aboutsummaryrefslogtreecommitdiff
path: root/package/network
Commit message (Collapse)AuthorAge
...
* Revert "mac80211: rework interface setup, fix race condition"Felix Fietkau2024-01-13
| | | | | | | | This reverts commit b7f9742da82fa9b122e8d63e48a9a5c0dec298f2. There are several reports of regressions with this commit. Will be added back once I've figured out and fixed the cause Signed-off-by: Felix Fietkau <nbd@nbd.name>
* mac80211: rework interface setup, fix race conditionFelix Fietkau2024-01-11
| | | | | | | Only tell netifd about vifs when the setup is complete and hostapd + wpa_supplicant have been notified Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: make ubus calls to wpa_supplicant asynchronousFelix Fietkau2024-01-11
| | | | | | | | This fixes a deadlock issue where depending on the setup order, hostapd and wpa_supplicant could end up waiting for each other Reported-by: Michael-cy Lee (李峻宇) <Michael-cy.Lee@mediatek.com> Signed-off-by: Felix Fietkau <nbd@nbd.name>
* uqmi: added timeouts in qmi.shUwe Niethammer2024-01-10
| | | | | | | | | | Modems which are using qmi do not reply on the 1st sync but they do on subsequent. Sometimes uqmi is hanging - even when using an early dummy access to unlock the modem. To always guarantee a proper initialisation, running or hanging uqmi processes must be stopped before. All uqmi calls have now a timeout option -t to avoid hanging. Signed-off-by: Uwe Niethammer <uwe@dr-niethammer.de>
* uhttpd: handle reload after uhttpd-mod-ubus installation using postinstRafał Miłecki2024-01-10
| | | | | | | | | | | | | | Use postinst script to reload service instead of uci-defaults hack. It's possible thanks to recent base-files change that executes postinst after uci-defaults. This fixes support for uhttpd customizations. It's possible (again) to adjust uhttpd config with custom uci-defaults before it gets started. Cc: Hauke Mehrtens <hauke@hauke-m.de> Fixes: d25d281fd668 ("uhttpd: Reload config after uhttpd-mod-ubus was added") Ref: b799dd3c705d ("base-files: execute package's "postinst" after executing uci-defaults") Signed-off-by: Rafał Miłecki <rafal@milecki.pl>
* hostapd: add missing NULL pointer check on radar notificationFelix Fietkau2024-01-09
| | | | | | Fixes a race condition that can lead to a hostapd crash Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2024-01-04)Felix Fietkau2024-01-04
| | | | | | | 4219e99eeec7 system-linux: fix race condition in netlink socket error handing f01345ec13b9 device: restore cleared flags on device down Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dropbear: increase default receive window sizeDavid Bauer2023-12-28
| | | | | | | | | | | Increasing the receive window size improves throughout on higher-latency links such as WAN connections. The current default of 24KB caps out at around 500 KB/s. Increasing the receive buffer to 256KB increases the throughput to at least 11 MB/s. Signed-off-by: David Bauer <mail@david-bauer.net>
* netifd: update to Git HEAD (2023-12-19)Felix Fietkau2023-12-19
| | | | | | a2d32f0dcf16 Revert "system-linux: set pending to 0 on ifindex found or error for if_get_master" Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2023-12-18)Felix Fietkau2023-12-18
| | | | | | | 730b4656e6b1 netifd: fix undefined va_list value which can cause crashes c59457f69709 device: Log error message if device initialization failed Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2023-12-17)Christian Marangi2023-12-17
| | | | | | 66a7652176a7 system-linux: set pending to 0 on ifindex found or error for if_get_master Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* dnsmasq: invert logic for "localuse"Thibaut VARÈNE2023-12-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Prior to this commit, "localuse" (which enables local resolving through dnsmsasq) was off by "default". That default was in turn overridden when "noresolv" was unset (which itself is the default for "noresolv") *and* "resolvfile" was "/tmp/resolv.conf.d/resolv.conf.auto" (also the default for this parameter). In other words, the "default" unset value for "localuse" would only be ever used in specific *non-default* configurations. However, the problem with that logic is that a user who wants to ignore their ISP-provided resolvers by setting "noresolv" to true ends up with a device that will *only use* said resolvers for local DNS queries, serving clients' queries via dnsmasq (which now ignores the ISP resolvers). This can lead to confusion and break random setups as the DNS lookup performed on clients behalf can differ in their replies from DNS lookups performed locally on the router. Furthermore, "localuse" is not configurable through Luci, contrary to the other two involved settings, adding further confusion for the end user. To work around this situation, the logic that sets "localuse" is inverted: "localuse" now defaults to on by default, and IFF "noresolv" is unset (default) AND "resolvfile" is changed from default THEN "localuse" gets turned back off, allowing for more sensible behaviour. "localuse" value set in config/dhcp still overrides the logic in all cases, as it did already. Signed-off-by: Thibaut VARÈNE <hacks@slashdirt.org>
