News for hackers. Stuff that matters.

A comment on MikroTik routers are forwarding owners’ traffic to unknown attackers. Parent comment

Re:MikroTik routers are forwarding owners’ traffic to unknow... by technofiend on Tuesday September 04, 2018 @10:25AM (#17909238)
Sorry for the spam, I seem to post this regularly but the Ubiquiti EdgeRouter Lite will happily run OpenBSD. It supports the onboard packet accelerator with some extra configuration.
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by Fnoord on Tuesday September 04, 2018 @11:29AM (#17909691)
I didn't know that, wow. I found some resources on this [1] [2] [3] but it seems like everything is working? Have you tried WireGuard on OpenBSD/octeon?

[1] https://www.openbsd.org/octeon.html

[2] https://news.ycombinator.com/item?id=10079210

[3] https://an.undulating.space/post/180411-erl-openbsd-upgrade/

[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by technofiend on Tuesday September 04, 2018 @01:37PM (#17911031)
Not yet... I bought a brand new one just for testing with OpenBSD vs Vyatta because I'd like to benchmark performance of each.
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by jms703 on Tuesday September 04, 2018 @02:24PM (#17911508)
Are you planning to post your benchmarks? Also, any helpful info on getting OpenBSD running on one of these is welcome!
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by technofiend on Tuesday September 04, 2018 @09:01PM (#17914274)
Yes I will post benchmarks and rulesets. I plan to make equal rulesets for each OS if possible.
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by ptomato on Tuesday September 04, 2018 @01:55PM (#17911237)
Do you have any documentation on using the onboard packet accelerator with OpenBSD? I thought it was just binary linux blobs.
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by technofiend on Tuesday September 04, 2018 @09:01PM (#17914278)
Just saw this, so sorry for the late reply: https://undeadly.org/cgi?action=article;sid=20180418073437

Unfortunately I was wrong and the post is just for cryptography acceleration. Will have to check the commits to see if any other work has been done.

[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by ptomato on Tuesday September 04, 2018 @10:04PM (#17914554)
Ahh, that’s unfortunate. Thanks for looking it up anyway.
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by voltagex_ on Tuesday September 04, 2018 @06:10PM (#17913286)
I wonder if the EdgeRouter Lite is similar enough to the Unifi Security Gateway to port that...
[ Parent | on HN ]
Re:MikroTik routers are forwarding owners’ traffic to unknow... by gh02t on Tuesday September 04, 2018 @06:46PM (#17913517)
Yes. http://www.codeghar.com/blog/openbsd-on-ubiquiti-usg.html

They're basically the same hardware.

[ Parent | on HN ]