OpenMPTCProuter: Aggregate and encrypt multiple internet connections using MPTCP
OpenMPTCProuter version 0.61 enhances MultiPath TCP support for Linux kernels 6.6 and 5.4, allowing bonding of eight internet connections, with updates for Proxy, VPNs, and security features.
Read original articleOpenMPTCProuter has released version 0.61, which includes updates for both Linux kernel 6.6 and 5.4. This version enhances the aggregation of multiple internet connections using MultiPath TCP (MPTCP), allowing users to bond up to eight different types of connections, such as Fiber, ADSL, VDSL, and 4G/5G. Key updates in this release include fixes for Proxy and VPNs, improvements in MPTCP over VPN functionality, and various enhancements related to ModemManager and IPv6. The kernel 6.6 update specifically addresses issues with OMR-ByPass and MPTCP support detection, while also adding MPTCP schedulers via BPF. The VPS component has also seen optimizations and updates, including a Shadowsocks-go update. Previous release candidates leading up to 0.61 included similar updates and fixes, indicating a focus on improving overall stability and performance. OpenMPTCProuter aims to provide a secure and reliable internet connection by ensuring data encryption and failover capabilities.
- OpenMPTCProuter v0.61 supports both Linux kernel 6.6 and 5.4.
- The software allows bonding of up to eight different internet connections.
- Key updates include fixes for Proxy, VPNs, and ModemManager.
- The release enhances MPTCP functionality and adds new scheduling options.
- Security features include default encryption for data transmission.
Related
OpenBSD 7.6
OpenBSD 7.6 was released on October 8, 2024, featuring updates across platforms, enhanced security measures, optimized networking capabilities, and various userland improvements for better system stability and performance.
OpenBSD 7.6 Released
OpenBSD 7.6 has been released, featuring support for Qualcomm Snapdragon X Elite laptops, Suspend-to-Idle functionality, UDP parallel input, and updates to OpenSSH 9.9. Users should consult the changelog for details.
OpenBSD 7.6 released
OpenBSD 7.6 has been released, featuring security enhancements, platform-specific improvements, kernel updates for better performance, and new userland features, supporting various hardware architectures and emphasizing overall system robustness.
OpenBSD 7.6 Released
OpenBSD 7.6 has been released, featuring support for Qualcomm Snapdragon X Elite laptops, a new DHCPv6 client, improved power management, and OpenSSH 9.9 with enhanced security and modular architecture.
Linux Kernel 6.12 Has Landed – and It's a Big One
Linux Kernel 6.12 has been released, featuring mainline PREEMPT_RT support for real-time applications, a new sched_ext scheduler class, enhanced filesystem support, and expanded hardware compatibility, including Raspberry Pi 5.
- Users report varying success with aggregating different types of internet connections, often citing latency issues and the complexity of configurations.
- Many find it effective for specific setups, particularly with similar connection types, such as multiple LTE connections.
- Some users experienced significant drops in throughput due to out-of-order packet arrival and other network behaviors.
- There is a consensus that while the technology is promising, it requires careful tuning and may not be suitable for all scenarios.
- Several comments mention the need for a VPS, which adds complexity and potential issues with site access due to perceived bot activity.
Initially I was amazed by MPTCP and wondered why it had so little adoption. As I looked into the papers I slowly figured out why. With different links (WLAN, LAN, LTE) their real world characteristics are too different for efficient aggregation. It is the head of line blocking problem times ten.
It might be fine as a back up link, but there are other problems like the limit to TCP and middelboxes dropping unknowns packets. The challenges outnumber the benefits for consumers and in data centers there are other technologies to aggregate links that operate on a level below TCP.
There are a lot of configuration options and the stability of them can be an issue. I've found using XRay VLESS for the Proxy and Glorytun TCP for VPN to offer the best overall speed and reliability. (Edit: I've disabled SQM too). It's possible to mostly bypass the VPN by enabling proxy UDP over XRay but I found that breaks various bypass rules, e.g. so that Netflix connections always go over 5G, as some content has restriction from being accessed by my VPS data center IP.
Port forwarding is also a bit hit and miss; I have configured my 2 WAN routers to use the OMR router as a DMZ and then if I want to play a game, or enable remote access, I will use the bypass feature so that the device's MAC goes through my FTTC connection. UPnP works correctly in this scenario which is handy for consoles.
Fortunately Starlink got more reliable so I stopped needing it. Bonding disparate network connections has a lot of really funky behaviors. In practice the biggest problem is the Speedify VPNs kept getting flagged as spammy: running your own OpenMPTCrouter endpoint fixes that.
What made it work best (and rock stable) was using LTE only, or ADSL only connections having same ping to aggregator (VPS) and have the VPS as near as possible. (latency wise)
I did not had the time to set up multiple redundant aggregators, so my SPOF was the VPS some times. Maybe there is a solution out there.
So far my experience a year ago. Our provider then offered a way cheaper managed solution, thats why we stopped using it.
I'm hoping that with QUIC, there will be a way to use it's migration feature to load balance more accurately (no need to wait for new flows to start). But, right now there is no way for a middlebox to tell if the server end of an individual flow supports migration, as this is only visible to the client.
It's great tech which can reach out and bite you in the bum at random. In my case it was a 10x drop in throughput by out of order packet arrival and effects on window and flow control.
I was using copper internet from local ISP paired with cellular and starlink. Starlink went out for 30 seconds every few minutes but when it worked, it was the fastest of the bunch.
I rented a cheap VPS in the city to use as the other end of this router. The setup worked well overall, I was getting work done along with downloading games with sizes above 100G without worrying too much
while using QUIC (and MP-QUIC) over WAN / Internet?
Related
OpenBSD 7.6
OpenBSD 7.6 was released on October 8, 2024, featuring updates across platforms, enhanced security measures, optimized networking capabilities, and various userland improvements for better system stability and performance.
OpenBSD 7.6 Released
OpenBSD 7.6 has been released, featuring support for Qualcomm Snapdragon X Elite laptops, Suspend-to-Idle functionality, UDP parallel input, and updates to OpenSSH 9.9. Users should consult the changelog for details.
OpenBSD 7.6 released
OpenBSD 7.6 has been released, featuring security enhancements, platform-specific improvements, kernel updates for better performance, and new userland features, supporting various hardware architectures and emphasizing overall system robustness.
OpenBSD 7.6 Released
OpenBSD 7.6 has been released, featuring support for Qualcomm Snapdragon X Elite laptops, a new DHCPv6 client, improved power management, and OpenSSH 9.9 with enhanced security and modular architecture.
Linux Kernel 6.12 Has Landed – and It's a Big One
Linux Kernel 6.12 has been released, featuring mainline PREEMPT_RT support for real-time applications, a new sched_ext scheduler class, enhanced filesystem support, and expanded hardware compatibility, including Raspberry Pi 5.