search

MinimSecure / unum-sdk

Unum agent source code, tools, and documentation
https://www.minim.co
Apache License 2.0
30 stars 15 forks source link

18.06.1 LEDE Performance on Archer C7 v2 #28

Open nikandriko opened 5 years ago

nikandriko commented 5 years ago

I've flashed an Archer C7 v2 with Minim's build 2019.1.0 of 18.06.1 LEDE. The performance that I'm seeing is below what I know the Archer C7 v2 can do with LEDE (and not stock that has hardware-based NAT). The speed tests on Minim's dashboard are ~200/120 Mbps on a 300/300 Mbps connection. I know there are optimized versions of the LEDE firmware for the Archer C7 v2, as mentioned in this post and found in the author's Github. There's a clear trade-off here at the moment between performance, security and remote mgmt but think that performance should be a given these days given the ultra-broadband connection speeds. Could you guys build off of that?

tyler-sommer commented 5 years ago

Hi @nikandriko, thanks for opening this issue!

We're definitely keen on improving throughput on routers running the Unum agent.

As far as the optimized C7 v2 firmware, as long as the toolchain is the same as stock OpenWrt for the C7 v2, the mips_24kc .ipk we build and published with the release can be used to install Unum after you flash it. I'll see if I can confirm this.

One expected issue is that Unum will not be able to measure bandwidth since most packets bypass routing (due either to hardware NAT or something like Qualcomm SFE). We've done some work internally to integrate bandwidth counters with SFE, I'll see what I can do about publishing that in a usable form. Worth mentioning is also @gwlim's efforts: openwrt-sfe-flowoffload

Let's leave this an open issue for now, worth discussing more.

nikandriko commented 5 years ago

Great, thanks @tyler-sommer for following up. I will try the approach of installing the .ipk post-flashing the router with an optimized LEDE version. However, as you mentioned, it would be great if there's a latest and greatest version where everything has been tested, that I could go for and not have to compromise on either an optimized firmware or a well-tested agent.