Mikrotik RouterOS v7 beta

[deniSun]

[deniSun]

7.7beta8 changelog:
Changes in this release:

Spoiler:

*) branding - fixed identity setting from branding package;
*) bridge - fixed host moving with fast-path;
*) bridge - removed "age" monitoring property from the host table;
*) container - fixed tar extracting;
*) dns - do not query upstream DNS servers for matched regex records;
*) dns - fixed changing of "forward-to" parameter for FWD entries;
*) dns - fixed handling of CNAME entry pointing to another FWD entry;
*) hotspot - added "install-hotspot-queue" parameter to control dynamic queue creation (CLI only);
*) ike1 - fixed XAuth responder trying to recreate phase 1;
*) ike2 - improved certificate payload parsing;
*) ipsec - added support for AVX optimized SHA acceleration;
*) ipsec - improved "H" (hw-aead) flag presence for accelerated SA's;
*) ipsec - improved configuration of IPsec proposal auth-algorithms;
*) ipsec - improved IKE payload processing;
*) l3hw - improved system stability when disabling or enabling L3HW offloading;
*) lte - fixed error handling on opening AT control channel;
*) lte - show band number in "ca-band" in NSA mode on Chateau 5G;
*) mpls - added VPLS LDP information in remote/local-mappings;
*) netinstall - added "-i " parameter for Netinstall (CLI Linux);
*) netinstall - improved automatic netbooting interface selection;
*) netwatch - added support for "https-get" type (CLI only);
*) ovpn - added "route-nopull" option for client side;
*) ovpn - added support for IPv6 tunnelling;
*) package - fixed missing menus when both "lora" and "wifiwave2" packages are installed;
*) ppp - fixed displaying of "info" command for PPP client;
*) ppp - improved authentication method negotiation;
*) sfp - added 2.5G SFP module support for RB5009;
*) ssh - added support for Ed25519 key exchange;
*) ssh - fixed handling of non standard size RSA keys;
*) switch - fixed egress mirror for 98DX4310 and 98DX8525 switches;
*) switch - fixed Ethernet monitor when disabling auto-negotiation for 10G interfaces for 98DX8212 switch (introduce in v7.7beta3);
*) switch - improved 10G, 25G and 40G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98DX8525, 98PX1012 switches;
*) switch - improved 25G interface stability for 98PX1012, 98DX4310 and 98DX8525 switches (introduced in v7.6);
*) swos - fixed "allow-from-ports" setting;
*) vpls - expose VPLS related debug logs to "vpls" logging topic;
*) w60g - improved system stability for Cube Pro devices;
*) webfig - fixed displaying of VRF routes;
*) webfig - properly show limited number of available options;
*) wifiwave2 - added "ft-preserve-vlanid" parameter to control whether to change VLAN ID after FT;
*) wifiwave2 - added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only);
*) wifiwave2 - fixed "radio-mac" provisioning matcher;
*) wifiwave2 - fixed 4-way handshake with TKIP;
*) wifiwave2 - improved general system stability;

Other changes since v7.6:

