Posts for: #networking

OpenWrt 23.05 Release: Enhanced Security, Rust Integration and Broad Device Support

OpenWrt 23.05, the open-source Linux operating system for routers and resource-constrained headless embedded systems, has just been released with significant updates and improvements. This release comes with over 4300 commits since the previous release of OpenWrt 22.03, which was launched a little over a year ago.

One of the notable features of OpenWrt 23.05 is its expanded device support. It now supports over 1790 devices, which is an increase of about 200 devices compared to the previous release. Some of the new targets include the Qualcomm IPQ807x target for WiFi 6 SoCs, the Mediatek Filogic 830 and 630 subtarget for WiFi 6/6e chips, and the HiFive Unleashed and Unmatched targets for RISC-V development boards.

In terms of security, OpenWrt 23.05 has switched from using wolfSSL to MbedTLS as the default. This change was made because MbedTLS has a smaller footprint and offers a more stable ABI and LTS releases. However, it’s worth noting that MbedTLS lacks support for TLS 1.3. Therefore, users who require TLS 1.3 can still switch to using wolfSSL.

Another significant addition in this release is support for packages written with the Rust programming language. Some examples of these packages include bottom, maturin, aardvark-dns, and ripgrep. This expansion of supported programming languages provides developers with more flexibility and options when creating applications for OpenWrt.

OpenWrt 23.05 also brings updates to its core components. It now utilizes Linux 5.15 as the foundation for all targets, as well as updated versions of busybox, musl libc, glibc, gcc, and inutils. Additionally, the networking components have seen upgrades, including the use of the hostapd master snapshot from September 2023, dnsmasq 2.89, dropbear 2022.82, and cfg80211/mac80211 from kernel 6.1.24.

For users looking to upgrade from OpenWrt 22.03, the migration from swconfig to DSA configuration that was introduced in the previous releases is no longer an issue. Most people should be able to upgrade smoothly using the sysupgrade utility, which will preserve the configuration. However, it is still recommended to back up the configuration before proceeding with the upgrade.

OpenWrt 23.05 is now available for download, and users can find binary images for their specific targets on the OpenWrt website.

Source: CNX Software – Embedded Systems News.

GL.iNet Releases Flint2 AX6000 Router: High-Speed WireGuard VPN Support with MediaTek MT7986 SoC and 2.5 GbE

GL.iNet has released the Flint2 (also known as GL-MT6000), a new AX6000 router based on the MediaTek MT7986 (Filogic 830) ARM SoC. This router supports VPN speeds of up to 900 Mbps using WireGuard and 190 Mbps with OpenVPN. Compared to previous GL.iNet routers like the Spitz AX and the Beryl AX, which were based on the Filogic 820 (MT7981B) CPU with transfer rates of up to 300 Mbps using WireGuard, the Flint2 is expected to triple the VPN performance.

The GL.iNet Flint2 router comes with the following specifications:

  • SoC – MediaTek MT7986 (Filogic 830) quad-core Arm Cortex-A53 processor @ 2.0 GHz with hardware acceleration engines for Wi-Fi offloading and networking
  • System Memory – 1GB DDR4
  • Storage – 8GB eMMC flash
  • Networking:
    • 2x 2.5 Gbps Ethernet ports
    • 4x Gigabit Ethernet LAN ports
    • 802.11b/g/n/ac/ax WiFi 6 with 4x external Wi-Fi antennas
      • Up to 1,148 Mbps @ 2.4 GHz
      • Up to 4,804 Mbps @ 5 GHz
      • DFS (Dynamic Frequency Selection) support
    • VPN – OpenVPN server/client tested up to 190 Mbps, and WireGuard server/client tested up to 900 Mbps (tests over Ethernet in client mode)
  • USB – 1x USB 3.0 Type-A port
  • Dimensions – 233 x 137 x 57mm

The GL.iNet Flint2 router comes pre-installed with OpenWrt 23.05 (or a fork) with Linux 5.15 and the GL.Inet Admin Panel, which is common to all GL.iNet routers. It supports four different network modes: router, access point, extender, and WDS. The router also includes features such as AdGuard Home, parental controls, and Cloud remote management.

The significant improvement in WireGuard performance, tripling the previous model’s speed, is noteworthy. While the upgrade from a 1.3 GHz dual-core Arm Cortex-A53 CPU to a 2.0 GHz quad-core Cortex-A53 CPU partially explains the increase, the main reason is likely the switch from Linux 5.4 to Linux 5.15. The Filogic 830-based router benefits from in-kernel WireGuard support introduced in Linux 5.6. As a point of comparison, the first Flint router achieves speeds of up to 500 Mbps with WireGuard.

The Filogic 830 SoC used in the Flint2 is also found in other devices, such as the Banana Pi BPI-R3 and BPI-R3 Mini router SBCs.

Source: CNX Software – Embedded Systems News.

Introducing the PALMSHELL NeXT H2: Affordable 10GbE Micro Server

The PALMSHELL NeXT H2 is an affordable micro server and single-board computer (SBC) powered by an AMD Ryzen Embedded R1505G processor. It offers impressive networking capabilities with two 10GbE SFP+ cages and one 2.5GbE RJ45 port. The system also supports up to 32GB of RAM and has storage options including an M.2 NVMe SSD and two SATA drives. It features wireless connectivity options such as WiFi 6, Bluetooth 5.2, and the possibility of adding a 4G LTE or 5G module. These network features make it an interesting option for various homelab uses. Theoretically, the device could support ECC memory as the Ryzen Embedded R1505G has such support, but this is not mentioned in the specifications for the NeXT H2 specifications, although it is mentioned in the specifications for the CPU. It should be noted that such support also depends on motherboard and firmware, not just on the CPU.

The system is equipped with a customized copper heatsink and a 3000 RPM PWM speed control fan for efficient cooling. It can be powered by a 12V to 19V DC power supply. The PALMSHELL NeXT H2 is designed to support multiple operating systems, including Ubuntu, Arch Linux, Fedora, Debian, OpenWrt, Windows, pfSense, and ROS.

The SBC without memory, storage, or wireless connectivity starts at $199. The barebone model with a metal enclosure is priced at $249. Two models with 8GB RAM/256GB SSD and 16GB/512GB configurations, along with the Intel AX210NGW WiFi 6E/BT 5.2 module, are available for $299 and $349, respectively. Power supply is not included with any of the options.

Source: CNX Software – Embedded Systems News.

NVIDIA Readies Linux InfiniBand Driver for 800Gb/s XDR

NVIDIA is making advancements in their Linux InfiniBand driver to support 800Gb/s (XDR) speeds. The company has posted a set of six patches for the upstream Linux kernel, aiming for inclusion in Linux 6.7. These patches will enable the 800Gb/s support in the InfiniBand core networking code and the Mellanox MLX5 driver. The NVIDIA Mellanox Skyway GA100 InfiniBand to Ethernet Gateway is believed to be the first product capable of achieving the XDR speeds. This development showcases NVIDIA’s commitment to delivering high-speed networking solutions for servers.

The details of the preparations for the 800Gb/s (XDR) speed implementation in the Linux kernel’s InfiniBand code can be found in the patch series provided by NVIDIA.

Source: Phoronix.