aboutsummaryrefslogtreecommitdiffstats
path: root/target
Commit message (Collapse)AuthorAgeFilesLines
...
* generic: Fix per interface nf_call_iptables settingFelix Fietkau2015-09-093-537/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | commit r30917 ("kernel: bypass all netfilter hooks if the sysctls for that functionality have been disabled - eliminates the overhead of enabling CONFIG_BRIDGE_NETFILTER in the kernel config") introduced an optimization which should reduce/eliminate the overhead for traffic send over bridges on kernels compiled with CONFIG_BRIDGE_NETFILTER=y. But this optimization breaks the nf_call_iptables per bridge setting which is more fine grained than the global sysctl net.bridge.bridge-nf-call-iptables setting. A test reflecting a real world setup was created to identify if this really eliminates the overhead and if per-bridge nf_call_iptables could be used in some setups to increase the throughput. A Qualcomm Atheros QCA9558 based system with one ethernet and an ath9k wifi 3x3 in HT40 mode was used. Cables from the AP to the wifi station were used to reduce interference problems during the tests. The wlan interface was put in one bridge interface called br-wlan. This bridge usually contains some more wlan interfaces. The eth0 was put in a second bridge called br-lan. This usually contains some other privileged wlan or mesh interfaces. Routing was added between br-lan and br-wlan. Three kernels were tested: * (default) OpenWrt kernel for this device * (brfilter-global) OpenWrt kernel with CONFIG_BRIDGE_NETFILTER=y * (brfilter-local) OpenWrt kernel with CONFIG_BRIDGE_NETFILTER=y and without 644-bridge_optimize_netfilter_hooks.patch The changes to the the netfilter settings of the bridge were done via: * (brfilter-global) /sbin/sysctl -w net.bridge.bridge-nf-call-iptables=1 * (brfilter-lobal) echo 1 > /sys/class/net/br-lan/bridge/nf_call_iptables and/or echo 1 > /sys/class/net/br-wan/bridge/nf_call_iptables A station connected to the wlan0 (AP) interface was used to send traffic to a PC connected via ethernet. iperf with 3 concurrent transmissions was used to generate the traffic. | kernel | br-nf-* global | nf-call* iface | download | upload | |-----------------|----------------|----------------|----------|----------| | default | 0 | - | 209 | 268 | | brfilter-global | 0 | - | 185 | 243 | | brfilter-local | 0 | - | 187 | 243 | | brfilter-local | 0 | br-lan | 157 | 226 | | brfilter-local | 0 | br-lan br-wlan | 139 | 161 | | brfilter-global | 1 | - | 136 | 162 | Download/upload results in Mibit/s It can be seen that the patch doesn't eliminate the overhead. It can also be seen that the throughput of brfilter-global and brfilter-local with disabled filtering is the roughly the same. Also the throughput for brfilter-global and brfilter-local for enabled filtering on all bridges is roughly the same. But also the brfilter-local throughput is higher when only br-lan requires the filtering. This setting would not be possible with 644-bridge_optimize_netfilter_hooks.patch applied and thus can only be compared with brfilter-global and filtering enabled for all interfaces. Signed-off-by: Sven Eckelmann <sven@open-mesh.com> SVN-Revision: 46835
* kernel: describe bridge patch "multicast to unicast"Rafał Miłecki2015-09-083-0/+15
| | | | | | It was initially added in r41367 by nbd. SVN-Revision: 46828
* kernel: describe bridge patch "optimize netfilter hooks"Rafał Miłecki2015-09-083-0/+21
| | | | | | It was initially added in r30917 by nbd. SVN-Revision: 46827
* kernel: describe bridge patch "remove IPv6 depependency of bridge in 2.6.38+"Rafał Miłecki2015-09-083-0/+39
| | | | | | It was initially added in r27237 by jow as patch from Jonas. SVN-Revision: 46826
* kernel: describe bridge patch "port isolate"Rafał Miłecki2015-09-083-0/+15
| | | | | | It was initially added in r25762 by nbd. SVN-Revision: 46825
* kernel: describe bridge patch "always accept EAP"Rafał Miłecki2015-09-083-0/+18
| | | | | | It was initially added in r26015 by nbd. SVN-Revision: 46824
* kernel: describe bridge patch "no EAP forward"Rafał Miłecki2015-09-083-0/+24
| | | | | | It was initially added in r25095 by nbd. SVN-Revision: 46823
* kernel: restore 640-bridge_no_eap_forward.patch to its original formFelix Fietkau2015-09-083-3/+3
| | | | | | | | | | It was corrupted in r38528. The most obvious symptom is repeated messages like this: Tue Sep 8 08:25:18 2015 kern.warn kernel: [77141.972226] br-lan: received packet on wlan0 with own address as source address Signed-off-by: Dmitry Ivanov <dima@ubnt.com> SVN-Revision: 46821
* kernel: remove packaging of kmod-crypto-core and kmod-crypto-arc4Felix Fietkau2015-09-087-16/+9
| | | | | | | | | Everything except for blkcipher was already built-in, so make blkcipher built-in as well. Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46820
* brcm47xx: apply serial flash size trick to Netgear WNR1000 V3Rafał Miłecki2015-09-082-4/+6
| | | | | | | | It also uses different block size just like WGR614 V10. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46810
* brcm47xx: fix reading WGT634U CFE variables with 4.1Rafał Miłecki2015-09-071-6/+6
| | | | | | | | This ports fix from r46584 to the 4.1. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46806
