutely ad free.
I have purged, renewed, reinstalled certificates on devices, but still have the issue.

What am I doing wrong? :(
Solved. (I think).
Apple devices, Settings, Safari, Remove all website data.
 

Dux

New Around Here
Both block http and https sites. It‘s just that pixelserv-tls can return a (faked) certificate to the device and quit that request more eloquently and faster than the NULL address Diversion Lite serves - if the certificate is imported into devices / browsers.
Deactivating pixelserv-tls in Diversion Standard essentially transforms it to the Lite version. Try it out and see for yourself.
Thank you for your assistance previously. Diversion Lite is working as expected for blocking ads in streaming devices and for excluding ad blocking globally as follows:

IP Pool Starting Address: 192.168.50.3
Ad-blocking exclusion IP Address: 192.168.50.2
Streaming devices -> Redirection: Router = (Diversion ad-blocking + WAN DNS Setting)
All other devices -> Global Redirection: User defined DNS 1 (IPv4) = (192.168.50.2 + WAN DNS Setting); (IPv6) = ?

I have IPv6 enabled, what do you recommend that I put for the IPv6 Ad-blocking exclusion IP Address? Should I leave the IPv6 value blank? Or, if it is not possible to exclude devices from IPv6 DNS ad-blocking in Diversion Lite, is it best to disable IPv6 altogether?

Thank you again for your assistance on this.

See attachment:
 

Attachments

  • ASUS>LAN>DNS Director.png
    ASUS>LAN>DNS Director.png
    195.8 KB · Views: 47
Last edited:

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top