hacktek hacktek

TL;DR: Default-Config Dual WAN PCC + Recursive Failover

This paste assumes a hardware MikroTik RouterBOARD with the standard MikroTik default config — hAP, hEX, RB5009-class, etc. — where ether1 is the WAN port and ether2 through etherN are LAN bridge ports. The paste removes ether2 from the LAN bridge and turns it into WAN2.

If your router is not in that default state — CHR, multi-WAN appliances, anything reconfigured, or anything where ether1 is not your WAN — read the full guide and substitute interface names. The lab report's §8.7 TL;DR validation shows the kind of remap CHR needs before this paste is safe.

Resulting layout after the paste:

WAN1 = ether1, DHCP

Buffer Bloat

Come aboard the Buffer Bloat Begone Boat and let us set sail for seas of lower latency under load!

The journey begins

I became interested in buffer bloat after watching a podcast interview with David Taht. At a friend's suggestion, I purchased an inexpensive Mikrotik RB750Gr3 device, in order to implement a more robust and fully featured network router for our home network

Equipment

We obtain internet via a Wireless ISP over a 5Ghz link to a tower 18 miles away, with a plan for 20Mbps/5Mbps. In reality, it's more like 13Mbps/4Mbps. The WISP modem is connected to an RB750Gr3 aka HEx, running RouterOS 7.3.1. Internal DNS and DHCP for the home network is provided by a pihole connected directly to the router.

	# from: https://gist.github.com/marfillaster/7a136ea826815ac22f2849e099a1c6a1#file-router-cfg
	# feb/11/2022 11:00:55 by RouterOS 7.2rc3
	# software id = 9QK9-C798
	#
	# model = RB5009UG+S+
	# serial number = XXXXXXXXXX

	/ip settings set allow-fast-path=no

	/interface bridge add admin-mac=FF:FF:FF:FF:FF:FF auto-mac=no name=bridge

	# Setup build environment
	mkdir -p ~/Projects/curl-http3/prefix
	cd ~/Projects/curl-http3

	# Build OpenSSL with QUIC support
	sudo dnf builddep -y openssl
	rm -rf openssl
	git clone https://github.com/quictls/openssl
	cd openssl
	git checkout openssl-3.0.0+quic