* ethtool: update to 6.6Nick Hainke2023-12-12
| | | | | | | Release Notes: https://lore.kernel.org/netdev/20231123220625.q427zyjaogdmlf6d@lion.mk-sys.cz/T/ Signed-off-by: Nick Hainke <vincent@systemli.org>
* netifd: update to Git HEAD (2023-12-12)Christian Marangi2023-12-12
| | | | | | | 8f2806a37fe1 system-linux: set master early on apply settings e3fc2b0026a5 system-linux: skip refreshing MAC on master change if custom MAC Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* iproute2: update to 6.6.0Nick Hainke2023-12-11
| | | | | | | | | | | | Release Notes: https://lore.kernel.org/netdev/20231106090325.07092c87@hermes.local/T/ Automatically refreshed: - 115-add-config-xtlibdir.patch - 175-reduce-dynamic-syms.patch - 195-build_variant_ip_tc.patch Signed-off-by: Nick Hainke <vincent@systemli.org>
* netifd: update to Git HEAD (2023-12-05)Felix Fietkau2023-12-05
| | | | | | | | | | 02bc2e14d1d3 udebug: use helper code for ubus config handling 1b967334189b netifd: add netlink udebug ring 061e308f9f7d debug: remove newline from debug messages f1763852dfba bridge: fix reload on bridge vlan changes cc9e928f0a12 bridge: rework config change pvid handling Signed-off-by: Felix Fietkau <nbd@nbd.name>
* bpftool: Update to v7.3.0Tony Ambardar2023-11-30
| | | | | | | | Update to the latest upstream release to include recent improvements and bugfixes. Also refresh local patches. Link: https://github.com/libbpf/bpftool/releases/tag/v7.3.0 Signed-off-by: Tony Ambardar <itugrok@yahoo.com>
* hostapd: use new udebug ubus api to make debug rings configurableFelix Fietkau2023-11-30
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* dnsmasq: mark global ubus context as closed after forkSven Eckelmann2023-11-26
| | | | | | | | | | | | | | If the dnsmasq process forks to handle TCP connections, it closes the ubus context. But instead of changing the daemon wide pointer to NULL, only the local variable was adjusted - and this portion of the code was even dropped (dead store) by some optimizing compilers. It makes more sense to change the daemon->ubus pointer because various functions are already checking it for NULL. It is also the behavior which ubus_destroy() implements. Fixes: d8b33dad0bb7 ("dnsmasq: add support for monitoring and modifying dns lookup results via ubus") Signed-off-by: Sven Eckelmann <sven@narfation.org>
* umdns: update to Git HEAD (2023-11-21)Felix Fietkau2023-11-21
| | | | | | | 9040335e102b interface: fix interface memory corruption b1e023eda358 add udebug support Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2023-11-20), adds udebug supportFelix Fietkau2023-11-20
| | | | | | | | | 9dcc37a77cb2 add udebug support 525fa911e8ab replace DPRINTF calls with D(...) 7642eaba3838 system-linux: fix bogus debug error messages on adding bridge members f3e06e81b347 wireless: add bridge_isolate option Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: add missing acl entries for udebugFelix Fietkau2023-11-20
| | | | Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: add udebug supportFelix Fietkau2023-11-20
| | | | | | | This is not activated by default and must be explicitly enabled via ubus It supports reporting log messages and netlink packets Signed-off-by: Felix Fietkau <nbd@nbd.name>
* hostapd: fix undeclared variable iface_nameNazar Mokrynskyi2023-11-19
| | | Signed-off-by: Nazar Mokrynskyi <nazar@mokrynskyi.com>
* dnsmasq: Invoke new ipcalc with CIDR notationPhilip Prindeville2023-11-15
| | | | | | | | | | | | | | | | | | | The new rewritten ipcalc.sh understands 3 notations: ipaddr/prefix ... ipaddr/dotted-netmask ... ipaddr dotted-netmask ... meaning that the previous 4th non-standard notation of "ipaddr prefix" will be dropped, alas that's the notation that dnsmasq currently uses. This change has us using the first notation which is the most common. This behavior came in as https://github.com/openwrt/openwrt/commit/eda27e8382f3e5253defab5419e95d4b51f72de3 a long time ago. Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* netifd: update to Git HEAD (2023-11-14)Jo-Philipp Wich2023-11-14
| | | | | | | 8587c074f1eb interface-ip: fix IPv4 route target masking Fixes: https://github.com/openwrt/netifd/issues/17 Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* iptables: backport patch fixing bug with string moduleChristian Marangi2023-11-12
