Aquiss

I do like a small ISP that actually provides the S in ISP :)

Just noticed this thread, ironically I have been looking at the ER8411 as an alternative to a UDM Pro or SE for similar reasons (simple life, fewer moving parts). I’m currently doing unspeakable things to shift packets (proxmox + OPN on virtual interfaces to pre-tag WAN VLAN, with a physical HA that’s not deployed yet, so you can imagine how much fun that is if I have to update the hypervisor), and just wanted a cleaner solution. I believe TPLink have addressed the IPv6 ACL issue according to the latest firmware release notes On paper, the numbers are impressive, and unlike Ubiquiti, TPLink seem to be open to feedback and if they can replicate the issue will deal with it, where as Ubiquiti have threads on the forums from 3 years ago about poor VPN performance with staff tagged that have just been ignored despite regular bumps/tags.

I’m going to have a play round with *wrt and perhaps OPN bare metal again, my ISP is DHCP but uses VLAN tagging on WAN, it’s simple enough to get OpenWRT/OPNSense to play nice, but both did some dummy spitting and required manually disabling and re-enabling the interfaces to restore connectivity and thats not going to work for me. Pre-tagging via proxmox virtual interfaces seemed like a simpler way to just present a clean DHCP interface to <insert distro here> and skip driver support issues on 2.5/10Gb NIC’s, but brings with it additional issues. I have almost resigned myself to an ER8411 sized box arriving next week.
 
I do like a small ISP that actually provides the S in ISP :)

Just noticed this thread, ironically I have been looking at the ER8411 as an alternative to a UDM Pro or SE for similar reasons (simple life, fewer moving parts). I’m currently doing unspeakable things to shift packets (proxmox + OPN on virtual interfaces to pre-tag WAN VLAN, with a physical HA that’s not deployed yet, so you can imagine how much fun that is if I have to update the hypervisor), and just wanted a cleaner solution. I believe TPLink have addressed the IPv6 ACL issue according to the latest firmware release notes On paper, the numbers are impressive, and unlike Ubiquiti, TPLink seem to be open to feedback and if they can replicate the issue will deal with it, where as Ubiquiti have threads on the forums from 3 years ago about poor VPN performance with staff tagged that have just been ignored despite regular bumps/tags.

I’m going to have a play round with *wrt and perhaps OPN bare metal again, my ISP is DHCP but uses VLAN tagging on WAN, it’s simple enough to get OpenWRT/OPNSense to play nice, but both did some dummy spitting and required manually disabling and re-enabling the interfaces to restore connectivity and thats not going to work for me. Pre-tagging via proxmox virtual interfaces seemed like a simpler way to just present a clean DHCP interface to <insert distro here> and skip driver support issues on 2.5/10Gb NIC’s, but brings with it additional issues. I have almost resigned myself to an ER8411 sized box arriving next week.
Yeah, I saw that after I posted but tbh I didn't think anyone would care about the update. Serves me right for assuming! It seems a solid little unit tbf, especially now they fixed/added the IPv6 ACL, stateful firewall (I still can't believe they released it without one!) and QoS. The throughput (I'm assuming the specs are based on ~1500 byte packets) is phenomenal for the pricepoint, including multi-gig IPSEC/WireGuard/OpenConnect. I've run FOSS routers for *years* now, but this is really tempting me to the point I'm pretty sure I'll also have an ER8411 shaped box arriving next week. :o I'd really like to know what speeds it manages running QoS, but tbh I don't think I'll meaningfully need that on gigabit FTTP anyway. The only real bummer is that it's 2x SFP+ and then gigabit copper. It'd have been really nice if they'd made it SFP+ and 2.5Gb at least. Alas, I think they were aiming at undercutting the UDM stuff.

I have tried to shop around for alternatives, but there's really not much along those lines in the market that I'd consider buying - at least under four figures. Mikrotik stuff is always quite well regarded, yet seems afflicted by significantly higher prices despite all but their higest end gear having only a single SFP+ port and then a bunch of gigabit ports, which seems wasteful. At least the ER8411 can take in an SFP+ to RJ45 module for WAN (from the ONT) and still also downlink to a 10G switch for the LAN.

Some of the Chinese x86 units were tempting, with 1u 19" rackmount form factor, N100 or better, DDR5, 2x SFP+ and 6-8 I216-V copper ports. I had to work really hard not to buy one of those! TBH if it wasn't for the six week delivery projections I probably would have. Alas, I just want something that works, is reliable and covers the bases for upgrades and the bedrock functionality (SPI firewall, wirespeed PPPoE, IPv6, 1:1 NAT etc). That the ER8411 can last through 2.5 and 10Gbps WAN upgrades is just the icing on the cake.
 
You sign up now for instance £18 a month for 6 months then £36 a month after. Over 12 months equivalent to £27 a month.
After the 12 months can you sign up for another 12 months and get a deal again or are you stuck paying £36 a month.

As far as I know you are stuck at £36. Deals are one off.
 
As far as I know you are stuck at £36. Deals are one off.
I messaged them and they said at year 3 they apply a loyalty reduction equivalent to the new contract price. But when i asked for details of that they have just ignored me. So much for there great service if they just ignore you when you ask something they don't want to answer.
 
Last edited:
You can't use your own router if you want to keep your Digital Voice service, that's possibly where some confusion comes from.
 
Got aquiss up and running, pings have dropped significantly, speed seem consistant getting advertised speeds

Asus router running merlin



Aquiss

53564801334_87981352d1_b.jpg


Gaming wise in bf2042,bf5, cod ping have dropped from 30ms to 20ms,hit reg in bf games still seems off,die a lot quickier it seem too

Zia
 
@zia stick some SQM/QoS on the upstream and you'll be golden.

Will swap over to optiplex and have a play :)

Just spent over hr trying to cancel virgin media.....God i hate them

Zia
 
Last edited:
Will swap over to optiplex and have a play :)

Just spent over hr trying to cancel virgin media.....God i hate them

Zia
You can send them a letter and then just wait, saves the hassle. Otherwise, I found web chat painless enough (once I got past the 'What can we offer you?' script) - took about 20 mins. If you're using OpenWrt enable SQM, set the speed to 0 on downstream and 100000 on upstream, choose cake and piece of cake, link adaptation Ethernet, overhead 44 mpu 84. See how you go. If it's anything else (i.e. fq_codel) try setting an upstream shaper only at 100000 but you may need to tweak down to 95000 or so. Post your results! :)
 
Back
Top Bottom