*) bgp - improved BGP advertisement printing;
*) bgp - improved BGP session load distribution across multiple CPU cores;
*) bonding - properly detect VPLS interface state changes;
*) bridge - added support for static MDB entries;
*) bridge - disallow port-controller while the bridge has MSTP enabled;
*) bridge - fixed "edge=yes" setting for MSTP;
*) bridge - fixed incorrect root port blocking for MSTP;
*) bridge - fixed mst-override port priority for MSTP;
*) bridge - fixed MSTP compatibility with STP;
*) bridge - fixed port priority for STP and RSTP;
*) bridge - fixed RSTP BCP with bridged PPP interfaces;
*) bridge - fixed STP blocking state on port-controller;
*) bridge - improved port-controller system stability;
*) bridge - improved system stability when using MSTP and many VLAN mappings;
*) certificate - improved certificate management, signing and storing processes;
*) conntrack - improved system stability when PPTP helper is used;
*) container - fixed access to "/dev/stderr" from containers;
*) container - fixed handling of groups and usernames from Dockerfile;
*) container - made "ram" and "tmp" directories use tmpfs;
*) crs1xx/2xx - fixed "new-customer-pcp" setting for ACL rules;
*) dhcpv6-client - handle receiving of invalid T1 and T2 times;
*) discovery - added "discovered-by" parameter to indicate which protocol discovered the neighbor;
*) discovery - added "mode" parameter for discovery configuration;
*) discovery - fixed neighbor discovery on Mesh interfaces;
*) discovery - report IPv6 LL address if global address does not exist;
*) filesystem - fixed repartition on devices with containers;
*) firewall - added "set-priority" option for IPv6 mangle firewall;
*) firewall - made "dynamic" parameter settable for IPv4 address lists;
*) hotspot - added "install-hotspot-queue" parameter to control dynamic queue creation (CLI only);
*) hotspot - fixed maximum allowed connections limitation;
*) hotspot - fixed minor memory leak after each successful login from WEB;
*) ike1 - improved expired IPsec-SA processing;
*) ike2 - added support for ChaChaPoly1305 encryption (CLI only);
*) ike2 - added support for DH Group 31 (EC25519) (CLI only);
*) interface - improved system stability when handling large packets on CCR2216;
*) ipsec - added hardware acceleration support for IPQ-6010;
*) ipsec - removed Blowfish and Camellia encryption algorithms for IKE;
*) ipv6 - do not generate LL addresses for VPN interfaces when IPv6 is disabled;
*) ipv6 - do not use invalid/disabled global addresses for IPv6 ND;
*) l2tp - added VRF support for L2TP Ether interfaces;
*) lte - added CA information in 5G mode;
*) lte - fixed new MTU value validation;
*) lte - use RSRP value reported by MBIM signal for MBIM type modems;
*) lte - validate bearer count when activating MBIM modem;
*) macsec - fixed packet duplication on Ethernet interface;
*) macsec - fixed packet transmission using traffic-generator;
*) macsec - fixed packet validation;
*) netwatch - fixed reporting of VRF name in logging messages;
*) netwatch - improved "interval" and "packet-interval" coexistence for ICMP type;
*) ntp - log error message when server is unreachable;
*) ospf - fixed MD5 checksum calculation;
*) ospf - fixed simple authentication and checksums for NBMA and PTMP links;
*) ospf - fixed virtual-link address selection for PTP links;
*) ovpn - fixed "Called-Station-Id" usage in RADIUS requests;
*) ping - fixed ARP ping;
*) port - added serial port support for Telit FB990 modem;
*) port - do not show unusable USB port on hAP ax^2;
*) ppp - changed default lease time of dynamic DHCPv6 server to 1 day;
*) ppp - do not inherit routing mark for encapsulated packets;
*) quickset - fixed addition of bridge filter rules in bridged mode;
*) quickset - fixed interface list member table on configuration changes;
*) quickset - update DNS server IP address when changing router's IP address;
*) rb4011 - fixed reporting of current CPU frequency and changed default frequency to "auto";
*) sfp - added 2.5G SFP module support for RB5009;
*) sfp - allow usage of "10G Base-LR" mode for XS+31LC10D module;
*) snmp - added support for "lldpRemLocalPortNum" OID's;
*) ssh - do not allow SHA1 usage with strong crypto enabled;
*) supout - added missing IPv6 firewall sections;
*) supout - added MSTI and mst-override monitor for bridge MSTP;
*) switch - avoid packet corruption in some setups for 98DX3257, 98DX3255, 98DX4310, 98DX8525 and 98PX1012 switches;
*) switch - fixed SFP Tx disable when changing auto-negotiation settings for 98DXxxxx and 98PX1012 switches;
*) switch - hide invalid settings for 98DX3255 and 98DX8525 switch chips;
*) switch - improved 10Gbps Ethernet interface stability for 98DX8212 switch;
*) swos - improved default SwOS backup file name;
*) system - allow up to 4GB of RAM allocation per process on x86, ARM64 and TILE;
*) system - improved handling of user policies;
*) tr069-client - updated data model to version 2.15;
*) traffic-flow - fixed sending of sampling interval;
*) tunnels - added VRF support for EoIP, IPIP and GRE tunnels;
*) vxlan - added "local-address" parameter support;
*) vxlan - added VRF support;
*) webfig - ensure login page is displayed after each log out;
*) webfig - fixed displaying of VRF routes;
*) webfig - fixed input validation for "VPLS ID" parameter;
*) webfig - fixed setting of "DHCP Option Set" parameter;
*) webfig - improved WEB caching capabilities;
*) webfig - properly detect current location for navigation buttons;
*) wifiwave2 - added "datapath" settings to configure data forwarding for an interface (CLI only);
*) wifiwave2 - added "provisioning" menu to automatically assign interface configurations to radios (CLI only);
*) wifiwave2 - added disable/enable commands to configuration profile sub-menus (CLI only);
*) wifiwave2 - added initial CAPsMAN support (only compatible with wifiwave2 interfaces) (CLI only);
*) wifiwave2 - added interworking/Hotspot 2.0 support (CLI only);
*) wifiwave2 - added more informative log messages on configuration profile changes;
*) wifiwave2 - added option to set per-client vlan-id in access list (only supported on 802.11ax interfaces) (CLI only);
*) wifiwave2 - do not permit a client device to be connected to more than one interface at a time;
*) wifiwave2 - improved system stability when multiple virtual AP are configured;
*) wifiwave2 - properly report interface on which traffic is received when multiple station interfaces are used concurrently;
*) wifiwave2 - removed maximum limit for group key update interval and changed the default to 1 day;
*) winbox - added "Active" prefix for current "Circuit ID" and "Cookie Length" fields for L2TP-Ether interfaces;
*) winbox - added "Make Static" button to "IP/DHCP Server/Leases" menu;
*) winbox - fixed minor typo in "Zerotier" menu;
*) winbox - improved handling of large WinBox protocol messages;
*) winbox - properly save "Interfaces/Detect Internet/Detect Internet State" menu in session file;
*) winbox - show "Switch" menu on Chateau 5G ax;
*) winbox - show "System/Health/Settings" only on boards that have configurable values;
*) winbox - show "System/RouterBOARD/Mode Button" on devices that have such feature;
*) winbox - show "USB Power Reset" menu on Chateau 5G ax;
*) wireless - fixed setting of realms interworking parameter if realms-raw is unset;

