Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


kennedybaird

54 posts

Master Geek

ID Verified

#306871 29-Aug-2023 13:24
Send private message

Hi all! I've recently decided to take my networking into my hands a little more and bought an RB5009. I've also decided to move away from 2degrees (on principle mainly as they have irked me a couple of times recently and I've been a really long-term customer).

I'm wanting to check a couple of things:

1) What tools are there for network diagnostics, so that I can see how my connection is performing (beyond just speed test)? I'm running Linux on all my devices, so FOSS preferred, but can use WINE.

 

2) I set up my Mikrotik the day before I changed to Zeronet. I noticed that my connection speeds were fantastic, a lot more stable, consistently hitting max that the line is offering. So seemed like a decent performance upgrade from my AC4000. However, after the network has changed, now I feel like I'm noticing that some initial loads are taking a really long time. Eg, if I haven't loaded a website recently, then there's an extremely noticeable delay before it loads. Then subsequent loads are fast. I'm using Cloudfare's DNS.

My question is: how can I check / understand if it's my Mikrotik setup, or potentially Zeronet? I have 30 days to cancel with ZN and potentially go with Quic (as I've been reading a lot of positives about them on here).

--

Overall I'm liking the Mikrotik approach, but I have been having some troubles getting my head around the basics. For example, the gowifi firewall rules didn't work for me, but the network berg's on YT did. ShieldsUp! is passing, but I'm wondering if I could have done something that is causing issues.


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
cyril7
8950 posts

Uber Geek

ID Verified
Trusted
Subscriber

  #3121665 29-Aug-2023 18:07
Send private message

Hi the stock firewall rules supplied in the default mikrotik factory build are a good starting point, if you say they don't work for you the maybe you don't understand them, it's a common issue, they make full use of fast paths and correctly tracking new and existing connections to optimise performance and firewall integrity.

So if you scrapped them and built your own from scratch there maybe issues.

Cyril

 
 
 

Learn cloud, mobile, security, data and web technologies with Pluralsight (affiliate link).
kennedybaird

54 posts

Master Geek

ID Verified

  #3121671 29-Aug-2023 18:44
Send private message

Thanks @cyril7, that's really helpful. Most guides recommended removing the default configuration and rebuilding, seemed strange but it was consistently recommended so I assumed it was the way.

I'll backup my config then try a reboot with defaults

cyril7
8950 posts

Uber Geek

ID Verified
Trusted
Subscriber

  #3121677 29-Aug-2023 19:02
Send private message

Hi all good, as a declaration, day job is a network engineer for a large government agency, typically tooling about in Cisco, juniper, Palo Alto and fortigate, plus probably over 60 Mikrotiks in both work and private client networks.

Cyril



ANglEAUT
1943 posts

Uber Geek

Trusted
Lifetime subscriber

  #3121716 29-Aug-2023 22:14
Send private message

kennedybaird:

 

... However, after the network has changed, now I feel like I'm noticing that some initial loads are taking a really long time. Eg, if I haven't loaded a website recently, then there's an extremely noticeable delay before it loads. Then subsequent loads are fast. ...

 


My question is: how can I check / understand if it's my MikroTik setup, or potentially Zeronet? ...

 

Same set up here with maybe the same issue. Don't know how to consistently get the slow loads to think about troubleshooting.





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


kennedybaird

54 posts

Master Geek

ID Verified

  #3121733 30-Aug-2023 06:09
Send private message

ANglEAUT:

Same set up here with maybe the same issue. Don't know how to consistently get the slow loads to think about troubleshooting.



To confirm, zeronet as ISP as well?

ANglEAUT
1943 posts

Uber Geek

Trusted
Lifetime subscriber

  #3121772 30-Aug-2023 08:56
Send private message

Yes





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


tim0001
210 posts

Master Geek


  #3121851 30-Aug-2023 12:31
Send private message

Probably not your issue, but I'll mention it just in case.  Last year I had a problem with websites sometimes loading slowly.  Turned out to be an issue with IPv6 dropping out and the browser slowly reverting to IPv4.  (Starlink were changing the IPv6 prefix daily and the Mikrotik router didn't like it.  There were some issues with the Mikrotik IPv6 implementation in my opinion)




kennedybaird

54 posts

Master Geek

ID Verified

  #3121874 30-Aug-2023 13:15
Send private message

Thanks @ANglEAUT. I've just reset my Mikrotik to defaults per @cyril7's recommendation, will report back if issues persist.


yitz
1874 posts

Uber Geek


  #3122003 30-Aug-2023 19:59
Send private message

Do Mikrotiks use source port 53 for DNS queries? I've also noticed the PPP auto assigned Hamilton 203.152.100.183 resolver doesn't respond to some DNS clients.


nztim
2834 posts

Uber Geek

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3122096 31-Aug-2023 08:58
Send private message

Agree with @cyril7 make sure you understand the fast-tracking rules in the default config before trying to wipe and setup your own rules.

