Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

#306871 29-Aug-2023 13:24
Send private message

Hi all! I've recently decided to take my networking into my hands a little more and bought an RB5009. I've also decided to move away from 2degrees (on principle mainly as they have irked me a couple of times recently and I've been a really long-term customer).

I'm wanting to check a couple of things:

1) What tools are there for network diagnostics, so that I can see how my connection is performing (beyond just speed test)? I'm running Linux on all my devices, so FOSS preferred, but can use WINE.

 

2) I set up my Mikrotik the day before I changed to Zeronet. I noticed that my connection speeds were fantastic, a lot more stable, consistently hitting max that the line is offering. So seemed like a decent performance upgrade from my AC4000. However, after the network has changed, now I feel like I'm noticing that some initial loads are taking a really long time. Eg, if I haven't loaded a website recently, then there's an extremely noticeable delay before it loads. Then subsequent loads are fast. I'm using Cloudfare's DNS.

My question is: how can I check / understand if it's my Mikrotik setup, or potentially Zeronet? I have 30 days to cancel with ZN and potentially go with Quic (as I've been reading a lot of positives about them on here).

--

Overall I'm liking the Mikrotik approach, but I have been having some troubles getting my head around the basics. For example, the gowifi firewall rules didn't work for me, but the network berg's on YT did. ShieldsUp! is passing, but I'm wondering if I could have done something that is causing issues.


View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2 | 3
cyril7
9073 posts

Uber Geek
+1 received by user: 2499

ID Verified
Trusted
Subscriber

  #3121665 29-Aug-2023 18:07
Send private message

Hi the stock firewall rules supplied in the default mikrotik factory build are a good starting point, if you say they don't work for you the maybe you don't understand them, it's a common issue, they make full use of fast paths and correctly tracking new and existing connections to optimise performance and firewall integrity.

So if you scrapped them and built your own from scratch there maybe issues.

Cyril



kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3121671 29-Aug-2023 18:44
Send private message

Thanks @cyril7, that's really helpful. Most guides recommended removing the default configuration and rebuilding, seemed strange but it was consistently recommended so I assumed it was the way.

I'll backup my config then try a reboot with defaults

cyril7
9073 posts

Uber Geek
+1 received by user: 2499

ID Verified
Trusted
Subscriber

  #3121677 29-Aug-2023 19:02
Send private message

Hi all good, as a declaration, day job is a network engineer for a large government agency, typically tooling about in Cisco, juniper, Palo Alto and fortigate, plus probably over 60 Mikrotiks in both work and private client networks.

Cyril



ANglEAUT
altered-ego
2436 posts

Uber Geek
+1 received by user: 841

Trusted
Lifetime subscriber

  #3121716 29-Aug-2023 22:14
Send private message

kennedybaird:

 

... However, after the network has changed, now I feel like I'm noticing that some initial loads are taking a really long time. Eg, if I haven't loaded a website recently, then there's an extremely noticeable delay before it loads. Then subsequent loads are fast. ...

 


My question is: how can I check / understand if it's my MikroTik setup, or potentially Zeronet? ...

 

Same set up here with maybe the same issue. Don't know how to consistently get the slow loads to think about troubleshooting.





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3121733 30-Aug-2023 06:09
Send private message

ANglEAUT:

Same set up here with maybe the same issue. Don't know how to consistently get the slow loads to think about troubleshooting.



To confirm, zeronet as ISP as well?

ANglEAUT
altered-ego
2436 posts

Uber Geek
+1 received by user: 841

Trusted
Lifetime subscriber

  #3121772 30-Aug-2023 08:56
Send private message

Yes





Please keep this GZ community vibrant by contributing in a constructive & respectful manner.