[BillyVan]

Θα τη δουμε την 7.7 πριν το τελος της χρονιας

Αντε ωραια!

[deniSun]

*) ovpn - added support for IPv6 tunnelling;

*) rb4011 - fixed reporting of current CPU frequency and changed default frequency to "auto";

Ακόμα περιμένω το bridge port να ενσωματωθεί ως column στο CLI για τον ip/dhcp-server/lease

[BillyVan]

What's new in 7.7beta9 (2022-Nov-30 14:54):

*) bgp - added comment functionality for BGP VPN (CLI only);
*) bluetooth - added unique advertise message filtering;
*) bridge - fixed master port conversion;
*) bridge - fixed R/M/STP bridge identifier on protocol-mode change;
*) conntrack - improved system stability when processing SCTP connections on TILE;
*) disk - improved external storage file system mounting, formatting and naming;
*) dns - fixed resolving of FWD entries (introduced in v7.7beta8);
*) dns - improved resolved static entry addition to address list;
*) health - fixed firmware update process on CCR1036-8G-2S+ (introduced in v7.7beta8);
*) hotspot - improved system stability when clients migrate between bridge ports or VLANs;
*) ike2 - fixed rekey notify creation;
*) interface - do not allow adding invalid "veth" interfaces;
*) l3hw - fixed host offloading in a case of MAC address change;
*) l3hw - fixed offloaded NAT for CRS309 switch;
*) lte - added AT channel support for Telit FN990;
*) netinstall - fixed netinstal procedure on RouterBOOT versions from 3.27 to 6.41;
*) ovpn - added "CBC" postfix to AES cipher names;
*) ovpn - added hardware acceleration support for IPQ-6010;
*) switch - improved 10G, 25G, 40G and 100G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) switch - increased the maximum value of "rate" for ACL rules;
*) vrrp - always use slave interface MTU;
*) vrrp - improved interface stability on configuration changes;
*) webfig - fixed accessing of WebFig when "Interface" menu is disabled by skin;
*) wifiwave2 - released packages for MMIPS, PPC, TILE and x86;
*) x86 - added support for SUN 10G NICs;
*) x86 - improved igc driver support;

[glf]

*) wifiwave2 - released packages for MMIPS, PPC, TILE and x86;

τι έχουμε δω;

[BillyVan]

τι έχουμε δω;

Λενε οτι θελει ναχεις μηχανημα με μνημη τουλαχιστον 256Μ

[deniSun]

Περίμενα μια stable αντί για μια ακόμα beta.