* brcm47xx: add Netgear WNR1000 V3 support in the Linux arch codeRafał Miłecki2015-09-072-4/+80
| | | | | | Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46805
* ipq806x: add support for Netgear Nighthawk X4 R7500Jonas Gorski2015-09-048-3/+866
| | | | | | | | | | | | | Add support for the Netgear Nighthawk X4 R7500 and build appropariate sysupgrade and factory images. Known issues: * 5 GHz wifi not working - there is no quantenna driver * One of the USB ports is not working Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46796
* ipq806x: enable ide led triggerJonas Gorski2015-09-042-0/+2
| | | | | | | | | To use gpio leds as ide leds, we need to enable the trigger to be included in the kernel. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46795
* ipq806x: add support for retrieving macs from mtdJonas Gorski2015-09-042-0/+70
| | | | | | | | Add support for mtd-mac-address for stmac. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46793
* image: move netgear-image to top and rename to -dniJonas Gorski2015-09-041-11/+2
| | | | | | | | Use the same naming as netgear-chk. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46791
* ar71xx: rename NETGEAR_ variables to their netgear namesJonas Gorski2015-09-041-11/+11
| | | | | | | | Netgear names them BOARD_ID and HW_ID, so we should do the same. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46790
* ipq806x: build images and add sysupgrade support for AP148Jonas Gorski2015-09-042-3/+35
| | | | | | | | | Add full ubi and sysupgrade images for AP148 and add sysupgrade support for ipq806x to allow updating the current installation. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46789
* ipq806x: clear IMAGES for devicesJonas Gorski2015-09-041-0/+1
| | | | | | | | | Ensure that IMAGE-less devices won't keep the IMAGES of any previous devices. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46788
* ipq806x: wrap legacy image in uImageJonas Gorski2015-09-041-2/+2
| | | | | | | | | Wrap the zImage in a uImage header so we can easily boot it from legacy u-boots. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46787
* ipq806x: rename "rootfs" to "ubi" on nandJonas Gorski2015-09-042-0/+26
| | | | | | | | OpenWrt expects the ubi paritition to be named "ubi", not "rootfs". Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46786
* ipq806x: enable smem-parser for nand on AP148Jonas Gorski2015-09-046-8/+30
| | | | | | Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46785
* ipq806x: enable ubiblock supportJonas Gorski2015-09-042-2/+2
| | | | | | | | To allow squashfs on ubi, enable ubiblock support in the kernel. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46782
* ar7: fix HIGHMEM_START (#20427)Felix Fietkau2015-09-022-0/+22
| | | | | | Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46773
* kernel: update 3.18 to 3.18.21Jonas Gorski2015-09-0219-78/+43
| | | | | | | | | Changelog: * https://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.21 Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46768
* ramips: fix devicetree corruption with some boot loaders if the caches are ↵Felix Fietkau2015-09-021-0/+18
| | | | | | | | not ready at boot Signed-off-by: John Crispin <blogic@openwrt.org> SVN-Revision: 46766
* kernel: bridge, multicast-to-unicast: fix echoes on STAFelix Fietkau2015-09-022-18/+28
| | | | | | | | | | | | | | | | | | | | | Currently, multicast packets from an STA are sent to any according multicast listener directly through the bridge multicast-to-unicast feature. Unfortunately, so far this includes the originating STA, too, resulting in multicast packets being echo'ed back to the originating STA if it itself is a multicast listener for that group. This behaviour breaks IPv6 duplicate address detection: An IPv6 Neighbor Solicitation for IPv6 Duplicate Address Detection is being echo'ed back, resulting in the host falsely detecting an address collision, which makes the node unable to claim an IPv6 address and use IPv6 in general. Mac80211 unfortunately only prevents the echoes for us for multicast frames. For the multicast frames cast to a unicast destination we'll need to take care of excluding the originator ourselves. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> SVN-Revision: 46765
* lantiq: remove dead EASY33016 image recipeJonas Gorski2015-08-301-35/+0
| | | | | | | | | | Support for lantiq_svip_be has been removed a while ago, so EASY33016 images weren't buildable anymore. Remove the recipes as well as gzip compressed kernel support, as EASY33016 was the last user of it. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46760
* ramips: disable the openwrt commandline hackJonas Gorski2015-08-306-6/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46759
* malta: disable the openwrt commandline hackJonas Gorski2015-08-301-1/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46758
* brcm63xx: disable the openwrt commandline hackJonas Gorski2015-08-302-2/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46757
* brcm47xx: disable the openwrt commandline hackJonas Gorski2015-08-302-2/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46756