| | | | | | | Backport patch fixing critical bug with string module merged upstream. Fixes: #13812 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* netifd: update to Git HEAD (2023-11-11)Christian Marangi2023-11-11
| | | | | | c739dee0a37b system-linux: refresh MAC address on DSA port conduit change Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* netifd: update to the latest versionFelix Fietkau2023-11-10
| | | | | | | | eee02ccca8c8 device: add support to configure eee bb28f6a291d9 wireless: fix sign comparison warning 35facc8306f5 wireless: fix premature removal of hotplug devices due to down state Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to Git HEAD (2023-11-09)Christian Marangi2023-11-10
| | | | | | | | | 841b05fbb91e system-linux: fix compilation error if IFLA_DSA_MASTER is not supported 5c9ecc1ff74f system-linux: make system_if_get_master_ifindex static 2dc7f450f3a2 system-linux: add option to configure DSA conduit device 838f815db5ef system-linux: add support for configurable GRO option Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: refresh patchesChristian Marangi2023-11-09
| | | | | | Refresh patches for hostapd using make package/hostapd/refresh. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: permit 40MHz in 802.1s only also for 2.4GHz g/n with noscanChristian Marangi2023-11-09
| | | | | | | | | | | | | Currently for 802.1s only, for wifi 2.4GHz in g/n mode, 40MHz is never permitted. This is probably due to the complexity of setting periodic check for the intolerant bit. When noscan option is set, we ignore the presence of the intoleran bit in near AP, so we can enable 40MHz and ignore any complex logic for checking. Fixes: #13112 Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: permit also channel 7 for 2.5GHz to be set to HT40PLUSChristian Marangi2023-11-09
| | | | | | | Also channel 7 for 2.4GHz can be set to HT40PLUS. Permit this and add it to the list of the channels. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: fix broke noscan option for meshChristian Marangi2023-11-09
| | | | | | | | | noscan option for mesh was broken and actually never applied. This is caused by a typo where ssid->noscan value is check instead of conf->noscan resulting in the logic swapped and broken. Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
* hostapd: use rtnl to set up interfacesFelix Fietkau2023-11-08
| | | | | | In wpa_supplicant, set up wlan interfaces before adding them Signed-off-by: Felix Fietkau <nbd@nbd.name>
* wifi: fix applying mesh parameters when wpa_supplicant is in useFelix Fietkau2023-11-08
| | | | | | | Apply them directly using nl80211 after setting up the interface. Use the same method in wdev.uc as well Signed-off-by: Felix Fietkau <nbd@nbd.name>
* netifd: update to the latest versionFelix Fietkau2023-11-07
| | | | | | | | | | | 383753dd65ae device/bridge: support passing extra vlans in the device_set_state call b6e75eafc1af device: send notifications for device events via ubus cab415c7aefd bridge: add auth-required bridge members with auth_status=0 if vlan is enabled 827a02f0343c bridge: add support for configuring vlans for auth=1,auth_status=false 40ed7363caf2 device: fix build error on 32 bit systems 516ab774cc16 system-linux: fix race condition on bringing up wireless devices Signed-off-by: Felix Fietkau <nbd@nbd.name>
* firewall4: update to latest Git HEADJo-Philipp Wich2023-11-03
| | | | | | | | | | | | | | 4101dd4 fw4: perform strict validation of zone and set names a923c88 fw4: pass zone to templates whenever possible 597dc90 fw4: add support for zone log_limit 1874050 fw4: add log_limit to rules and redirects 19a8caf ruleset: dispatch ct states using verdict map a5553da ruleset: reduce ksoftirqd load by refering to looopback by numeric id de3483c tests: adjust zone log limit testcases 7392792 ruleset: do not emit redundant drop invalid rules 698a533 ruleset: apply egress MSS fixup later to apply final MTU before wire Signed-off-by: Jo-Philipp Wich <jo@mein.io>
* dnsmasq: don't source functions.sh twicePhilip Prindeville2023-11-02
| | | | | | | | | | It's already pulled in from /etc/rc.common. Fixes: #13758 Fixes: 6b23836071b1 ("package: avoid the use of eval to parse ipcalc.sh output") Signed-off-by: Philip Prindeville <philipp@redfish-solutions.com>
* hostapd: fix broken WPS on broadcom-wl and ath11kPetr Štetiar2023-11-01
| | | | | | | | | | | | | | | | | | | | Upgrading wpa_supplicant from 2.9 to 2.10 breaks broadcom-wl/ath11k based adapters. The reason for it is hostapd tries to install additional IEs for scanning while the driver does not support this. The kernel indicates the maximum number of bytes for additional scan IEs using the NL80211_ATTR_MAX_SCAN_IE_LEN attribute. Save this value and only add additional scan IEs in case the driver can accommodate these additional IEs. Bug: http://lists.infradead.org/pipermail/hostap/2022-January/040178.html Bug-Debian: https://bugs.debian.org/1004524 Bug-ArchLinux: https://bugs.archlinux.org/task/73495 Upstream-Status: Changes Requested [https://patchwork.ozlabs.org/project/hostap/patch/20220130192200.10883-1-mail@david-bauer.net] Reported-by: Étienne Morice <neon.emorice@mail.com> Tested-by: Étienne Morice <neon.emorice@mail.com> Signed-off-by: David Bauer <mail@david-bauer.net> Signed-off-by: Petr Štetiar <ynezz@true.cz>