[BillyVan]

Περίμενα μια stable αντί για μια ακόμα beta.

Εφτιαξαν ενα συνολικο προβλημα (ανεξηγητα reboot) που παρουσιασαν μαζικα τα ccr1009

*) conntrack - improved system stability when processing SCTP connections on TILE;

[deniSun]

ανεξηγητα reboot

Αυτά τα προβλήματα είναι για να τραβάς τα μαλλιά σου.

[BillyVan]

Σε γενικες γραμμες η 7.6 ειναι οκ.

Προβληματα υπάρχουν σε μαλλον συνθετα σεταπ και βγαινουν συνηθως στα ακριβα μηχανηματα που εχουν σε μεγαλα

δικτυα και μπορουν να τρεξουν τοσο συνθετα πραγματα.

Αυτος ειναι μαλλον ο λογος που πανε και βαζουν τις beta εκδοσεις.

Κυνηγανε να δουνε αν εγινε φιξ το προβλημα που εχει ο καθενας τους.

Δε λεω γι αυτους που απο κ@βλα τους αρεσει να δοκιμαζουν.

Με την ευκαιρια χτες ειχα 2 Χ 3011 στον ιδιο χωρο και το ιδιο config σε καλο δικτυο...

Το ενα με ros7.6 το αλλο με ros 6.49.

Δεν τα ειχα σε υπολειψη απο τοτε που βγηκαν τα 3011....παντα τα εβλεπα σαν τα 2011 + κατι παραπανω.

Μου φανηκαν ολα οκ εκτος απο μια διαφορα 15-20% στη cpu για τις ιδιες εργασιες.

Δεν περιμενα να μου τερματιζει την cpu σε download 200mbps το ros7.

Ενω με ros6 ισα που επιασε 75-80 καποια στιγμη.

Στο ac2 που εκανα επιτοπου απομακρυσμενα το ιδιο τεστ ειχα μολις 70-75 με 260mbps

Ετσι απλα το αναφερω γιατι το τσεκαρα.

Αν παντως δε χρειαζεται καποιος τα καινουργια του ρος7 κι εχει και λιγο παλιο μηχανημα

καλο ειναι να κατσει στη ρος6 κι οταν μπορεσει να αναβαθμισει το μηχανημα του.

Σε αναμονη της stable λοιπον 7.7

[deniSun]

7.7rc1 changelog:
Changes in this release:

Spoiler:

*) certificate - improved Let's Encrypt logging and error recovery;
*) disk - added support for manual RAM file system (TMPFS) creation (CLI only);
*) dns - fixed regex matching (introduced in v7.7beta9);
*) dns - fixed resolving of FWD entries (introduced in v7.7beta8);
*) dns - require "write" policy for DNS cache flushing;
*) dns - respond with lowest TTL for inner queries containing A, AAAA, CNAME chains;
*) ike1 - disallow "remote-id" setting for identity;
*) interface - show RTL8153 CDC Modem Device as ethernet;
*) ipsec - added "current-address" parameter for peers with DNS address;
*) leds - fixed default LED configuration on netFiber 9;
*) leds - fixed turning off LEDs after system shutdown;
*) lte - properly show leading zeros in MCC and MNC strings;
*) modem - added USB tethering support for Google Pixel 7 devices;
*) mpls - fixed assigning of explicit null label for IPv6;
*) ovpn - added support for IPv6 tunneling;
*) switch - improved 10G, 25G and 40G interface stability for 98DX8208, 98DX8212, 98DX8332, 98DX3257, 98DX4310, 98DX8525, 98DX3255, 98PX1012 switches;
*) switch - improved system stability when routing traffic over CPU on 98DX224S, 98DX226S, 98DX3236, 98DX8208 switch chips (introduced in v7.7beta3);
*) swos - fixed SwOS configuration changes from RouterOS;
*) wifiwave2 - added information of per-station throughput in the registration table;
*) wifiwave2 - fixed authentication issues (introduced in 7.7beta8);
*) winbox - added "bus" parameter for "USB Power Reset" command on Chateau ax;
*) winbox - added missing "force" parameter for new "IP/DHCP Server/Options" entries;
*) winbox - added missing "vlan-id" column under "IP/Hotspot/Hosts" table;
*) winbox - do not show LACP related status parameters for other bonding types;
*) winbox - fixed default MTU value for CAP interfaces;
*) winbox - increased maximum number of Winbox read-only sessions 5->25;
*) winbox - removed bogus VRF tab from "Interface" menu;
*) winbox - show "Switch" menu on NetFiber 9;
*) winbox - show dynamic comment in WifiWave2 registration table;
*) wireless - fixed "nstreme" related parameter control in skins;