 
 
 
 

Shop now for Dyson appliances (affiliate link).
tim0001
274 posts

Ultimate Geek
+1 received by user: 146


  #3121851 30-Aug-2023 12:31
Send private message

Probably not your issue, but I'll mention it just in case.  Last year I had a problem with websites sometimes loading slowly.  Turned out to be an issue with IPv6 dropping out and the browser slowly reverting to IPv4.  (Starlink were changing the IPv6 prefix daily and the Mikrotik router didn't like it.  There were some issues with the Mikrotik IPv6 implementation in my opinion)


kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3121874 30-Aug-2023 13:15
Send private message

Thanks @ANglEAUT. I've just reset my Mikrotik to defaults per @cyril7's recommendation, will report back if issues persist.


yitz
2238 posts

Uber Geek
+1 received by user: 594


  #3122003 30-Aug-2023 19:59
Send private message

Do Mikrotiks use source port 53 for DNS queries? I've also noticed the PPP auto assigned Hamilton 203.152.100.183 resolver doesn't respond to some DNS clients.


nztim
4012 posts

Uber Geek
+1 received by user: 2710

ID Verified
Trusted
TEAMnetwork
Subscriber

  #3122096 31-Aug-2023 08:58
Send private message

Agree with @cyril7 make sure you understand the fast-tracking rules in the default config before trying to wipe and setup your own rules.

 

 





Any views expressed on these forums are my own and don't necessarily reflect those of my employer. 


kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3122343 31-Aug-2023 18:35
Send private message

nztim:

Agree with @cyril7 make sure you understand the fast-tracking rules in the default config before trying to wipe and setup your own rules.


 



Thanks. I'm new to all this stuff. I had a nice chat with the guys from gowifi before buying the router and for some reason I got the message I would need to do it by scratch myself

 
 
 

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.
kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3122346 31-Aug-2023 18:39
Send private message

I have been running speed tests all day (every 15 minutes).

Top speeds are as advertised (850/500), but only receiving them ~10% of the time.

It's often as low as 300/300. Very inconsistent. I'm outputting to a JSON file so will try some graphing.

ANglEAUT:

Yes


RunningMan
9184 posts

Uber Geek
+1 received by user: 4834


  #3122370 31-Aug-2023 19:08
Send private message

kennedybaird:  I'm new to all this stuff. I had a nice chat with the guys from gowifi before buying the router and for some reason I got the message I would need to do it by scratch myself

 

The more consumer level devices have a default config with a basic firewall config that blocks everything except ICMP from the WAN. Others like the CRS series tend to have no default firewall, only a single IP address assigned to connect to.

 

/tools/graphing will let you set up graphing to monitor interfaces. Don't enable writing to disk as it will smash the NAND/Flash.

 

/System/Logging will let you configure, well, logging. If you're concerned about DNS resolution time, set up a DNS rule/topic and see how long DNS is taking to resolve. This could account for the initial site visit taking longer.


kennedybaird

63 posts

Master Geek
+1 received by user: 50

ID Verified

  #3122612 1-Sep-2023 11:27
Send private message

 @ANglEAUT, attached are almost full 24hrs. Downloads are above their advertised speed about 70% of the time (yay), but the times they're not, they're atrocious. Uploads also just don't seem to be getting close to their advertised speeds.

 

 

 

 

 

 

@nztim, thanks for the comment. I've fully reverted to defaults.

@RunningMan, thanks also! I will look into this.


cyril7
9073 posts

Uber Geek
+1 received by user: 2499

ID Verified
Trusted
Subscriber

  #3122618 1-Sep-2023 11:34
Send private message

Hi, would now suggest you are looking at some sort of congestion issue with in the core of the ISP or maybe in the level of backhaul they have to your area, thats just a guess based on you above speedtests, which seem to indicate, its now not your kit at issue, as it seems to reliably pull expected speeds a large amount of the time, and honestly if set right the 5009 has more ability than a large number of routers on the market and will do GigE routing without even nowing its alive.

 

 If a router can achieve full speeds once, but gets results like above, then I think its reasonable to predict the issue is elsewhere.

 

Cyril


 1 | 2 | 3
View this topic in a long page with up to 500 replies per page Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.