* uqmi: update to latest HEADDavid Bauer2023-10-31
| | | | | | eea2924 uqmi: add slot number to uim-sim-status output Signed-off-by: David Bauer <mail@david-bauer.net>
* hostapd: fix OWE association with mbedtlsDavid Bauer2023-10-31
| | | | | | | | | | | | | | | | The code for hostapd-mbedtls did not work when used for OWE association. When handling association requests, the buffer offsets and length assumptions were incorrect, leading to never calculating the y point, thus denying association. Also when crafting the association response, the buffer contained the trailing key-type. Fix up both issues to adhere to the specification and make hostapd-mbedtls work with the OWE security type. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: configure PDP type and APN to modemDavid Bauer2023-10-31
| | | | | | | | | | | | | | Configure the PLMN and APN to the modem. This is required in cases, where either the SGSN or GGSN does not permit the selection of IPv4v6 pdp type. Previously, the modem always tried to establish a dual-stacked PDP context regardless of the configured PDP type in uci. As this setting can not be parameterized when creating a WDS context, configure it to the modems internal list of profiles. This way, the PDP type is taken into account when creating the WDS context. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: fix non-working PLMN selectionDavid Bauer2023-10-31
| | | | | | | | | | | | | | The PLMN selection was reset when calling network-register, thus rendering the sepcific selection of a carrier unapplied. Set the PLMN selection after executing network-register. This seems to cause the modem to re-select the carrier eventually. That being said, qmi does allow the parameterization of the network-register to include dpecific PLMN settings, however this is currently not implemented in uqmi. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: set RAT preference before attachDavid Bauer2023-10-31
| | | | | | | | | | Set the RAT preference before attaching. This handles cases better, where a network might be available but not with the preferred RAT. If RAT is changed to a non-available RAT after attach, QMI does not fail with missing registration but with failing to establish a PDP session. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: increase wait time before checking connection stateDavid Bauer2023-10-31
| | | | | | | | | | | | | Increase the wait time before polling the connection state for the first time. Depending on the prior state of the modem, the first poll might still return a connected state. The script then tries to establish a PDP session, which subsequently fails as the modem by then is in scan state. Increasing the wait-time to 3 seconds mitigates this from happening. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: add illegal SIM state recoveryDavid Bauer2023-10-31
| | | | | | | | | | | On some network-triggered disconnections the UIM state might end up in "illegal". This prevents the modem from attaching to any network in non-restricted service modes. Detect this state and reset the SIM card. This way, the modem can attach to networks again. Signed-off-by: David Bauer <mail@david-bauer.net>
* uqmi: don't block restart on failed registrationDavid Bauer2023-10-31
| | | | | | | | | | Failing the registration does not necessarily mean we can not bring this interface up. For example, roaming SIM cards are possibly steered by the home-operator. Don't block restart of the QMI interface in this case. Signed-off-by: David Bauer <mail@david-bauer.net>
* hostapd: do not trim trailing whitespace, except for newlineFelix Fietkau2023-10-31
| | | | | | Fixes adding SSID or key with trailing whitespace Signed-off-by: Felix Fietkau <nbd@nbd.name>
* iptables: opt-out of lto usageAnari Jalakas2023-10-29
| | | | | | | | | | | This fixes building with USE_LTO enabled. <artificial>:(.text+0xc22): relocation R_MIPS16_26 against `libxt_DNAT_init' cannot be used when making a shared object; recompile with -fPIC ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: non-dynamic relocations refer to dynamic symbol printf ./openwrt/staging_dir/toolchain-mips_24kc_gcc-12.3.0_musl/lib/gcc/mips-openwrt-linux-musl/12.3.0/../../../../mips-openwrt-linux-musl/bin/ld.bfd: failed to set dynamic section sizes: bad value collect2: error: ld returned 1 exit status Signed-off-by: Anari Jalakas <anari.jalakas@gmail.com>