[teodor_ch]

7.6 stable rb951g
μία 50άρα γραμμή (άσχετο αλλά το αναφέρω)
καθόλου mangle, queues,vpn ούτε καν wifi
μόνο firewall, raw, nat

φρέσκια εγκατάσταση γιατί έβλεπα 100% cpu στο idle απο το management
και έχω αυτό το χάλι με 5μιση ώρες uptime
αν κάνω restart φτιάχνει για λίγο

έγινε netinstall 7.6 "stable" (εδώ γελάμε) και πέρασμα γραμμή γραμμή το configuration απο μηδέν βάση

[deniSun]

7.6 stable rb951g
μία 50άρα γραμμή (άσχετο αλλά το αναφέρω)
καθόλου mangle, queues,vpn ούτε καν wifi
μόνο firewall, raw, nat

φρέσκια εγκατάσταση γιατί έβλεπα 100% cpu στο idle απο το management
και έχω αυτό το χάλι με 5μιση ώρες uptime
αν κάνω restart φτιάχνει για λίγο

έγινε netinstall 7.6 "stable" (εδώ γελάμε) και πέρασμα γραμμή γραμμή το configuration απο μηδέν βάση

1. Αυτή η κατάσταση είναι σε idle ή με χρήση;
Και τι είδους χρήση;
2. Οι δηλώσεις στο raw σε γλυτώνουν από cpu load αλλά αν αφήνεις να περνάει πολύ πράγμα παρακάτω...
3. Το ΝΑΤ επίσης προσθέτει cpu load.
Προηγουμένως τι ros είχες;
Κάποιο της 7 ή της 6;
4. Η άλλη λύση είναι να απενεργοποιήσεις όλους τους κανόνες στο fw και να παίξεις μόνο με ΝΑΤ για να δεις πόσο θα σου το ρίξει.
5. Δες και την χρήση μνήμης πώς τα πάει.

Αυτό είναι το δικό μου με 7.6 σε RB4011.
Στις ~15:00 εχθές είχα tor
Στις ~13:00 σήμερα είχα dw
Με βαρβάτο fw/qos.

[teodor_ch]

Σε ευχαριστώ για τη βοήθεια.

Σίγουρα δεν ήταν θέμα ρυθμίσεων γιατί έτσι είμαι >2 χρόνια τώρα.
Το έριχνα σε bug της 7.6 γιατί όταν πρωτοπέρασα την 7άρα όλα δούλευαν σωστά.

Βρήκα ότι μία IP που δεν έχω βρεί ποιά συσκευή είναι ακόμα (υποπτεύομαι cosmote tv) είχε ανοίξει >2000 συνδέσεις!!!
Δεν είδα τίποτα περίεργο αλλά καλού κακού την έκανα block στο firewall και απο χτές είμαι στο <10% CPU.
Άνοιγε ~5 συνδέσεις ανα 2 λεπτά και δεν τις έκλεινε. 2-3 IP που είδα ανήκαν στην google οπότε κάποιο bug θα είναι και όχι ιός.

Με λίγο ψάξιμο χτές το βράδυ είδα ότι δεν είναι ασύρματη συσκευή οπότε είναι εύκολο να τη βρώ αλλά ήθελα να κοιμηθώ και το άφησα για σήμερα.