* ath25: disable the openwrt commandline hackJonas Gorski2015-08-301-1/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46755
* adm5120: disable the openwrt commandline hackJonas Gorski2015-08-301-1/+0
| | | | | | | | We don't make use of it, so no need to have it enabled. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46754
* brcm63xx: remove legacy led/button related patchesJonas Gorski2015-08-3084-451/+309
| | | | | | | | | We register all gpio buttons and leds through DT, so no need to keep fixes/additions for the platform data based bay. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46753
* brcm63xx: add Comtrend VR-3026e supportJonas Gorski2015-08-3010-1/+267
| | | | | | | | | | Add support for Comtrend VR-3026e v1. The device is almost identical to the Comtrend VR-3025un. Signed-off-by: Martin Tesar <tesarmar@gmail.com> Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46752
* brcm47xx: fix Linksys E1200 V2 image filenameRafał Miłecki2015-08-291-1/+1
| | | | | | | | Drop unwanted suffix (copy & paste mistake). Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46742
* bcm53xx: support sysupgrade with Netgear R7000 original firmwareRafał Miłecki2015-08-261-0/+1
| | | | | | Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46732
* bcm53xx: add OpenWrt specific stuff for Netgear R7000Rafał Miłecki2015-08-268-2/+64
| | | | | | | | This adds DT things that couldn't be upstreamed yet. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46731
* bcm53xx: use pending Netgear R7000 patchRafał Miłecki2015-08-264-118/+256
| | | | | | | | It includes support for LEDs and buttons. Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46730
* bcm53xx: use backported patches for UART0 and profilingRafał Miłecki2015-08-265-25/+17
| | | | | | Signed-off-by: Rafał Miłecki <zajec5@gmail.com> SVN-Revision: 46729
* brcm63xx: fix WAP-5813n default network configJonas Gorski2015-08-261-1/+1
| | | | | | | | | | | /etc/uci-defaults/02_network had a typo, making it generate the wrong network config. Closes #20407. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46727
* linux: fix off-by-one in handling in /proc/net/routeJonas Gorski2015-08-261-0/+46
| | | | | | | | | | | | | Add an upstream fix for /proc/net/route causing missing routes doing several continued reads from it. Only 4.1+ is affected. Closes #20403. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46726
* brcm63xx: enable dual rx/tx spi support for hsspiJonas Gorski2015-08-253-4/+74
| | | | | | | | | | should improve flash access times. Should be harmless to gnerally enable regardless if a flash supporting dual reads is attached. In doubt, spi-nor will just fall back to serial reads. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46725
* kernel: bridge, multicast-to-unicast: assign src after pskb_may_pull()Felix Fietkau2015-08-252-37/+56
| | | | | | | | | | A call to pskb_may_pull() might reallocate skb->data. Therefore we should only assign the src-pointer after any potential reallocations. Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46721
* Revert "kernel: disable multicast-to-unicast translation for ipv6 neighbor ↵Felix Fietkau2015-08-252-40/+34
| | | | | | | | | | | | | | | | | | | | solicitation (#17625)" This reverts commit a080e8e1943156168913d0353a2e99d1151102aa. It did not fix the problem but just hid some symptom. The real issue was that IGMP/MLD report suppression was not considered for the multicast-to-unicast feature. A recent netifd which isolates IGMP/MLD reports between STAs by utilizing AP-isolation and bridge-hairpinning should have fixed this. It is perfectly fine to apply multicast-to-unicast to IPv6 Neighbor Solicitations, too (once that feature is configured correctly). Signed-off-by: Linus Lüssing <linus.luessing@c0d3.blue> Signed-off-by: Felix Fietkau <nbd@openwrt.org> SVN-Revision: 46720
* kernel: remove already upstream applied patchJonas Gorski2015-08-231-73/+0
| | | | | | | | | | | | | | | | Remove 131-MIPS-export-get_c0_perfcount_int.patch which was already applied in 4.1.6. This fixes the following build error: arch/mips/ath79/setup.c:217:77: error: redefinition of '__kstrtab_get_c0_perfcount_int' arch/mips/ath79/setup.c:211:77: note: previous definition of '__kstrtab_get_c0_perfcount_int' was here arch/mips/ath79/setup.c:217:350: error: redefinition of '__ksymtab_get_c0_perfcount_int' arch/mips/ath79/setup.c:211:350: note: previous definition of '__ksymtab_get_c0_perfcount_int' was here scripts/Makefile.build:258: recipe for target 'arch/mips/ath79/setup.o' failed Reported-by: swalker Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46715
* adm5120: make patches apply againJonas Gorski2015-08-232-17/+17
| | | | | | | | Fix patches not applying anymore since r46654. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46714
* kernel: update 4.1 to 4.1.6Jonas Gorski2015-08-2310-166/+41
| | | | | | | | | Changelog: * https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.6 Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46713
* mvebu: kirkwood: fix ehci-orion probe if generic-phy isn't enabledJonas Gorski2015-08-233-0/+105
| | | | | | | | | Properly treat -ENOSYS as no PHY, else ehci-orion won't work without generic phy support. Signed-off-by: Jonas Gorski <jogo@openwrt.org> SVN-Revision: 46711