 

 





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


kennedybaird

54 posts

Master Geek

ID Verified

  #3122343 31-Aug-2023 18:35
Send private message

nztim:

Agree with @cyril7 make sure you understand the fast-tracking rules in the default config before trying to wipe and setup your own rules.


 



Thanks. I'm new to all this stuff. I had a nice chat with the guys from gowifi before buying the router and for some reason I got the message I would need to do it by scratch myself

kennedybaird

54 posts

Master Geek

ID Verified

  #3122346 31-Aug-2023 18:39
Send private message

I have been running speed tests all day (every 15 minutes).

Top speeds are as advertised (850/500), but only receiving them ~10% of the time.

It's often as low as 300/300. Very inconsistent. I'm outputting to a JSON file so will try some graphing.

ANglEAUT:

Yes


RunningMan
7966 posts

Uber Geek


  #3122370 31-Aug-2023 19:08
Send private message

kennedybaird:  I'm new to all this stuff. I had a nice chat with the guys from gowifi before buying the router and for some reason I got the message I would need to do it by scratch myself

 

The more consumer level devices have a default config with a basic firewall config that blocks everything except ICMP from the WAN. Others like the CRS series tend to have no default firewall, only a single IP address assigned to connect to.

 

/tools/graphing will let you set up graphing to monitor interfaces. Don't enable writing to disk as it will smash the NAND/Flash.

 

/System/Logging will let you configure, well, logging. If you're concerned about DNS resolution time, set up a DNS rule/topic and see how long DNS is taking to resolve. This could account for the initial site visit taking longer.


kennedybaird

54 posts

Master Geek

ID Verified

  #3122612 1-Sep-2023 11:27
Send private message

 @ANglEAUT, attached are almost full 24hrs. Downloads are above their advertised speed about 70% of the time (yay), but the times they're not, they're atrocious. Uploads also just don't seem to be getting close to their advertised speeds.

 

 

 

 

 

 

@nztim, thanks for the comment. I've fully reverted to defaults.

@RunningMan, thanks also! I will look into this.


cyril7
8950 posts

Uber Geek

ID Verified
Trusted
Subscriber

  #3122618 1-Sep-2023 11:34
Send private message

Hi, would now suggest you are looking at some sort of congestion issue with in the core of the ISP or maybe in the level of backhaul they have to your area, thats just a guess based on you above speedtests, which seem to indicate, its now not your kit at issue, as it seems to reliably pull expected speeds a large amount of the time, and honestly if set right the 5009 has more ability than a large number of routers on the market and will do GigE routing without even nowing its alive.

 

 If a router can achieve full speeds once, but gets results like above, then I think its reasonable to predict the issue is elsewhere.

 

Cyril


 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic





News and reviews »

New Air Traffic Management Platform and Resilient Buildings a Milestone for Airways
Posted 6-Dec-2023 05:00


Logitech G Launches New Flagship Console Wireless Gaming Headset Astro A50 X
Posted 5-Dec-2023 21:00


NordVPN Helps Users Protect Themselves From Vulnerable Apps
Posted 5-Dec-2023 14:27


First-of-its-Kind Flight Trials Integrate Uncrewed Aircraft Into Controlled Airspace
Posted 5-Dec-2023 13:59


Prodigi Technology Services Announces Strategic Acquisition of Conex
Posted 4-Dec-2023 09:33


Samsung Announces Galaxy AI
Posted 28-Nov-2023 14:48


Epson Launches EH-LS650 Ultra Short Throw Smart Streaming Laser Projector
Posted 28-Nov-2023 14:38


Fitbit Charge 6 Review 
Posted 27-Nov-2023 16:21


Cisco Launches New Research Highlighting Gap in Preparedness for AI
Posted 23-Nov-2023 15:50


Seagate Takes Block Storage System to New Heights Reaching 2.5 PB
Posted 23-Nov-2023 15:45


Seagate Nytro 4350 NVMe SSD Delivers Consistent Application Performance and High QoS to Data Centers
Posted 23-Nov-2023 15:38


Amazon Fire TV Stick 4k Max (2nd Generation) Review
Posted 14-Nov-2023 16:17


Over half of New Zealand adults surveyed concerned about AI shopping scams
Posted 3-Nov-2023 10:42


Super Mario Bros. Wonder Launches on Nintendo Switch
Posted 24-Oct-2023 10:56


Google Releases Nest WiFi Pro in New Zealand
Posted 24-Oct-2023 10:18









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.







Lenovo