Decide on router hardware - Supernode

[darkdrgn2k]

^{This initial comment is collaborative and open to modification by all.}

Task Summary

🎟️ Re-ticketed from: #
📅 Due date: N/A
🎯 Success criteria: Selection on router hardware

• Espresso bin ~ $80.00 Routing Hardware - EspressoBIN 👎 #12
• ClearFog - ~ $200-$350
• Turris Omnia 2020 ~ $500
• PC
  • KANSUNG celeron ~ $200-250
• Edge Point ~ $600 @ CDW for 8port ~ $400 @ Amazon 6 port
  • No VPN
  • Weather proof
  • POE Switch built in
  • Basically an EdgeRouterX Routing Hardware - ROUTER-X #22 with POE and outdoor case

To Do

• Select and test router

Bench Marks

P2P Device directly connected to a computer
Routed Device between two computers routing across subnets
WG P2P Device WG to another Device
WG Routed Device GW to another device and an PC Routed across that link

Devices	P2P	Routed	WG P2P	WG Routed	L2TP P2P	L2TP Routed
EspressoBin	✔️ 931	❌ 335/403	❌ 213/335	--	--
AtomicPi	✔️ 923	✔️ 837	✔️ 895	🟨 665	✔️ 767/863	✔️ 798/705
WRT1900ACV1	✔️ 920	✔️ 879	🟨 350/450	❌ 280/338	--	--
EdgerouteX	356/533	750/510	--	--	--	--
EdgerouteX HW OFFLOAD		913/927	217/180	180/211	--	--
OmniTik POE		900

[darkdrgn2k]

BABELD on Debian
#12 (comment)

BABELD on OpenWRT

opkg update
opkg install babeld

cat  <<"EOF">  /etc/config/babeld
package babeld  
config general
    option 'local_port' '999'

config interface 'eth0'
    option 'ifname' 'eth0'
EOF


cat <<"EOF"> /etc/babeld.conf
echo redistribute if eth0
redistribute deny
EOF

[darkdrgn2k]

Espresso Bin Benchmark

[iperf PC]--gige---[iperf espressobin]
✔️ 931/Mbits/sec Mbits/sec

[iperf PC]--gige---[espressobin bridged]----[iperf PC]
✔️ 936/947 Mbits/sec

[iperf PC]--gige---[espressobin routed]----[iperf PC]
❌ 335/403 Mbits/sec

[iperf exitnode]--gige wan---[iperf espressobin]
❌ 199/199 Mbits/sec MAX drops to 20

[ASoTNetworks]

Doing some testing on the Atomic Pi which is an Atom x5-Z8350 SoC

[iperf PC]--gige---[iperf atomic pi USB3 dongle]
✔️ 923/Mbits/sec

[iperf VM over babled]--gige---[iperf atomic pi onboard]
✔️ 800/Mbits/sec

[iperf VM over babled]--gige---[atomic pi onboard routed over USB3 dongle]---[iperf PC]
✔️ 837/Mbits/sec

[atomic pi wg0 over USB3 dongle]--gige---[WireGuard server with iperf]
✔️ 895/Mbits/sec

[iperf VM over babled]--gige---[atomic pi onboard routed over wg0 encapsulated to physical USB3 dongle]--gige---[VM running WireGuard server with iperf]
🟨 665/Mbits/sec

CPU usage when routing over wireguard

[darkdrgn2k]

Wire guard Test

Client

• ip address 192.168.1.x

cat <<"EOF"> wg0.conf

[Interface]
PrivateKey = cFP6gBOZrvqlt/XkdT7Cp6HOLuNMYa6yVNcCR+e9IEw=
ListenPort = 1000

[Peer]
PublicKey = 1510YjIH8EfQtJ2zxEEUb5+1B4HqmIv86pwpkJwNOW4=
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/0
Endpoint = 192.168.1.2:1000
EOF
ifconfig wg0 down
ip link del dev wg0
ip link add dev wg0 type wireguard
wg setconf wg0 wg0.conf
ip addr add 10.254.254.2/24 dev wg0
ifconfig wg0 up

Server

ip address 192.168.1.2

#### SERVER
cat <<"EOF"> wg0.conf
[Interface]
PrivateKey = 4LMdS6DPRe5gHcmMWYhZqlM9PzFTEeDz0kz0YIMCPm0=
ListenPort = 1000

[Peer]
PublicKey = //C9KkNgCgT/0+bIb6YMS558xNx6wJOwAuGbqO8CGlI=
AllowedIPs = 0.0.0.0/0
AllowedIPs = ::/0

EOF

ifconfig wg0 down
ip link del dev wg0
ip link add dev wg0 type wireguard
wg setconf wg0 wg0.conf
ip addr add 10.254.254.1/24 dev wg0
ifconfig wg0 up

[darkdrgn2k]

Router X with Hardware Offloading
Seepds of ~ 217/180 VPN over WG
If we drop encryption 800-900
Comes as a weather proof version (edge point)
Babeld can be side loaded onto stock - https://github.com/darkdrgn2k/RouterX-Babeld-Package

[darkdrgn2k]

Edge Router does not HW Accelerate over tunnels leaving speeds at ~300Mbps